MDM label still present after removing device from MDM

Hello SergSatv,

Just to clarify, when you mention the startup screen, are you referring to the login window where you're prompted to enter your password after a restart?

If you are indeed talking about the login window:

Some MDM configurations can set settings outside of the usual profiles.

You can use Terminal to check if the login window message has been set somewhere in the system settings:

sudo defaults read /Library/Preferences/com.apple.loginwindow LoginwindowText

If this command returns a value, you can try removing it or replacing it with something neutral using the following command:

sudo defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Your custom message here"

Please remember to replace "Your custom message here" with the actual message you want to set.

And if you want to remove the custom login message entirely, you can use this command:

sudo defaults delete /Library/Preferences/com.apple.loginwindow LoginwindowText

Restart your Mac after applying these changes to see the effect.

Hope this helps!

Hello SergSatv,

Thanks for your reply. Can you please attach a Screenshot/Photo of the screen where the Massage appears?

That sounds very like it will be still issued by an Apple-Management-Framework which was changed on enrolment.

Since the message have been set by MDM, use the profiles command in the terminal to see if there are any remaining profiles that could control the message. You can check the list of installed profiles with the following command:

sudo profiles show

If you find a profile that could be responsible for displaying the message, you can try to remove it with the

profiles remove command.

Additionally check the enrolment Status of your Mac. You can check the MDM status of a Mac through the terminal. macOS provides a command that allows you to retrieve information about the MDM registration of a device. This can be particularly useful to determine whether your device is currently managed by a Mobile Device Management (MDM), even if no obvious profiles or restrictions are visible.

profiles status -type enrolment

This command displays the status of the device enrolment, including information about whether the device is managed by an MDM. The output tells you whether the device is registered and provides details about the registration, such as whether it is a user or device registration.

If your device is managed by an MDM, you should see information about it, including the status of the administration. If no MDM is in use, it is usually displayed that no administration is active.

If you have an Intel processor, you could still try resetting the NVRAM.

A reset of the NVRAM (Non-Volatile Random-Access Memory) could help because some settings, including system settings used during the boot process, could be stored there.

To reset the NVRAM of your Mac:

1. Turn off your Mac.
2. Immediately after turning on the Mac, press the key combination Option (⌥) + Command (⌘) + P + R and hold it for about 20 seconds.
3. Release the buttons. The Mac will restart and the NVRAM will be reset.

If the Options won’t help or give you a idea if there are Still MDM dependencies, you should consider of a clean install. As mentioned by HWTech, it’s very difficult to identify changes made by the MDM as they enrol your Mac.

Best

Maurice

Personally I would perform a clean install of macOS by first erasing the computer followed by reinstalling macOS & restoring only the data from a backup since you don't want to bring back any customized settings applied by the MDM or any software & utilities the company may installed to the system. Otherwise you will never know what other settings could have been changed while the Mac was being managed by the MDM. Removing the computer from the MDM will just keep the company from managing the device from now on & should return full control to you. However, any custom settings the company applied to the OS will still be there after removal from the MDM.

Remember this is just one thing that is easily noticed. What about the not see easy to detect items?