Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save csrutil/ca334f9d2bfd8c5a40ab3b54691fbdb2 to your computer and use it in GitHub Desktop.
Save csrutil/ca334f9d2bfd8c5a40ab3b54691fbdb2 to your computer and use it in GitHub Desktop.

Disable Device Enrollment Program (DEP) notification on macOS Catalina.md

  1. Boot to Recovery Mode by holding Command-R during restart

  2. Open Tools → Terminal and type

$ csrutil disable
$ reboot
  1. Hold Command-R during the reboot to enter Recovery Mode again

  2. Enter Disk Utility, and mount the Macintosh HD volume (or whatever your main volume is named)

  3. Exit Disk Utility, open the Terminal, and type

$ mount -uw /
$ cd "/Volumes/Macintosh HD/System/Library"
$ mkdir LaunchDaemons.disabled LaunchAgents.disabled
$ mv LaunchDaemons/com.apple.ManagedClient* LaunchDaemons.disabled/
$ mv LaunchAgents/com.apple.ManagedClient* LaunchAgents.disabled/
$ cd ../../etc
$ echo "0.0.0.0 albert.apple.com" >> hosts
$ echo "0.0.0.0 iprofiles.apple.com" >> hosts
$ echo "0.0.0.0 mdmenrollment.apple.com" >> hosts
$ echo "0.0.0.0 deviceenrollment.apple.com" >> hosts
$ echo "0.0.0.0 gdmf.apple.com" >> hosts
$ csrutil enable
$ reboot
  1. After a normal boot, you can verify the DEP status in Terminal:
$ profiles status -type enrollment
Enrolled via DEP: No
MDM enrollment: No
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment