Support Tip: PowerShell Script now Available for iOS Passcode Reset Token Known Issue

how does one remove the enrollment and then re-enroll without wiping?

What action do I need to take?

1. Run the PowerShell script below. This will give you the list of affected devices.
2. Make sure your end user of the affected device has a backup of their data from the device (typically through iCloud or another backup offer).
3. Update the impacted devices to 13.3.1, then unenroll and reenroll the device.
4. Rerun the PowerShell script. If the device still shows there, then you’ll want to completely wipe the device then reenroll.
5. If the device is still on the report when you re-run it, the device is not in a good state. Apple recommends wiping without restoring a backup and then reenrolling again.
6. Any devices still on the report after trying in this state after enrolling multiple times will need a ticket with Apple to investigate further.