In SOTI MobiControl, it's possible to configure "Prevent unenrollment from Device Agent" for a device group.
However, this does not seem to work, as I can still select 'unenroll' in the device agent?
Environment =
SOTI 14.2.1.4394
Panasonic FZ-N1 enrolled with Android Enterprise SOTI MobiControl Agent (13.6.0.1567), in Work Managed Device mode