The PMs involved have been talking about how best to give you a way to disable the “remove device” action. They think rather than focusing on platform enrollment types (iOS, Android, Windows), they could allow you to disable based on corporate vs personal ownership. I said I’d ask if that would work for you. :-)
Would that get you want you need?
Ah. Yeah, that’s feedback we’ve had before. At this time there are not any plans to fix it, but I am not gong to mark this as declined. I moved it from Issues to Suggestions, and I changed the title to match the bug we have internally. I won’t promise that getting a lot of feedback on this will change our plans, but I will say that getting a lot of feedback would help us have a better discussion about whether we should fix it. More data is helpful.
For the release the week of Nov 6:
Admins can now configure the Firewall settings on a device using a device configuration profile
Admins can turn on firewall for devices, and also configure various protocols for domain, private, and public networks. These firewall settings can be found in the “Endpoint protection” profile.