Meraki Offboarding Process

[_aDiedericks]

Hi there,

When a MacOS device is decommissioned what is the process and flow for removing Meraki completely from that device.
For example:
1. If the device is enrolled in Apple Business Manager, remove MDM and release device
2. How do we remove the Meraki agent and stop it from redeploying (remotely)
3. How do we remove the profiles (remotely)
4. Not necessary but would be great to be able to wipe the device as well with profile and agent removed

[Bettencourt]

Check out https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Mana...

[_aDiedericks]

@Bettencourt That is the method we're already using. It causes that some devices after offboarded and deleted re-appear as Unknown in the dashboard and takes up a license.

Is there any method of removing the profiles and systems manager remotely?

[Jeffrey_Lane]

Please note that if these are Apple devices they may be assigned to the meraki system in Apple School/Business Manager.  The devices need to be unassigned in Apple or removed from apple school manager or they will again receive the MDM.  After the device is removed from Apple School/Business Manager, it can be Restored - or have a fresh OS installed leaving no vestige of MDM.

[Bettencourt]

If you no longer have physical access to the device and need to remove the agent, remote commands similar to the following may be used. Please note you are deleting files and executing commands at your risk.

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist
rm -f /Library/Application Support/Meraki/m_agent /Library/Application Support/Meraki/m_agent_upgrade
rm -rf '/Library/Application Support/Meraki/'
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist

or

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist && 
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist && 
rm -rf "/Library/Application Support/Meraki/" && 
rm -rf “/usr/local/sbin/Meraki/“ && 
rm -f /usr/local/sbin/m_agent*

[BlakeRichardson · Accepted solution]

@_aDiedericks 

The process we follow if we are disposing of a device is.

1. Remove it from DEP.

2 Erase and install fresh copy of MacOS.

3. Remove from Meraki dashboard.

I don't see that point in just removing the profiles and agent, if you are getting rid of the device then fully erasing the disk is the most secure option as it removes the potential to accidentally leave files on the device.