How can a second-hand buyer verify full ABM/ASM release, beyond no MDM enrollment?

Zurarczurx, thank you for the practical advice. Documenting the Mac’s condition and any existing management settings before resetting it makes sense.

I also have a useful update: I called Apple Business Support today. The adviser checked the serial number and confirmed that the Mac had previously been registered to an organization but has now been released. They also told me that the former organization could no longer reassign it to management, and recommended fully erasing and resetting it before use.

The Mac has not arrived yet. Once it does, I’ll document its initial condition, then erase it and complete setup with an internet connection, checking for Remote Management, Activation Lock and MDM enrollment.

Thank you again for taking the time to help. I’ll update the thread after checking the Mac.

There are no Apple employees participating in these public communities. I fail to see how Apple could provide the assistance you seek prior to, or after a used Mac purchase. You are at the mercy of the seller's return policy (if it exists), and the truthfulness of their disclaimer(s). When you do encounter an NVRAM password, or MDM locking on a purchased Mac, you are essentially done with that paperweight.

Those of your fellow users who purchase prior owned Apple products through Apple Refurbish do not encounter any of the issues you seek resolution on. I understand through prior community posts that OWC (macsales dot com) is another reputable pre-owned source, though I have no direct experience with them other than RAM or storage purchases.

Thank you. I understand this is a user forum, and the seller has already confirmed full release and accepts returns. I'm hoping an ABM administrator can clarify the remaining technical point: does sudo profiles show -type enrollment reliably distinguish Released from Unassigned on Apple silicon with current macOS? Has anyone tested both states against their ABM inventory, or used an Apple service that can independently verify release for a second-hand buyer?

One practical follow-up: Apple's release guide says the former organization can verify the device's Released status and release date:

https://support.apple.com/guide/business/release-devices-axmec4d28461/web

Has any private second-hand buyer obtained that confirmation directly from Apple Business Support or an AASP without access to the former organization? If so, which team and what proof of purchase were required?

Otherwise, is a redacted screenshot showing Released and the release date the appropriate evidence to request through the reseller?

emilbaku wrote:

The seller has confirmed in writing that it is fully released from the previous organization's Apple Business/School Manager and has no MDM or Activation Lock.

Yeah, that's not true.

I have not received or tested the Mac yet.

Hopefully you haven't handed over any money yet either.

What is the supported practical procedure for a legitimate second-hand buyer?

Don't do it!

1. Can Apple Business Support, an Apple Store or an Authorized Service Provider privately confirm actual ABM/ASM membership or Released status with proof of purchase? If so, which team and what evidence are required?

No.

2. On current Apple silicon/macOS (including Tahoe 26), does "sudo profiles show -type enrollment" definitively distinguish released/never registered from registered but unassigned? What are its limitations, including cached results? I understand "profiles status -type enrollment" alone does not certify full release.

Also no.

3. If Apple cannot provide that confirmation, is a record showing Released and the release date from the previous organization's inventory the appropriate evidence to request through the reseller?

And lastly, no.

I understand these are separate checks and am not asking to bypass or remove management.

It doesn't matter what you're asking for. You're buying a brick.

If you want to save some money, buy an officially refurbished computer directly from Apple.

etresoft, thank you. I’m trying to understand the specific failure scenario behind your warning.

This is an eBay purchase from a reseller offering returns and confirming full ABM/ASM release in writing. Have you personally encountered an Apple silicon Mac that became organization-locked after an erase and clean online setup showing no Remote Management or MDM enrollment? If so, was it confirmed Released, or only Unassigned?

Apple’s release guide says a Released device can no longer be assigned to a management service. Is your concern that a reseller’s screenshot cannot be independently authenticated, or that a genuinely Released device can still become managed again?

Is your warning mainly about that technical risk, or the limitations of buyer protection? A concrete example or technical reference would help me understand.

Zurarczurx, could you clarify what you meant by “Finally”?

