If a device fails to enroll in JumpCloud MDM, there are two common causes:<\/p>\n\n\n\n
- \n
- It is still enrolled with another MDM provider.<\/li>\n\n\n\n
- Or there are remnants of the previous MDM provider on the device. <\/li>\n<\/ul>\n\n\n\n
When users try to enroll in JumpCloud MDM via the User Portal and enrollment fails, the following error may appear: The device is already being managed by an organization.<\/strong>
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/windows_mdm_your_device_is_already_being_managed_by_an_organization_error.png\")
<\/p>\n\n\n\nYou can use JumpCloud Commands or the JumpCloud PowerShell Module to check the MDM enrollment status of your devices.<\/p>\n\n\n\n
Using JumpCloud Commands to Confirm Enrollment<\/h2>\n\n\n\n
If the device has the JumpCloud Agent installed, you can use the following command to check the status of a specific device.<\/p>\n\n\n\n
To check the device\u2019s enrollment status using JumpCloud Commands<\/strong>:<\/p>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to DEVICE MANAGEMEN<\/strong>T > Commands<\/strong>. <\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nFor more information on commands in JumpCloud, see Get Started: JumpCloud Commands<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click (+<\/strong>), then click Command<\/strong> to create a new command. The Details tab for the new command displays.\n
- \n
- In the Type<\/strong> field, click Windows<\/strong>. <\/li>\n\n\n\n
- Select Windows PowerShell<\/strong>.<\/li>\n\n\n\n
- In the Command<\/strong> field, paste the following:
get-jcsystem -hostname Workbox | select-object mdm<\/code><\/li>\n\n\n\n- Select the Devices<\/strong> tab. Select one or more devices where you want to apply this command.<\/li>\n\n\n\n
- Click Save<\/strong>. <\/li>\n<\/ol>\n<\/li>\n\n\n\n
- From your list of commands, run the newly created command on the affected device by clicking Run Now<\/strong>. <\/li>\n\n\n\n
- Go to the Results <\/strong>tab and click view<\/strong>. Locate the vendor value in the results.<\/li>\n<\/ol>\n\n\n\n
In the following example, the vendor is Internal<\/strong>, meaning that this device has successfully enrolled in JumpCloud MDM. If the Vendor is None<\/strong> there is no detected MDM provider on this device. If the vendor value is External<\/strong>, that means another MDM provider has been detected on the system.<\/p>\n\n\n\n
\nmdm
—
@{vendor=internal<\/strong>; profileIdentifier=; dep=; userApproved=; enrollmentType=unknown; enrollmentAttempts=0; createdAt=2024-04-05T16:47:49.026Z; prov…<\/p>\n<\/div><\/div>\n\n\n\nUsing the PowerShell Module to Confirm Enrollment <\/h2>\n\n\n\n
You can also use the JumpCloud PowerShell Module to check the enrollment status of all of your devices in JumpCloud. <\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nSee Installing the JumpCloud PowerShell Module<\/a> to learn how to install and run the PowerShell Module.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To use the PowerShell Module to check enrollment status: <\/p>\n\n\n\n
- \n
- Run the following command in the PowerShell Module:<\/li>\n<\/ol>\n\n\n\n\n
$SystemMDMStatus = Get-JCSystem
foreach ($system in $SystemMDMStatus) {
$MDMStatus = $system.mdm.vendor
if ($system.hostname -ne $null) {
$Provider = $system.mdm.providerID
$hostname = $system.hostname
write-host “$hostname, $MDMStatus, $Provider”
}
}<\/p>\n<\/div><\/div>\n\n\n\n- \n
- Check the $MDMStatus<\/kbd> and $Provider<\/kbd> values in the command results:\n
- \n
- If the device is enrolled with another MDM provider, follow the vendor\u2019s specified steps to unenroll the device. <\/li>\n\n\n\n
- If the device was unenrolled but it is still detected as an enrolled device, we recommend you contact the vendor for assistance with removing the remnants of the previous MDM enrollment.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/div><\/div><\/div>\n\n\n\nHow do I manually remove Windows MDM using PowerShell?<\/a>\n
There are times when a Windows device enrollment in JumpCloud MDM can\u2019t be removed by normal methods, such as when the device is still linked with a previous MDM provider. When normal MDM removal methods don\u2019t work, you can run the JumpCloud_MDM_Removal script to manually locate and remove an MDM profile.<\/p>\n\n\n\n
Considerations<\/strong>:<\/p>\n\n\n\n
- \n
- The MDM removal script can run either remotely (from the JumpCloud Admin Portal) or locally without user intervention. <\/li>\n\n\n\n
- The script locates existing MDM Enrollment IDs in the HKLM:\\SOFTWARE\\Microsoft\\Enrollments<\/kbd> location of the registry then removes all other keys related to the MDM enrollment.<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong>:<\/p>\n\n\n\n
- Check the $MDMStatus<\/kbd> and $Provider<\/kbd> values in the command results:\n
- Select Windows PowerShell<\/strong>.<\/li>\n\n\n\n
- In the Type<\/strong> field, click Windows<\/strong>. <\/li>\n\n\n\n
- Go to DEVICE MANAGEMEN<\/strong>T > Commands<\/strong>. <\/li>\n<\/ol>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/mdm_removal_script_jumpcloud_command.png\")
<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/08\/mdm_removal_script_powershell_results.png\")
<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/div><\/div><\/div>\n\n\n\n