Remotely remove management profile on macOS

[jdog]

I was wondering how I can remotely remove the Meraki management profile from a macOS device?

The profile is set to be not removable by the user. Selective Wipe only removed the custom profiles, but not the "Meraki Management" profile. I'd like to completely remove this device from management without having to restore the device to factory default.

Thanks!

[BlakeRichardson]

This can be done via the command line if you really get stuck. 

Some useful commands
List configuration profile information for the computer (Computer Level)

/usr/bin/profiles -C

List configuration profile information for a particular user, or the current user if no Username was specified (User Level)

/usr/bin/profiles -L

List configuration profile information for everyone.

/usr/bin/profiles -P

Remove a Computer Level Configuration Profile from Command Line
1) List the computer level config profiles with their Identifier ```
/usr/bin/profiles profiles -C

2) Remove using profiles -R -p [identifier]

/usr/bin/profiles -R -p XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

[jdog]

Thanks for the suggestion. This worked when I tried on a Mac that wasn't enrolled in DEP, but didn't work when I tried on two other Macs that are on DEP. The error I get is:

profiles remove for identifier:'com.meraki.sm.mdm' and user:'root' returned 101 (Profile is not removable.)

Perhaps it's impossible to remove it? 😢

[BlakeRichardson]

@jdog if you select unenroll device from the command menu in the Systems Manager does that work?

[jdog]

Unfortunately not. It says "No unenroll eligible devices".