Meraki Offboarding Process

Solved
_aDiedericks
Getting noticed

Meraki Offboarding Process

Hi there,

When a MacOS device is decommissioned what is the process and flow for removing Meraki completely from that device.
For example:
1. If the device is enrolled in Apple Business Manager, remove MDM and release device
2. How do we remove the Meraki agent and stop it from redeploying (remotely)
3. How do we remove the profiles (remotely)
4. Not necessary but would be great to be able to wipe the device as well with profile and agent removed


1 Accepted Solution
BlakeRichardson
Kind of a big deal
Kind of a big deal

@_aDiedericks 

 

The process we follow if we are disposing of a device is.

 

1. Remove it from DEP.

2 Erase and install fresh copy of MacOS.

3. Remove from Meraki dashboard.

 

I don't see that point in just removing the profiles and agent, if you are getting rid of the device then fully erasing the disk is the most secure option as it removes the potential to accidentally leave files on the device.

View solution in original post

5 Replies 5
_aDiedericks
Getting noticed

@Bettencourt That is the method we're already using. It causes that some devices after offboarded and deleted re-appear as Unknown in the dashboard and takes up a license.

Is there any method of removing the profiles and systems manager remotely?

Please note that if these are Apple devices they may be assigned to the meraki system in Apple School/Business Manager.  The devices need to be unassigned in Apple or removed from apple school manager or they will again receive the MDM.  After the device is removed from Apple School/Business Manager, it can be Restored - or have a fresh OS installed leaving no vestige of MDM.

Bettencourt
Meraki Employee
Meraki Employee

If you no longer have physical access to the device and need to remove the agent, remote commands similar to the following may be used. Please note you are deleting files and executing commands at your risk.

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist
rm -f /Library/Application Support/Meraki/m_agent /Library/Application Support/Meraki/m_agent_upgrade
rm -rf '/Library/Application Support/Meraki/'
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist

or

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist &&
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist &&
rm -rf "/Library/Application Support/Meraki/" &&
rm -rf “/usr/local/sbin/Meraki/“ &&
rm -f /usr/local/sbin/m_agent*
BlakeRichardson
Kind of a big deal
Kind of a big deal

@_aDiedericks 

 

The process we follow if we are disposing of a device is.

 

1. Remove it from DEP.

2 Erase and install fresh copy of MacOS.

3. Remove from Meraki dashboard.

 

I don't see that point in just removing the profiles and agent, if you are getting rid of the device then fully erasing the disk is the most secure option as it removes the potential to accidentally leave files on the device.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels