topic Re: Meraki Offboarding Process in Endpoint Security

Meraki Offboarding Process

anwar.diedericks — Sat, 18 Jun 2022 22:16:42 GMT

Hi there,

When a MacOS device is decommissioned what is the process and flow for removing Meraki completely from that device.
For example:
1. If the device is enrolled in Apple Business Manager, remove MDM and release device
2. How do we remove the Meraki agent and stop it from redeploying (remotely)
3. How do we remove the profiles (remotely)
4. Not necessary but would be great to be able to wipe the device as well with profile and agent removed

Re: Meraki Offboarding Process

BBETTE — Sun, 19 Jun 2022 06:07:20 GMT

Check out https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Managed_Devices#macOS

Re: Meraki Offboarding Process

anwar.diedericks — Sun, 19 Jun 2022 10:24:34 GMT

@BBETTE That is the method we're already using. It causes that some devices after offboarded and deleted re-appear as Unknown in the dashboard and takes up a license.

Is there any method of removing the profiles and systems manager remotely?

Re: Meraki Offboarding Process

Jeffrey_Lane — Sun, 19 Jun 2022 13:00:38 GMT

Please note that if these are Apple devices they may be assigned to the meraki system in Apple School/Business Manager. The devices need to be unassigned in Apple or removed from apple school manager or they will again receive the MDM. After the device is removed from Apple School/Business Manager, it can be Restored - or have a fresh OS installed leaving no vestige of MDM.

Re: Meraki Offboarding Process

BBETTE — Sun, 19 Jun 2022 13:01:13 GMT

If you no longer have physical access to the device and need to remove the agent, remote commands similar to the following may be used. Please note you are deleting files and executing commands at your risk.

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist
rm -f /Library/Application Support/Meraki/m_agent /Library/Application Support/Meraki/m_agent_upgrade
rm -rf '/Library/Application Support/Meraki/'
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist

or

launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist && 
rm -f /Library/LaunchDaemons/com.meraki.agentd.plist && 
rm -rf "/Library/Application Support/Meraki/" && 
rm -rf “/usr/local/sbin/Meraki/“ && 
rm -f /usr/local/sbin/m_agent*

Re: Meraki Offboarding Process

BlakeRichardson — Sun, 19 Jun 2022 21:06:43 GMT

@anwar.diedericks

The process we follow if we are disposing of a device is.

1. Remove it from DEP.

2 Erase and install fresh copy of MacOS.

3. Remove from Meraki dashboard.

I don't see that point in just removing the profiles and agent, if you are getting rid of the device then fully erasing the disk is the most secure option as it removes the potential to accidentally leave files on the device.