We have just started supervising iPhone devices using DEP and we still have a hybrid environment. Part of the reason we started supervising devices using DEP was to avoid the activation lock issue.   My question is this, can a supervised DEP phone be activation locked?  What is the best practice for both supervised and unsupervised devices when an employee leaves?