Why do supervised ABM iPads show “Leave Remote Management” in VPN & Device Management?Solved

This behavior can be expected if the iPads were added to Apple Business Manager manually using Apple Configurator. Apple applies a 30-day provisional period for manually added devices. During this provisional period, iOS may show the “Leave Remote Management” option even if the device is supervised and enrolled through Automated Device Enrollment.

This is enforced by Apple and is intended as a safeguard in case a personally owned device was added to an organization by mistake. After the 30-day provisional period ends, the option is removed automatically, provided the Automated Device Enrollment profile is configured to prevent MDM profile removal.

To verify the Hexnode configuration:

1. Go to Enroll > Platform-Specific > iOS > Apple Business. 
2. Open the ADE configuration profile assigned to the devices.
3. Make sure “Allow MDM Profile Removal” is disabled or unchecked.
4. Ensure the profile is associated with the relevant devices in Apple Business Manager/Hexnode. If “Allow MDM Profile Removal” is disabled and the 30-day provisional period has passed, end users should not be able to remove the MDM profile from company-owned supervised iPads.

Regards,
Mary Romero

We’ve seen the same thing with iPads added through Apple Configurator. The button disappeared on its own after the provisional period. For devices purchased directly through an ABM-linked reseller, we didn’t see that option once the ADE profile was set to disallow MDM removal.

Regards,
Mary Romero