Remove an MDM Enrollment Profile directly from the Apple device

You can remove an MDM enrollment profile directly from macOS computers.

Remove an MDM enrollment profile from macOS computers

To perform a clean removal on macOS computers running Apple Device Management, we recommend you first delete the MDM enrollment profile from the device then uninstall the Mac Agent.

It is possible that the Enrollment Helper prompt may reappear between the time un-enrollment occurs and the Agent is uninstalled, however this is unlikely. Should this occur, tell Enrollment Helper to not ask again in its drop-down menu.

To remove an MDM enrollment profile from a macOS computer using System Preferences:

  1. On the macOS computer, click the Apple menu icon then go to System Preferences > Profiles.
  2. Select your MDM Management enrollment Profile.
  3. Click on the minus icon to begin the removal process.
  4. Click Remove, if prompted to confirm removal.

  5. Please note that for Apple Device Management only the main MDM enrollment profile is removable. Deleting this profile also removes any associated Device Profiles.

     

To remove an MDM enrollment profile from a macOS computer using Terminal (Command Line):

  1. On the macOS computer, click Finder > Go > Utilities.
  2. Double-click Terminal.
  3. Run the profiles remove -all command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:
  4. $ sudo /usr/bin/profiles remove -all
    Password:

To remove a specific MDM profile from a macOS computer using Terminal (Command Line):

  1. Click Finder > Go > Utilities.
  2. Double-click Terminal.
  3. To display a list of installed profiles, run the following command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:

    $ sudo profiles list
    Password:

    Example output:

    _computerlevel[1] attribute: profileIdentifier: com.example.mav.tcc
    _computerlevel[2] attribute: profileIdentifier: com.example.takecontrol.tcc
    _computerlevel[3] attribute: profileIdentifier: com.example.rmmagent.tcc
    There are 3 system configuration profiles installed

  4. Run the following command with the name of the profile you want to remove:

    $ sudo profiles remove -identifier <profile_name>

    Example command:

    $ sudo profiles remove -identifier com.example.mav.tcc

    Depending on its settings, a profile may be unremovable using Terminal. In that situation, you must use the N-central Dashboard to remove the profile.