Questions tagged [mdm]
Mobile device management (MDM) is an industry term for the administration of mobile devices, such as smartphones, tablet computers and laptops. MDM is usually implemented with the use of a third party product that has management features for particular vendors of mobile devices.
123
questions
1
vote
0
answers
19
views
cfgutil get-icon-layout throws NSInvalidArgumentException in insertObject:atIndex: object cannot be nil
I want to retrieve the home screen layout of an iPad attached with USB-C cable to my macOS device. But the command cfgutil get-icon-layout throws an NSInvalidArgumentException in insertObject:atIndex ...
- 281
0
votes
0
answers
28
views
Remove Admin permissions from Configurator enrolled user
I'm trying to enroll MacOS devices to Intune with Apple configurator, so far have done all the setups that will Enroll with User Affinity but user account that get created get admin privileges by ...
- 1
0
votes
1
answer
63
views
Override MDM-controlled notification settings
We get Macs issued from my workplace, which has MDM (mobile device management) on it. When there is a scheduled system update upcoming in a couple of weeks I'll get daily reminders about it, which is ...
- 347
0
votes
0
answers
54
views
How to change setup language when using Mosyle to manage Mac?
MacBook Air M2 running macOS Sonoma was initially setup using “Français (Canada)” language (during initial setup).
Now, when Mac is factory reset using Mosyle, language selection step is no longer ...
- 942
0
votes
0
answers
42
views
Fail to upload .pkg to Microsoft Intune MDM - pkg file doesn't comply with Line-of-business (LOB) requirements
I'm trying to upload a .pkg file to Microsoft Intune MDM as Line-of-business app (LOB). I've created the package using Packages tool (https://github.com/packagesdev/packages).
However, no matter how ...
- 631
2
votes
2
answers
385
views
Can MDM do things that violate one's privacy?
I know Apple's implementation of MDM can install apps, change settings on the Mac automatically using profiles. I’m more concerned about things like:
monitoring my screen without my consent
...
- 129
0
votes
0
answers
65
views
MDM with dual boot - private volume with FileVault
I will soon have to follow an enrolment process with the company MacBook pro (16'' 2021) I've been using (both for home and work activities).
I'd like to continue using the current volume for home ...
- 103
1
vote
1
answer
376
views
Can I safely erase my Mac and reset to factory settings?
I used to work for a company that provided me a Mac (M1Pro). The company went out of business and let us keep the Mac computers. They told us they would remove all the MDM enrollments so we can ...
- 113
0
votes
0
answers
85
views
Boot from external drive with no admin password or recovery mode?
I recently left an organization that had placed a bunch of restrictions on my Macbook Air M2, which is running Sonoma 14.3.1. I don't have an admin password, and all startup options (recovery mode, ...
- 1
0
votes
1
answer
43
views
How can I reset my ipad [closed]
I have an Ipad that has find my phone on it and I cannot reset it. The person who owned it is not alive anymore to ask the proper questions
0
votes
0
answers
48
views
MDM Managed M2 14 inch MBP rebooting into recovery after Sonoma 14.3.1 update
I am locked out of my Apple Silicon Macbook. I was on macOS Sonoma 14.3. Around when 14.3.1 update was released, the device prompted restart after update.
After restart mac is rebooting into recovery ...
5
votes
0
answers
5k
views
How to enable multiple user accounts on an iPad, to be used by a family
I'm trying to set up a new iPad 9 to be used by me, my wife, and our kid, all under their own user accounts at the iOS level. I know it's not straightforward to do this, but I'm trying to do it using ...
- 190
0
votes
0
answers
37
views
How can I inspect and audit the non-xml portion of a configuration profile?
There is a very useful configuration profile published by my ISP.
But: I am careful about such things and want to inspect it.
The XML portion of the configuration profile is very straightforward.
BUT! ...
- 165
9
votes
1
answer
15k
views
Why is my Mac trying to force me to enroll with Expedia Group upon installation?
I purchased a new Mac through Apple and I’m looking to sell my old one. I erased the data and was going through the OS installation process. I’m getting a popup dialog that tries to make me enroll ...
- 91
1
vote
1
answer
430
views
Resolution to unexpected "Profiles/MDM wants to make changes." popups? Beware SpamResponse/wmcglobal?
I'm frequently getting unexpected "Profiles/MDM wants to make changes." popups.
It started right after I began installing SpamResponse by clicking GET, but aborted when it prompted to ...
1
vote
0
answers
57
views
Unable to disable MDM on macbook pro with Ventura [duplicate]
My son bought this Macbook from some guy for cheap. Did'nt bother to check if he can login and use it.
