Back to Guides
Guide

Apple MDM & DEP Lock Check: Is the iPhone Corporate-Locked?

5 min readUpdated 6/1/2025

Apple MDM Lock and DEP: The Used iPhone Risk Most Buyers Miss

MDM (Mobile Device Management) and DEP (Device Enrollment Program) locks are enterprise security controls that make an iPhone permanently supervised by a company's IT department. A consumer buying such a phone will find it severely restricted — or completely unusable — even after a factory reset. This check is critical when buying used iPhones from business liquidations, auctions, or individual sellers who previously had company phones.

What Is Apple MDM Lock?

MDM is software used by companies to manage employee devices. When an iPhone is enrolled in MDM, the company's IT team can:

  • Remotely wipe the device
  • Block app installation
  • Restrict settings access
  • Monitor usage and location
  • Prevent removal of the MDM profile

An iPhone with a supervised MDM profile cannot be fully freed by factory reset alone if it was enrolled via Apple's Automated Device Enrollment (formerly DEP). The enrollment is tied to the device's serial number — not the Apple ID — and survives factory resets.

What Is Apple DEP (Device Enrollment Program)?

DEP, now called Automated Device Enrollment (ADE) in Apple Business Manager / Apple School Manager, allows organizations to enroll devices in MDM automatically during setup. When an iPhone is registered in a company's DEP profile, every time it is reset and activated, it automatically re-enrolls in the company's MDM — no way around it for the consumer.

This means: if a company sells off old iPhones without removing them from DEP, the buyer will hit a "Remote Management" screen during setup that they cannot bypass.

How to Check if an iPhone Has MDM or DEP Lock

  1. Factory reset the device (or ask the seller to, in your presence). If it shows a "Remote Management" screen during setup that asks to enroll in management, the device has an active DEP profile.
  2. Check current MDM status (if already set up): Go to Settings → General → VPN & Device Management. If a profile is listed that cannot be removed, the phone has MDM.
  3. Run a premium IMEI check at imeicheckpro.com — our premium report includes MDM/DEP enrollment status for Apple devices.
  4. Ask the seller if the phone was a personal device or a company/work phone. Company phones are far more likely to have DEP enrollment.

Phones Most Likely to Have MDM/DEP Lock

  • iPhones sold in bulk from company auctions or IT asset liquidators
  • Phones listed as "from a business" or "ex-corporate device"
  • Phones at suspiciously low prices that "need setup"
  • iPhones from eBay listings from large resellers, especially in bulk lots
  • Ex-school or university iPhones (Apple School Manager enrollment)

Can MDM/DEP Lock Be Removed?

Only the company that enrolled the device in Apple Business Manager / Apple School Manager can remove the DEP enrollment. If the company no longer exists or is unresponsive, Apple can sometimes intervene with proof of legal ownership transfer. As a consumer buyer, your options are:

  • Return the phone (eBay Money Back Guarantee, credit card dispute)
  • Contact the company that enrolled the device and request DEP removal
  • Contact Apple with proof of purchase — Apple has a process for inherited DEP devices

There is no third-party software that legitimately removes DEP enrollment. Any service claiming to "remove DEP lock for $X" is a scam.