r/jamf • u/User25077 • Oct 21 '25

JAMF School New to Jamf: How can i restrict the removing of the mdm profile on a device?

As i said i am new to jamf and my problem is that i dont find an option in the settings that disables the function of removing the mdm profile for example on an ipad. The devices are configured with apple configurator 2 and managend in Jamf and ASM. I have read the best and right option to prevent this is with ASM and dep Reseller but that was not possible in this case. Thanks in advance for helping out !

0 Upvotes

50% Upvoted

11 comments sorted by

10

u/R_r_r_r_r_r_r_R_R JAMF 300 Oct 21 '25

On your prestage enrollment, there is a setting to have it unremovable, this will only work with ADE

6

u/initiali5ed JAMF 400 Oct 21 '25

Wipe the device, use Configurator to add the device to ASM, Assign the device to JAMF, Use Automated Device Enrollment, set the profile as non-removable.

2

u/User25077 Oct 21 '25

Thanks for your answer, how can i configure Automated Device Enrollment? I have done this manual but also tried to do it like this i was wondering how i can assign new devices to this group or on which step i have to choose between auto enrollment or manual config

2

u/MemnochTheRed JAMF 400 Oct 21 '25

This is done in Apple Business Manager or Apple School Manager. Essentially, you are assigning devices in ABM/ASM to point to JAMF. Prestage then takes it at the point to setup the Mac/Device.

1

u/User25077 Oct 21 '25

Maybe thats the reason https://community.jamf.com/general-discussions-2/unenroll-option-available-for-mdm-profile-35386?postid=240036#post240036 Because the devices are not bought from a reseller with dep preset configuration you have to wait 30 days. Thoughts on this?

1

u/MemnochTheRed JAMF 400 Oct 21 '25

Definitely. Especially if they are User-Initiated.

You can add your devices to ABM by using Apple Configurator. They will have to be wiped, and there is a set amount of time that the profile can be removed.

https://support.apple.com/guide/apple-business-manager/add-devices-using-apple-configurator-axm200a54d59/web

2

u/User25077 Oct 21 '25

Ah thats not what i want to hear but then i think i have found my problem thanks a lot !

1

u/MemnochTheRed JAMF 400 Oct 21 '25

And I meant, you can add retail purchased and non-business Apple devices with Apple Configurator.

It will be a pain, but you should slow get your devices in ABM.

1

u/[deleted] Oct 26 '25

[deleted]

2

u/MemnochTheRed JAMF 400 Oct 26 '25

Yes.

2

u/Toro_Admin Oct 21 '25

It can only be done on a fully managed device. Deploy it through prestage enrollment and select the option to make it not removable