Again, be careful with administrators.
I'm not saying administrators want to do things to hurt you.
But often, if they say, hey, I can remove that pass code
for you, that would be fantastic.
But what if they accidentally remove management?
If they remove management, they could wipe that entire device.
Keep in mind, your forensic extraction
could be directly impacted by mobile device
and mobile application management.
It may not recover any artifacts at all.
It may recover the data but keep it in an encrypted container.
You may just see traces of user activity.
So always look and see if you can determine
if it's installed on the device, what the restrictions are,
is it possible to remove it?
But you get your best level of extraction first.