Device Action: Unenroll device

The Unenroll action removes a device from MDM management by removing the SimpleMDM enrollment profile. Once unenrolled, SimpleMDM can no longer send commands or configuration to the device. The device record remains in SimpleMDM in an unenrolled state and can be re-enrolled later.

Supported platforms

The Unenroll action is available for all enrolled device types — iOS, iPadOS, macOS, tvOS, and visionOS. There are no OS version or supervision requirements.

How to unenroll a device

1. In SimpleMDM, navigate to the device's Device Details page.
2. Click the "Actions" menu.
3. Select "Unenroll".
4. If the device has directly assigned profiles, optionally check "Unassign directly assigned profiles" to prevent those profiles from being re-applied if the device re-enrolls.
5. Click "Unenroll" to confirm.

What happens when a device is unenrolled

When the device receives the unenroll command:

• The SimpleMDM enrollment profile is removed from the device, along with all configuration profiles installed by SimpleMDM.
• App licenses assigned through Apple Business Manager are revoked.
• On macOS, the SimpleMDM Agent is uninstalled.
• The device stops checking in with SimpleMDM and can no longer receive commands.

In SimpleMDM, the device record transitions to an unenrolled state. Pending MDM commands, installed profile records, and OS update data are cleared. The device record itself is preserved — it is not deleted.

Unenroll vs. Remove

Unenrolling a device keeps the device record in SimpleMDM in an unenrolled state. The device can re-enroll later and its record will be reused. Deleting a device removes the record from SimpleMDM entirely. If you want to remove a device from management but retain its record for future re-enrollment, use Unenroll. If you want to remove the device from SimpleMDM completely, use Remove.

Unassign directly assigned profiles

When unenrolling, you can optionally choose to unassign any profiles that were directly assigned to the device (not inherited through a group). This is useful when you don't want those profiles to be automatically re-applied if the device re-enrolls later. Group-based profile assignments are unaffected by this option — they will be re-applied at re-enrollment if the device is still a member of the group.

Re-send unenroll command for deleted devices

When a device is deleted from SimpleMDM, a record of the device is preserved in the Deleted Devices list. If the original unenroll command did not reach the device — for example, because it was offline or unreachable at the time — you can re-send the unenroll notification from the deleted device record.

1. In SimpleMDM, navigate to Devices > Deleted Devices.
2. Select the deleted device by serial number.
3. Click the "Actions" menu.
4. Select "Resend Unenroll Command".

This sends a push notification to the device prompting it to check in and process the pending unenrollment. It is only available if SimpleMDM still has valid push credentials on file for the device.

Notes