Skip to content

Instantly share code, notes, and snippets.

  • Save stephengfriend/f655ca163f27f1ba06d564a759b08f87 to your computer and use it in GitHub Desktop.
Save stephengfriend/f655ca163f27f1ba06d564a759b08f87 to your computer and use it in GitHub Desktop.

Disable Device Enrollment Program (DEP) notification on macOS Catalina.md

  1. Boot to Recovery Mode by holding command-R during restart

  2. Open Tools → Terminal and type

$ csrutil disable
$ reboot
  1. Hold command-R during the reboot to enter Recovery Mode again

  2. Enter Disk Utility, and mount the Macintosh HD volume (or whatever your main volume is named)

  3. Exit Disk Utility, open Tools → Terminal, and type

$ cd "/Volumes/Macintosh HD/System/Library"
$ mkdir LaunchDaemons.disabled LaunchAgents.disabled
$ mv LaunchDaemons/com.apple.ManagedClient* LaunchDaemons.disabled/
$ mv LaunchAgents/com.apple.ManagedClient* LaunchAgents.disabled/
$ cd ../../etc
$ echo "0.0.0.0 iprofiles.apple.com" >> hosts
$ echo "0.0.0.0 mdmenrollment.apple.com" >> hosts
$ echo "0.0.0.0 deviceenrollment.apple.com" >> hosts
$ echo "0.0.0.0 gdmf.apple.com" >> hosts
$ csrutil enable
$ reboot
  1. After a normal boot, you can verify the DEP status in Terminal:
$ profiles status -type enrollment
Enrolled via DEP: No
MDM enrollment: No
@EngUnlimited
Copy link

20210621_232258
Why all files are Read-only file systems? And there is no "/Volumes/Macintosh HD/System/Library"

@virtuabart
Copy link

I am just new to Mac. I found it hard to edit on the Recovery Mode. You can only use csrutil there.

Now just login to your Mac, sudo nano /etc/hosts -> to edit
Or sudo mv if you want to disable the ManagedClient -> to disable profiles

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment