So, people like Stephen and others are working on IC and MDM on the M1 ...
There's a recipe posted for dealing with MDM ...
------------Mazoot's RECIPE------------
1. Hold ⌘-R to boot into Recovery --> Utilities --> Terminal, type:
$ csrutil disable
$ reboot
2. Hold ⌘-R to boot into Recovery again:
3. Enter Disk Utility, mount: Macintosh HD volume (if its not already)
4. Exit Disk Utility & open Utilities --> Terminal and type:
$ cd "/Volumes/Macintosh HD/System/Library"
$ cd ../../etc
$ echo "0.0.0.0 iprofiles.apple.com" >> hosts
$ echo "0.0.0.0 mdmenrollment.apple.com" >> hosts
$ echo "0.0.0.0 deviceenrollment.apple.com" >> hosts
$ echo "0.0.0.0 gdmf.apple.com" >> hosts
$ csrutil enable
$ reboot
Ensure you're not connected to the network (continue without internet).
After booting normally, verify the status of DEP via Terminal:
$ profiles status -type enrollment
Enrolled via DEP: No
MDM enrollment: No
------------end------------
BUT, this computer was goofy for a while after I reinstalled the OS
I'd enter the password and it'd turn translucent after accepting it without giving access to the OS ... then, after letting it sit for a week or so it logged in. Maybe it just needed to download the MDM software and as it's not locked, it didn't lock me out – but (I'm thinking) it CAN whenever it wants...?
$ profiles status -type enrollment
Enrolled via DEP: Yes
MDM enrollment: Yes - (User Approved)
MSM server: https://a.simplemdm.com/mdm
Would you be trying to remove the MDM even if you had access..?
What would your approach be?
Thank you!
There's a recipe posted for dealing with MDM ...
------------Mazoot's RECIPE------------
1. Hold ⌘-R to boot into Recovery --> Utilities --> Terminal, type:
$ csrutil disable
$ reboot
2. Hold ⌘-R to boot into Recovery again:
3. Enter Disk Utility, mount: Macintosh HD volume (if its not already)
4. Exit Disk Utility & open Utilities --> Terminal and type:
$ cd "/Volumes/Macintosh HD/System/Library"
$ cd ../../etc
$ echo "0.0.0.0 iprofiles.apple.com" >> hosts
$ echo "0.0.0.0 mdmenrollment.apple.com" >> hosts
$ echo "0.0.0.0 deviceenrollment.apple.com" >> hosts
$ echo "0.0.0.0 gdmf.apple.com" >> hosts
$ csrutil enable
$ reboot
Ensure you're not connected to the network (continue without internet).
After booting normally, verify the status of DEP via Terminal:
$ profiles status -type enrollment
Enrolled via DEP: No
MDM enrollment: No
------------end------------
BUT, this computer was goofy for a while after I reinstalled the OS
I'd enter the password and it'd turn translucent after accepting it without giving access to the OS ... then, after letting it sit for a week or so it logged in. Maybe it just needed to download the MDM software and as it's not locked, it didn't lock me out – but (I'm thinking) it CAN whenever it wants...?
$ profiles status -type enrollment
Enrolled via DEP: Yes
MDM enrollment: Yes - (User Approved)
MSM server: https://a.simplemdm.com/mdm
Would you be trying to remove the MDM even if you had access..?
What would your approach be?
Thank you!
Comment