{"id":75056,"date":"2023-06-05T13:09:02","date_gmt":"2023-06-05T17:09:02","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=75056"},"modified":"2024-03-25T15:17:44","modified_gmt":"2024-03-25T19:17:44","slug":"un-enroll-devices-from-mdm","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/un-enroll-devices-from-mdm","title":{"rendered":"Un-Enroll Devices from MDM"},"content":{"rendered":"\n
This article discusses how to un-enroll individual devices from JumpCloud MDM and how to remove JumpCloud MDM from an organization, which will un-enroll all devices in the organization.<\/p>\n\n\n\n
<\/p><\/div>
Removing the JumpCloud MDM Enrollment Policy from a device does not<\/strong> remove the enrollment profile.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> If the device is subject to the MDM Enrollment Policy, removing the profile manually or via command will not be permanent. The device will receive the MDM profile again once the agent checks in again. However, this profile will not be auto-approved. If the device is to remain un-enrolled, the JumpCloud MDM Enrollment policy will need to be unbound from the device.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n There are two ways to remove the MDM configuration from a device: via the JumpCloud API, or directly on the device via System Settings (System Preferences on macOS 12 and earlier).<\/p>\n\n\n\n You can remove the MDM configuration from a device using the JumpCloud V2 API. See JumpCloud V2 API Docs<\/a>.<\/p>\n\n\n\n You’ll need 3 values to complete this method:<\/p>\n\n\n\n To gather the required values and remove the JumpCloud MDM Enrollment Profile from a device via the API<\/strong>:<\/p>\n\n\n\n curl https:\/\/console.jumpcloud.com\/api\/v2\/applemdms \\ <\/p><\/div> The MDM ID<\/strong> is the value in quotes after [{“id”:”<\/strong> curl -X DELETE https:\/\/console.jumpcloud.com\/api\/v2\/applemdms\/INSERT_MDM_ID_HERE<\/strong>\/devices\/INSERT_MDM_DEVICE_ID_HERE<\/strong> \\ You can remove the MDM configuration manually on a device from System Settings<\/strong> (macOS 13 Ventura and newer) or System Preferences<\/strong> (macOS 12 Monterey and prior).<\/p>\n\n\n\n <\/p><\/div> This method works only for devices that are user enrolled. See Add Company-Owned Apple Devices to MDM with Device Enrollment<\/a>. <\/p>\n\n\n\n Devices enrolled with Apple’s Automated Device Enrollment (ADE) cannot be removed using the following method. ADE devices must be removed either via the API, or by deleting the device from JumpCloud entirely (which also removes the JumpCloud Agent).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n To remove the enrollment profile on macOS 13 Ventura and later<\/strong>:<\/p>\n\n\n\n To remove the enrollment profile on macOS 12 Monterey and earlier<\/strong>:<\/p>\n\n\n\n Considerations<\/strong>:<\/p>\n\n\n\n Removing the MDM Configuration will result in loss of access to MDM features, including:<\/p>\n\n\n\n <\/p><\/div> This will remove the JumpCloud MDM profile from ALL devices in the organization! <\/strong>Deleting the MDM Configuration from your organization will bulk un-enroll ALL<\/strong> devices at their next check-in with JumpCloud. <\/p>\n\n\n\n <\/p>\n\n\n\n To remove a single device from MDM, follow the steps above<\/a> for removing the MDM profile from an individual device.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\nRemoving the MDM Configuration from a Device<\/h2>\n\n\n\n
Via JumpCloud API<\/h3>\n\n\n\n
\n
\n
-H ‘accept: application\/json’ \\
-H ‘content-type: application\/json’ \\
-H ‘x-api-key: INSERT_API_KEY_HERE<\/strong>‘<\/p>\n<\/div><\/div>\n\n\n\n
<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n\n
\n
-H ‘accept: application\/json’ \\
-H ‘x-api-key: INSERT_API_KEY_HERE<\/strong>‘<\/p>\n<\/div><\/div>\n\n\n\n\n
Via System Settings or System Preferences <\/h3>\n\n\n\n
\n
\n
Removing the MDM Configuration from an Organization <\/h2>\n\n\n\n
\n