MDM lock (Mobile Device Management lock)

MDM-locked units are a common source of losses in enterprise trade-in programmes because devices can appear functional and cosmetically strong while carrying near-zero consumer resale value. Detecting MDM lock before pricing is therefore critical in workflows handling corporate fleets. Unlike SIMlock, MDM status is not reliably detected by visual inspection or basic IMEI lookup and often requires powering on and attempting setup; MDM-clear status is increasingly treated as a quality signal in B2B wholesale lots.

MDM lock is applied by enterprises through mobile device management platforms such as Microsoft Intune, Jamf, and VMware Workspace ONE. The lock survives a factory reset on many devices because it is tied to the device serial number in the MDM server, not to the user account. Wiping a device and restarting it prompts the MDM enrolment flow at setup, making the device unusable to a new user unless the original organisation removes it from their MDM server. This is why certified MDM removal or a confirmation from the original organisation is required before a corporate device can be reliably resold.

For wholesale buyers acquiring enterprise lots, MDM lock rate is a critical due diligence variable. A lot with an unknown MDM status represents pricing uncertainty proportional to the failure rate: if 20% of devices in the lot are MDM-locked and unsolvable, the effective cost per usable unit is substantially higher than the headline per-unit price suggests. Operators with enterprise buyback relationships can negotiate MDM removal as a contractual condition of sale, reducing this risk before devices arrive at the processing facility.