This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 16%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Hello Experts,
we have a 13 inch Mac with M1 processor running on 12.0.1 which was joined initially via ABM.
It is the only device with this weird behavior:
The device does not Sync and report properly to Intune, even though the management profile is installed via the ABM.
When attempting to install Company Portal app an error says there is a conflict between the management profiles - on all of the other devices in our organization, when company portal is installed alongside with ABM the app checks for the profile and usually says "In compliance" afterwards.
Is there a way to remove the current management profile via Terminal in recovery mode of macOS? And then try to enroll again?
Any advice how to proceed is appreciated.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 65%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIC%3C/text%3E%3C/svg%3E)
We have a similar issues with a limited number of local domain computers - somehow the MDM has gone to Office 365 Mobile instead of Microsoft InTune - about 5% of our computers, with a mix of Windows and Macs. We are unable to change the ownership for some of these devices. Does this require a reset the the device enrollment? We have tried to remove the device and add it back without any change.
@Azure Apprentice Thanks for posting in our Q&A.
To clarify this issue, we appreciate your help to collect some information:
1.Please check if the MDM authority shows "Microsoft intune" in Tenant administration > Tenant status in intune portal?
2.Please check if the enrollment program token is active and not expired.
I have seen others have the similar issue before. Because of the incorrect MDM authority, the device ownership greyed out and showed "unknown".
If there is anything update, feel free to let us know.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Lu Dai-MSFT Yes, the MDM authority is correct. I assume a lot of other devices would have had issues if it wasn't. But that's the weird part it is, we have the issue with only this one.
From "DEP devices" it also shows this:
Token is active and did run a sync:
We have a policy that prevents the user from removing the management profile, the "-" is greyed out from "Profiles" in macOS.
Could someone provide steps similar to this unofficial guide:
http://www.whoopis.com/core/mac-related/removing-a-non-removable.html
,but for macOS Monterey? We would like to attempt to enroll the device again without having to remove it from Apple Business Manager and resetting it.
Any other advice is appreciated regarding the matter.
@Azure Apprentice Thanks for your update. In our official article, it shows that a setting "Locked enrollment" in the Apple enrollment profile will control whether the user can remove the management profile. However, after device enrollment, we cannot change this setting without wiping the device.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-macos
It means that if the setting is set to "Yes", there is no method to remove the management profile. It is needed to wipe the device and change the setting.
For the Device ownership "Unknown" and greyed out issue, it is needed to do log analysis to find the root cause. With Q&A limitation, it is suggested to create an online support ticket to get more effective help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support
Hope it will help.