Un-Enroll Devices from MDM (2024)

This article discusses how to un-enroll individual devices from JumpCloud MDM and how to remove JumpCloud MDM from an organization, which will un-enroll all devices in the organization.

Removing the MDM Configuration from a Device

There are two ways to remove the MDM configuration from a device: via the JumpCloud API, or directly on the device via System Settings (System Preferences on macOS 12 and earlier).

Via JumpCloud API

You can remove the MDM configuration from a device using the JumpCloud V2 API. See JumpCloud V2 API Docs.

You'll need 3 values to complete this method:

• JumpCloud API Key
• MDM ID – this is the identifier of your organization’s MDM configuration.
• MDM Device ID – this is the identifier unique to each device enrolled in MDM.

To gather the required values and remove the JumpCloud MDM Enrollment Profile from a device via the API:

1. Obtain your API key from the JumpCloud Admin Portal. See Obtaining Your API Key.
2. In the macOS Terminal, insert your API key into the command below and run it to gather your MDM ID:

3. Next, obtain the MDM Device ID:
   1. Log in to theJumpCloud Admin Portal.
   2. Go toDEVICE MANAGEMENT > Devices.
   3. Click the desired device from the Devices list.
   4. Go to the Insights tab and scroll down to Device Info.
   5. Copy the JumpCloud MDM ID.
4. Now you can remove MDM enrollment for the specified device by launching the macOS Terminal and inserting the gathered values into the following command:

5. Restart the device to ensure removal of the JumpCloud MDM enrollment profile.

Via System Settings or System Preferences

You can remove the MDM configuration manually on a device from System Settings (macOS 13 Ventura and newer) or System Preferences (macOS 12 Monterey and prior).

To remove the enrollment profile on macOS 13 Ventura and later:

1. Go toSystem Settings>Privacy and Security>Profilesto view the MDM Enrollment profile.
2. As an admin user on the device, select the MDM Enrollment Profile in the list and click the “–” button to remove it.

To remove the enrollment profile on macOS 12 Monterey and earlier:

1. Go to System Preferences>Profilesto view the MDM Enrollment profile.
2. As an admin user on the device, select the MDM Enrollment Profile in the list and click the “–” button to remove it.

Removing the MDM Configuration from an Organization

Considerations:

Removing the MDM Configuration will result in loss of access to MDM features, including:

• Security Commands
• Patch Management

1. Log in to the JumpCloud Admin Portal.
2. Go toDEVICE MANAGEMENT > MDMin the left menu.
3. Click theDeletebutton underMDM Configuration.
4. To confirm, enter the amount of macOS and iOS devices that will be removed from MDM management.
5. Click Delete MDM Configuration.

Back to Top