We’re managing corporate Apple devices through Hexnode and Apple Business Manager. On a managed Mac, the Hexnode UEM and Hexnode UEM Helper app settings are enabled, but users can still toggle them off from macOS settings.
Is there a way to turn these on through MDM and prevent users from disabling them? Also, if we need to remove a corporate device from Hexnode, can we disenroll it without resetting the device and still keep it assigned in Apple Business Manager for future enrollment?
17 Views
Hello @smedt ,
Hexnode UEM and Hexnode UEM Helper are enabled by default when installed on macOS.
However, these specific app-related settings are controlled by macOS privacy and security behavior. Because of OS-level restrictions, Hexnode cannot remotely force-lock those toggles or prevent users from changing them through MDM.
You may test a custom mobile configuration profile if your use case involves restricting access to certain macOS settings, but locking these exact Hexnode UEM/Helper toggles is not something MDM can reliably enforce at this time.
For the disenrollment part: yes, you can disenroll a corporate Apple device from Hexnode without wiping or formatting it.
Go to: Manage > Devices > select the device > Actions > Disenroll device
This removes the MDM profile and associated Hexnode configurations from the device. It does not erase user data. The device also remains linked to Apple Business, so it can be re-enrolled later if needed.
Regards,
Simon Scott
Hexnode UEM
Don't have an account? Sign up
What's new 
