Link copied to clipboard!
System: ONLINE
API Load: 37%
24h Checks: 3,429
Latency: 32ms
← console.log('Back to Blog')
Estimated reading time: 2 min

MDM & DEP Explained: The "Company Lock" That Survives a Reset

You bought a bargain iPhone on eBay. It works perfectly until you reset it. Suddenly, a screen appears: "Remote Management. This device is owned by [Company Name]". You are now stuck in the MDM trap.

Lock Type: Mobile Device Management (MDM)
Root Cause: Serial Number in Apple DEP
Persistence: High (Survives DFU Restore)

What is DEP (Device Enrollment Program)?

Apple DEP (now part of Apple Business Manager) allows companies to automatically configure thousands of devices. When a company buys iPhones, Apple links the Serial Numbers to the company's server before they even open the box.

When the iPhone connects to Wi-Fi during the "Hello" screen setup, it asks Apple's activation server: "Do I belong to anyone?". The server replies: "Yes, you belong to Acme Corp. Download their configuration."

Symptoms of an MDM Lock

Can MDM be Removed? (Bypass vs. Removal)

This is the most common confusion. There are two ways to handle MDM:

1. MDM Bypass (Temporary)

This software skips the "Remote Management" setup step. You can use the phone normally. HOWEVER, if you factory reset the device or update iOS, the lock will return, and you must run the tool again. This is cheap and common.

2. MDM Removal (Permanent)

This requires removing the Serial Number from the company's server. This is extremely difficult and usually requires an insider or "sold to" info to request a removal from the company IT department.

Is Your Device Clean?

Before buying bulk devices, check their MDM status. Don't get stuck with corporate bricks.

Check MDM Status

How to Avoid Buying an MDM Device

  1. Check the IMEI/Serial: Use our bot to see if "MDM Status" is ON.
  2. Ask for a Reset: Never buy a used phone without resetting it right in front of the seller. If the MDM screen pops up, walk away.
  3. Look for Profiles: In Settings > General > VPN & Device Management. If you see a profile you didn't install, be suspicious.