Can You Sell an MDM-Enrolled MacBook?

Yes, you can sell an MDM-enrolled MacBook, but only after the organisation that owns the enrolment releases it. If the Mac is assigned in Apple Business Manager, wiping it does not help: it re-enrols itself during setup. The company's administrator has to clear Activation Lock, unassign it from their MDM and release the serial number first.

That last point is the one that catches sellers out, so this guide is written for the people who actually hold the Mac: IT administrators clearing old stock, office managers with a cupboard of leavers' laptops, and ex-employees who were told they could keep their machine.

What does MDM enrolment actually mean on a Mac?

MDM (mobile device management) is the service an organisation uses to push settings, apps and security rules to its Macs. A Mac joins it in one of two ways, and the difference decides whether a wipe fixes anything.

Profile-based enrolment. Someone installed an enrolment profile by hand, or through a company portal. The management lives on the disk, so erasing the Mac removes it along with everything else.

Automated Device Enrolment through Apple Business Manager. Apple renamed the service Apple Business, though many IT teams still call it ABM. Here the organisation has the Mac's serial number registered with Apple and assigned to its MDM server. The enrolment is not stored on the Mac at all; it lives on Apple's side. Every time the Mac is set up from scratch it contacts Apple, is told it belongs to the organisation, and shows a Remote Management screen that enrols it again.

A third state sits alongside both: Activation Lock. Organisations can hold it on a managed Mac too, and it blocks setup entirely until it is cleared.

How do you check whether a MacBook is enrolled?

Three checks, from quickest to most certain.

1. System Settings. Open System Settings, click General, then Device Management. On macOS Ventura the same list sits under Privacy and Security, Profiles. An entry named after an MDM enrolment, often with the company's name in it, means the Mac is managed. Apple's own guidance is blunt: if you cannot remove a profile, your Mac may be a managed computer and you need the administrator.

2. Terminal. Open Terminal and run:

profiles status -type enrollment

It returns two lines. "MDM enrollment: Yes" means the Mac is currently managed. "Enrolled via DEP: Yes" is the important one: DEP is the old name for Automated Device Enrolment, so a yes there means the serial number is assigned in Apple Business Manager and erasing will not end the relationship. Two "No" answers mean the Mac is not enrolled.

3. The setup screen. On a Mac that has already been erased, a Remote Management screen naming an organisation during setup is conclusive. Stop there and contact that organisation; there is nothing legitimate to click past.

Check Activation Lock at the same time. On a working Mac, System Settings, your name, iCloud, then Find My Mac shows whether it is on.

Who can release a Mac from Apple Business Manager?

Only the organisation. Specifically, a user in its Apple Business account whose role has permission to release devices. Nobody outside the organisation can do it for you: not a repair shop, and not a buyer. Anyone offering to "remove MDM" for a fee is selling either a temporary trick that fails at the next setup or something worse, and no reputable buyer will accept the result.

What is the right release order for IT admins?

Apple's release guide carries two warnings worth reading before anything else: releasing cannot be undone, and once a Mac is released you can no longer manage its Activation Lock through Apple Business. That dictates the order.

1. Clear Activation Lock first. Use your MDM's Activation Lock controls, or have the last user sign out of Find My. After release you lose the tidy way to do this.
2. Recover anything you need. Company files, licences tied to the machine, the asset tag. Deactivate software seats while the Mac is still yours to manage.
3. Unassign the Mac from the MDM server. This stops the MDM from claiming it again at the next setup.
4. Release it from the organisation. In Apple Business, go to Devices, Inventory, select the Mac, choose Release from Organization, tick the acknowledgement and confirm. The status should change to Released.
5. Erase it. Apple notes that released devices need to be erased and restored. Send the erase from your MDM while the Mac still checks in, or erase it locally, and keep the record of the erase in the asset register.
6. Confirm on the machine. Run through setup until you pass the point where Remote Management would appear. No screen, no enrolment.

One more rule from Apple: do not release a Mac that is going to Apple for repair, because a replacement unit would not come back into your account. For a batch, the same release can be done in one step from a text file of serial numbers, which saves an afternoon on a large clear-out.

What if you are an ex-employee who kept the laptop?

This situation is common and usually innocent: a manager said "keep it", and nobody in IT ran the steps above. The fix is the same, you simply cannot do it yourself.

Email the former employer's IT or operations team with the Mac's serial number (Apple menu, About This Mac) and ask them to release it from Apple Business Manager and their MDM, and to clear Activation Lock if it is on. Ask them to confirm in writing that the Mac is now yours. That email matters twice: it proves you are entitled to sell, and it is what you show any buyer who asks. If the company has closed, the person who handled its IT, or its accountant or liquidator, is usually the route in.

The full set of lock situations, including personal Apple IDs and forgotten passwords, is covered on our page about how to sell a locked MacBook.

Why do we insist on release before we buy?

Because a managed Mac is not a finished sale. If the serial number is still assigned to an organisation, the next owner meets a Remote Management screen, the machine is still under someone else's control, and the question of who owns it is still open. No refurbisher can sell that, and a buyer who accepts it is buying a dispute.

So our rule mirrors our Activation Lock rule: unlock first, then we buy. We check every serial number's Activation Lock and MDM status when it arrives. If a Mac is still enrolled or locked, we do not buy it; we send it back to you free and fully insured, with instructions for getting it released. Your quote stays open for 14 days from issue, so if the release happens and you re-post within that window, the price is the same.

Once the Mac is released, it is just a Mac. We quote it on model, specification and condition like any other, and every machine we buy is erased again to NIST 800-88 standards on inspection. For a single machine, our step-by-step guide on how to wipe a MacBook before selling covers the erase itself.

Selling the whole fleet once it is released

For IT teams the release is usually part of a refresh or a clear-out, not a one-off. A batch of two or more Macs is handled as a company sale: an itemised quote per device, a VAT invoice, and purchase orders accepted if your finance team works that way. Our page for businesses that want to sell company MacBooks sets out how that works, and the bulk Mac buyback service covers insured courier collection for larger batches.

Two practical points before you list the batch. First, we buy Apple Silicon Macs only, M1 and newer, so separate out any Intel units; they need another route. Second, send the serial numbers with the list. It lets us check release status before collection rather than after, which is the difference between one clean transfer and a returned box.

The short version

An MDM-enrolled MacBook is sellable the moment its organisation lets go of it, and not a moment before. Check enrolment in Device Management or with one Terminal command; if it shows ABM enrolment, the owner of that enrolment has to clear Activation Lock, unassign and release. Then erase, and it sells like any other Mac. When yours is released, get a fixed quote by email within 2 working hours, with free insured postage and payment within 24 hours of the Mac passing inspection.

Sources: Apple Support, Change Device Management settings on Mac; Release devices in Apple Business; Activation Lock for Mac.