Remove device from DEP

[VadimK]

Hi everyone,

There's a DEP-enrolled supervised device that now needs to used for iOS development.

The question is how to unsupervise the device, so that it can be used for development. 

Would it be suffice just to remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset or do we need remove the device from DEP altogether on Apple's portal?

[BrechtSchamp]

It's probably enough to just unenroll it from Systems Manager. Use the Unenroll button on the device's status page. You might need to remove the profile manually from the iPad.

Instructions here:

https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Mana...

This way the device is still company owned and can always be brought in again. Once you remove DEP from a device you can't put it back on, so try to avoid that (you could do it manually with Apple Configurator though).

[VadimK]

The device has been supervised with DEP, so the profile is not removable.

[BrechtSchamp]

And it doesn't get removed automatically when you press the unenroll button in the client status page?

Also, what limitations are you running into that make that the device can't be used for development while being under supervision?

[VadimK]

It cannot be paired. Xcode says to unlock it and choose to trust this computer when prompted, but there's no prompt.

[BrechtSchamp]

Not sure if that's caused by the systems manager supervision. Here's a topic describing the same issue:

https://discussions.apple.com/thread/7674269

Could you give the instructions in that topic a try?

[beks88]

Do you still want to see it in SM?

There are several options, depends on your desired workflow (just to mention two :)):

 - You could just unassign the device from SM on business.apple.com

 - You could create an own scope for development, create a seperate DEP profile and a seperate push profile without any restrictions.

This issue could be related to the restriction "do not allow pairing" or maybe it's just the typical weird behavior from XCode, I face this issue sometimes with my private iPhone.

[T1 · Accepted solution]

remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset

This is sufficient, we do it all the time with devices temporarily used by Marketing teams at conferences etc. We only remove (or disown as Apple puts it) devices from Apple business portal when they are written off or replaced under warranty to keep it clean.

[T1]

remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset

This is sufficient, we do it all the time with devices temporarily used by Marketing teams at conferences etc. We only remove (or disown as Apple puts it) devices from Apple business portal when they are written off or replaced under warranty to keep it clean.

[jared_f]

Do you plan on using this iPhone in production in the future and would want it to be in DEP? To make your life easier, I would just remove the device from the DEP profile in Meraki. You need to do this prior to doing a factory reset -- the DEP configuration comes down once the device is activated (once you start setup).

Another option is to remove it from the DEP scope and then remove it from Apple Business/School Manager by either (a) removing it from scope of the Meraki server or (b) fully removing it from DEP.