Skip to main content

Hi All,

 

I have several MDM Profile that have not checking and I would like to remove the MDM Profile from the Macbooks, I have try the following script:  

 

sudo jamf removeMdmProfile

sudo jamf removeframework 

 

I don’t want to use recovery mode.

 

Can anyone help?

 

 

The only way I am aware of to remove a mobile device management profile from a pre enrolled device is to wipe it, or remove/unmanage the device from Jamf. I would be finding out why these are not checking in. If you do “Sudo jamf recon” “Sudo jamf policy” does this allow the device to check in, or does this give an error?


We’ve had enrollment issues on some computers for various reasons, usually because a user self enrolling does not complete the process.  removeFramework does not always work in these cases.  We’ve had success with this with the following:

YMMV

  1. Disable SIP.
  2. Restart the computer normally.
  3. Rename or Delete /var/db/ConfigurationProfiles/Store
  4.  re-enable SIP

We have additional steps based on the desired outcome (keeping managed/supervised, releasing it from the org, etc)