How to check if macbook has mdm reddit. This can be used to send requests for information, just a check-in, or commands to do lots of things, including a DeviceLock command that issues a firmware level lock that requires a INSTRUCTIONS START HERE. The seller could not have done anything on the device to remove its management status. To find out more about the profile, go to System Preferences > Profiles and you should see an MDM profile there. Mar 7, 2024 · Device reenrollment with Mac computers. So yeah, definitely up to the MDM. Mar 7, 2024 · User Enrollment and MDM. Since yesterday, a message has been popping up almost every 5 minutes on my Macbook Air to let me know that "Profiles/MDM" wants to make changes, but I did not install anything. You would have to demand a refund from the seller. The device was purchased from the enterprise around 11 years ago, yet it still retains all of the locks and software policies that used to apply. I can feel that someone is monitoring my screen too. How you reenroll a Mac varies depending on the following factors: Removable profile: The user can remove the profile by going to System Settings (macOS 13 or later) or System Preferences (macOS 12. Click on the minus sign to remove it. Find My Information & communications technology Consumer electronics Mobile app Technology forward back r/BaldursGate3 A community all about Baldur's Gate III, the role-playing video game by Larian Studios. The device shows up in ABM, and has a MDM server assigned (Intune). And, most importantly, stop thinking about managing your Macs like they are Windows machines. My computer guy told Managed Apple IDs don't work the way most people think (myself included at the time). IT also benefits from the avoided risks associated with unmanaged devices. Another is I believe a system that already has an Apple ID has to go through a series of steps to be moved into Apple Business Manager to prevent a scenario like you describe. That would wipe the device completely of anything to do with the previous owner. You get a free lifetime trial of 10 devices/users, which is pretty sweet. com (I know, sounds fishy AF) click copy autobypass. 2. You'll need to contact the company the phone is MDM locked to, to have them remove it. It has to run. In the “Go to Folder” pop-up type: /var/log and hit Enter. Apple can also assist with removing the device if you can prove ownership. You can federate Apple and Azure, making it easier to manage users. Apple may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Apple can therefore provide no guarantee as to the Bought a mac off ebay, has MDM. Apple DEP is free and you really want to use it and deploy it from the start with the Apple devices. Jamf always has the feature within 90 days. Dec 29, 2023 · MDM Remove Service for Mac computer. 6) Using Terminal on the Mac, find the MDM preferences folder and simply delete any and all MDM preferences - normally an iPad has none. Now you need to change directories into the Store directory, but you may not have permissions. After wiping it I noticed that it is still managed by the company that was occupying the space on at least one device, but possibly more. Good question, but there is a cost involved and enrollment of the company into Apple Business Manager. No Need Thunderbolt Cable and No Need Another Mac to Bypass. See above. In Intune, the device also shows up in our enrollment program with a profile assigned. The actual owner of the device can do as they like. The 2 things you have to remember about malware. One-click software. The answer for most MDM services is that there usually isn't a menu option that says "browsing history" but you can create a script to collect logs from the browser. 0. That is the danger buying used Macs now because the seller can show you the OS is being accessible. #1. Sometimes, the administrator It has nothing to do with what is on the phone. Click the Apple logo > System Settings -> Users & Groups. Share. Stop binding your Macs to AD. sorry. So, title spells it out. It also means users can't create Apple IDs using their work email (which is a positive IMO). If you have Xfinity internet, check your profile settings. So further updates on this. They also provide LDAP, SSO, SAML, RADIUS, AD integration, and a crap-ton more. I have tried opening the computer in Recovery Mode but it still asks for a password. Thanks to @pi2pi Got into Recovery Diagnosis and pulled the logs from that. app on iOS devices without any stated purpose. When prompted, click “Remove” to confirm the removal. Given that the OP said it is locked, it more then likely has some form of a MDM lock, also if the IT was smart they would put a firmware password on it so you cannot just wipe it, and there are things that apple can build into the motherboard that only apple can remove with a POP that will re enroll it in the MDM if you do wipe it and once it Reading Apple's documentation, they do not have a supported method to block apps on macOS via config profile like iOS. Jamf's method appears to be monitor and kill the user's attempts to launch or installed the blocked apps. If that’s the case, the profile would reappear after undoing the jailbreak. https://myicloud. * (again possibly sudo rm *. They can unlock it on the spot if you have proof of purchase. Add a Comment. Open System Information (search for it in the Start menu). Start KnockKnock and run scan. Also you can have a MAM solution too 🙂. In order to find a system log, click on the Go option in the top menu or simultaneously click Shift, Command, and G. Check out JumpCloud. I legally iwn it with proof of the used purchase. BuilderBug. I've searched the web for how to do this and I realize that this . Under Hardware Overview (the default selection), you’ll find the Activation Lock status next to Activation Lock Status —it should read Enabled or Disabled . That's the whole point of an MDM. In G2's Fall 2021 reports, Scalefusion had the highest overall satisfaction score, was #1 when it came to Best Results. If the company have removed this device from their system, this will remove the MDM Profile. Best. Simple, yes. If