iOS MDM profile removable after ABM enrollment with Apple ConfiguratorSolved

Participant
Discussion
4 weeks ago May 13, 2026

I enrolled some iPhones in Hexnode using Apple Business, but users can still see an option to remove the MDM management profile from the device. I expected the profile to be locked because the devices are supervised through Apple Business. These iPhones were added to Apple Business manually using Apple Configurator. Is there a way to make the Hexnode MDM profile non-removable from the first day?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
4 weeks ago May 13, 2026
Marked SolutionPending Review

Hello @yuudai ,

When an iPhone is added to Apple Business manually using Apple Configurator, Apple applies a mandatory 30-day provisional period.

During this 30-day period, the end user can manually remove the MDM profile from the device settings. This behavior is enforced by Apple and cannot be overridden by Hexnode or any other MDM solution.

After the 30-day provisional period ends, the management profile becomes unremovable automatically, provided the device remains assigned through Apple Business and enrolled through Automated Device Enrollment.

If you need the MDM profile to be unremovable from day one, the device must be assigned directly to your Apple Business account by Apple or an authorized Apple reseller. Devices added this way do not go through the Apple Configurator provisional period.

Regards,
Simon Scott
Hexnode UEM

Save