In my organization, students are often unaware that they need to release devices from their iCloud accounts. Because of this, we experience a fair amount of Activation Lock Errors. Previously, when using the bypass codes provided for each user in JAMF, they worked consistently. Recently (over the past 6 months) I have noticed that there are an increasing number of codes that are not working ot remove Activation Lock from the devices. Currently I am attempting to contact each of the students with directions on how to release the activation lock, however, they are no longer students of the university, so often times, they are not checking their university email, so a better solution is preferable.
Another thing that has recently stopped working when I try to 'clear activation lock' is the error : 'Activation Lock could not be cleared> 404- Device not found or activation lock bypass is invalid.'
Like what @blackholemac said, we have often run into the same issue. When we do the device return at the end of the year from our students, we have them show us that icloud had indeed been signed out. Failing that we try the wipe and remove activation lock from the JSS but this has been hit or miss (more miss recently). After that, i gather up all the devices with activation lock and fill out my template to Apple's unlock team with all the effected devices. 3-4 day later they've been unlocked and im good to go again.
since commerce is disabled for managed apple IDs (MAIDs), if you have the App Store enabled (or Books, Music, anything you can sign in to to access other purchased content, etc.), the MAID doesn't actually solve the problem. we use MAIDs for iCloud and no matter how many times you say "sign in to iCloud using your MAID - if you want to access purchased or personal content, you can sign out of iTunes and App Store and in with a personal account there," we're always running across devices in which students are signed in using personal accounts. It doesn't help that when setting up the device, on the Apple ID screen it asks you to enter your email address - which our MAIDs are NOT. i have feedback in with Apple to correct this issue, hopefully before our next deployment...for now we have disabled "erase all content and settings" on the device with a config profile, as students were handing in devices that they'd wiped thinking that they were saving us a step, only to later find out it was activation locked...now the only way to wipe is with the remote command, which has helped a lot.
there are many, many, many discussions on this and everyone is asking the same question. the more people are commenting and keeping these at the top of the discussions list/in the feed, hopefully if there are 4 about the SAME THING someone at jamf will GET ON THE BALL. especially since i don't see ANY MENTION of activation lock in the list of known issues. this is apparently a known issue to everyone but jamf...
If Apple EDU Support has Activation Lock issues on their MAIN support tree, and they also have a mass activation lock clearing system built into their Apple Care OS Preferred Support Plan, you might be barking up the wrong tree.
Also, according to our rollout demo (we got the 1 yr support plan tossed in with 3000 new iPads) you can send a spreadsheet with thousands of devices and they will be cleared in a day or two. I have not put this to the test yet.
@rsterner Old post I realize, but this is so frustrating! Thanks for posting the most practical/useful info on this thread (aside from the net conclusion that "activation lock bypass doesn't work". Saved me time lookup up what detail and to whom to send the email.
I normally try to avoid necromancy of old posts but I wanted to voice what I've observed regarding this issue... Our environment had a couple hundred iPads that were originally deployed to High School students and then re-distributed to staff and faculty about a year later. We have had numerous issues of Activation Lock Bypass codes failing to work with these iPads; seemingly moreso than other iPads that have remained in their original deployments.
My hypothesis for at least a piece of this is that the activation lock code was regenerated for the iPad at some point; possibly during an iOS update or a wipe/redeploy or when a new person signed into iCloud and re-enabled Activation Lock after wiping, and JAMF didn't update the Bypass record for that device properly.
