csrutil disable
Restart computer
In the terminal, type
sudo open /Applications/TextEdit.app /System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist
change
<key>com.apple.ManagedClient.enroll</key>
<true/>
to
<key>com.apple.ManagedClient.enroll</key>
<false/>
So that the changes take effect
Can anyone explain why this step is needed? I was unable to edit the plist file even after disabling SIP but used this command above. No idea if it actually disabled it or not. But anyways, the other half of this post solved my problem of getting the full screen notification that blocks me out of my computer completely... Luckily theres like a 60-120 second gap from restarting my computer where I have full access until that giant notification pops up
Whats the purpose of modifying the plist file? Is there a way to prevent this in the future. I am always terrified when i have to start reading these forums again as eventually I have a feeling I am going to get totally locked out. Weirdly the full screen notification takes a few minutes to pop up after a restart so I had a very small window to login & copy the commands over to terminal before getting locked out.
Lastly, Is there a way to get sudo terminal commands to work in recovery mode? Im confused why I was forced to login and deal with the panic of the notification locking me out . They should work by default as you have root permission from my knowledge but I was forced to login. Why do you have to run the commands in normal mode and not recovery mode? Above people are specifically specifying that you must do it in normal mode.
Oh wow that checkmdm method seems to alleviate all of my concerns regarding being able to do it in recovery mode^ thats so awesome!
Edit: Ive now followed this step as well which I hadnt done on Ventura. I wonder if I had done this if I still would have received the full screen notification that blocks you out? Also Ive heard conflicting things about blocking gdmf from above but I decided to block it as well.
sudo nano /etc/hosts
#block mdm connect
0.0.0.0 iprofiles.apple.com
0.0.0.0 mdmenrollment.apple.com
0.0.0.0 deviceenrollment.apple.com
0.0.0.0 gdmf.apple.com
0.0.0.0 acmdm.apple.com
0.0.0.0 albert.apple.com
I am on 14.1.1 and everything is working smoothly as of now