I understand user could leave remote management for device added to ABM via Apple Configurator. I saw one article in 10 years ago seems there is option available but not for now. Anyone could let me know whether we still could prevent / block user to leave the remote management? As it is existing device we just start adding them into ABM and basically not possible to keep those devide in locker for 30 days.
Thanks
21 Views
Hey there,
Unfortunately, you’re pretty much stuck with that 30-day window. It’s a hard-coded security feature from apple for any device added manually via Configurator (called Provisional status).
The logic is that since the device wasn’t purchased directly from an authorized reseller, Apple gives the user a 30-day grace period to release it in case it was added by mistake. There is no setting in Hexnode (or any other MDM) that can hide that Leave Remote management button during those first 30 days.
Since keeping them in a locker for a month isn’t feasible, the standard workaround is just to deploy them and rely on policy. You have to explicitly instruct users not to touch that button in Settings. After the 30 days are up, the option disappears automatically.
Hope that helps.
Don't have an account? Sign up
