17

I desire to disable the "Device Enrollment" notification window for OS X machines that are enrolled in DEP (Apple's Device Enrollment Program). The machines are running 10.11, though the process should be the same for 10.10.

(While we are currently managing iOS devices, we are not managing OS X devices through the enrollment program, and I do not want the pop-up to confuse or distract students.)

I have not found a way to disable to the pop-up, or where the setting is stored, once the user hits "Skip". Does anyone know where this setting is stored, or perhaps how I can modify it using "defaults write" or something similar?

|improve this question
  • I believe the LaunchAgent that controls this can be found at /System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist - However "System Integrity Protection" in El Capitan prevents me from disabling the service. Any ideas? – Tim Dearborn Nov 24 '15 at 16:07
15

To disable enrollment pop-ups, I moved 2 files...

/System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist
/System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist

to /Library/LaunchAgentsDisabled and /Library/LaunchDaemonsDisabled (make sure to create the directories if they don't exist).

Since I am using El Capitan, I am not "allowed" to modify the System folder. I did so by using Target Disk Mode and connecting to a Yosemite machine. You could also do so by disabling System Integrity Protection (instructions at http://osxdaily.com/2015/10/05/disable-rootless-system-integrity-protection-mac-os-x/ )

|improve this answer
  • moved those two files, but still getting this pop up. Any other files needed to be removed? – LukasMac Dec 9 '15 at 9:12
  • 1
    @KirkOuimet - No. Launchd loads daemons from /System/Library/LaunchDaemons and from /Library/LaunchDaemons. If the file is not there, it can not load it. Please note that in El Capitan, you must disable or work around SIP in order to move these files. – Tim Dearborn Feb 5 '16 at 0:59
  • 3
    @jfoliveira , on Sierra those files are in the same locations, i tested it today and worked. – George Dima Feb 15 '17 at 20:24
  • 1
    This solution worked on Sierra, but not on High Sierra (10.1.13). I get a mv: rename LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist to LaunchAgentsDisabled: No such file or directory error message. Has anyone else tried it on the latest OS update? – allenwlee Dec 10 '17 at 3:01
  • 1
    @TimDearborn apologies, looks like i was in the wrong directory. I was in Users/Library, not System/Library The solution still works on High Sierra. – allenwlee Dec 10 '17 at 3:27

You must log in to answer this question.

protected by Community♦ Dec 28 '16 at 23:11

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged .