Remove an enrollment profile directly from a device

You can remove an enrollment profile directly from:

• macOS computers
• iOS devices

If you manually remove the enrollment profile directly from a device, it is not communicated to N-sight RMM and the device reports as active until it is deleted using the N-sight RMM user interface.

Remove an enrollment profile from macOS computers

To perform a clean enrollment profile removal on macOS computers running Device Management for Apple, we recommend you first uninstall the Mac Agent and then delete the enrollment profile from the device. For more information, see Uninstall the Mac Agent.

If you remove the enrollment profile from a device that is still running the Mac Agent and Device Management for Apple has the Enrollment Helper enabled, the end user is prompted to enroll again.

To remove an enrollment profile from a macOS computer, you have the following options:

Use System Preferences to remove an enrollment profile

1. On the macOS computer, click the Apple menu icon then go to System Preferences > Profiles

   The Profiles option is not available until there is at least one profile installed on the computer.

2. Select your enrollment Profile

   

3. Click the minus icon at the bottom of the dialog to begin the removal process

4. Click Remove, if prompted to confirm removal

Deleting the enrollment profile deletes all configuration profiles on the device.

Use Terminal (Command Line) to remove a specific enrollment profile

1. On the macOS computer, click Finder > Go > Utilities
2. Double-click Terminal
3. To display a list of installed profiles, run the following command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:

   $ sudo profiles list
   Password:

   Example output:

   _computerlevel[1] attribute: profileIdentifier: com.example.mav.tcc
   _computerlevel[2] attribute: profileIdentifier: com.example.takecontrol.tcc
   _computerlevel[3] attribute: profileIdentifier: com.example.rmmagent.tcc
   There are 3 system configuration profiles installed

4. Run the following command with the name of the profile you want to remove:

   $ sudo profiles remove -identifier <profile_name>

   Example command:

   $ sudo profiles remove -identifier com.example.mav.tcc

   Depending on its settings, a profile may be unremovable using Terminal. In that situation, you must use N-sight RMM to remove the profile. For information, see Remove configuration profiles from devices.

Use Terminal (Command Line) to remove all enrollment profiles

1. On the macOS computer, click Finder > Go > Utilities
2. Double-click Terminal
3. Run the profiles remove -all command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:

4. $ sudo /usr/bin/profiles remove -all
   Password:
   

Remove an enrollment profile from iOS devices (iPhones, iPads)

When you Delete a mobile device from N-sight RMM, the enrollment profile is removed. However, you can manually remove an enrollment profile from an iOS device if required.

You can use this task to remove an enrollment profile from an Apple TV. Exact menu names may differ. For example, VPN & Device Management may be simply Device Management.

To remove an enrollment profile from an iOS device:

1. On the iOS device, go to Settings > General > Profiles & Device Management (for iOS 16 go to Settings > General > VPN & Device Management)
2. Select your mobile device management profile
3. Click Remove Management or Remove Profile
4. Authorize the removal
5. Confirm removal when prompted

What do you want to do?

• Review Device Management for Apple information