unenrolled ios device restriction issue

Question

unenrolled ios device restriction issue

Megha Devrani 0

User enrolled to intune and after same day admin removed the user from intune, removed the user from the group and uninstall the company portal , still restriction is getting applied to the device, even removing the account from the setting and privacy of the device.

Rahul Jindal 11,731 Reputation points

2026-09-21T10:48:08.4533333+00:00

Maybe check for MAM channel.
Megha Devrani 0 Reputation points

2026-09-21T10:50:50.89+00:00

user is already removed from every where no MAM policy no MDM , even device is not visible in company portal website login from affected user id

1 answer

Your answer

Rahul Jindal 11,731 Reputation points

2026-09-21T10:48:08.4533333+00:00

Maybe check for MAM channel.
Megha Devrani 0 Reputation points

2026-09-21T10:50:50.89+00:00

user is already removed from every where no MAM policy no MDM , even device is not visible in company portal website login from affected user id

Answer 1

If the iPhone is still receiving restrictions after the user was removed and Company Portal was uninstalled, the most likely cause is that the device is still enrolled or still has management data/profile information on the device.

Use this end-to-end check:

In the iPhone, open Settings > General > VPN & Device Management.
- If a management profile from the organization is still present, remove it if removal is allowed.
If the device still appears in Company Portal website, remove it there:
- Sign in to the Company Portal website.
- Go to Devices.
- Select the device.
- Choose Remove and confirm.
- This remotely unenrolls and unregisters the personal device.
Be aware of the expected result after removal:
- Access to work or school apps, email, internal sites, Wi‑Fi, or VPN can be removed.
- Device setting requirements enforced by Company Portal are no longer required.
If local Company Portal data is still suspected on the iPhone, note the limitation:
- Information logs collected by Company Portal are erased when the device is removed from Company Portal.
- Apple analytics and Keychain data can only be removed by resetting the device to factory settings.
If the device was removed from Intune admin groups but restrictions still persist, stale device records can also be a factor. In Intune, admins should verify whether the user has old enrolled devices still associated with the account and remove stale device records.

Important risk note: a factory reset erases all personal information on the device. On iPhone, that path is Settings > General > Transfer or Reset > Erase All Content and Settings.

If the management profile cannot be removed from VPN & Device Management, the device likely still has an active management association that must be removed from the device record side before the restrictions stop applying.