-
Restart in Recovery Mode
Restart your Mac then hold down the Command & R keys together until you're in the Recovery Mode menu
-
Click on Utilities then select: Startup Security Utility
-
The 3-choices popup appears: select (No security) (no confirmation button to press)
-
Restart again in Recovery Mode (Command+R)
-
Open Utilities → Terminal and type
csrutil disable -
Restart in Recovery Mode again and continue with Main Procedure
-
Open Utilities → Terminal and type
mount -
A list of things will show up once you enter in (mount) in Terminal
- Write down the disk associated with /Volumes/Macintosh HD (mine was /dev/disk2s5)
- Note: it's not "/", and it's not /Volumes/Macintosh HD - Data
-
Next, in Terminal, type
umount /Volumes/Macintosh\ HD -
Then:
mkdir /Volumes/Macintosh\ HD -
Then:
mount -t apfs -rw /dev/disk2s5 /Volumes/Macintosh\ HD -
Then:
cd /Volumes/Macintosh\ HD/System/Library/LaunchAgents -
Then:
mkdir xtemp -
Then:
mv com.apple.ManagedClientAgent.* xtemp/ -
Then:
mv com.apple.mdmclient.* xtemp/ -
Then:
cd ../LaunchDaemons -
Then:
mkdir xtemp -
Then:
mv com.apple.ManagedClient.* xtemp/ -
Then:
mv com.apple.mdmclient.* xtemp/ -
Then, Turn off Signed System Volume SSV
csrutil authenticated-root disable -
Lastly, Save the current disk status in the boot snapshot
bless --folder /Volumes/Macintosh\ HD/System/Library/CoreServices --bootefi --create-snapshot
Now you can restart your Mac, DEP notification is disabled.
-
After a normal boot, you can verify the DEP status in Terminal.
profiles status -type enrollment -
Disable DEP Status successful.
Enrolled via DEP: No MDM enrollment: No
-
After each upgrade to the latest BigSur, apply this method again to disable DEP.
-
Method has been tested and worked on following macOS BigSur version:
- 11.3.1
- 11.3
- 11.2.3
- 11.2.2
- 11.2.1
- 11.2
- 11.1
- 11.0.1