Are you agreeing that client-side checks cannot prove full ABM release, or that even a properly released Mac should not be purchased from a reseller?

I’d appreciate understanding the technical reason.

emilbaku wrote:

This is an eBay purchase from a reseller offering returns and confirming full ABM/ASM release in writing.

What is the material value of that statement in writing? Is it a contract offering replacement value at any point in the future? Is the contract enforceable? Considering how relatively inexpensive Apple devices are compared to attorney fees, I'm going to go ahead and say the contract isn't enforceable as it would cost you many times the price you originally paid for the device to get your money back, assuming the contract 1) exists, 2) is valid, and 3) you can find the seller in the future.

But my point is that this written statement has no value of any kind - nothing. It would be a waste of time to show it to anyone at Apple. They won't even bother to look at it.

Have you personally encountered an Apple silicon Mac that became organization-locked after an erase and clean online setup showing no Remote Management or MDM enrollment?

No. I've just seem many identical posts here in the forums. Well, they aren't identical. In the vast majority of cases, they only ask after-the-fact, when their money is already gone. You haven't clarified whether or not your money is gone.

Now, obviously, people who buy a used device and it works fine for many years aren't going to complain about it. That's the risk you're taking. If you're willing to take that risk, fine.

My point is that any confirmation you get about the device being released, releasable, written confirmations, etc. mean absolutely nothing. It's well-known that there is a technical infrastructure in place to brick these devices. It's well-known that the infrastructure is effective. It's always well-known that these technical infrastructures can't be overridden by notes, receipts, confirmations, etc. Bricked is forever.

Apple’s release guide says a Released device can no longer be assigned to a management service. Is your concern that a reseller’s screenshot cannot be independently authenticated

Obviously screenshots cannot be authenticated. Obviously eBay is known to be a risky place. That risk is quantifiable based on the price. Usually the price is very low, so people are more willing to accept that risk in hopes of getting a great deal. There's absolutely no difference here. You're taking a risk. The risk criteria are known to be high in this specific case.

that a genuinely Released device can still become managed again?

Yes. I've seen several reports from people who have all kinds of notes, receipts, etc. from the previous owner saying the repurchase was legitimate. But there's still the technical infrastructure that's known to efficiently brick devices and not known for ever unbricking them. Don't think you can just find a human at Apple support to fix it for you. You cannot.

Is your warning mainly about that technical risk, or the limitations of buyer protection? A concrete example or technical reference would help me understand.

Sorry. I'm not going to do your web searches for you. I've seen these situations many times, but I didn't save a list. If you think you're getting a great deal, go for it. How many hundreds are you saving over an officially refurbished device? I haven't even mentioned the possibility of chop-shop devices, water-damaged, etc. All also extremely common. It's your risk to take. But remember than any OS update is likely to brick the device for good. That's usually when people report the problem. And it's long after they can ever get their money back.

etresoft, thank you for taking the time to explain this in detail. I appreciate your patience and the caution behind your advice.

To clarify, I have already paid, but the Mac has not arrived yet. My plan was to erase it, complete setup online, check for Remote Management/MDM, Activation Lock and other restrictions, and return it if any appeared.

Could I clarify a few remaining points?

When you mention devices becoming unusable after an OS update, do you mean an ordinary update or major upgrade preserving the existing installation, or an erase and full reinstall? Had the owners actually verified no MDM before that, or had they simply not seen a management screen? By “bricked”, do you mean blocked at enrollment until the organization releases it, or still unusable after a proper release and erase?

In the cases you recall, was full Released status independently verified in the organization’s ABM/ASM inventory before the later problem, or did the owners have purchase documents and release assurances? I’m trying to distinguish those situations.

Do you know why Apple does not offer a clear, private ABM/ASM release-status check to a legitimate buyer with proof of purchase? It seems that could help buyers avoid devices still registered to an organization, so I’m struggling to understand this gap.

In your opinion, could calling Apple Business Support obtain an actual registration/release-status confirmation? I mean checking the status, rather than asking Apple to override a lock.

