Hoping to get some assistance from the knowledge of the JAMF Nation. I am struggling to remove an individual configuration profile, that was installed manually, via the command line. Testing on Mavericks 10.9.1 currently. Used the profiles man page and this: https://developer.apple.com/library/mac/documentation/darwin/Reference/ManPages/man1/profiles.1.html
Commands I've tried:
sudo profiles -R -F /tmp/profilename.mobileconfig
sudo profiles -R -p profileidentifier
sudo profiles -R -p profileidentifier -U username
No dice so far. Use case is that a profile is installed manually and it needs to be removed without removing all profiles. Any thoughts out there?
Thanks!
Ben
Remove All Profiles
sudo /usr/bin/profiles -D
Remove a Single Profile
sudo /usr/bin/profiles -R -p com.eugene.
Hi guy, just new and need this help, I got a Mac that is not showing any profile, how ever if I format it I get the corporate login page if connected to internet, if I disable the connection then I can go ahead and go through the activation, I've contacted the supplier but they haven't tested and now is out of the 3 months warranty they offered :(
stunning Mojave if that help, I can use it but I would like to have it as a normal MacBook..
any help much appreciated
thanks in advance!!
HI Fredor
Are you perhaps describing login profiles ? (User Profiles) ?
This doesn't sound like a config profile, It sounds like your getting a DEP enrolment screen.
This can only be removed by the company shown in the screen - go back to the vendor you purchased this from, as without this being removed before sales the laptop is just a aluminium brick
sudo /usr/bin/profiles -D -f
To delete all profiles on the Mac without getting a prompt of "are you sure?" (forced)
Regarding Configuration Profiles was installed by Jamf Pro (not what the original poster was asking, but was asked elsewhere in this thread), it'll be enforced.
Meaning you can't remove it without it re-installing again. The only way to remove would be to exclude the computer(s).
Adding to what @donmontalvo mentioned above, you can send the command to remove the MDM profile. That'll also remove other profiles deployed and controlled by the MDM.

@waqas.khan - that's one of those I forget to use! Thanks for the reminder...
To easily remove ALL profiles from a managed mac, do the following:
1. Turn of system integrity.
Shut down the computer.
Boot up the computer while holding (command + R)
Press ‘utilities’.
Type (csrutil disable)
Restart
2. Give terminal root file access.
Open ‘Privacy and Security’ in ‘System Preferences’.
Press ‘Privacy’
Press ‘Complete Disk Access’
Unlock with the lock button at the bottom left
Add terminal.
3. Terminal Commands
Type: ‘sudo jamf -removeFramework’ into terminal, press enter.
Type: ‘sudo -i’ into terminal, press enter and enter your password, press enter.
Type: ‘cd /var/db/‘ into terminal, press enter.
Type: ‘mv ConfigurationProfiles ConfigurationProfilesOLD’ into terminal, press enter.
Type: ‘logout’ into terminal, press enter.
4. Final steps.
Restart computer.
@bbot your script worked great when I used it locally, but trying to run it as a script from jamf pro it complained about -U needing an option to be passed to it. I tried user= and also just using $USER but I had no luck with either. If I hard-coded their username then it worked as long as they were logged in. Otherwise I got an error that the user wasn't logged in. Has anybody figured out a way to use this with a variable? maybe a specific uid?
To easily remove ALL profiles from a managed mac, do the following:
1. Turn of system integrity.
Shut down the computer.
Boot up the computer while holding (command + R)
Press ‘utilities’.
Type (csrutil disable)
Restart
2. Give terminal root file access.
Open ‘Privacy and Security’ in ‘System Preferences’.
Press ‘Privacy’
Press ‘Complete Disk Access’
Unlock with the lock button at the bottom left
Add terminal.
3. Terminal Commands
Type: ‘sudo jamf -removeFramework’ into terminal, press enter.
Type: ‘sudo -i’ into terminal, press enter and enter your password, press enter.
Type: ‘cd /var/db/‘ into terminal, press enter.
Type: ‘mv ConfigurationProfiles ConfigurationProfilesOLD’ into terminal, press enter.
Type: ‘logout’ into terminal, press enter.
4. Final steps.
Restart computer.
Hi @adambrest
i’m just gonna shoot straight. I think I purchased a MacBookPro in 2017 that is somehow registered to the Govmt. It was brand new, still in the unbroken cello when I got it off of eBay.
I just picked it up from Apple where they replaced the logic board and keyboard as a part of a recall. The serial number must have come up showing the device as a part of a Govmt agency.
Upon boot, I select language, nation, keyboard and WiFi (I’ve also bi-passed WiFi) and the next screen is “Configuration Available. This Mac will be configured automatically by _____.” (I can fill in the blank in an offline discussion)
if I choose -> Continue, I am then asked for log-in credentials which I obviously do not have.
Would you be willing to tell me or help me bypass this? Is it possible?
Related question: When a configuration profile has been removed from a JAMF Managed Mac manaully (command or script), will the profile get reinstalled automatically via MDM at some point (assuming the target Mac is still scoped for that particular profile etc)?
From our experience and with JAMF support on a call if you want to remove a config profile, the best approach to remove the devices from the scope, is to let it sit for a day, circle back validate config profile not showing on the devices, when all devices are not showing, finally disable the config profile and later delete it within JAMF.
Hi @adambrest
i’m just gonna shoot straight. I think I purchased a MacBookPro in 2017 that is somehow registered to the Govmt. It was brand new, still in the unbroken cello when I got it off of eBay.
I just picked it up from Apple where they replaced the logic board and keyboard as a part of a recall. The serial number must have come up showing the device as a part of a Govmt agency.
Upon boot, I select language, nation, keyboard and WiFi (I’ve also bi-passed WiFi) and the next screen is “Configuration Available. This Mac will be configured automatically by _____.” (I can fill in the blank in an offline discussion)
if I choose -> Continue, I am then asked for log-in credentials which I obviously do not have.
Would you be willing to tell me or help me bypass this? Is it possible?
If the computer is in Apple Business Manager, you're kind of SOL, unless you never ever connect it to the internet. 😉
You can remove an individual OS X configuration profile using the profiles command line utility. Here are the steps to remove a configuration profile from the command line:
Open Terminal.
Type the following command to list the installed configuration profiles:
Identify the profile you want to remove by its name or identifier.
Type the following command to remove the profile, replacing "PROFILE_IDENTIFIER" with the actual profile identifier:
profiles -R -p PROFILE_IDENTIFIER
The profile should now be removed from the device.
Note: The profiles utility is a built-in command line tool in OS X and is used to manage configuration profiles on a Mac. The above steps are meant to be performed on a device that is managed by Jamf.