IT Administrator Runbook: Cloud Lock & MDM Release for Handset ITAD
Before retiring corporate smartphones, tablets, MacBooks, or rugged barcode scanners through an IT Asset Disposition (ITAD / ATID) laboratory, IT administrators must release hardware serials from cloud zero-touch provisioning portals (Apple Business Manager, Apple School Manager, Microsoft Intune / Autopilot, Samsung Knox Mobile Enrollment, Google Zero-Touch, and SOTI MobiControl). Wiping a device without releasing its cloud enrollment token leaves the hardware bound to your corporate tenant, reducing buyback value or triggering carrier lease non-return penalties. At Phone Repair Centre (122 Queen St, St Marys NSW 2760), we strictly prohibit grey-market bypasses and instead provide automated M360 lock auditing and Exception CSV manifests so your team can execute legitimate 1-click bulk release.
Why Wiping a Device in MDM Is Not Enough for ITAD
A common misconception among helpdesk administrators is that clicking Wipe inside Microsoft Intune, Jamf Pro, Workspace ONE, or Kandji completely prepares an iPhone, iPad, or Galaxy handset for sale or lease return. In reality, an MDM wipe only erases the local user partition while leaving the hardware serial number registered inside your upstream root enrollment portal (such as Apple Automated Device Enrollment / DEP or Samsung Knox Mobile Enrollment). The moment our laboratory connects the wiped handset to Wi-Fi during M360 diagnostic grading, the device reaches out to Apple, Google, or Samsung activation servers and forces re-enrollment into your corporate tenant.
Platform-by-Platform Enterprise De-Provisioning Commands
| Enterprise Ecosystem | Exact Admin Portal Path | Mandatory Pre-ITAD Action |
|---|---|---|
| Apple Business Manager (ABM) & School Manager (ASM) (iPhone 12-18 Pro Max, iPad, MacBook M1-M4) |
business.apple.com or school.apple.com → Devices → Search CSV Serials |
1. Clear Activation Lock via MDM Bypass Code. 2. Unassign MDM Server. 3. Select Release from Organization (irreversible release for lawful title transfer). |
| Microsoft Intune & Entra ID (Azure AD) (iOS, Android Work Profile, Surface Pro 9/10/11) |
intune.microsoft.com → Devices → Enrollment → Windows Autopilot / Corporate Identifiers |
1. Issue Retire/Wipe command. 2. Delete device object from Intune & Entra ID. 3. Deregister hardware hash from Windows Autopilot devices. |
| Samsung Knox Mobile Enrollment (KME) & Knox Guard (KG) (Galaxy S23-S26 Ultra, Z Fold, XCover, Tab Active) |
knox.samsung.com → Knox Mobile Enrollment → Devices |
1. Remove assigned MDM profile. 2. Select IMEIs and click Delete / Deregister from KME. 3. Confirm carrier Knox Guard (KG) status is Completed / Unlocked. |
| Google Android Enterprise Zero-Touch (Google Pixel 8/9/10 Pro & Dedicated Android Fleets) |
partner.android.com/zerotouch → Devices |
1. Trigger Reset via EMM console (clears Enterprise FRP). 2. Deregister IMEI from Zero-Touch portal. |
| SOTI MobiControl & Zebra StageNow (ATID AT880/AT911N, Zebra TC52/TC57, Honeywell) |
SOTI MobiControl Console → Device Group → Unenroll | 1. Disable Enterprise Reset Persistence / OEMConfig lock. 2. Exit Kiosk / Lock Task Mode. 3. Unenroll device prior to St Marys lab dispatch. |
How PRC's Exception CSV Workflow Saves Hours of IT Admin Time
If your team is decommissioning 200 handsets pulled from storage drawers across multiple offices, you do not need to manually power on and check every device beforehand:
- Step 1: Pack the entire mixed batch (working, cracked, and dead units) into our numbered tamper-evident security satchels.
- Step 2: At our St Marys laboratory, we connect all working units to our M360 multi-dock stations and revive non-booting units on our Level 4 microsoldering bench.
- Step 3: Any serials that flag an active ABM/DEP, Activation Lock, Knox Guard, or FRP state are automatically exported into a clean Exception Manifest CSV emailed to your IT administrator.
- Step 4: Your administrator pastes the CSV list into Apple Business Manager or Knox to release all flagged serials in under 3 minutes, unlocking 100% Grade A/B wholesale buyback value.
Launch Our Interactive MDM Checklist & Fleet Tools
- Use the Interactive Enterprise MDM & ATID De-Provisioning Checklist
- Explore the Corporate Handset ITAD & Fleet Buyback Hub
- Download the Corporate Fleet Manifest Template (.xlsx)
IT Asset Disposition (ITAD / ATID) for Handset & Mobile Device Fleets in Sydney
Phone Repair Centre operates Sydney's flagship micro-electronics and ITAD laboratory at 122 Queen St, St Marys NSW 2760 with 18+ years of experience in Sydney. We provide direct corporate handset fleet decommissioning, NIST SP 800-88 Rev. 2 & Rev. 1 cryptographic sanitisation, APP 11.2 compliance certification, Level 4 logic board revival, and direct wholesale buyback payouts across Australia.
✓ NIST SP 800-88 Rev. 2 & APP 11.2 Sanitisation
Cryptographic Clear and Purge erasure with serialized, tamper-proof PDF certificates per IMEI. Fully aligned with Australian Privacy Principle 11.2 (APP 11.2) and APRA CPS 234 obligations.
✓ Level 4 Board Revival & OCA Glass Moat
Cracked or non-booting corporate handsets (iPhone, Samsung Galaxy, iPad, Zebra, Honeywell, ATID) are revived on our microsoldering bench to recover working residual value rather than broker shredding fees.
✓ Direct Lab Economics & Corporate EFT
Zero intermediary broker commissions. Transparent asset valuation reports with direct corporate EFT settlement to the verified ABN entity name against a formal Recipient Created Tax Invoice (RCTI).
✓ Tracked Chain of Custody & AS/NZS 5377:2013
Tamper-evident courier collection across Greater Sydney and Australia-wide with immediate serial intake reconciliation, ABM/Intune/Knox MDM lock verification, and Scope 3 carbon reporting.