Cannot remove MDM profile from iPhone after removal from Intune

Anon Account 31 Reputation points
2022-01-19T19:39:22.87+00:00

I have a corporate issued iPhone that's controlled by a MDM profile via Intune. The company agreed to remove the MDM profile to let me have the phone as a personal device. They said they removed the phone from Intune. However, the MDM profile is still there. There's no option to delete it. I've tried the following:

  • Remove all managed apps and rebooted: MDM still there
  • Erase iPhone and restore from backup: MDM still there
  • Erase iPhone and use as new device: No MDM!

How can I remove MDM but still keep my existing data? The company hasn't done this before so they may have hit the wrong button. What should they do in Intune?

Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Enrollment

Answer accepted by question author
Lu Dai-MSFT 28,536 Reputation points
2022-01-21T02:55:44.747+00:00

@Anon Account Thanks for your update. From the information you provided, the iPhone is an ADE enrollment device.

For ADE enrollment device, if the IT configure the setting "Locked enrollment" to "Yes" in the Apple enrollment profile, we can't remove MDM management profile manually in the iPhone.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios#create-an-apple-enrollment-profile

If we want to we want to completely remove an ADE device from management by Intune, it is needed to unsigned the device in Apple Business Manager.
https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#retire-an-apple-ade-device-from-intune

Hope it will help.

Was this answer helpful?

2 people found this answer helpful.
0 comments No comments

5 additional answers

Sort by: Newest
  1. Lu Dai-MSFT 28,536 Reputation points
    2022-01-20T04:46:18.953+00:00

    @Anon Account Thanks for posting in our Q&A. From your description, did you mean that the iPhone is removed from intune, but the MDM management profile still exists in the device? If there is anything misunderstanding, please correct me.

    To clarify this issue, we appreciate your help to collect some information:

    1. Which method did you use to enroll the iPhone before?
    2. From your description, I know that it is said that they removed the iPhone from Intune. Please make sure the iPhone doesn't show in the intune portal.
    3. Could you please try to remove the MDM management profile in Settings > General > Device management > Mangement Profile? If the profile is removed, the device is not managed by intune.

    For removing MDM, we usually use retire or wipe action. The wipe action restores a device to its factory default settings and it doesn't keep data. The retire action removes managed app data, settings, and email profiles that were assigned by using Intune, but it will leave the user's personal data on the device.
    https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe

    If there is anything update, feel free to let us know.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    2 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.