SellUsediPhoneFast · Safe · Simple
Check an iPhone for a mobile device management (MDM) profile in Settings > General > VPN & Device Management, where any installed management profile appears with the name of the organization that manages the phone. A supervised iPhone also shows a message such as "This iPhone is supervised and managed by" an organization at the top of Settings or in Settings > General > About. A phone enrolled through Apple Business Manager or Apple School Manager shows a Remote Management screen during setup after an erase. Only the organization can release such a phone. A released, erased phone is ready for Sell iPhone for Cash.
- Where to look: Settings > General > VPN & Device Management.
- Supervision message: the top of Settings, or Settings > General > About.
- After an erase: a Remote Management screen means automated enrollment.
- Who removes it: the organization's IT administrator.
Where do I see device management on an iPhone?
Device management appears in 3 places on an iPhone:
| Location | What it shows |
|---|---|
| Settings > General > VPN & Device Management | Installed management profiles, configuration profiles and the managing organization |
| Top of the Settings screen, or Settings > General > About | A supervision message naming the organization |
| Setup assistant after an erase | A Remote Management screen asking to enroll with the organization |
When VPN & Device Management is missing from Settings > General, the phone has no profiles installed. A phone with no profile, no supervision message and no Remote Management screen is not managed.
What does an MDM profile restrict?
An MDM profile can restrict or control many functions, depending on the organization's settings. Common controls include:
- App controls: installing or removing work apps, and blocking the App Store.
- Security policies: passcode length and auto-lock time.
- Network settings: Wi-Fi networks, VPN connections and email accounts.
- Feature limits: camera, AirDrop, screen recording or iCloud backup.
- Remote actions: locking, erasing or locating the phone.
- Erase protection: on supervised phones, blocking Erase All Content and Settings.
A phone that the organization can erase or lock remotely cannot be resold safely until the organization releases it.
Who can remove MDM from a company iPhone?
Only the organization's IT administrator can fully remove MDM from a company iPhone. The removal has 3 parts:
- Remove the phone from the MDM server, which deletes the management profile.
- Release the phone from Apple Business Manager or Apple School Manager, which stops automated enrollment after an erase.
- Turn off Activation Lock, or remove the phone from any Apple Account used on it.
An employee can delete a profile that was installed manually and marked removable, but cannot remove a profile from a supervised phone or stop automated enrollment. How to Release iPhones From Apple Business Manager covers step 2, and How Businesses Sell Old Company iPhones in Bulk covers the full company process.
What is the difference between a profile and supervision?
A management profile and supervision are different levels of control. The table compares them.
| Attribute | Management profile only | Supervised phone |
|---|---|---|
| How it is set up | Installed by the user or by a link | Set up by the organization, often through automated enrollment |
| User can remove it | Often, when the profile allows | No |
| Controls available | Limited set | Full set, including erase blocking |
| Returns after an erase | No | Yes, when assigned in Apple Business Manager |
Personal phones used for work through user enrollment, also called bring your own device, keep work data separate and can be removed by the user.
What is the Remote Management screen?
The Remote Management screen appears during setup after an erase when the phone's serial number is assigned to an organization in Apple Business Manager or Apple School Manager. Apple's servers tell the phone to enroll with that organization's MDM server. The screen names the organization. A phone that shows this screen belongs to the organization's records, and erasing it again does not remove the assignment.
Can I sell an iPhone with an MDM profile?
An iPhone with an active MDM profile or automated enrollment is not ready to sell. The organization can lock or erase the phone remotely, and it returns to management after setup. Ask the organization's IT department to release it. After release, the phone is erased and sold like any other phone. Sell iPhone: Every Model and Condition We Buy lists the models and conditions accepted.
What if I bought a used iPhone with MDM?
A used iPhone with MDM or a Remote Management screen belongs, in the records, to the organization that enrolled it. Contact the seller and ask for the organization's release, or return the phone. The organization can confirm whether the phone was sold legitimately as surplus. Bought a Used iPhone That Is Locked? What to Do covers this and other locks.
How do I check a phone before buying or selling it?
Check a phone for management in 4 steps before buying or selling it:
- Open Settings > General and look for VPN & Device Management.
- Check the top of Settings and the About screen for a supervision message.
- Erase the phone and watch for a Remote Management screen during setup.
- Confirm Activation Lock is off and the IMEI is clean.
How to Check an iPhone IMEI Before You Sell It covers the IMEI check.
How do I remove a profile I installed myself?
Remove a profile installed manually in 4 steps:
- Open Settings > General > VPN & Device Management.
- Tap the profile.
- Tap Remove Management or Remove Profile.
- Enter the passcode to confirm.
When no remove button appears, the profile is locked by the organization. A profile for a school, employer or carrier service should be removed only after checking that the service is no longer needed.
Does MDM affect the phone's value?
MDM affects the phone's sale only until the organization releases it. A released phone is valued on model, storage, carrier lock status and condition, the same as any other phone. A phone still enrolled cannot be resold safely, so it cannot be bought at a working-phone price until release.
What should companies do before selling managed iPhones?
Companies should complete 5 steps before selling managed iPhones:
- Back up any business data required by retention policies.
- Remove each phone from the MDM server.
- Release each serial number from Apple Business Manager.
