Managed iOS/iPad devices are struck with no network under below conditions
- Enrolling a Supervised iOS device
- Send InstallProfile command with AppLock payload (https://developer.apple.com/documentation/devicemanagement/applock)
- Now when the above managed device loses network connection with MDM server due to unknown network issues - the device is out of contact with MDM server and device is locked.
Since such AppLock payload installed devices are placed in remote locations, it becomes difficult for Admins to recover such devices with no network connectivity. The devices have to be brought in from remote location and recover them.
Under such conditions, it would be better to allow the end user to change the Network configuration manually to reconnect the device with MDM server.
This option can also be allowed only when the device can’t ping MDM server.