The Erase All Content and Settings feature on Apple devices allows a user to wipe all personal data and restore the hardware to its factory default state. Within the WeGuard ecosystem, administrators typically disable this option to prevent unauthorized wipes, ensuring that devices remain enrolled in Management and protected against data loss.

Why Disable This Feature?

Restricting the ability to factory reset a device provides several key security benefits:

• Prevent MDM Removal: Ensures the MDM profile remains active and the device stays under organizational control.

• Data Protection: Reduces the risk of intentional or accidental data loss during employee exits or device transitions.

• Policy Compliance: Prevents users from bypassing security configurations by resetting the device to an unmanaged state.

• Asset Recovery: Maintains device recoverability and enrollment, especially for shared corporate hardware or lost devices.

Step-by-Step Configuration

Follow these instructions to disable the reset option via the WeGuard Console:

1. Access the Console: Log in to your WeGuard Console.

2. Navigate to Policy Groups: Select Policy Groups from the left-hand sidebar.

3. Select Target Policy: Locate and click on the specific iOS DEP (Device Enrollment Program) policy you wish to modify.

4. Open Restrictions: Within the policy configuration, navigate to the RESTRICTIONS tab.

5. Toggle the Feature: Find the option labeled ‘ENABLE ERASE CONTENT AND SETTINGS’.

6. Disable & Save: Switch the toggle to OFF, then click SAVE AND CONTINUE at the bottom of the page.

Expected Result

Once the updated policy syncs with the managed iOS device:

• The Erase All Content and Settings option within the device Settings menu will appear grayed out.

• Users will be blocked from initiating a factory reset, ensuring the device remains in its managed state.