Category filter
How to Disenroll and Delete Device?
The Disenroll Device and Delete Device actions are critical for managing license availability and device retirement. Disenrolling removes an active device from management, while deleting removes pre-approved records that have not yet been enrolled.
Technical Overview and Definitions
Effective inventory management requires distinguishing between active managed devices and pre-approved placeholders.
- Disenroll Device: Terminate the management link between Hexnode UEM and an active device. This action frees up a license slot for new enrollments.
- Delete Device: Removes “pre-approved” device entries (devices added to the portal but never successfully enrolled).
- Mark as Disenrolled: A portal-side override used when a device is offline or factory reset, forcing the release of the license slot.
Prerequisites
- Network Connectivity: Devices must have an active internet connection to receive the disenrollment command.
- Administrative Access: You must have permissions to access the Manage tab and execute Device Control actions.
How to Disenroll Active Devices
Disenrollment can be performed on single or multiple devices. This process removes configurations and ends the communication link between the server and the agent.
Disenrolling Multiple Devices (Bulk)
- Log in to the Hexnode UEM portal.
- Navigate to the Manage tab.
- Check the boxes for the devices you wish to remove.
- Select Actions > Device Control > Disenroll Device.
- Click Yes on the confirmation prompt.
Disenrolling a Single Device
- In the Manage tab, click the Device Name to open the Device Summary page.
- Select Actions > Device Control > Disenroll Device.
- Click Yes to confirm.
OS-Specific Disenrollment Behavior
The impact of disenrollment varies significantly across different operating systems and management modes.
| Platform | Configuration Impact | App Behavior | Special Notes |
|---|---|---|---|
| iOS / iPadOS | All configurations and restrictions are removed. | Apps installed via Hexnode are removed. | If Lost Mode was active, the device will exit Lost Mode. |
| Android | Device exits Kiosk Mode; Hexnode app is deregistered. | Only “Required Apps” with “Remove apps on policy removal” enabled are deleted. | Hexnode UEM app remains on the device but is inactive. |
| Android Enterprise (DO) | Management profile is removed. | Prompt for Factory Reset may appear. | Device cannot be re-enrolled without a full factory reset. |
- Data Loss: Disenrolling permanently removes device data from the Hexnode server. Ensure all necessary backups are completed prior to execution.
- ROM Enrollment: Disenrolled ROM-enrolled devices lose automatic enrollment capabilities and must be re-enrolled manually if factory reset.
Forceful Removal: Marking as Disenrolled
If a device is offline, destroyed, or already manually factory reset, the disenrollment command may stay “Pending.” Use Mark as Disenrolled to immediately reclaim the license.
- Navigate to the Manage tab and click on the Device Name.
- Select Actions > Device Control > Mark as Disenrolled.
- Confirm the action.
Kiosk Risk: If you “Mark as Disenrolled” while a device is in Kiosk Mode, the portal loses control and the device may stay locked in Kiosk. Use the Global Exit Password (Admin > General Settings) or the Local Kiosk Exit Password to recover.
How to Delete a Pre-approved Device
This action is strictly for records that have not yet completed the enrollment process.
- Navigate to the Manage tab.
- Check the devices marked as pre-approved.
- Select Actions > Device Control > Delete Device.
- Click OK to confirm.
Troubleshooting Guides
| Problem | Resolution |
|---|---|
| Device status is “Agent Removed” instead of disenrolled. | This occurs when a user deletes the Hexnode app or MDM profile manually. The device is still counted in the portal. To fully remove it, execute the Disenroll Device action from the portal. |
| Android Enterprise device asks for a Factory Reset. | This is a security requirement for Device Owner mode. Once the management link is severed, the device must be reset to clear the secure container before it can be re-enrolled. |
| License slot not freed after disenrollment. | If the action is still “Pending” because the device is offline, use the Mark as Disenrolled action to force the license release. |
| iOS device cannot re-enroll in other MDMs. | If the ADE (DEP) profile had Allow MDM Profile Removal disabled and you used “Mark as Disenrolled“, the profile may remain stuck. Contact Hexnode support or Apple for profile clearing. |
Frequently Asked Questions (FAQs)
Where can the data be found for a device that has been already disenrolled?
Go to Reports > Device Reports > Disenrolled devices. Here, the device details can be viewed and exported as PDF/CSV.
What happens if a Samsung Knox or LG GATE device is disenrolled?
If “Prevent Deactivation of Device Administrator” was enabled, the device might be blocked from re-enrolling in Hexnode, though it can typically enroll in other MDMs.
Does deleting the Hexnode App unenroll the device?
No. Deleting the app or profile only marks the device as “Agent Removed“. You must use the Disenroll action in the portal to officially end management and free the license.
