Howto add "With Authorization" for removel to Enrollment Profiles?

Question

When I enroll a iOS device to our Profile manager it get's an "Remote Management" profile which the user can remove without restriction.
When I add profiles later on, they are all linked to this firest profile and can all be deleted by deleting the first profile. It doesn't matter if the latter has a removal restriction set.
So how do I lock the Enrollment Profiles??

Answer 1

Of course, the previous posting is not really related to this thread and therefore ought to have be posted as a New topic, but seeing as how AS has introduced the subject...
Here is the way to add a unique constraint to a populated column, ensuring that the existing values are unique as well.
ALTER TABLE t1
ADD CONSTRAINT t1_uk UNIQUE (col1,col2)
EXCEPTIONS INTO my_exceptions
/If the alter table statement fails this will populate the EXCEPTIONS table with the rows that contain duplicate values for (col1,col2). These are identified by ROWID. We can then chose to:[list]
[*] delete rows with a bad key;
[*] amend the values of the key columns;
[*] re-apply the constraint with the NOVALIDATE option.[list]
We should be wary of choosing the NOVALIDATE option. There's usually a good reason why the unique constraint is required and we should not circumvent it. Apart from anything else, Oracle allows us to build foreign keys referencing NOVALIDATE unique keys. This could result in child rows that have two parents, which is normal in biology, but very wrong in a database. NOVALIDATE is useful in datawarehouses and suchlike, because little updating occurs and the data integrity issues are of less imporatance. I don't think it ought to be used in OLTP situations.
Once we have handled the duplicate values we can re-run the alter table statement and apply the constraint.
If you don't already have an EXCEPTIONS table (it can be called anything, it's the structure that counts) you may need to run (or get a DBA to run) a script called UTLEXCPT.SQL, which will be in the $ORACLE_HOME/rdbms/admin directory.
Cheers, APC