Known Issue: Uninstalling the AutoElevate macOS agent may remove the Addigy agent or MDM profile
Learn about the risks of uninstalling the AutoElevate macOS agent and its potential impact on the Addigy agent and MDM profile.
Table of Contents
Some partners have reported that uninstalling the AutoElevate macOS agent from an Addigy-managed Mac also removed the Addigy agent and/or the device's MDM profile — not just AutoElevate. This article explains what to expect, how to reduce risk before uninstalling, and what to do if it has already happened.
Symptoms
After uninstalling the AutoElevate agent from a Mac enrolled in Addigy, you may see one or more of the following:
- The Addigy agent is no longer installed on the device
- The device's MDM profile is removed and the Mac shows as unenrolled/unmanaged
- The device stops appearing in (or stops checking in to) your Addigy console
- Other MDM-delivered configuration on the device is lost along with the profile
The behavior does not occur in every configuration. Standalone (non-Addigy) Mac agent installations and Windows agents are not affected.
Cause
On macOS, the AutoElevate agent's Addigy integration shares components with the Addigy deployment. In some configurations, the AutoElevate uninstall process removes more than the AutoElevate agent itself, which can take the Addigy agent or the MDM enrollment profile with it. Engineering is aware of the behavior; a code change is not currently scheduled.
Before You Uninstall (Prevention)
If you need to remove AutoElevate from an Addigy-managed Mac:
- Treat the uninstall as potentially removing MDM. Plan for the possibility that the device will need to be re-enrolled in Addigy afterward.
- Confirm you have a re-enrollment path for that device before you start (Addigy enrollment link/policy, and physical or remote access sufficient to re-enroll).
- Avoid bulk or remote uninstalls across Addigy-managed Macs until you have verified the behavior on a single test device in your environment.
- If the device is business-critical or hard to reach, contact CyberFOX Support before uninstalling — we can review your configuration and advise on the safest removal path.
Warning: Do not uninstall the AutoElevate agent from a remote Addigy-managed Mac that you cannot re-enroll. If the MDM profile is removed, remote management of that device may be lost until it is re-enrolled.
If It Already Happened (Recovery)
- Verify the device's enrollment state in your Addigy console.
- Re-enroll the device in Addigy using your standard enrollment method, then re-apply your policies.
- Confirm the Addigy agent is reinstalled and the device is checking in.
- If you cannot re-enroll the device or configuration was lost, contact CyberFOX Support with the device details and the approximate time of the uninstall.
Still Having Issues?
Open a ticket with CyberFOX Support and include: the macOS version, the AutoElevate agent version that was removed, whether the agent was deployed through Addigy, and what you observed after the uninstall. Referencing this article will help us route it quickly.