Cannot remove MDM profile from iPhone after removal from Intune

Question

Cannot remove MDM profile from iPhone after removal from Intune

Anon Account 31

I have a corporate issued iPhone that's controlled by a MDM profile via Intune. The company agreed to remove the MDM profile to let me have the phone as a personal device. They said they removed the phone from Intune. However, the MDM profile is still there. There's no option to delete it. I've tried the following:

Remove all managed apps and rebooted: MDM still there
Erase iPhone and restore from backup: MDM still there
Erase iPhone and use as new device: No MDM!

How can I remove MDM but still keep my existing data? The company hasn't done this before so they may have hit the wrong button. What should they do in Intune?

Accepted answer

3 additional answers

Your answer

Answer 1

@Anon Account Thanks for your update. From the information you provided, the iPhone is an ADE enrollment device.

For ADE enrollment device, if the IT configure the setting "Locked enrollment" to "Yes" in the Apple enrollment profile, we can't remove MDM management profile manually in the iPhone.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios#create-an-apple-enrollment-profile

If we want to we want to completely remove an ADE device from management by Intune, it is needed to unsigned the device in Apple Business Manager.
https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#retire-an-apple-ade-device-from-intune

Hope it will help.

Answer 2

@Anon Account Thanks for posting in our Q&A. From your description, did you mean that the iPhone is removed from intune, but the MDM management profile still exists in the device? If there is anything misunderstanding, please correct me.

To clarify this issue, we appreciate your help to collect some information:

Which method did you use to enroll the iPhone before?
From your description, I know that it is said that they removed the iPhone from Intune. Please make sure the iPhone doesn't show in the intune portal.
Could you please try to remove the MDM management profile in Settings > General > Device management > Mangement Profile? If the profile is removed, the device is not managed by intune.

For removing MDM, we usually use retire or wipe action. The wipe action restores a device to its factory default settings and it doesn't keep data. The retire action removes managed app data, settings, and email profiles that were assigned by using Intune, but it will leave the user's personal data on the device.
https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe

If there is anything update, feel free to let us know.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Anon Account 31 Reputation points

2022-01-20T17:23:15.857+00:00

did you mean that the iPhone is removed from intune, but the MDM management profile still exists in the device?

Yes. The IT department says they removed my iPhone from InTune. However, the MDM profile still exists and there's no option to remove it from iOS Settings-->Management Profile. Likely it is locked to the device. This was a corporate phone that they are letting me have as a personal device.

Perhaps the IT guy deleted the device from InTune instead of calling Retire. They haven't done this before. Maybe made a mistake.

Is there a way to remove MDM directly from Apple Business Manager? Or should I re-enroll my iPhone, then call Retire to remove MDM.

Thanks very much for your help.
Shane Wheeles 0 Reputation points

2023-04-17T17:26:22.6+00:00

Hi, I’m having this problem where after the device was removed by my mdm manger, the device after reset is still showing that it is a managed device. Is there any help for this?

Answer 3

Bella Gorden 0

In the Settings of your iPhone, you can check whether your device is still restricted to the MDM. Erasing all data and content on your device can delete the MDM profile when there is no option to remove MDM profile. If you choose the Restore from iCloud option on the device setup screen, the MDM profile will come back to your device. If you don't want to lose any data on your device, you can use an MDM removal.

Vasilev, Filip 0 Reputation points

2024-09-16T15:01:19.3833333+00:00

The problem is you can't access the settings when the phone is reset. The MDM message pops up every time you start the phone

Answer 4

Yvonne Xio 0

The MDM profile can persist even after being removed from the Intune portal if the device is still enrolled in the MDM system, potentially due to "Locked enrollment" settings configured by the IT administrator.

You can contact the IT administrator or the organization that enrolled the device in Intune. They need to verify that the device is fully removed from their system. Alternatively, you can choose to remove MDM, which is easier and will not cause data loss.

Share via

Cannot remove MDM profile from iPhone after removal from Intune

3 additional answers

Your answer