I wiped the macbook clean. And installed ventura, after it asked for wifi and country name, it ...
- 11
1
vote
1
answer
78
views
How to remove and restrict “Connect to server…”?
Using MDM, how can one remove and restrict “Connect to server…” including Command+K?
Want to make sure users cannot access local or remote servers.
- 942
2
votes
2
answers
104
views
Convert passwordLastSetTime to date format YYYY-MM-DD
Trying to convert passwordLastSetTime to date format YYYY-MM-DD
The command is: dscl . read /Users/<username> | grep --context=3 passwordLastSetTime
I want to convert this number to YYYY-MM-DD ...
- 57
0
votes
0
answers
37
views
MDM payload to prevent clock changes
I'm playing with ways to ensure a system's time (MacOS, 13.4) is synchronized more frequently. The concern is that while I can disable the system time change, a user can still force the time with the ...
- 33
0
votes
0
answers
91
views
Can I view the "Enforce Face ID or Touch ID timeout" that is set on my MDM profile on my iPhone?
I have work email on my phone thanks to some MDM profile additions.
I'm finding on my iPhone XS that FaceId forces back to Passcode on every second attempt. This frequency seems unusually high.
My ...
- 1,883
2
votes
2
answers
130
views
Can profile MDM settings increase FaceId's frequency to switch back to Passcode?
I have work email on my phone thanks to some MDM profile additions.
I'm finding on my iPhone XS that FaceId forces back to Passcode on every second attempt. I have added a second face - my Apple watch ...
- 1,883
-1
votes
1
answer
3k
views
How to check if my iPhone owned by MDM?
My iPhone feels lighter and heavier while connecting to the internet. It gets heated normally. I can feel that someone is monitoring my screen too. Might be my device gets targeted by remote MDM. ...
1
vote
0
answers
520
views
How to use configuration profile to force DNS-over-HTTPS for every network except the specified SSIDs?
I want to be able to force DoH on all networks (Wifi, cellular data, etc) except my home and work wifi network SSIDs.
I used iMazing Profile Editor to craft this profile, but when I try to import it ...
0
votes
1
answer
466
views
How can I remove a MDM configuration profile enrollment when no profile exists?
A strange problem occurred after I clean-installed Big Sur on my company's 2019 MacBook Pro. My machine now asks for incorrect device enrollment credentials (this is not my company!):
Before the ...
2
votes
1
answer
183
views
Unable to pick settings in us.zoom.config.plist
I want to configure Zoom’s setting by pushing the plist file to the device from MDM.
After pushing the customized us.zoom.config.plist to my macOS device through MDM, I am able to find the plist file ...
- 41
1
vote
1
answer
158
views
List MDM configuration and policy as an end user
As a user on the end device running macOS and as a part of a troubleshooting, I would like to review the MDM configuration and policy set by the remote administrators.
How can I check what is being ...
- 185
0
votes
0
answers
27
views
Unable to script the "add a dock space" function due to conflicts with running as root
I am a Jamf admin and need to make the "add a dock space" command line function into an easy to click button for our users. Many of them would be hesitant or not technically savvy enough to ...
- 1
0
votes
1
answer
487
views
Customize Lock Screen Footnote without administrator assistance
My iPad 6th gen running iPadOS 16.2 is managed by my organisation through Meraki (Cisco) (MDM). They have quite recently added a Lock Screen Footnote (at the very bottom of the Lock Screen) and I ...
- 3,766
0
votes
0
answers
30
views
Update iPad 5th gen from 15.7.1 to 15.7.4 [duplicate]
For future debugging I want to keep one of our iPads 5th Gen (MP2F2FD/A) at a 15.7.x version, it currently has 15.7.1 installed.
With Apple Configurator 2 or via Finder there is only the "Newest&...
- 101
2
votes
1
answer
481
views
How to update Firefox with MDM and no admin
I am trying to update Firefox on my school computer but I need an Admin password to do this.
My MacBook is a 13” M2 Pro that has the weird school app store called “Self Service” which only lets you ...
0
votes
0
answers
89
views
Workspace ONE - 2 profile 2 extensions Chrome - macOS
I'm trying to deploy 2 different profiles for 2 different extensions for Chrome, I'm using the key:
<key>ExtensionInstallForcelist</key>
<array><string>ID;https://clients2....
- 37
2
votes
1
answer
82
views
Dock has old MDM icons (?); how do I delete the old MDM icons from Dock
Situation:
Mac laptop was part of a MacOS server profile managed MDM system, and it pushed some dock icons for that user XYZ. Mac is now part of a new system, and uses the same users/uids. When ...
- 140
1
vote
0
answers
65
views
Can smartcard/Yubikey auth be triggered for all authentication, not just admin?
