Remove device from DEP

Solved
VadimK
Conversationalist

Remove device from DEP

Hi everyone,

 

There's a DEP-enrolled supervised device that now needs to used for iOS development.

The question is how to unsupervise the device, so that it can be used for development. 

Would it be suffice just to remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset or do we need remove the device from DEP altogether on Apple's portal?

 

1 Accepted Solution
T1
Building a reputation

remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset

 

This is sufficient, we do it all the time with devices temporarily used by Marketing teams at conferences etc. We only remove (or disown as Apple puts it) devices from Apple business portal when they are written off or replaced under warranty to keep it clean.

View solution in original post

9 Replies 9
BrechtSchamp
Kind of a big deal

It's probably enough to just unenroll it from Systems Manager. Use the Unenroll button on the device's status page. You might need to remove the profile manually from the iPad.

 

Instructions here:

https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Mana...

 

This way the device is still company owned and can always be brought in again. Once you remove DEP from a device you can't put it back on, so try to avoid that (you could do it manually with Apple Configurator though).

VadimK
Conversationalist

The device has been supervised with DEP, so the profile is not removable.
BrechtSchamp
Kind of a big deal

And it doesn't get removed automatically when you press the unenroll button in the client status page?

 

2019-07-23 10_09_05-Clipboard.png

 

Also, what limitations are you running into that make that the device can't be used for development while being under supervision?

VadimK
Conversationalist

It cannot be paired. Xcode says to unlock it and choose to trust this computer when prompted, but there's no prompt.
BrechtSchamp
Kind of a big deal

Not sure if that's caused by the systems manager supervision. Here's a topic describing the same issue:

https://discussions.apple.com/thread/7674269

 

Could you give the instructions in that topic a try?

beks88
A model citizen

Do you still want to see it in SM?

 

There are several options, depends on your desired workflow (just to mention two :)):

 

 - You could just unassign the device from SM on business.apple.com

 - You could create an own scope for development, create a seperate DEP profile and a seperate push profile without any restrictions.

 

This issue could be related to the restriction "do not allow pairing" or maybe it's just the typical weird behavior from XCode, I face this issue sometimes with my private iPhone.

T1
Building a reputation

remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset

 

This is sufficient, we do it all the time with devices temporarily used by Marketing teams at conferences etc. We only remove (or disown as Apple puts it) devices from Apple business portal when they are written off or replaced under warranty to keep it clean.

T1
Building a reputation

remove settings + remove device (in Systems Manager > Manage > DEP) coupled with a factory reset

 

This is sufficient, we do it all the time with devices temporarily used by Marketing teams at conferences etc. We only remove (or disown as Apple puts it) devices from Apple business portal when they are written off or replaced under warranty to keep it clean.

jared_f
Kind of a big deal

Do you plan on using this iPhone in production in the future and would want it to be in DEP? To make your life easier, I would just remove the device from the DEP profile in Meraki. You need to do this prior to doing a factory reset -- the DEP configuration comes down once the device is activated (once you start setup).

 

Another option is to remove it from the DEP scope and then remove it from Apple Business/School Manager by either (a) removing it from scope of the Meraki server or (b) fully removing it from DEP.

 

 

Find this helpful? Click the kudos button. Thanks!
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels