We need to remove management from an iPhone that is currently enrolled in Hexnode. The goal is to make sure the device is no longer managed and does not come back into management later. I’m not fully sure yet whether it was enrolled through Apple Business Manager. What is the correct order of steps for iOS devices?
Remove iOS Device Management from Hexnode and Apple BusinessSolved
Replies (3)
Hi @oliver_p,
For an iOS device, the correct removal process depends on whether it was enrolled through Apple Business / Automated Device Enrollment.
If the device is not assigned through Apple Business, you can remove management directly from Hexnode:
- Go to the Hexnode UEM portal.
- Navigate to Manage.
- Open the iOS device’s Device Summary page.
- Select Actions > Device Control > Disenroll Device.
- Confirm the action.
This sends an over-the-air command to remove the MDM profile from the device without wiping user data.
For iOS devices assigned through Apple Business:
- In Apple Business, find the device under Devices.
- Choose Unassign if you are moving it to another MDM server, or Release Device if the device is permanently leaving the organization.
- After that, go to Hexnode UEM > Manage > select the device > Actions > Device Control > Disenroll Device.
Releasing or unassigning the device in Apple Business first is important because Apple Business controls whether the device receives an automated MDM enrollment profile during activation. If you only disenroll it from Hexnode and later factory reset the device while it is still assigned in Apple Business, it may enroll back into Hexnode during setup.
Regards,
Isabel Lora
Hexnode UEM
Does using Disenroll Device wipe the iPhone, or does it only remove the management profile?
The Disenroll Device action removes the MDM profile over the air and does not wipe user data by itself.
A factory reset is optional. It is usually done only when the device is being reassigned to another user, retired, sold, or otherwise leaving the organization. If you plan to wipe the device, make sure it has already been unassigned or released from Apple Business first. After that, it should activate as an unmanaged iOS device unless it is assigned to another MDM server.
Regards,
Isabel Lora
Hexnode UEM