Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save sghiassy/a3927405cf4ffe81242f4ecb01c382ac to your computer and use it in GitHub Desktop.
Save sghiassy/a3927405cf4ffe81242f4ecb01c382ac to your computer and use it in GitHub Desktop.

Disable Device Enrollment Notification on

Restart the Mac in Recovery Mode by holding Comment-R during restart

Open Terminal in the recovery screen and type

csrutil disable

Restart computer


In the terminal, type

sudo open /Applications/ /System/Library/LaunchDaemons/





Restart Computer again

So that the changes take effect

Copy link

PaxVobiscuit commented Mar 22, 2024

FWIW, I had the following FQDNs blocked at the router:

I had them blocked in /etc/hosts as well. Still was able to update. Based on a quick search, is specifically for MDM-managed devices.

Here is a list of all the FQDNs for the various services Apple devices might use

I have an unmanaged iMac and a used-to-be-managed Macbook Pro on my home network. My employer sends out alerts when there are major MacOS updates, critical updates, & patches. When the 14.4 notice came out, I went in to Software Update on both systems, and the 14.4 update showed up automagically as expected. No unblocking on my part.

If you truly do HAVE to unblock to get updates, your machine may actually still be enrolled, but some other step in one of the techniques here suppresses the nag messages.

To check that, open Terminal and enter the following command:

profiles status -type enrollment

Your results should be :

Enrolled via DEP: No
MDM enrollment: No

Copy link

joshlac commented Mar 29, 2024

To check that, open Terminal and enter the following command:
profiles status -type enrollment

I run the command and I see "No" to all...

Copy link

Greetings, Do you know if there is a way to log in with this Macbook Air 2020 with Intel, it has remote administration with Jamf, it asks me to log in with a Microsoft business account when using a personal account it does not allow it and when giving local login it asks me for a password but I do not have it.

If there is any option?

WhatsApp Image 2024-03-29 at 17 01 54
WhatsApp Image 2024-03-29 at 17 02 03

Copy link

FWIW, this worked for me. Some of the steps might need to be more prescriptive for folks not very familiar with Macs, but I got it working in one pass. If you want a different drive name than "Macintosh HD" you will need to edit the global constant lines of to reflect the drive name you want.

I did have to connect to the internet to activate as well, but as soon as I hit the "This device is owned by an organization" page, I hit COMMAND-Q, booted in to Recovery Mode, then picked up the instructions from there and ran the script.

Just adding that this post in reply to the above method is what got me sorted out. Clean install (didn't have to use USB), reboot to recovery at the MDM screen, run bypass script and reboot. Dead simple.

Copy link

Omrtx999 commented Apr 11, 2024

what’s supposed to be done ?

Copy link

Mktulio commented Apr 27, 2024

Anyone using Sonoma 14.4.1, after processing the post?

Copy link

ehsan58 commented Apr 28, 2024

Anyone using Sonoma 14.4.1, after processing the post?

yes it's working normaly

Copy link

please i want to ask about mdm
i have M2 ventura 13 working and the apple asked me to update to sonoma
can i update it safely
and if i did , do i need to do something else to stop mdm
thank you

Copy link

DNLS55 commented May 15, 2024

How to Upgrade to Sonoma Without Risking Activating DEP/MP?

There is some conflicting information here (and on YT), and I am not a pro user... Could someone kindly explain or point me to the current recommended process to upgrade from Ventura to Sonoma without risking my Mac being enrolled into DEP/MDM?

Originally, when I acquired this Mac, DEP/MDM was circumvented by blocking IPs on my router, installing from USB (clean install), and then editing hosts files. However, now I would like to upgrade a running system and Sonoma seems to have additional tricks to enroll us. Hope someone could help me run the upgrade to Sonoma without risking DEP/MDM (this is why I have not upgraded until now, but I have to do it now as a tool I use needs Sonoma now).

P.S. This means I am not DEP/MDM enrolled, correct?

Last login: Wed May 15 16:59:55 on console
admin@D-MBP-16-2021 ~ % sudo profiles show -type enrollment
Error fetching Device Enrollment configuration: (34000) Error Domain=MCCloudConfigurationErrorDomain Code=34000 "The device failed to request configuration from the cloud." UserInfo={NSLocalizedDescription=The device failed to request configuration from the cloud., CloudConfigurationErrorType=CloudConfigurationFatalError}
admin@D-MBP-16-2021 ~ %

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment