Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save torarvid/17ca7044643f5e8cd2b7fb18f3b05798 to your computer and use it in GitHub Desktop.
Save torarvid/17ca7044643f5e8cd2b7fb18f3b05798 to your computer and use it in GitHub Desktop.

Disable Device Enrollment Program (DEP) notification on macOS Catalina.md

  1. Boot to Recovery Mode by holding command-R during restart

  2. Open Tools → Terminal and type

$ csrutil disable
$ reboot
  1. Hold command-R during the reboot to enter Recovery Mode again

  2. Enter Disk Utility, and mount the Macintosh HD volume (or whatever your main volume is named)

  3. Exit Disk Utility, open Tools → Terminal, and type

$ cd "/Volumes/Macintosh HD/System/Library"
$ mkdir LaunchDaemons.disabled LaunchAgents.disabled
$ mv LaunchDaemons/com.apple.ManagedClient* LaunchDaemons.disabled/
$ mv LaunchAgents/com.apple.ManagedClient* LaunchAgents.disabled/
$ cd ../../etc
$ echo "0.0.0.0 albert.apple.com" >> hosts
$ echo "0.0.0.0 iprofiles.apple.com" >> hosts
$ echo "0.0.0.0 mdmenrollment.apple.com" >> hosts
$ echo "0.0.0.0 deviceenrollment.apple.com" >> hosts
$ echo "0.0.0.0 gdmf.apple.com" >> hosts
$ csrutil enable
$ reboot
  1. After a normal boot, you can verify the DEP status in Terminal:
$ profiles status -type enrollment
Enrolled via DEP: No
MDM enrollment: No
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment