Favicon

You are here: Home > Device Management > Windows > Get Started > Disable Manual Unenrollment

Disable Manual Unenrollment

Prevent users from manually unenrolling Windows devices from MDM. Learn how to disable manual MDM unenrollment in Applivery to ensure persistent management.

3 min read

TL;DR

Disable manual MDM unenrollment on Windows devices via Applivery policy to maintain control and security compliance.

By default, Windows allows users to manually disconnect their device from a Mobile Device Management (MDM) provider. In managed environments, this can pose a risk, as it enables end users to bypass security or compliance configurations. To maintain control and ensure persistent management, you can disable this option by configuring a policy.

Disabling manual MDM removal

1
Navigate to Policies

Once in the Applivery Dashboard, head to Policies (1). Choose the policy where you want to add this configuration.

2
Add Configuration

In the left-hand menu, select + Add configuration (2), and search for Experience (3).

experience
3
Disable Manual Unenrollment

Locate the Allow Manual MDM Unenrollment setting and set its value to 0. This will prevent users from manually unenrolling the device from Applivery.

disallow user unenrollment

Key Takeaways

  • Prevent manual MDM unenrollment to enforce security policies.
  • Use Applivery's policy settings to control device management.
  • Disabling manual unenrollment ensures persistent device management.