We have just started supervising iPhone devices using DEP and we still have a hybrid environment. Part of the reason we started supervising devices using DEP was to avoid the activation lock issue. My question is this, can a supervised DEP phone be activation locked? What is the best practice for both supervised and unsupervised devices when an employee leaves?