תמיכה ושירות אירית חיון

This guide details the steps required to completely release a Mac from the organization's management, remove it from Jamf Pro, and disconnect its ownership from Apple's servers. This process is intended for scenarios such as employee offboarding, computer donation, recycling, or transferring ownership.

⚠️ Crucial step before starting: Disable Activation Lock
If the computer is linked to an employee's personal Apple ID or an organizational Activation Lock, you must disable it before releasing the computer. Deleting or releasing a computer from ABM while it is still locked will render it unusable for the next user (effectively a "brick").

• How to verify? Ask the user to sign out of their Apple ID on the computer (System Settings > Apple ID > Sign Out), or use the Clear Activation Lock command or Bypass Code from Jamf Pro or Apple Business Manager before starting the process.

Step 1: Removing the Computer from Jamf Pro

In this step, we will remove the management profile (MDM) and delete the computer record from the system to free up the management license.

1. Log in to your Jamf Pro Dashboard.
2. Navigate to Computers and search for the desired computer (e.g., by serial number).
3. Click on the computer to enter its record, and go to the Management tab.
4. Under the management commands area, click Remove MDM Profile and confirm the action. This will send a command to the computer to remove the management profile.
5. Final Deletion: Once you have verified the command was received, click the Delete button at the bottom of the screen to completely remove the computer's record from the system.

Step 2: Releasing Ownership from Apple Business Manager (ABM)

This step ensures the computer will not pull the organization's settings again if it is formatted and reconnects to the internet.

⚠️ Warning: This step is irreversible! Once you perform a Release, the computer is permanently removed from the company's ownership. To add it back to the organization in the future, it will require physically connecting it to another Mac using the Apple Configurator app.

1. Log in to the Apple Business Manager portal.
2. Navigate to Devices and search for the computer by its serial number.
3. Select the computer from the list and click the Release from Organization button (usually found under the "More" menu or the three dots icon).
4. Check the confirmation box stating you understand this action is irreversible, and click Release.

Step 3: Local Computer Cleanup and Release Verification

Now that the cloud systems are updated, let's handle the computer itself.

Option A (Highly Recommended): Format the computer (Wipe / Erase All Content and Settings)

The best and safest way to ensure the computer is unmanaged and all organizational data is completely deleted is to reset it to factory settings. This action removes all software, scripts, and settings installed by Jamf.

Option B: Removing management without deleting data on the computer

If you are leaving the computer with the user without formatting and want to ensure the management agent is removed:

1. Open the Terminal app on the Mac.
2. Run the following command to completely remove the Jamf Framework from the computer:

   sudo jamf removeFramework

3. Final disconnection check against Apple servers:To ensure the computer has been released from ABM and is not looking for a management server, run the following command:

   sudo profiles renew -type enrollment

How do we know it worked? If you followed the previous steps correctly, the system should return an error. The error indicates that the computer contacted Apple's servers, discovered it is not assigned to any organization, and therefore found no management profile (MDM) to download.