Thank you again for all the detailed replies.

emilbaku wrote:

When you mention devices becoming unusable after an OS update, do you mean an ordinary update or major upgrade preserving the existing installation, or an erase and full reinstall?

I don't really remember individual posts. Few people do an erase and install, so I'm sure it's just a regular update.

Had the owners actually verified no MDM before that, or had they simply not seen a management screen?

Most people don't know that MDM exists.

By “bricked”, do you mean blocked at enrollment until the organization releases it, or still unusable after a proper release and erase?

Many of these resales are stolen devices. People get rid of them because they know they're locked to an MDM. As far as I can tell, it simply isn't possible to release from enrolment. The system may pop-up some kind of confirmation dialog, but the end result is the same. A while later, the device is locked. May be a bug somewhere in Apple's registration system. Who knows?

But if your money is gone, then it's a moot point. Assuming you actually receive it, don't be surprised if it gets bricked one day. Also don't be surprised if it has some kind of hardware fault. Apple computers are premium devices. Maybe if it was an Intel device, I could see someone wanting to get rid of it. But why would anyone pay that much money for a 2023 computer and then sell it to you for a loss? That just doesn't make sense.

In the cases you recall, was full Released status independently verified in the organization’s ABM/ASM inventory before the later problem, or did the owners have purchase documents and release assurances? I’m trying to distinguish those situations.

As I said, absolutely none of that matters. All this is run by some Apple database. It doesn't care about any documents or release assurances. It sees an MDM registered device come one line in some kind of anomalous state. It doesn't ask questions or check first. It just locks the device and assumes the company IT will handle it. In the few cases I've seen that were (or claimed to be) legitimate, even the company IT couldn't fix it.

Do you know why Apple does not offer a clear, private ABM/ASM release-status check to a legitimate buyer with proof of purchase?

Generally speaking, no one here can answer any "why" questions. We don't know anything about Apple policies. We use Apple products a lot, and we see lots of questions from other Apple users. Maybe you'll get lucky and everything will work fine and you'll think I'm an idiot. That would be great. But if that happens, don't tempt fate a second time.

It seems that could help buyers avoid devices still registered to an organization, so I’m struggling to understand this gap.

There are no buyers here. The device has already been purchased from Apple by the company. That's all that matters to Apple. Apple doesn't care after that.

In your opinion, could calling Apple Business Support obtain an actual registration/release-status confirmation? I mean checking the status, rather than asking Apple to override a lock.

What does it matter? Maybe you'll get lucky. But if you don't get lucky, I'm certain that there's nothing you will be able to do to fix it. As I said above, the computer was sold, to a company, which isn't you. Apple absolutely isn't going to tell you anything about another customer's purchases.

eBay, in general, is on the side of the buyer and in my experience takes an "if in doubt, refund" approach. If your Mac isn't as described then I'd expect you to be able to return it to get your money back and if the seller argues then eBay will pay you under buyer protection and deal with the seller in their own time.

The only slight warning I'd make is if the buyer can show ebay that what you sent back is different from what they sent you then eBay will be on their side. Given that you are going to reset the Mac then there's a tiny (and very unlikely) possibility that if the screen looks different when it's switched on from the listing photos then the buyer might try to make a claim that you've messed with it and it's your fault it doesn't work. I don't think this is likely and if it happened it would just drop you into a frustrating round of trying to talk to ebay, succeeding in talking to eBay, realizing that the person you're talking to has the understanding of a bright cocker spaniel but eventually it'll get sorted out. If there's a way for you to show that there's an MDM profile and/or ABM/ASM on the machine before you start resetting it then that's what I'd do first.

You buy the seller when buying almost anything, and eBay gives some clues as to whether they're any good. Check feedback, look at what they buy and sell and get a view. If you're still worried then video everything from when you start to unpack it until it's turned on and working to your satisfaction.

Best of luck

Finally.

Good news. Fingers crossed.