By default, Apple allows the MDM profile to be removed from devices via Settings at any time. However, there are ways to enroll devices that restrict this capability, as discussed in this article.
To fully remove a device from all forms of management, the necessary process will ultimately depend on how the device became enrolled in MDM.
If you unenroll a device from SimpleMDM, all MDM-installed apps and configurations will be automatically removed from the device. If your account closes, all devices will be automatically unenrolled (and all apps and configurations will be removed) within 30 days.
If the device was enrolled manually or using Apple Configurator:
There are two ways that devices can be unenrolled.
To manually unenroll an iOS device:
- Open Settings on the device.
- Go to General > Device Management.
- Select the MDM profile.
- Select Remove Management.
To manually unenroll a macOS device:
- Open System Preferences.
- Go to the Profiles section.
- Select the main MDM profile.
- Click the - button and follow the prompts to confirm the unenrollment.
To unenroll a device via SimpleMDM:
- Click the device name.
- Click Actions.
- Select Remove. This will send a command to the device instructing it to delete the MDM profile. Selecting Unenroll will also unenroll the device but will not delete the device record from your account.
Note: if the device has Supervised Mode enabled and you would like to disable it, you will need to erase the device even after removing it from MDM.
If the device was enrolled using Automated Enrollment with Apple Business/School Manager (formerly DEP enrollment):
There are additional steps required to remove management.
- In Apple Business Manager, un-assign the device from SimpleMDM or release the device from your Apple Business Manager account.
- Assign, reassign, or unassign devices in Apple Business Manager - Apple
- Release devices in Apple Business Manager - Apple (if the device is being removed from the organization)
- Note: This step must happen first - otherwise the device will automatically re-enroll after being erased.
- Delete the device record from SimpleMDM.
- Erase the device.