Finds out if we're enrolled in SimpleMDM and removes any profiles that are not installed by SimpleMDM if so.

nuke-non-mdm-profiles.sh

#!/bin/bash

## find out if we're enrolled in SimpleMDM

mdmstatus=`/usr/bin/profiles status -type enrollment | grep MDM | /usr/bin/awk '{ print $3 }'`

if [ mdmstatus='Yes' ]
    then
	# Get a list of all profiles on computer that aren't 'unwiredmdm' and remove all of them
	    echo "MDM status is Yes. Removing profiles that aren't enforced by SimpleMDM"
	    for identifier in $(/usr/bin/profiles -L | grep -v unwiredmdm | /usr/bin/awk "/attribute/" | /usr/bin/awk '{print $4}')
	    do /usr/bin/profiles -R -p $identifier
	    done
	    exit 0
    else
	    echo "User not enrolled in MDM. Not touching profiles."
	exit 0
fi