Disclaimer: I could be missing something but I've read the docs and cannot find a solution.

This button (Remove Enrollment), shown in the Zenworks iOS app, appears to make ZMM useless for company-owned devices. We can setup all the policies we want but if a user only has to click that button to make the iPad their own- what is the point?

We're looking to have a few public-use iPads and we want to lock them down so users don't foul them up. We thought ZMM fit the bill but it doesn't look like you can lock anything with this remove enrollment capability.

Any ideas?