Remove an enrollment profile from a device

To remove an enrollment profile from a device you:

Remove an enrollment profile from macOS computers

To perform a clean enrollment profile removal on macOS computers running Device Management for Apple, we recommend you first uninstall the Mac Agent and then delete the enrollment profile from the device.

If you remove the enrollment profile from a device that is still running the Mac Agent and Device Management for Apple has the Enrollment Helper enabled, the end user is prompted to enroll again.

There are three options to remove an enrollment profile from a macOS computer:

Use System Preferences to remove an enrollment profile

  1. On the macOS computer, click the Apple menu icon then go to System Preferences > Profiles .

    The Profiles option is not available until there is at least one profile installed on the computer.

  2. Select your enrollment Profile.

  3. Click the minus icon at the bottom of the dialog to begin the removal process.
  4. Click Remove, if prompted to confirm removal.
  5. Deleting the enrollment profile deletes all configuration profiles on the device.

Use Terminal (Command Line) to remove a specific enrollment profile

  1. On the macOS computer, click Finder > Go > Utilities.
  2. Double-click Terminal.
  3. To display a list of installed profiles, run the following command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:

    $ sudo profiles list
    Password:

    Example output:

    _computerlevel[1] attribute: profileIdentifier: com.example.mav.tcc
    _computerlevel[2] attribute: profileIdentifier: com.example.takecontrol.tcc
    _computerlevel[3] attribute: profileIdentifier: com.example.rmmagent.tcc
    There are 3 system configuration profiles installed

  4. Run the following command with the name of the profile you want to remove:

    $ sudo profiles remove -identifier <profile_name>

    Example command:

    $ sudo profiles remove -identifier com.example.mav.tcc

    Depending on its settings, a profile may be unremovable using Terminal. In that situation, you must use N-central to remove the profile. For information, see Remove configuration profiles from devices

Use Terminal (Command Line) to remove all enrollment profiles

  1. On the macOS computer, click Finder > Go > Utilities.
  2. Double-click Terminal.
  3. Run the profiles remove -all command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:
  4. $ sudo /usr/bin/profiles remove -all
    Password:

Remove an enrollment profile from iOS devices (iPhones, iPads)

When you Delete a mobile device from N-central, the enrollment profile is removed. However, you can manually remove an enrollment profile from an iOS device if required.

You can use this task to remove an enrollment profile from an Apple TV. Exact menu names may differ. For example, VPN & Device Management may be simply Device Management.

To remove an enrollment profile from an iOS device:

  1. On the iOS device, go to Settings > General > Profiles & Device Management (for iOS 16 go to Settings > General > VPN & Device Management).
  2. Select your mobile device management profile.
  3. Click Remove Management or Remove Profile.
  4. Authorize the removal.
  5. Confirm removal when prompted.

Related topics

Updated: Mar 26, 2024