探花大神

If a device fails to enroll in 探花大神 MDM, there are two common causes:

• It is still enrolled with another MDM provider.
• Or there are remnants of the previous MDM provider on the device.

When users try to enroll in 探花大神 MDM via the User Portal and enrollment fails, the following error may appear: The device is already being managed by an organization.

You can use 探花大神 Commands or the 探花大神 PowerShell Module to check the MDM enrollment status of your devices.

Using 探花大神 Commands to Confirm Enrollment

If the device has the 探花大神 Agent installed, you can use the following command to check the status of a specific device.

To check the device鈥檚 enrollment status using 探花大神 Commands:

1. Log in to the .
2. Go to DEVICE MANAGEMENT > Commands. 

3. Click (+), then click Command to create a new command. The Details tab for the new command displays.
   1. In the Type field, click Windows. 
   2. Select Windows PowerShell.
   3. In the Command field, paste the following:
      get-jcsystem -hostname Workbox | select-object mdm
   4. Select the Devices tab. Select one or more devices where you want to apply this command.
   5. Click Save.  
4. From your list of commands, run the newly created command on the affected device by clicking Run Now. 
5. Go to the Results tab and click view. Locate the vendor value in the results.

In the following example, the vendor is Internal, meaning that this device has successfully enrolled in 探花大神 MDM. If the Vendor is None there is no detected MDM provider on this device. If the vendor value is External, that means another MDM provider has been detected on the system.

Using the PowerShell Module to Confirm Enrollment

You can also use the 探花大神 PowerShell Module to check the enrollment status of all of your devices in 探花大神.

To use the PowerShell Module to check enrollment status:

1. Run the following command in the PowerShell Module:

2. Check the $MDMStatus and $Provider values in the command results:
   1. If the device is enrolled with another MDM provider, follow the vendor鈥檚 specified steps to unenroll the device. 
   2. If the device was unenrolled but it is still detected as an enrolled device, we recommend you contact the vendor for assistance with removing the remnants of the previous MDM enrollment.

There are times when a Windows device enrollment in 探花大神 MDM can鈥檛 be removed by normal methods, such as when the device is still linked with a previous MDM provider. When normal MDM removal methods don鈥檛 work, you can run the 探花大神_MDM_Removal script to manually locate and remove an MDM profile.

Considerations:

• The MDM removal script can run either remotely (from the 探花大神 Admin Portal) or locally without user intervention. 
• The script locates existing MDM Enrollment IDs in the HKLM:\SOFTWARE\Microsoft\Enrollments location of the registry then removes all other keys related to the MDM enrollment.

Prerequisites:

• Your device must have the 探花大神 agent installed in order to receive PowerShell commands. See Install the 探花大神 Agent.

To run the MDM removal script on a Windows device in the 探花大神 Admin Portal:

1. Download the PowerShell script from GitHub: .
2. Log in to the .
3. Go to DEVICE MANAGEMENT > Commands. 

4. Click (+), then click Command to create a new command. The Details tab for the new command displays.
   1. In the Type field, click Windows. 
   2. Select Windows PowerShell.
   3. In the Command field, paste the contents of the 探花大神 MDM removal script.
   4. Select the Devices tab. Select one or more devices where you want to apply this command.
   5. Click Save.  
      

5. From your list of commands, run the newly created command on the affected device by clicking Run Now. 

6. (Optional) If the MDM enrollment removal script fails to run using 探花大神 Commands (or the device is inaccessible for other reasons), you can run the script locally:
   1. Open an elevated PowerShell or PowerShell_ISE session on your Windows device.
   2. Paste the contents of the 探花大神 MDM removal script.
   3. Press Enter to run the script.