Apple Business User Guide
- Welcome
-
-
-
- Apply Blueprints
- Intro to Configurations
-
- AirDrop configuration
- AirPlay configuration
- AirPrint configuration
- App Access configuration
- Apple Intelligence & Siri configuration
- Application Layer Firewall configuration
- Certificate configuration
- Content Caching configuration
- Custom configuration
- Data Management configuration
- Energy Saver configuration
- FileVault configuration
- Gatekeeper configuration
- iCloud configuration
- Lock Screen configuration
- Password and Screen Unlock configuration
- Software Update configuration
- VPN configuration
- Web Clip configuration
- Web Filter configuration
- Wi-Fi configuration
- Edit a configuration
-
- Use the Asset Gallery
- Glossary
- Document revision history
- Copyright and trademarks
Unenroll devices and sign out users in Apple Business
When a user’s device no longer needs to be managed by the built-in device management service in Apple Business but you don’t want to erase it, you can unenroll the device.
When you unenroll a device:
The device is unenrolled from the built-in device management service
The Managed Apple Account is removed from the device
Any configured settings are removed from the device
Any downloaded certificates, fonts, and Web Clips are removed from the device
Any managed apps may be removed from the device
Any files created with a managed app may be removed from the device
For User Enrolled devices, all personal apps and settings remain.
Unenroll a device
You can also directly unenroll devices that were added using Automated Device Enrollment without a Blueprint associated with it.
In Apple Business, sign in with a user whose role has permissions to view and manage devices using built-in device management.
To view roles and permissions, see Intro to roles and permissions.
If necessary, search for the device in the search field. See How to search.
After you locate the device, select it from the list, then select Unenroll
.Carefully read the dialog, select I understand this cannot be undone, then select Unenroll.
Sign a user out of a device
You can also directly unenroll devices that were added using:
Account-driven User Enrollment
Account-driven Device Enrollment
Automated Device Enrollment with a Blueprint associated with the user.
In Apple Business, sign in with a user whose role has permissions to view and manage devices using built-in device management.
To view roles and permissions, see Intro to roles and permissions.
If necessary, search for the device in the search field. See How to search.
After you locate the device, select it from the list, then select Sign Out User
.
Tell users how to sign out of a device
Users can also directly unenroll devices that were added using:
Account-driven User Enrollment
Device-driven User Enrollment
Have the user:
Go to Settings on an iPhone or iPad.
Select the section that displays your organization name and their Managed Apple Account.
Scroll to the bottom of the page, then select Sign Out.