How to remove a Automated Device Enrollment profile from macOS

user_627644 0
Viewed 2404

First, show the profiles I have.

sudo profiles show -type enrollment

Second，remove all the profiles

sudo profiles remove -all

An error occurs:

profiles: There are profiles installed that marked non-removable
mdm profile macos
1 Answers

I found an answer here. https://graffino.com/til/UmkCdmEx7v-remove-a-non-removable-mdm-profile-from-macos-without-a-complete-wipe

  1. Boot the Mac into Recovery Mode (hold down command+R during startup).
  2. Go to the Utilities menu and open Terminal and type: csrutil disable. This will disable SIP (System Integrity Protection).
  3. Reboot into the OS.
  4. Open the integrated terminal and type:
cd /var/db/ConfigurationProfiles
rm -rf *
mkdir Settings
touch Settings/.profilesAreInstalled
  1. Reboot.
  2. Boot the Mac into Recovery Mode (hold down command+R during startup).
  3. Go to the Utilities menu and open Terminal and type: csrutil enable. This will re-enable SIP.
  4. Reboot into the OS.
user_6276440
Related