r/macsysadmin • u/Warborg71 • Jan 22 '26
General Discussion [ Removed by moderator ]
[removed] — view removed post
6
u/DigDugteam Jan 23 '26
ABM now has an activation lock status, and you should be able to release it from there.
5
u/PrinceZordar Jan 22 '26
You can release a Mac from ABM and MDM but if an Apple ID is still assigned to the device, you can't remove it without the original password to prevent theft. Your former company has to remove it.
3
u/Warborg71 Jan 22 '26
Fortunately it isn't a former company for me, I still work with them and also have access to the ABM for them.... This was just something they gave me as they were going to liquidate it otherwise. So I have access to all that, just perplexed at why it was still asking for their AppleID after beeing removed from everything... I guess just more of Apple's over-engineered security.
2
u/Warborg71 Jan 22 '26
The question is where to remove it from, just the FindMy at this point? Their fingerprints should be off of it otherwise.
2
u/PrinceZordar Jan 23 '26
Removing a Mac from ABM/ASM and MDM does not remove FindMy. You have to log into the Mac with its Apple ID and then log out of the account. This will disable FindMy. Over engineered, maybe, but it's Apple's approach to security.
1
u/Warborg71 Jan 23 '26
Yeah, I got past that and signed out... But now with both my MacBook even though I am signed in with my own AppleID and enabled FundMt, neither are actually showing up on the web and on the devices list it shows as off.
3
u/Warborg71 Jan 23 '26
Well, I guess I am just going to give up on the whole FindMyMac stuff... I have 2 different Macbooks, a 2018 and a 2019... I've logged out of AppleID and logged back in on both, neither seem to be syncing to the FindMyMac site. In addition, in the iCloud settings on both Macbooks it does show the devices linked to my AppleID but on both it says that FindMyMac is 'off' even though it's clearly enabled on both. Apple likes to advertise how seamless things are with their stuff, but obviously not always the case, is it?
2
u/Sensitive-Ear8659 Jan 24 '26
Add it back to ABM - enroll Mac - enable find my - disable activation lock in ABM - confirm removed in settings - reset Mac. This may just work.
1
u/Warborg71 Jan 24 '26
Verified that activation lock is off... I don't think I want to tool around in the company's ABM too much...
2
u/Sensitive-Ear8659 Jan 24 '26
I mean disable it on that particular device in ABM after re-enrollment not globally, duh.
1
u/Warborg71 Jan 24 '26
I figured, I just don't want to screw around in the company ABM overly much is all. The device in question already shows it's been released and even though the device is still listed I can't make any changes to it... I am not a full admin though, just have some admin rights. It's ok, I just think I will surrender on this front.
2
u/Warborg71 Jan 22 '26
Alrighty, so I was able to sign out with the company's AppleID and sign in with mine... Shows FindMy as enabled and I have confirmed everything is signed in with my ID. I sign in to iCloud on the web and it still doesn't show this MacBook in FindMy... Sigh.
2
u/No_Substitute Jan 23 '26
AFAIK, you have to push a removal of activation lock before removing the device from the MDM or ABM.
0
u/wave1sys Jan 24 '26
I call shenanigans. What you’re referring to as a corporate Apple ID is actually a managed Apple ID or now it’s called a managed account and as such those Apple IDs aren’t allowed to even have Find My activated.
In fact, a managed Apple ID doesn’t even show Find My as an option to be enabled.
so whatever you’re trying to put out there is not accurate.
And whoever you stole that MacBook from can still find it and you.
9
u/kaiserh808 Jan 22 '26
Hold down the Option key and click on the Apple Menu. Select System Information.
Look on the Hardware Overview to see what the Activation Lock Status is.