Category Filter

How to Disenroll and Delete Device?

Disenroll an employee’s device from Hexnode MDM if that employee does not belong to your organization anymore and that the user’s devices need to be removed from Hexnode MDM. Disenrolling a device gives you an extra slot for another device to get enrolled in Hexnode MDM.

A pre-approved device can be deleted from the list by using the ‘Delete Device’ option in the Actions drop-down.

Disenrolling a device

To disenroll a device directly from Hexnode MDM console,

  1. Login to your Hexnode portal.
  2. From the Manage tab, check the device or devices which are to be disenrolled.
  3. Select Disenroll device from the Actions drop-down.
  4. Click on YES in the confirmation dialog.
  5. Enter the password of your Hexnode MDM portal and click OK.

This will initiate disenrollment and the process will be completed as soon as the device gets connected to a network.


Hexnode MDM leaves you with the choice of disenrolling the device assigned to a user if the user is deleted. Learn how to disenroll a device while deleting its user.


  • Deleting the Hexnode MDM app or the MDM profile won’t disenroll the device. Instead, they’ll be marked “Agent removed” in the Hexnode MDM portal. If you try to enroll such a device again, the “Agent removed” tag will be removed, and all restrictions and configurations will continue to work.
  • Android Enterprise Devices which are enrolled as Profile Owner or Device Owner can be disenrolled from Hexnode MDM by following the same steps. When the device enrolled as Device Owner gets disenrolled, the device will get removed from the Hexnode MDM portal. If Hexnode For Work app is opened in the device, users will be prompted to reset the device to its factory settings. Without a factory reset this device cannot be re-enrolled in any MDM.


  • Disenrolling a device will remove all data associated with the device from your Hexnode MDM server, and you won’t be able to access it again. So, before disenrolling a device, make sure you have proper backups of the data.
  • ROM-enrolled devices, if disenrolled, become incapable of automatic enrollment if the device is reset to factory settings. However, the device can be enrolled manually in Hexnode MDM.

Marking Devices as Disenrolled

To remove a device from the list of devices before the disenrollment is complete,

  1. Go to the Manage tab.
  2. Click on the device name.
  3. From Actions, select Mark as disenrolled.

  • If a device is marked as disenrolled while it is in kiosk mode, Hexnode MDM loses control over your device and the device will be locked in kiosk forever. However, the kiosk mode in Android can be exited by using an exit password provided in the kiosk settings or Admin > General Settings.
  • For iOS devices with the ‘Allow MDM profile removal’ option disabled during DEP enrollment, marking the devices as disenrolled will disallow the devices from enrolling in other MDM solutions or re-enrolling in Hexnode MDM. However, devices added to DEP via Apple Configurator will have a provisional period during which the users are free to remove the MDM profile.
  • In Samsung Knox or LG GATE devices, if Device Administrator is prevented from getting deactivated, the device cannot be enrolled again in Hexnode MDM, but enrolling in other MDMs will work.

Delete a Pre-approved Device

If you enroll a pre-approved device and the user hasn’t enrolled the device, then the device can be deleted from Hexnode MDM. If a user enrolled the device already, disenroll the device to remove it from the Hexnode MDM server.
To delete a pre-approved device,

  1. From the Manage tab, check the devices that are to be deleted.
  2. Select Delete Device from Actions.
  3. Confirm by clicking on the OK button.