MDM/Enterprise Lock Check

Check for corporate management profiles

Bottom lineA Mac enrolled in corporate MDM can be remotely locked or wiped. Run `profiles status -type enrollment` in Terminal: both lines must say No. The most reliable check is to erase the Mac, connect to Wi-Fi during setup, and confirm no Remote Management screen appears. If it does, the Mac is company-supervised—do not buy it.

  1. Check Device Management

    System Settings > General > Device Management. If this option exists, check for profiles

  2. Check Profiles via Terminal

    Open Terminal and run: profiles status -type enrollment (results are most reliable while connected to the internet)

  3. Interpret Results

    'Enrolled via DEP: No' and 'MDM enrollment: No' means no enterprise lock. Any 'Yes' indicates MDM

  4. Verify via Erase & Setup Assistant

    The most reliable check: erase the Mac, then connect to Wi-Fi in Setup Assistant. If a 'Remote Management' screen appears during setup, the device is enrolled in enterprise management

Warning: Enterprise-managed Macs may have remote wipe capabilities, software restrictions, or may be reported stolen. Avoid purchasing these devices.

Buy Me a Coffee