Skip to main content
Question

Remove Broken MDM Profile

  • October 13, 2025
  • 3 replies
  • 111 views

Forum|alt.badge.img+6

Hi All,

 

I have several MDM Profile that have not checking and I would like to remove the MDM Profile from the Macbooks, I have try the following script:  

 

sudo jamf removeMdmProfile

sudo jamf removeframework 

 

I don’t want to use recovery mode.

 

Can anyone help?

 

 

3 replies

Shane Bucher
Forum|alt.badge.img
  • New Contributor
  • October 14, 2025

The only way I am aware of to remove a mobile device management profile from a pre enrolled device is to wipe it, or remove/unmanage the device from Jamf. I would be finding out why these are not checking in. If you do “Sudo jamf recon” “Sudo jamf policy” does this allow the device to check in, or does this give an error?


pbenware1
Forum|alt.badge.img+12
  • Valued Contributor
  • October 15, 2025

We’ve had enrollment issues on some computers for various reasons, usually because a user self enrolling does not complete the process.  removeFramework does not always work in these cases.  We’ve had success with this with the following:

YMMV

  1. Disable SIP.
  2. Restart the computer normally.
  3. Rename or Delete /var/db/ConfigurationProfiles/Store
  4.  re-enable SIP

We have additional steps based on the desired outcome (keeping managed/supervised, releasing it from the org, etc)


mvu
Forum|alt.badge.img+20
  • Jamf Heroes
  • October 17, 2025