Are the MDM restrictions, profile and policies that I pushed to the user’s devices removable? I manage corporate Macs, iPhones and iPads. I read on the internet that the profiles can be removed with Apple Configurator. Please advise any workarounds if users can directly remove profiles with Apple Configurator.
1101 Views
Replies (2)
Marked SolutionPending Review
Participant
3 years ago
Marked SolutionPending Review
@Valerie, how are the devices enrolled? I don’t think it is possible to remove profiles AC if the MDM profile is made non-removable for DEP devices.
Marked SolutionPending Review
Hexnode Expert
3 years ago
Marked SolutionPending Review
The policies and restrictions applied on iOS devices can only be removed by:
- Disassociating it from the UEM console.
- Disenrolling the device.
- Removing the MDM profile from the device, either manually or using Apple Configurator. You can block the manual removal of the MDM profile for a DEP-enrolled device.
Note: Ensure that the option Allow MDM profile removal in the DEP Configuration Profile is unchecked. This blocks the users from manually removing the enterprise administration in devices enrolled via the Device Enrollment Program.
Hope this helps!
Chris Coleman
Hexnode UEM
Save