- Turn off Activation Lock on each phone, using the MDM bypass code when needed.
- Erase each phone and record the erasure for compliance.
iPhone IT Asset Disposition (ITAD): A Guide for Companies covers the full process, and Sell iPhones in Bulk covers volume quotes.
Can MDM see my personal data?
MDM on a company-owned phone can see device information, such as the model, serial number, installed apps and storage use, and can manage work accounts. Apple's documentation states that MDM cannot read personal email, messages, photos or browsing history. On personal phones enrolled through user enrollment, the organization manages only a separate work area.
What happens to an MDM phone after an employee leaves?
An MDM phone usually returns to the organization when an employee leaves, and IT then reassigns, erases or sells it. When the organization lets the employee keep the phone, IT must release it from management first. Selling Employee iPhones When Staff Leave or Upgrade covers the options.
Do school iPhones and iPads use MDM?
School iPhones and iPads usually use MDM through Apple School Manager, and they show the school's name on the Remote Management screen after an erase. The school's technology office must release them before sale. Selling School iPhones and iPads in Bulk covers school device sales.
What types of profiles can appear on an iPhone?
Four types of profiles can appear in VPN & Device Management. The table explains each.
| Profile type | Typical source | Effect on a sale |
|---|---|---|
| Mobile device management profile | An employer, school or organization | Must be removed by the organization |
| Configuration profile | A Wi-Fi network, email server or VPN service | Removed by erasing the phone |
| Beta software profile | Older Apple beta programs | Removed by erasing the phone |
| User enrollment (work account) | A bring-your-own-device program | Removed by the user or by erasing |
Only the first type blocks a sale. Configuration profiles for Wi-Fi or email are common and harmless after an erase.
How does MDM relate to Activation Lock?
MDM and Activation Lock are separate locks. MDM is the organization's control over settings and apps, while Activation Lock links the phone to an Apple Account through Find My. A supervised phone lets the organization generate an Activation Lock bypass code, which clears the lock during setup. A phone can have both locks, one, or neither. Both must be cleared before a sale. Activation Lock vs Carrier Lock vs Blacklist: The Differences explains the other lock types.
What documents prove a company phone was released?
Three documents prove a company phone was released: an export from the MDM server showing the device removed, a record from Apple Business Manager showing the serial number released, and an erasure record listing the serial number or IMEI with the date. Organizations that sell phones in bulk keep these records with the sale paperwork. Buyers of bulk lots may ask for the serial number list before quoting.
Can a buyback remove MDM?
A buyback cannot remove MDM or release a phone from Apple Business Manager, because only the organization that enrolled the phone has access to its management server and Apple Business Manager account. The organization completes the release before shipping, and the buyback confirms during testing that no Remote Management screen appears.
How long does a release from Apple Business Manager take?
A release from Apple Business Manager takes effect shortly after the administrator confirms it, and the phone stops showing the Remote Management screen at its next setup. Apple warns that a release cannot be undone; the organization can add the phone back only through Apple Configurator or a reseller. Release phones only when they are leaving the organization.
Does a carrier install MDM on iPhones?
U.S. carriers do not install MDM on personal iPhones. A carrier lock is a separate restriction stored in carrier records linked to the IMEI. Business accounts can buy phones from carriers already enrolled in Apple Business Manager, in which case the business, not the carrier, manages them.
Is a managed iPhone always company-owned?
A managed iPhone is not always company-owned. Some employers manage personal phones through user enrollment, and some families use profiles for parental controls.
Frequently asked questions about MDM profiles
How do I know if my iPhone has an MDM profile?
Open Settings > General > VPN & Device Management. Any installed management profile appears there with the organization's name. A supervised phone also shows a supervision message at the top of Settings or in Settings > General > About. A phone with neither, and no Remote Management screen after an erase, is not managed.
Can I remove MDM from an iPhone myself?
A user can remove a profile that was installed manually and marked removable in Settings > General > VPN & Device Management. A profile on a supervised phone, or automated enrollment through Apple Business Manager, can be removed only by the organization's IT administrator, who removes the phone from MDM and releases its serial number.
Does erasing an iPhone remove MDM?
Erasing an iPhone removes a manually installed management profile, but a phone assigned in Apple Business Manager or Apple School Manager shows a Remote Management screen during setup and enrolls again. Only the organization can stop that enrollment by releasing the phone's serial number from its account. Ask the organization for written confirmation of the release and keep it with the device records.
Can I sell an iPhone that has MDM?
An iPhone with active MDM or automated enrollment is not ready to sell, because the organization can lock or erase it remotely and it returns to management after setup. Ask the organization to release the phone. After release, erase it, confirm Activation Lock is off and sell it like any other iPhone.
What is the Remote Management screen on an iPhone?
The Remote Management screen appears during setup when Apple's servers show the phone's serial number assigned to an organization in Apple Business Manager or Apple School Manager. It asks to enroll the phone in that organization's management. Erasing again does not remove the assignment; only the organization can release it.
Sources and references
- Apple Platform Deployment Guide: device management, supervision and Automated Device Enrollment.
- Apple Support: Apple Business Manager and Apple School Manager user guides.
- Apple Support: what to do before you sell, give away or trade in your iPhone.