Bulk mark devices as disenrolled after mass disenrollment without repeated MFA promptsSolved

Yes. If the disenroll action has already been pushed, you can mark multiple devices as disenrolled from the reports section instead of opening each device individually. Go to: Reports > Disenrollment pending devices. Then, select the required devices and choose Mark as disenrolled. This lets you perform the cleanup in bulk and avoids repeating the same action separately for every device.

Important: Mark as disenrolled removes the device entry from the Hexnode console without waiting for confirmation from the device that all managed configurations were removed successfully. Use this option carefully, especially if the devices are still active and reachable. If configurations are still enforced on the device, marking it as disenrolled prematurely may leave the device in an undesirable state, such as being locked into a previous restriction or configuration. This option is best suited for devices that have already been reset, are no longer in use, or are lost/unavailable.

That worked. I was looking under the device list and bulk actions, so I missed the report-based option. Selecting them from Disenrollment pending devices did the cleanup much faster.

Good to know. We usually only use Mark as disenrolled after confirming the device has been wiped or is no longer coming back online. For active devices, we wait for the normal disenrollment confirmation so the restrictions and profiles are removed properly.

That makes sense. In this case the devices had already been handled, so the report workaround was enough to release the licenses without going through each record manually.