How to remove MDM from my MacBook Pro?
How to remove MDM on Mac ?
Can I know find out which institution hold the MDM on a second brought MacBook?
Thank you for your answer
[Re-Titled by Moderator]
MacBook Pro 15″, macOS 12.7
You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
How to remove MDM on Mac ?
Can I know find out which institution hold the MDM on a second brought MacBook?
Thank you for your answer
[Re-Titled by Moderator]
MacBook Pro 15″, macOS 12.7
If the enrollment is supervised and the enrollment profile is set to unremovable, the end user cannot remove the MDM enrollment. If the enrollment is user initiated, then the user can remove it.
Go to Apple menu > System Settings (System Preferences on older macOS versions) > Privacy & Security. Scroll to the bottom of the Privacy & Security panel and select Profiles. At the top of the profiles view, you should see a label stating "This Mac is supervised and managed by: <Company Name>". To get more info...
On the Profiles view, you will likely see a series of profiles. Scroll through the list and look for one called "MDM Profile." Double-click it to view its contents. If you scroll through you will eventually see a key called Server. That should contain the enrollment URL. This may give you a hint as to who has chain of custody to the device. Also, if this is not a locked enrollment, the – button should highlight, allowing you to delete the "MDM Profile." Deleting this profile will remove all others.
Please note, if the MDM is locked to the device, then the only entity that can remove it is the original owner. If the unit is automatically enrolling, then it is likely still associated to an Apple Business/School Manager and assigned to an MDM.
If this started happening after you upgraded to Sonoma, then you are experiencing retroactive enrollment. The device may still be associated to another business, or you may have activation status cached to the device. If it is just activation caching, then a full wipe and reinstall should resolve it. However, if this was not released from the original owner, you will need to contact them for a release.
Hope this is helpful
If the enrollment is supervised and the enrollment profile is set to unremovable, the end user cannot remove the MDM enrollment. If the enrollment is user initiated, then the user can remove it.
Go to Apple menu > System Settings (System Preferences on older macOS versions) > Privacy & Security. Scroll to the bottom of the Privacy & Security panel and select Profiles. At the top of the profiles view, you should see a label stating "This Mac is supervised and managed by: <Company Name>". To get more info...
On the Profiles view, you will likely see a series of profiles. Scroll through the list and look for one called "MDM Profile." Double-click it to view its contents. If you scroll through you will eventually see a key called Server. That should contain the enrollment URL. This may give you a hint as to who has chain of custody to the device. Also, if this is not a locked enrollment, the – button should highlight, allowing you to delete the "MDM Profile." Deleting this profile will remove all others.
Please note, if the MDM is locked to the device, then the only entity that can remove it is the original owner. If the unit is automatically enrolling, then it is likely still associated to an Apple Business/School Manager and assigned to an MDM.
If this started happening after you upgraded to Sonoma, then you are experiencing retroactive enrollment. The device may still be associated to another business, or you may have activation status cached to the device. If it is just activation caching, then a full wipe and reinstall should resolve it. However, if this was not released from the original owner, you will need to contact them for a release.
Hope this is helpful
Thank you so much strontium 90, it was really helpful. In regard to your explanation, I have to contact the company that have put the MDM . Since I brought the laptop used, I would like to know if there is anyway to identify the company that’s hold the MDM?
From the original post, have you:
Go to Apple menu > System Settings (System Preferences on older macOS versions) > Privacy & Security. Scroll to the bottom of the Privacy & Security panel and select Profiles. At the top of the profiles view, you should see a label stating "This Mac is supervised and managed by: <Company Name>". To get more info...
On the Profiles view, you will likely see a series of profiles. Scroll through the list and look for one called "MDM Profile." Double-click it to view its contents. If you scroll through you will eventually see a key called Server. That should contain the enrollment URL. This may give you a hint as to who has chain of custody to the device. Also, if this is not a locked enrollment, the – button should highlight, allowing you to delete the "MDM Profile." Deleting this profile will remove all others.
If the device is in Apple Business Manager and assigned to an MDM for automated enrollment, then the prestage policy should have some information about the company that "owns" the device.
Alternatively, if you are comfortable with using Terminal, you can ask the MDM. Open Terminal and run the following command:
sudo profiles show -type enrollment
If the devices is associated with an ABM, it will be directed to the MDM's prestage and you will get a combination of data. Look at the value in ConfigurationURL, OrganizationAddress, OrganizationName, and OrganizationSupportEmail and/or OrganizationPhone.
Use the returned values to contact the owner of the device. If the device was decommissioned but not released from ABM, they should be able to release the product or you. Please note, you will still need to erase the device to remove the MDM enrollment unless they agree to issue a remove management command to drop the device from the MDM. They will still need to release from ABM.
Reid
I don't have any so I can't check. See if anything here helps (also look at the links in it) Install a configuration profile on your iPhone or iPad - Apple Support
I would think that if the MDM profile does not indicate which company there is no way to find out. Generally that sort of thing should have been removed prior to sale and Apple doesn't really appear to factor in a need for doing that kind of thing later.
How to remove MDM from my MacBook Pro?