how to wipe and reassign a macbook for a new employee

TL;DR

Confirm no data retention hold applies, erase via Erase All Content and Settings (or DFU revive for older Macs), let Automated Device Enrollment re-enroll it into Jamf, then provision as a new device. Update the inventory assignment last.

The error

(Device return; no error. Reassignment request.)

Steps

1. Check for legal or HR data-retention holds on the previous user. Expected: cleared. Do not wipe a device under hold.
2. If the user is available, have them sign out of iCloud and remove the device from their Apple ID. Expected: activation lock cleared. Activation-locked Macs cannot be reassigned.
3. Erase: System Settings > General > Transfer or Reset > Erase All Content and Settings (Apple silicon and T2 Macs). Expected: device resets to setup assistant. For older Macs, use DFU restore via Apple Configurator.
4. At setup, confirm Automated Device Enrollment triggers and the Jamf profile installs. Expected: managed again. If enrollment does not trigger, check the ABM assignment.
5. Provision per the new-hire Mac checklist, then update inventory: old user unassigned, new user assigned. Expected: records accurate.

When to use

• Reassigning returned MacBooks
• Offboarding returns going back to stock

When not to use

• Devices with hardware faults (repair first)
• Devices under legal hold

Variants

Activation lock still on

The previous user must remove it, or Apple Business Manager can clear it for ABM-enrolled devices.

Intel Mac without T2

Erase via macOS Recovery reinstall; slower but works.

Why it happens

Reuse saves budget, but a half-wiped Mac carries the previous user's data and management state. The erase-and-reenroll path guarantees a clean, managed device.

Edge cases

• FileVault: erasing via EACS cryptographically discards the data; no separate wipe needed.
• Record the wipe in the asset history for audit purposes.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_ixtHekaWZtTituUjepO4ow