I've been working through the various settings & MDM profiles needed to allow & enforce smartcard behaviors in macOS Ventura. I'm seeing a behavior, though, that I'd rather change - ...
- 11
1
vote
1
answer
169
views
Mac MDM WiFi selection control remained after MDM profiles removed
Recently I've gained admin privilege and gotten rid of MDM profiles/limits.
However, after MDM profiles are removed I found that:
In Network -> Advanced -> Preferred Network,
it still keeps ...
- 11
1
vote
0
answers
149
views
Content caching on MacOS - Connected Clients
I'm pretty new to MacOS and the world of Apple, so this might be an easy one. We have about 50 iPads in our school (with more certainly coming) which I manage through an MDM. Last week, to accelerate ...
- 111
0
votes
0
answers
763
views
Can one erase all content and settings from command line using sudo?
I am planning on provisining enterprise Macs using DEP/MDM and looking for a way to allow non-admin user to initiate wiping computer.
Possible from command line using sudo? Perhaps there is another ...
- 942
3
votes
3
answers
3k
views
Deactivate Apple's Mobile Device Management (MDM)
I recently bought a Macbook air laptop at an asset auction held by an appointed liquidating agent for a company that was going into administration with the intention of using it as my own personal ...
- 39
1
vote
0
answers
1k
views
No DEP Profiles or MDM Processes running but still getting DEP notifications?
New to the site and have a question about a 2017 MacBook (12inch Intel Core M3) I recently picked up from a pawn shop.
It’s running macOS Monterey and I was able to go through the setup, add my iCloud ...
- 11
0
votes
0
answers
87
views
How to use BASH / ZSH to capture picture from webcam
I am new to MDM and I am attempting to write a script/profile which will use the built in webcam (and/or external if available) to capture a photo taken from the webcam. This would only be activated ...
- 1
1
vote
2
answers
2k
views
How can I build my iOS app to be deployed via an MDM?
We've got Intune set up at work, and I'm trying to push a custom iOS app out to several iPod Touches we have. Intune is set up and working properly, but the app refuses to install because it's ...
- 153
3
votes
1
answer
2k
views
Can an MDM computer be taken over again?
We are provided with laptops (MacBooks) in our company, but the laptops are provided by default with MDM JAMF maintenance. It is possible to ask that to be removed, and sometimes requests such as that ...
- 33
0
votes
0
answers
120
views
How and Where can I find information to which organization I was enrolled?
I clicked on settings then VPN & Device Management. I was checking my VPN and noticed sign in to your school or work account. I did and I received this prompt. Apple can and will not give me any ...
6
votes
1
answer
15k
views
How to check if my device is owned on MDM?
I previously registered my personal device with MDM, specifically Microsoft Intune (aka Company Portal) - it installed a bunch of software like Zscaler (and its root certificate) and a lot of ...
- 576
1
vote
0
answers
310
views
Where do packages downloaded via MDM installation get stored?
Trying to debug an MDM installation issue where a package gets downloaded, but during install, it complains about the following:
PackageKit: Install rejected with error: Error Domain=...
- 334
1
vote
1
answer
442
views
How to remove personal information from iMac Pro with MDM (after attempting remote erase)
When I was working for a university they bought me a 2017 iMac Pro to use for work from home, which came with some sort of MDM profile linked to the university. When I left several years later, my ...
- 113
0
votes
1
answer
339
views
MacOS 12.3.1 Full Disk Access problem
We use an MDM solution to manage devices. A .mobileconfig 'profile' grants all the necessary access for Ivanti File Director, that works perfectly fine when the rights were granted on an earlier ...
- 59
1
vote
1
answer
232
views
How to deliver older app version to customers?
My company distributes an app on the regular AppStore. Some customers host the backend on-premises and are not updating the backend as often as we update the app. We've told our customers that if they ...
- 137
1
vote
0
answers
760
views
This Apple ID cannot be used to make purchases
I just wiped my iPad using Apple Configurator 2, and linked it to my MDM which is ManageEngine. I am enrolled in ABM and have purchases enough licences of the app I want to install. I can see the apps ...
- 131
0
votes
0
answers
3k
views
Remove DEP notification MacBook
I've just bought my first MacBook and I found out that it is enrolled in MDM/DEP. The guy I bought it from had it completely sealed up with original packaging so I never thought it would have problems ...
2
votes
3
answers
11k
views
How to Sign In to Your Work or School Account Using a Managed Apple ID with MDM?
I am trying to sign in using my managed work Apple ID on an iPhone through the settings under VPN & Device Management. When I input my email address, I get "Sign-In Failed", "Your ...
- 131