Hi, is it possible to block the removal of hexnode MDM on a mac?
1677 Views
Replies (3)
Marked SolutionPending Review
Hexnode Expert
5 years ago
Marked SolutionPending Review
Hey there, Thanks for posting the query.
Yes, it is possible to block the removal of the MDM profile from your Mac devices. If a Mac device is enrolled via the Apple Device Enrollment Program, the administrator can disallow the removal of the MDM profile.
On the DEP policy (Admin->Apple Business/School Manager->Apple DEP->DEP Policy), there is an option to ‘Allow MDM profile removal’. Disabling this option will help you prevent the MDM profile removal. This policy on being applied to the enrolling device will make the MDM profile non-removable.
Cheers!
Grace Baker
Hexnode MDM
Marked SolutionPending Review
Participant
5 years ago
Marked SolutionPending Review
What about this on Windows devices? Specifically, PCs?
Marked SolutionPending Review
Hexnode Expert
5 years ago
Marked SolutionPending Review
Hey, Thanks for posting the query.
Please navigate to Windows–>Restrictions–>Allow security and privacy settings. Below will be listed the ‘Manual MDM administration removal’ option.
Uncheck this to restrict the user from deleting the workplace account from the device settings.
PS: If the device is joined to Azure AD as well, disabling this option will have no effect.
Please use the link for insights into the restrictions for Windows devices.
Cheers!
Grace Baker
Hexnode MDM
Save
