Managed Activation Lock

A security feature that prevents unauthorized use of a device by requiring the owner’s Apple ID password. MDM can bypass this on supervised devices using escrowed codes.

What to Know

Managed Activation Lock provides theft deterrence for corporate devices while maintaining IT’s ability to reuse or redeploy hardware without needing the original user’s Apple ID credentials. On supervised devices, MDM automatically escrows a bypass code that allows admins to unlock the device through their management console, avoiding scenarios where a departed employee’s iCloud account blocks device reactivation. This is essential for organizations that regularly rotate devices or need to ensure hardware can be recovered and repurposed without user cooperation.

Common Scenarios

Enterprise IT: When employees leave the organization with Find My enabled on their corporate device, Managed Activation Lock ensures IT can remotely disable the lock using the escrowed bypass code rather than chasing down former employees for their Apple ID credentials or submitting proof-of-purchase requests to Apple.

MSP: Clients often hand off used devices without ensuring they’ve been properly signed out of iCloud. MSPs rely on Managed Activation Lock bypass codes to quickly restore devices to service without delays or client involvement, especially when preparing devices for new hires or repurposing hardware.

Education: Students frequently enable Find My on school-owned iPads. Managed Activation Lock allows IT staff to clear locks during summer device rotations or when preparing devices for the next school year, avoiding lengthy unlocking procedures that would otherwise disrupt device availability.

In Addigy

Addigy automatically escrows Activation Lock bypass codes for supervised devices enrolled through ADE. Admins can retrieve bypass codes from the device details page or use the “Clear Activation Lock” action to remotely disable the lock. Addigy tracks which devices have Activation Lock enabled, providing visibility into potential deployment blockers and allowing proactive remediation before devices are reassigned.