VPP User Un-enrolment

[itsupport]

Hello,

Is it possible to un-enrol a user from the VPP program so they can sign up again using a different apple id?

This thread sort of answers my question: https://jamfnation.jamfsoftware.com/discussion.html?id=11514

"Yes. This is what has worked for me: In Mobile Devices, remove the user information from the device. In Users, remove user from the assigned user group or app assignments, then once all apps are removed from user, delete user from Users. Have end user sign in with new Apple ID on device. Then go to Mobile Devices, add user information, go back to Users and assign apps. Sometimes I get a new invite, but usually not."

This seems to be a very long winded process just to un-enrol a user. What makes it worse is that we use LDAP groups to assign VPP codes, so to un-enrol a user I have to remove them from an LDAP group first as they will have VPP codes assigned to them. The only way to unassign these codes is to remove them form the LDAP group.

There must be an easier way to un-enrol / un-associate a user with our VPP program.

Any information would be great.

[Nick_Gooch]

It is a long winded process and should be made easier, but you could do this so you don't have to mess with the ldap groups:

Create an extension attribute in users for department (or whatever you want to call it) and put in "delete". Then created a smart group for the department "delete" and added that group to exclusions for everything. Now if you need to do this all you need to do is add them to the delete department in the users tab and all apps are unassigned. Change the user on the iPad and you can then delete the user. Add the user back to the device, send new invite and you are good to go. This is what we do now and it makes it much faster to remove a user.

[cbrewer]

Thanks for the tip @Nick_Gooch