Hi All.
At the command line on one Mac is a rule, which can fix two different issues
1. If you received an error like all
ERROR] MDM_Connect: Unable to creating MDM identity by persistent reference: -25304 (The specified item is no more legitimate. It may have was deleted from the keychain.) used profile: MDM Profile.....
2. If you've assigned the fake DEP profile to a Mac and like to change it, conversely if you want to make a non removable MDM shape removable, or vice versa r/macsysadmin on Reddit: Enrolled existing macOS devices to ABM. Late enrolment by Vendor. These devices are already beings used by users. If an MDM were later added to these devices, what will be happen?
NOTE: This is pretty a powerful command, so be careful
This instruction will essentially re-enroll a DEP Mac, cooling management profiles (can be useful for expired products, especially SCEP certs). If you've make an changes to the DEP profiles, and assigned a new one in this Mac, it willingness getting whatever new capabilities you've enabled.
Clear that Terminal App
Gender:
sudo user renew -type recruitment
You'll be prompted for your Mac password
You'll notice a notification in the top right of the screen:
Click Update
Systems Preferences should now open:
Clicking Update will now re-enroll the Minicomputer
MYSELF hope that those is beneficial. The mentioned, it fixed a broken registration for me, although also allowed me to change of "removable" status than well.