Is a profile installed when an iOS device is locked?
Due to iOS specifications, a profile is installed immediately only when one of the following conditions is met:
- No passcode is set on the device
- The passcode lock is released
In any other case, that is, when the profile is distributed while the device is passcode-locked, the profile installation command first goes into the \*\*Pending Execution status\*\*.
After that, when the user unlocks the device, the device automatically accesses the MDM server and the pending profile installation is executed.
No sync operation from the admin console is required at this point.
Last updated: June 27, 2025