Remove an MDM Enrollment Profile directly from a device

You can remove an MDM enrollment profile directly from:

Remove an MDM enrollment profile from macOS computers

To perform a clean removal on macOS computers running Device Management for Apple, we recommend you first uninstall the Mac Agent and then delete the MDM enrollment profile from the device. For more information, see Uninstall the Mac Agent.

If you remove the MDM enrollment profile from a device that is still running the Mac Agent and Device Management for Apple, the end user is prompted to enroll the MDM profile again (if Device Management for Apple is configured to automatically enroll Mac devices).

To remove an MDM enrollment profile from a macOS computer, you have three options. You can use System Preferences or Terminal (command line) to remove a specific MDM enrollment profile, or you can use Terminal (command line) to remove all MDM enrollment profiles.

Use System Preferences to remove an enrollment profile

  1. On the macOS computer, click the Apple menu icon then go to System Preferences > Profiles
  2. Select your MDM Management enrollment Profile

  3. Click the minus icon at the bottom of the dialog to begin the removal process
  4. Click Remove, if prompted to confirm removal

  5. Deleting the main MDM enrollment profile deletes all associated Device Profiles.

Use Terminal (Command Line) to remove a specific MDM Enrollment Profile

  1. On the macOS computer, click Finder > Go > Utilities
  2. Double-click Terminal
  3. To display a list of installed profiles, run the following command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:

    $ sudo profiles list
    Password:

    Example output:

    _computerlevel[1] attribute: profileIdentifier: com.example.mav.tcc
    _computerlevel[2] attribute: profileIdentifier: com.example.takecontrol.tcc
    _computerlevel[3] attribute: profileIdentifier: com.example.rmmagent.tcc
    There are 3 system configuration profiles installed

  4. Run the following command with the name of the profile you want to remove:

    $ sudo profiles remove -identifier <profile_name>

    Example command:

    $ sudo profiles remove -identifier com.example.mav.tcc

    Depending on its settings, a profile may be unremovable using Terminal. In that situation, you must use the N-sight RMM Dashboard to remove the profile. For information, see Remove profiles using N-sight RMM.

Use Terminal (Command Line) to remove all MDM Enrollment Profiles

  1. On the macOS computer, click Finder > Go > Utilities
  2. Double-click Terminal
  3. Run the profiles remove -all command either as root or by assuming root privileges by sudo, entering the admin user's password when prompted:
  4. $ sudo /usr/bin/profiles remove -all
    Password:

Remove an MDM enrollment profile from iOS devices (iPhones, iPads)

When you Delete a mobile device from the Dashboard, the MDM enrollment profile is removed. However, you can remove an MDM enrollment profile from an iOS device if required.

Use this task to remove an MDM enrollment profile from an Apple TV. Exact menu names may differ. For example, VPN & Device Management may be simply Device Management.

To remove an MDM enrollment profile from an iOS device:

  1. On the iOS device, go to Settings > General > Profiles or VPN & Device Management
  2. Select your MDM Management Profile
  3. Click Removal Management or Remove Profile
  4. Authorize the removal
  5. Confirm removal when prompted

What do you want to do?