If Content Protection is part of your policy; would it be possible to disable the policy; try the disable protection/hard reset fix, re enable CP then re apply policy? This would obviously be done through the corp BES