Videos
Hello, We're in a situation and we can not move forward. Long story short, My friend's son has passed away and we can not open his devices. He had a MacBook and iPhone. We stuck on the activation lock or use the MDM key. My friend doesn't know his son's password. We contacted apple several times to help up reset the password for his iCloud or remove the activation lock.
They requested proof of purchase which we did provide them and nothing after that. No email is been sent or nothing. Support doesn't help, every time we call they apologize and ask as to re-submit the request again. For over 2 months and nothing... Any help we greatly appreciate it.
Is it possible to remove activation lock from a device using the MDM? In this case, the MDM is Jamf. The device was configured using “Find My” with a personal iCloud account and the device key in Jamf doesn’t appear to be working. Also, how could I prevent users from enabling “Find My” with a personal account moving forward?
From what I am seeing, I have to go to Apple with proof of purchase, but wanted to confirm before doing so.
This deviceid is used when it reaches out to manage.microsoft.com (intune)https://r.manage.microsoft.com/devicegatewayproxy/cimhandler.ashx
In the request you will notice the DevId:
An unique device identifier. An application-specific global unique device identifier is provided in this node.
UseHWDevID node of the DMAcc configuration service provider can be used to modify the return value to instead return a hardware device ID as follows:
For GSM phones, the IMEI is returned.
For CDMA phones, the MEID is returned.
For dual SIM phones, this value is retrieved from the UICC of the primary data line.
For Windows 10 for desktop editions (Home, Pro, Enterprise, and Education), an application specific global unique identifier (GUID) is returned irrespective of the value of UseHWDevID.
https://learn.microsoft.com/en-us/windows/client-management/mdm/devinfo-csp
You can also use the localmdm tool to fetch it...
Send-LocalMDMRequest -OmaUri ./DevInfo/DevId
CmdId : 1
Cmd : Get
Status : 200
OmaUri : ./DevInfo/DevId
Data : idfromtheregistry :)
@Bevan Thomas, Thanks for posting in Q&A. For the evid, did you mean Intune device id? If yes, based as I know, the Mobile Device Management (MDM) registration enrolls a device into a management service, The device ID is created by the MDM server and is unique to each device. It is not related to the hardware serial number and can change during the device's lifetime if the device is wiped and re-enrolled in the MDM service.
For the Intune device Id, you can find it in "EntDMID" under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\GUID\DMClient\MS DM Server
Edit the reply.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Dear John,
Hope you are doing good.
You need to contact your AAD Administrator/Intune/SCCM Administrator to get MDM URL.
Microsoft Intune Specific Steps
If your organization uses Microsoft Intune, here are steps you might follow:
- Azure Portal: An IT admin can find the MDM server URL in the Azure portal.
- Go to the Azure portal (https://portal.azure.com).
- Navigate to Azure Active Directory > Mobility (MDM and MAM).
- Here, you can see the MDM server URLs configured for different platforms.
- Intune Admin Console:
- Go to the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com).
- Navigate to Devices > Enroll devices > Windows enrollment.
- Look for the MDM enrollment section, where the MDM server URL might be listed.
Please accept as answer if it helps
XDR John Nora Corey_C++_C#