When retiring, reallocating, or unenrolling a Windows workstation or 1-to-1 student laptop managed by Mobile Guardian, administrators can offboard the device remotely via the dashboard or manually on the hardware itself.
1. Remote Offboarding via Mobile Guardian Dashboard
Remote actions are the preferred method when the device is online and can check in with the Mobile Guardian server.
Option A: Remove MDM (Unenroll Only)
Use this option when the computer remains with the user or organisation but no longer requires Mobile Guardian management, filtering, or policy enforcement.
- Log in to the Mobile Guardian Dashboard.
- Navigate to Devices and locate the target Windows device.
- Open the device overview panel and click the Actions dropdown menu.
- Select Remove MDM
- Confirm the action when prompted.
The MDM enrollment profile is removed, application pushes cease, and Mobile Guardian profiles/policies are revoked. User files, accounts, and local applications remain intact. The Provisional Package will need to be manually removed from the device.
Option B: Wipe (Factory Reset)
Use this option when a device is being recycled, sold, or reassigned to a completely new user and all existing local data must be scrubbed.
- In the Mobile Guardian Dashboard, open the target device record.
- Select Actions > Wipe.
- Confirm the action to execute the remote reset command.
Windows triggers an internal factory reset, removing all user profiles, locally installed applications, and cached data, returning the device to the initial Out-of-Box Experience (OOBE).
2. Manual Offboarding from the Device
If the machine is offline, has lost communication with Mobile Guardian, or requires immediate local disconnection, offboard it directly in Windows.
Step 1: Disconnect the Work or School MDM Account
- Open Windows Settings.
- Go to Accounts > Access work or school.
- Locate the Mobile Guardian enrollment profile or associated MDM account.
- Click the entry to expand it and select Disconnect.
- Confirm by selecting Yes when prompted that corporate data and policies will be removed.
Step 2: Remove the Provisioning Package (.ppkg)
If the device was enrolled using a Windows Provisioning Package (PPKG created via Windows Configuration Designer or provided by Mobile Guardian):
- Open Windows Settings.
- Navigate to Accounts > Access work or school.
- Scroll down to the bottom and select Add or remove a provisioning package.
- Identify the Mobile Guardian package from the installed list.
- Click the package and select Remove.
- Reboot the system to complete the configuration rollback.
Once you have completed either of the above, remove the device from the Mobile Guardian Dashboard.
We hope you found this helpful.
Thanks for reading! 🙂