When enrolling select Apple Devices into Vexluna management using Automated Device Enrollment through Apple Business Manager or Apple School Manager, you can optionally enable Organization-Based Activation Lock to prevent your devices from being re-activated without authorization.

Organization Activation Lock works exactly like standard User Activation Lock. Devices that are under Organization Activation Lock cannot be re-activated after they're erased unless the lock is removed.

ABM will show whether a device has Activation Lock enabled, and will call out whether it's user-based or organization-based.

Prior to activating a locked device, the lock must be removed. Otherwise, the setup process will prompt you for the owner's Apple Account credentials.

There are a few different ways to remove an Organization Activation Lock.

Devices enrolled in ABM or ASM can be unlocked on the Devices tab under the menu in the top-right, whether the lock is user-based or organization-based.

During activation, a locked device prompts for the owner's Apple Account credentials. For Organization Activation Lock, you need to use the managed Apple Account email and password of the user who created the MDM server entry in ABM.

For eligible devices, Vexluna presents an option to bypass Activation Lock when viewing device details. This works for both user-based and organization-based activation lock. As long as Vexluna's Activation Lock Bypass Codes are valid, this will work even if the device has been erased or is offline.

For eligible devices, Vexluna presents one or more Activation Lock Bypass Codes when viewing device details. You can use these codes on the locked device.

On an iOS device, leave the email address field blank and enter the bypass code into the password field.

On a Mac, open the Recovery Assistant menu in the Menu Bar, select Activate with MDM key..., then enter the bypass code into the MDM key field.