How can I get rid of unauthorized MDM connotations @Roikins

Only the organization managing your device can remove your profile.

People keep saying "PHYSICAL ACCESS TO DEVICE" as if that's letting "*some one*" off the hook for the non disclosure / non removal / life threatening stalking that the op is talking about. It's actually called - hacking. And, it's illegal as all ?"*ell". If you think things can not be installed without physical access, please educate yourself, as that is not true. One wrong link click and the reverse shell on your device is allowing another party to view your cameras. Anything you can do , someone remotely can do as well. And, the device doesn't know, at least not in a way that it can tell you directly. And no, Malwarebytes isn't going to automatically find it. <-it might and might not. No one has physical control of their devices all of the time anyway, even you Marine. Stop harping on people like they deserve anything for "SOMEONE HAD TO HAVE PHYS ACCESS nonsense"

Yea it is. Series of what happened with me. They used application email which happens to be backup email to access the apple account. In short, google and Microsoft ties everything together. All they have to do is gain access to one and there you go MDM. This is a serious problem.

Happy to help. If your accounts are using your personal company email address, your org can take control of those accounts with many vendors (I know I've done it with Zoom, Box, Dropbox, Asana, and more). VPN is essentially the same as being on the corporate network. There is a lot of visibility.

Beepbopjd wrote:

They do it through Microsoft on sync AD All that is needed is your phone number. Forward the confirmation text and boom! All devices linked to the Apple ID is theirs. This is a nightmare and apple knows it.

A supervised device is effectively if not actually owned and managed by the organization holding the supervisory lock, yes.

The device is either pre-enrolled by Apple at time of purchase, or the local user confirms the supervision.

This is specifically intended to keep device holders from stealing the organization’s assets.

You’re not the owner of a supervised device.

I used Little Snitch and systematically blocked all the bull **** they system was set up to do in order to track and manage the device. It is tedious and took a few times but I did get a solid outcome after a few tries. This is the only way I could secure my devices and get them to work right.

Don't sign into iCloud, or get iCloud if you're having these issues. MDM CANNOT be added to a device without your knowledge. It is 100% NOT POSSIBLE. If it was, it would make my job much easier, but it would also erode privacy and security of the user.

OMG!!! Finally someone who has the exact same situation as myself and doesn’t think I’m crazy! I left my family’s business due to having a disagreement with my brother. Ever since that time I’ve been dealing with this craziness. Even bought a new MacBook Pro and Bam - took a week and it was running on a unsigned version of Monterey Mobile Asset. I made a bootable copy of UBUNTU and found a hidden Fat32 boot drive on all my devices. I used FPart on Ubuntu to completely wipe the drive. But I cannot get a solid installer. I will download Monterey - check with Pacifist for signature but after my installer gets a hold of it - I check it with Pacifist again and it’s UNSIGNED and has Mobile Asset settings listed. Can anyone help me with this?

You cannot have a MDM remotely installed on your device.* technically not true

Nor can you be enrolled in a developer program at Apple without your Apple credentials. * So what

?(even if you are enrolled in such a program, and a configuration profile was installed, it would indicate Apple* not true

Further, a MDM cannot migrate anything on your device to anyone else. ****the op is not talking about the Migration out of Syria to more fertile lands a long time ago

It's not letting someone off the hook. It's that this didn't happen in a way the OP suggested. I do have physical control of my device at all time. Physical control includes keeping it locked when not using it. These posts happen often here, and are often a result of an error or of someone who purchased a device that was used.

Yea my MacBook was brand new. I am pretty aware of phishing as well. I think like you stated it was a fake certificate which authorized. I noticed my personal email was linked to company zoom, teams etc. not sure how that was done. Crazy when I did a complete wipe I started getting weird messages to connect to my phone to bluetooth. In addition to browsing my work computer I found some of the same programs that were on my personal laptop and someone was recording my google session.

My issue here is someone logged into my work profile. We have keylogger so doesn’t matter if I change my password and that was used to approve single sign on for my account. I always use MFA. Also, thanks for the responses. Sheds some light on the situation. Greatly appreciated.

I have a company email and then two personal emails. Bothe personal were linked to the vendor accounts. I never cross the two but on my of my gmails I did not have two factor so maybe that was the misstep. Lesson learned lol

Yes you can! I have worked with people I thought to be friends that had an apple delloper account and apple business accounts and once they have you there your screwed especially when you aren’t an coder or developer like me so I plan to turn them in if don’t stop immediately any way you can help me with how to do that 🤷🏼