The purpose of this article is to provide the steps on how to remove non-removable MDMs. Users may encounter this issue when devices are enrolled into an MDM via Apple School Manager/Device Enrollment Program, and the enrollment profile is configured to be not removable.
Disabling SIP
1. Put the Mac into Recovery Mode (hold down command+R during startup).
2. Go to the Utilities menu and open Terminal and type: csrutil disable. This will disable SIP (System Integrity Protection).
3. Reboot into the OS.
Removing MDM configurations
1. Open the integrated terminal and type:
sudo su
cd /var/db/ConfigurationProfiles rm -rf * mkdir Settings touch Settings/.profilesAreInstalled
Reenabling SIP
1. Boot the Mac into Recovery Mode
Steps for Intel machines.
Steps for Apple Silicon (M1, M2, etc).
2. Go to the Utilities menu and open Terminal and type: csrutil enable. This will re-enable SIP.
3. Reboot into the OS.