By enabling the following setting, Citrix Endpoint Management administrators will be able to prevent users from removing the Mobile Device Management profile from Apple Device Enrollment Program (DEP) devices.
Deploy devices through the Apple Deployment Program: https://docs.citrix.com/en-us/xenmobile/server/provision-devices/apple-deployment-program.html