Corporate computer keep enrolling to unknown MDM profile, even after format/reinstall

CONCLUSION/SOLUTION :

While searching for the original invoice of the computer to contact Apple, I finally discovered that this Apple laptop was sold brand new but with an "customer return" mention (and rebate) from our corporate authorized Apple reseller. So this computer has been enrolled by the prior customer on his MDM using the SN# since the box itself were still factory sealled (what misled me). Finally our corporate reseller were able to contact Apple on their own side to request the computer to be un-enrolled from the other company account!

Moral of the story : be carefully when you purchase "open box" of any Apple products... it definitely not "safe" as with a Windows PC because Windows 10 can be remotely deployed/managed using Azure AD, but if you format the HDD, it wont re-enroll itself!

Barney-15E wrote:

There are several similar posts. My assumption is that company mistyped the serial number into their DEP and the profile is pushed by Apple when it sees the serial number contact the install server.

But, that is merely a guess.

Absolutely sound possible! The thing is this employee never had a administrator account in our corporate computer, so it's 100% impossible that she installed (accidentally or not) an MDM profile by herself! You know how it works... when you "bind" a computer to an MDM server, you have to install several profiles and agree to several thing that requires administrative rights to the computer, except if it's pushed by Apple at the very first "hardware level" of the computer when I reinstalled MacOS.

Now, since Apple are responsible for managing the push of the profiles to theirs computers, they should be able to help me removing my SN# from the infrastructure somewhere!? I have the proof of purchase of this compter in my hand, so it's super easy for me to prove that we are the only legitimate owner of this computer and that we are not related to this unknown company MDM.

So what do you suggest? Trying to reopen my ticket again and try to elevate it to someone else at Apple who really know what he/she is doing?

I can't really contact the company where our computer is enrolled because I only see like a weird company name during the initial enrollment process that didn't link to any known company. I also tried to find the domain name from the MDM profile but it's lead to a foreign company in another country who have no website where I can't find any contact information. It's like a needle in a haystack...

We surely have a legal team, however it doesn't make sense to me to "sue" the company who wrongfully enrolled my corporate computer. This is definitely a security/design flaw in the MDM by Apple... I mean, why should I spend money for my lawyers for something that I am the legitimate and proven owner and where I don't have a tiny little liability into the situation.

Apple should definitively be able to do something on their side, not me having to "fight" with the other company who illegitimately "own" the management my computer...

I'll try to contact Apple again now to try elevating my ticket to a higher department.