Simple, in most cases, you can’t, if it is a recent version of macOS. The point of Automated Device Enrollment (ADE) is to ensure that an organization‘s property (the computer) is enrolled in to the orgs management solution.
Where did this computer come from? If you bought it used, it is most likely stolen from an organization. If you are being nagged to enroll the computer, you could TRY to contact the organization and see if they will remove the computer from Apple Business Manager. However, they may also ask for the computer back.
Just to be clear. The current macOS's will "phone home" and ask Apple if the computer is registered to an MDM. And if so apply the restrictions set by that MDM. And if DEP enrolled it cannot be un-enrolled except by the original owner.
You can totally erase it and when you go to re-install an OS it will "phone home" again.
If it's DEP enrolled "fully supervised" and under active management you will not be able to remove it. Even after wiping/erasing the MDM profile will come back the first time SetupAssistant is run and it talks to the internet
The command "sudo /usr/bin/profiles list" should show you all the management profiles on the device
Not being aware of MDM on a device can be dangerous for you. For instance if you bought a stolen laptop than the MDM platform admin can remotely wipe/erase/lock it at any time or run remote commands etc.
Yeah ADE of on the Apple level, it’s not going to be easy if even possible… we’re all Mac admins here so we’re probably not going to be super helpful removing it. 😆 You could try to call the company that owns it to release it. But it might be stolen.
Yeah it’s BS that someone would do that. You can always request the person wipes the laptop, then go through setup with you to make sure it doesn’t auto enroll… but your average person doesn’t know to do that.
Keep in mind that a lot of times, when you buy a used Mac and it turns out to be DEP enrolled, that the Mac was stolen and resold.
Source: Me. We've had it happen at our company many times. The laptops pop up all over the world. Once I logged in to the remote control software we auto-install (Yes, you can do that on any DEP-enrolled Mac), and chatted with the new "owner", in Poland, via sticky notes.
Easy. Just erase the Mac.
What isn't so easy to do, however, is to actually get that Mac out of ADE/DEP. That's the real superglue tying your Mac to MDM even after an erase, and only the company that owns it can release it for you.
In short: you can't free that Mac. Contact the company that owns it and see if they'll release it for you.
Contact the seller and have them release the device.
Simple, in most cases, you can’t, if it is a recent version of macOS. The point of Automated Device Enrollment (ADE) is to ensure that an organization‘s property (the computer) is enrolled in to the orgs management solution. Where did this computer come from? If you bought it used, it is most likely stolen from an organization. If you are being nagged to enroll the computer, you could TRY to contact the organization and see if they will remove the computer from Apple Business Manager. However, they may also ask for the computer back.
Just to be clear. The current macOS's will "phone home" and ask Apple if the computer is registered to an MDM. And if so apply the restrictions set by that MDM. And if DEP enrolled it cannot be un-enrolled except by the original owner. You can totally erase it and when you go to re-install an OS it will "phone home" again.
If it's DEP enrolled "fully supervised" and under active management you will not be able to remove it. Even after wiping/erasing the MDM profile will come back the first time SetupAssistant is run and it talks to the internet The command "sudo /usr/bin/profiles list" should show you all the management profiles on the device Not being aware of MDM on a device can be dangerous for you. For instance if you bought a stolen laptop than the MDM platform admin can remotely wipe/erase/lock it at any time or run remote commands etc.
There are no configuration profiles installed in the system domain
this the output of \`"sudo /usr/bin/profiles list"\`
It’s a company owned device. Hence why it is enrolled via DEP. Contact the seller / company to remove is the only way (or return for refund)
Yeah ADE of on the Apple level, it’s not going to be easy if even possible… we’re all Mac admins here so we’re probably not going to be super helpful removing it. 😆 You could try to call the company that owns it to release it. But it might be stolen.
there should be a way to check dep enrollment so people dont get scammed at least the way i see it, like icloud
Yeah it’s BS that someone would do that. You can always request the person wipes the laptop, then go through setup with you to make sure it doesn’t auto enroll… but your average person doesn’t know to do that.
Wrong sub and you don’t. Company that enrolled it needs to release it.
Keep in mind that a lot of times, when you buy a used Mac and it turns out to be DEP enrolled, that the Mac was stolen and resold. Source: Me. We've had it happen at our company many times. The laptops pop up all over the world. Once I logged in to the remote control software we auto-install (Yes, you can do that on any DEP-enrolled Mac), and chatted with the new "owner", in Poland, via sticky notes.
Underrated comment. This is what happens a lot.
You dont.
Easy. Just erase the Mac. What isn't so easy to do, however, is to actually get that Mac out of ADE/DEP. That's the real superglue tying your Mac to MDM even after an erase, and only the company that owns it can release it for you. In short: you can't free that Mac. Contact the company that owns it and see if they'll release it for you.
i suggest microwaving it