Remove MDM from MacBook Pro: Full Guide

This guide walks you through removing Mobile Device Management (MDM) from a MacBook Pro. MDM is a profile that organizations use to manage and secure devices. You can remove it if you own the MacBook or if your organization has released it. The steps depend on whether the Mac is enrolled in Apple Business Manager or Apple School Manager, and whether the MDM profile is user-installed or part of the automated enrollment. You’ll need administrator access to the Mac and, in some cases, the organization’s approval.

What You’ll Need

Administrator username and password for the MacBook Pro.
If the Mac is enrolled in Apple Business Manager or Apple School Manager, you need the organization to release the device from their MDM server and remove it from their Apple portal.
For macOS Ventura or later, you may need to erase the Mac and set it up again to fully clear the MDM enrollment.

Step-by-Step

Check if MDM is installed. Go to System Settings (or System Preferences on older macOS) > General > Device Management (or Profiles). If an MDM profile appears, note the server name. If it says “Remote Management,” that’s also MDM.
Determine the enrollment type. If the profile is listed under “Device Management” and you can see a “Remove” button next to it, it’s a user-installed profile. If there is no Remove button, it’s likely part of Automated Device Enrollment (DEP) and requires a different approach.
For user-installed profiles: Click the profile, then click Remove (or the minus sign). Enter your administrator password if prompted. The profile will be removed immediately, and MDM will no longer manage the Mac.
For automated enrollment (DEP): If you own the Mac and it’s not stolen, contact your organization’s IT department and ask them to release the device from their MDM server and remove it from Apple Business Manager or Apple School Manager. They must do this for the Mac to be fully unenrolled.
If you are the organization’s admin: Log in to Apple Business Manager (or Apple School Manager) > Devices > select the MacBook Pro > click Release. Then, on your MDM server (e.g., Jamf, Mosyle, Kandji), delete the device record and remove the enrollment profile.
After the organization releases the device: On the Mac, go to System Settings > General > Device Management. If the profile is still there, click Remove. If it’s not removable, you’ll need to erase the Mac.
Erase the Mac (if needed): Back up your data, then restart the Mac and hold Command + R to enter Recovery Mode. Use Disk Utility to erase the startup disk (APFS or Mac OS Extended), then reinstall macOS. After installation, the Mac will show a “Remote Management” screen during setup. If the device has been released, you can skip this screen; if not, you cannot proceed without the organization’s credentials.
If you cannot skip the Remote Management screen: The Mac is still tied to the organization. You must contact them to release it. There is no legitimate way to bypass this lock without the organization’s consent.

Common Mistakes

Assuming all MDM profiles can be removed from the Mac. If the profile is part of automated enrollment, it will reappear after a restart unless the device is released from the MDM server.
Erasing the Mac without backing up. Erasing removes all data, so always back up first.
Trying to bypass the Remote Management screen with terminal commands. These methods are unreliable and may be considered a security bypass, which is not recommended and may be illegal in some jurisdictions.
Not contacting the organization for a used Mac. If you bought a used MacBook Pro that is still enrolled, you need the original owner or organization to release it.

Tips

Before buying a used MacBook Pro, check for MDM enrollment in the System Settings as described above. If it’s enrolled, ask the seller to release it before purchase.
If you are an IT admin, always remove the device from Apple Business Manager before wiping the Mac to avoid activation lock issues.
After removing MDM, restart the Mac and check Device Management again to confirm the profile is gone.
If you’re removing MDM from a personal Mac that was previously managed by a school or employer, make sure you have written confirmation that the device is released.

Troubleshooting

Profile won’t remove: If the Remove button is grayed out, the profile is managed. You need to contact the MDM administrator to unmanage the device.
Mac still shows “Remote Management” after erasing: This means the device is still in Apple Business Manager. The organization must release it. Without that, you cannot proceed.
MDM profile reappears after restart: The device is still enrolled in automated enrollment. The profile will be reinstalled from the MDM server. You must release the device from the MDM server.
Can’t find Device Management: On macOS Catalina or earlier, it’s under System Preferences > Profiles. If you don’t see it, MDM may not be installed.
Forgot administrator password: You cannot remove MDM without admin rights. You’ll need to reset the password using Apple ID or Recovery Mode, but that may not work if MDM blocks the reset.

Frequently Asked Questions

Can I remove MDM from a MacBook Pro without the organization’s help?

Only if the profile is user-installed. If it’s part of automated enrollment, you need the organization to release the device from their MDM server and Apple Business Manager.

Will erasing my Mac remove MDM?

Erasing the Mac removes the local profile, but if the device is still in Apple Business Manager, the MDM profile will be reinstalled during setup. You must release the device first.

I bought a used MacBook Pro that is MDM-enrolled. What should I do?

Contact the seller and ask them to release the device from their MDM server and Apple Business Manager. If they can’t or won’t, the Mac is likely locked and unusable for you.

Is it legal to bypass MDM?

Bypassing MDM on a device you don’t own or without authorization may be illegal and is considered a security bypass. Always get the owner’s consent.

How do I know if my MacBook Pro is enrolled in MDM?

Go to System Settings > General > Device Management. If you see a profile there, it’s enrolled. Also, during setup, if you see a “Remote Management” screen, it’s enrolled.

What is the difference between MDM and Apple Business Manager?

Apple Business Manager is a portal for managing devices and app licenses. MDM is the software that enforces policies on the device. The two work together: ABM assigns the device to an MDM server.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →