using MDM can I stop a user from resetting the company's iphone to factory settings?
Minimizing company phone theft
you can using the allowEraseContentAndSettings setting in the restrictions payload
You can't. You can only protect the profile...
You can, however, monitor adherence, and then enforce it based on your company's employee compliance protocols.