HexCon is coming to NYC. Catch the early-bird price before the time's up! Book me a spot

Can my user remove the MDM profile with AC?Solved

Participant
Discussion
3 years ago

Are the MDM restrictions, profile and policies that I pushed to the user’s devices removable? I manage corporate Macs, iPhones and iPads. I read on the internet that the profiles can be removed with Apple Configurator. Please advise any workarounds if users can directly remove profiles with Apple Configurator.

Replies (2)

Marked SolutionPending Review
Participant
3 years ago
Marked SolutionPending Review

@Valerie, how are the devices enrolled? I don’t think it is possible to remove profiles AC if the MDM profile is made non-removable for DEP devices.

Marked SolutionPending Review
Hexnode Expert
3 years ago
Marked SolutionPending Review

Hey @valerie, @harper,

The policies and restrictions applied on iOS devices can only be removed by:

  • Disassociating it from the UEM console.
  • Disenrolling the device.
  • Removing the MDM profile from the device, either manually or using Apple Configurator. You can block the manual removal of the MDM profile for a DEP-enrolled device.

Note: Ensure that the option Allow MDM profile removal in the DEP Configuration Profile is unchecked. This blocks the users from manually removing the enterprise administration in devices enrolled via the Device Enrollment Program.

Hope this helps!
Chris Coleman
Hexnode UEM

  • This reply was modified 2 years, 4 months ago by  Chris.
  • This reply was modified 2 years, 4 months ago by  Chris.
  • This reply was modified 2 years, 3 months ago by  Chris.