Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iHavequestions

macrumors 6502
Original poster
Oct 23, 2011
279
15
I have an 2019 Macbook Pro that the company gave me when I got laid off but I realized they still have rights on my computer. Is there any way to remove them from the profiles so they can't control or monitor my computer anymore? I tried to wipe it but that didn't work. I wonder if I overwrite with another computer's time machine backup, if that would work. If not, then what else would work? I don't want to have to go back to the company for this.
 

Significant1

macrumors 68000
Dec 20, 2014
1,686
780
I think you have to contact them and ask them to deregister the computer. There was a similar thread about it and it will keep coming back no matter what you do, if I recall correctly, just like a computer registered to an appleid also should be deregistered when sold second hand. Also what good would it be, if you could easily remove it.
 
  • Like
Reactions: ignatius345

iHavequestions

macrumors 6502
Original poster
Oct 23, 2011
279
15
I think you have to contact them and ask them to deregister the computer. There was a similar thread about it and it will keep coming back no matter what you do, if I recall correctly, just like a computer registered to an appleid also should be deregistered when sold second hand.
We didn't end on great terms so I'm trying to avoid that. Any other way?
 

Significant1

macrumors 68000
Dec 20, 2014
1,686
780
We didn't end on great terms so I'm trying to avoid that. Any other way?
Ok, but it is meant to lock down the machine, like Apples find my device network, so I am afraid not. But hopefully someone with more insight and experience on it will chime in.
 

deeddawg

macrumors G5
Jun 14, 2010
12,468
6,571
US
I wonder if that means they can monitor my computer anytime, even now that I've left.
Maybe, maybe not. Depends on the details of the MDM software and setup. Typically any monitoring is related to what software used and machine configuration rather than someone watching every keystroke.

Generally speaking though - corporate IT department personnel have better things to do than watch the activities of a random former employee.

I don't want to have to go back to the company for this.
You're going to need to get the company's MDM admin to remove the computer as I understand things. Doesn't matter what the situation of your departure was, the point of MDMs is that the end user cannot remove it themselves.
 
Last edited:

MAYBL8R

macrumors member
Jun 5, 2007
36
1
Your former company will need to release the machine from the MDM, there is no other way around it.

Even if you attempt to reimage the MDM will kick in and apply any policies within the group that it resides.
 
  • Like
Reactions: Queen6

Metrosey

macrumors 6502a
Oct 18, 2019
729
905
I have an 2019 Macbook Pro that the company gave me when I got laid off but I realized they still have rights on my computer. Is there any way to remove them from the profiles so they can't control or monitor my computer anymore? I tried to wipe it but that didn't work. I wonder if I overwrite with another computer's time machine backup, if that would work. If not, then what else would work? I don't want to have to go back to the company for this.
Gave or didn’t hand back? The MDM may disable the device if it does not connect to the organisation domain (lost mode), which might prompt a wipe and lock. There are likely ways to remove it, but the device isn’t your own it seems, so doing those actions would be illegal.
 
  • Haha
Reactions: Burnincoco

deeddawg

macrumors G5
Jun 14, 2010
12,468
6,571
US
Gave or didn’t hand back?

If it were truly given, then the corporate IT department wouldn't care if the OP had a falling out with their manager. The folks managing the MDM, upon finding out the computer appropriately no longer belonged to the company, would be fine to remove it from their MDM.

... now if it wasn't officially given to the OP, well... there's a reason MDMs aren't supposed to be removed by the end user.
 

DJLC

macrumors 6502a
Jul 17, 2005
959
404
North Carolina
The correct and legal way: ask the company's IT department to release it from MDM and release it from the Apple Device Enrollment Program.

The hacky workaround: Boot up into single user mode by holding Cmd-S at boot. Mount the local drive writable with the command mount -uw /. Remove the configuration profiles with the command rm -rf /var/db/ConfigurationProfiles/*. Finally, reboot. Your mileage may vary, but this used to work last time I tried. Note that reinstalling the OS will result in the profiles being reinstalled as well.
 

diggy33

macrumors 65816
Aug 13, 2011
1,328
2,133
Northern Virginia
I'm skeptical of anyone that says their company "gave" them a machine and didnt remove it from their MDM, much less ensure that corporate data was removed. We've had users at my company try and hold on to their machines after they leave, and this is why I do not remove a device from the MDM without ensuring it has been received at our Help Desk. I am quick to put a lock code on a machine if I see it checking in to the server
 
  • Like
Reactions: KurtWilde

iHavequestions

macrumors 6502
Original poster
Oct 23, 2011
279
15
Thanks all. I'll go that route, just wanted to avoid going back to the company but will do.
 
Last edited:

Metrosey

macrumors 6502a
Oct 18, 2019
729
905
Thanks all. I'll go that route, just wanted to avoid going back to the company but will do.
Well only you will know the truth on how you have it, but do keep in mind, unless written down to state it is now your device, it is still the property of the organisation. Therefore, any attempt to remove software used to control the management and security of the device will likely be illegal and could be detected by the organisation.
 

macguru9999

macrumors 6502a
Aug 9, 2006
817
387
The MDM only comes up when you install a clean system, or keep the original one. If you have another mac, and clone a compatible, working system from that by cloning the drive, booting off that, and cloning it onto the problem mac, then the company will not have access.
 

iHavequestions

macrumors 6502
Original poster
Oct 23, 2011
279
15
The MDM only comes up when you install a clean system, or keep the original one. If you have another mac, and clone a compatible, working system from that by cloning the drive, booting off that, and cloning it onto the problem mac, then the company will not have access.
Turns out, this isn't true. They can block booting off of an external HD.
 

anshuvorty

macrumors 68040
Sep 1, 2010
3,482
5,146
California, USA
I think you have to contact them and ask them to deregister the computer. There was a similar thread about it and it will keep coming back no matter what you do, if I recall correctly, just like a computer registered to an appleid also should be deregistered when sold second hand. Also what good would it be, if you could easily remove it.
This....there is a reason why it is called "device management." What good would a device management software be if the user can easily remove it? You might as well just call it device supervision instead of device management.
 

MBAir2010

macrumors 604
May 30, 2018
6,975
6,354
there
We didn't end on great terms so I'm trying to avoid that. Any other way?
i was wondering about this when i read the headline
any advice they would give that included shoving the macbook up somewhere
where sun does not shine would be ill advised!
what you might have success with is reboot press down the option and reinstall brand new.
if you have files you want, just copy this eon a external drive.

hope this works!
 

anshuvorty

macrumors 68040
Sep 1, 2010
3,482
5,146
California, USA
i was wondering about this when i read the headline
any advice they would give that included shoving the macbook up somewhere
where sun does not shine would be ill advised!
what you might have success with is reboot press down the option and reinstall brand new.
if you have files you want, just copy this eon a external drive.

hope this works!
I doubt this will work.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.