HexCon is coming to NYC. Catch the early-bird price before the time's up! Book me a spot

Block MDM removal from MacSolved

Participant
Discussion
5 years ago

Hi, is it possible to block the removal of hexnode MDM on a mac?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
5 years ago
Marked SolutionPending Review

Hey there, Thanks for posting the query.

Yes, it is possible to block the removal of the MDM profile from your Mac devices. If a Mac device is enrolled via the Apple Device Enrollment Program, the administrator can disallow the removal of the MDM profile.

On the DEP policy (Admin->Apple Business/School Manager->Apple DEP->DEP Policy), there is an option to ‘Allow MDM profile removal’. Disabling this option will help you prevent the MDM profile removal. This policy on being applied to the enrolling device will make the MDM profile non-removable.

 

Cheers!

Grace Baker

Hexnode MDM

Marked SolutionPending Review
Participant
5 years ago
Marked SolutionPending Review

What about this on Windows devices?  Specifically,  PCs?

Marked SolutionPending Review
Hexnode Expert
5 years ago
Marked SolutionPending Review

Hey, Thanks for posting the query.

Please navigate to Windows–>Restrictions–>Allow security and privacy settings. Below will be listed the ‘Manual MDM administration removal’ option.
Uncheck this to restrict the user from deleting the workplace account from the device settings.

PS: If the device is joined to Azure AD as well, disabling this option will have no effect.

Please use the link for insights into the restrictions for Windows devices.

Cheers!
Grace Baker
Hexnode MDM