Need Assistance with Removing MDM Profile and DEP Enrollment

Hello Apple Support Community,


I have recently received a MacBook that is currently enrolled in the Device Enrollment Program (DEP) and is managed through an MDM profile by Idaho National Laboratory. However, I have no affiliation with this organization and am having difficulties removing the MDM profile from my device.


Here are the details:

  • MacBook is enrolled in DEP and managed by MDM.
  • The MDM server is managed by Idaho National Laboratory.
  • I do not have access to the organization that set up the MDM profile, and they are not responding to my requests for assistance.


I would like to regain full administrative control over my MacBook, as the MDM profiles are currently restricting certain functionalities.


Is there any way to remove the device from DEP and disable the MDM profile without the involvement of the original managing organization?


Any assistance or guidance would be greatly appreciated.


Thank you in advance for your help.


Best regards,

Viktoriia Hryshko

MacBook Pro 15″, macOS 14.6

Posted on Sep 5, 2024 9:56 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 6, 2024 8:43 AM

Sorry but again, there is nothing Apple nor anyone else can do about this. Only the organization that installed the MDM can help. If they cannot or will not, then those systems are now useless. I understand the need and frustration, but that's how those sorts of systems are designed, to control the Mac and keep it secure, so removal outside of the MDM is almost never possible. I doubt that even the company that makes that MDM could or would help since that would be a serious violation of security.


Stay safe, and best regards.

6 replies
Question marked as Top-ranking reply

Sep 6, 2024 8:43 AM in response to viktoriiahryshko

Sorry but again, there is nothing Apple nor anyone else can do about this. Only the organization that installed the MDM can help. If they cannot or will not, then those systems are now useless. I understand the need and frustration, but that's how those sorts of systems are designed, to control the Mac and keep it secure, so removal outside of the MDM is almost never possible. I doubt that even the company that makes that MDM could or would help since that would be a serious violation of security.


Stay safe, and best regards.

Sep 6, 2024 7:05 AM in response to viktoriiahryshko

I have recently received a MacBook that is currently enrolled in the Device Enrollment Program (DEP) and is managed through an MDM profile by Idaho National Laboratory. However, I have no affiliation with this organization and am having difficulties removing the MDM profile from my device.

Is there any way to remove the device from DEP and disable the MDM profile without the involvement of the original managing organization?

No, there is not. You need to contact the person/vendor from whom you received the Mac, and they need to have the organization unenroll the device from MDM. The whole point of MDM is device management and protection from unauthorized use. If the Mac was properly prepared for transfer by the owner for an authorized disposition, MDM would have been removed.


It is possible to obtain Apple's assistance in removing MDM but only if you can prove that you are the original owner of the device (i.e., you need to provide proof of purchase showing your name and the device's serial number). Since you 'received' this Mac, presumably you will not be able to do that.

Sep 6, 2024 7:45 AM in response to viktoriiahryshko

It's quite possible that this Mac is stolen property. In any case, as neuroanatomist said, without the cooperation of the organization that installed the MDM, there's nothing you can do. Return the Mac to the place or person you got it from, and they cannot or are unwilling to get the MDM removed, then if you paid anything for it, get your money back. The Mac is useless to you as it is now.


Regards.

Sep 6, 2024 7:52 AM in response to viktoriiahryshko

I would like to clarify that the organization that sent us these MacBooks as part of humanitarian aid was not aware that MDM profiles were installed on the devices. We have already had to block two of the MacBooks due to this issue.


Interestingly, we have found that if we use macOS Ventura or earlier versions, the MDM profile is not automatically installed, and the devices function properly. However, with the latest macOS updates, the profiles get re-installed, causing restrictions.

Sep 6, 2024 7:49 AM in response to neuroanatomist

Thank you for your responses.


I understand that the MDM profile was set up by Idaho National Laboratory, and removing it without their cooperation is not possible. However, I want to clarify that this MacBook was provided to me as part of humanitarian aid sent to Ukraine, and I have no affiliation with Idaho National Laboratory or their MDM system.


Unfortunately, I am unable to contact the organization that set up the MDM profile, and they are not responding to my requests. Is there any way Apple can assist in this case, given that I did not acquire this device through a standard purchase, but rather through aid efforts?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Need Assistance with Removing MDM Profile and DEP Enrollment

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.