I've also noticed that in later versions of the JSS there is an iPad management command for "Set Activation Lock" available, but it seems that this is also thwarted by the bypass code being invalidated. If I attempt to enable Activation Lock through Apple School Manager, the command immediately jumps to "Failed" status. The command that fails is "DisableActivationLock" which I'm guessing is the first of a few commands to carry out the full payload. Looking through the server logs I found an entry claiming that "Failed to clear activation lock for . ActivationLockResponse [status=404, message=Device not found or activation lock bypass is invalid.]"
i've had @gdpatrick's theory rattling around in my head for the past couple of weeks, so today i tested it out. had an ipad that i know has been enrolled before, wiped it and...the activation lock was cleared. right afterwards i went to inventory/security to confirm that it had, in fact, been enabled beforehand. i then re-enrolled with a different user/apple id and tried the same workflow again, and it worked. the device is at 12.1.1 and we're cloud hosted running 10.9.0-t1544463445. is this a turning point? or are there others at the same jss version that aren't able to wipe/clear devices at 12.1.1?
I have been working hard with my techs to have them always WIPE from the jamf server if possible.
This helps with reducing commands queuing up on devices that are not managed by jamf thinks they still are.
Another benefit is that the device record is wiped of management items and ready to be re-enrolled.
I have 4500 iPads and am rarely running into activation lock issues anymore, hadn't really thought about it much.
I have the Bulk Activation Lock Removal Request form and the turnaround time for any I send is super fast (next day)
We are running JP 10.9
Just an aside - submitting to this email address "ww_p...@apple.com" only works if you have an Apple Enterprise Technical Support contract. If you don't have a support contract you can call AppleCare and request activation lock removal.
Just wanted to put an update with what i learned here. So after having a few devices with this problem and spending hours with apple on the phone, i finally talked to someone useful. They are able to reset activation locks in between 2-10 days. You want to be talking to "apple care account security". The number above is correct 800-800-2775.
Ok so thats fine, they send me a one use internet form and i filled it out last week and they were able to unlock it for me this morning. All works. You dont need a proof of purchase if your ipad is in DEP, which this one was.
I asked as well, why does this happen? And she told me that this is 100% caused by the "find my ipad" feature. If we didn't use that feature, then this wouldn't be a problem. WOW i said, and sure enough, our student configuration profile is set to enforce find my ipad to 'allowed'. I changed it now to "restricted" in jamf configuration profile and we will see if that helps going forward. I am not sure if this prevents the geolocation of ipads. I had always turned it on when i used meraki for management, because then you could see the ipad on a map. JAMF does not seem to have a map interface that i can see, so the utility of this would be limited in the jamf implementation anyway. Cant think of any other reason why this would be turned on for all students. But the previous admin is no longer here to ask about why he did that initially. I don't think location services are disabled completely by this change, and hopefully its just that one feature that i have disabled.
Hi @wifichallenges
I will say that recently, when we get an activation locked iPad, we have had excellent luck with doing a restore from a Mac computer (Catalina or newer I think). -us/HT201263
After it restores, keep it plugged in an it will activate and show the Apple ID that it is locked to with the black dots. We pull the Activation Code from the jamf device record and paste the code right into both blanks. Hs worked on any we've tried in the last 2 years
Yes that usually works. For this device it did not. I tried the unlock code (Manually typing in the long thing like 10 times incase i made a typo). Never went through.
Plugging into the PC just popped up the same activation lock, and yeah you can paste the unlock code in there, so you dont have to manually type it in, but it still didnt work. So with this device it was the only way.
Jamf's purpose is to simplify work by helping organizations manage and secure an Apple experience that end users love and organizations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy. Learn about Jamf.
This site contains User Content submitted by Jamf Nation community members. Jamf does not review User Content submitted by members or other third parties before it is posted. All content on Jamf Nation is for informational purposes only. Information and posts may be out of date when you view them. Jamf is not responsible for, nor assumes any liability for any User Content or other third-party content appearing on Jamf Nation.
I bought an old iphone 6+ from the internet came from France to Morocco and know im stuck with icloud activation with hidden unknown email , is there any solution to unlock it or any help to contact the owner maybe he/she can help with that?
One popular method to bypass iCloud on iPhone 6/6 Plus is changing the DNS server. Chaning the DNS server IP address may trick Apple into thinking that this device is activated. If your iPhone 6/6 Plus is running iOS 8.0-10.0, you can follow these steps to unlock it.
c80f0f1006