the profile appears after the restore, then they still have the serial linked on their system and only they will be able to remove it. I Replaced the screen, but after formatting the machine and installing ventura, I get hit with the MDM prompt for the company enrollment (Name not going to be listed here) - I called that company and they effectively May 22, 2023 · Send the seller a message through ebay saying your are interested in the macbook but would like to know if it has been enrolled into a MDM. Always. Ok, first ask for the serial before buying it and enter the serial to check that it matches the description Warranty check. Apr 30, 2017 · The Device Enrollment Program enables IT to easily leverage the advanced capabilities of supervision without the need to physically tether a device to a master computer running Apple Configurator – supervision can be turned on with the click of a button OTA. Its SERIAL NUMBER is in Apple's database that says it 100% belongs to the company. We added a MacBook Pro M1 to our ABM using apple configurator. Check which devices are signed in to your account by going to Settings > [ your name ]. you need to have that person remove it for you. Call the company that is displaying. Don't buy it. My question is aimed at understanding whether or not I want to connect this MacBook to my private iCloud or not and to understand how far the IT can look into this machine. During setup, proceed as normal, until the part before the "blahblah will install cacablahblah profile on your device". Unable to bypass without enrolling device. Step one check what is starting on the Mac. 39 Online. Factory restore it. I released a load last summer when we made some replacements - the units went off to be sold, we were getting calls at least six month later asking for us to remove them from ASM • 5 min. But the company can distantly erase any macOS and iOS device with MDM Lock on it, put Activation Lock on it, update software, delete files, etc. Devices need to be purchased directly from Apple or authorized resellers on your business account in order to be part of DEP/ASM/ABM. Yes, mdm means they can manage the phone. The other route is Corp owned, which the MDM is installed after a fresh factory reset. It seems the device was not enrolled into the MDM program. Stop there, and click Deactivate on the 3u Toolbox. OK, specifics: read both of these how to's first: How to Jailbreak an iPad (with Pictures) - wikiHow. If a profile titled “MDM Profile” or “Mobile Device Management” is listed, the Mac is MDM locked. Otherwise there are a lot of other options out there that don't break the bank. . However I have no idea how or where he got it from. If it is owned, it forces the device to check in with the MDM. That being said there is no way to really tell if a device was released or not from a company or institution yet if the device is still assigned to an MDM, when you clean install, at setup it will try to enroll to their MDM and you will see it right on the screen. Go to “Profiles” or “Profiles & Device Management”. We ended up going with the paid version so we could manage them more in bulk. using PDQ. If not however go over your start up items. Consider allowing your end users to be local admins on their Macs. >sudo chmod +r store. Apr 10, 2023 · Hello, this is Emily. #11. New comments cannot be posted. Expand System Summary > Components. Yes, if you look in System Preferences > Profiles, look for the profile that's clearly the MDM profile. If the company has a claim to the property and has a software lock on it to protect their IP, then the seller shouldn't be selling it. They’re platform agnostic (Windows, Mac, Linux), and they’re beefing up their Mac feature set constantly. *; or chmod commands above to allow you) the above remove the MDM profiles. If both are true, the Mac will force the user to enroll into the MDM service again. Open | Mac. So even when the phone is FULLY ERASED (DFU Restore), as soon as it goes online during its required Activation, Apple will recognize its serial number, see that it's owned & managed by a company, and then re-link it back to their MDM system. Exactly. 1 or earlier), choosing Profiles, and clicking the Remove button (-) when the current MDM profile is selected. info Boot up normally; at the setup screen tap CMD-CTRL-OPT-T (opens Terminal); with Terminal open, the Finder menu becomes available. Open safari. So, any MDM vendor you contact would tell you that unless the device has been configured in DEP, the activation lock cannot be bypassed. You mention MDM, if is tied to an MDM Solution even if Apple removes the Apple ID from the device it will still ask for the MDM Enrolment which Apple cannot remove. log file and scan for word sharing. It wasn't assigned to any MDM server and the problem started to pop out in the setup process. If you’re running iOS 16 or later, see How Safety Check on iPhone works to keep you safe. I'm having this same problem. DEP is through a server at Apple. Dec 9, 2018 · Dec 8, 2018. >sudo chmod +x store. Endpoint management solutions like Hexnode are capable of blocking the Find My Device feature. The original owner's apple ID was still logged in so I can't bypass that screen. Unlikely-Ad3364 • Checkra1n • 2 yr. a Mac (or whatever device you ran checkra1n from) After toying around with a few different methods, here's what worked for me: **NOTE: I AM NOT RESPONSIBLE FOR ANYTHING YOU DO WITH THIS. • 2 yr. I went on ebay, bought a broken 2017 Macbook Pro to use as a new server. No one else can help you here. I have the same issues i bought a macbook pro m1 online from an online market website for selling and buying all types of products and services, i wonder if you succeed to bypass MDM profile And working normal (using internet and download third party apps from outside of apps store) with your MacBook pro m1 MDM machine without the MDP profile In that case, you have a problem with the seller. You definitely want managed IDs if you use Apple resources like Apple Developer (for iPhone devs). Show the hidden menubar and go to System Settings when the Setup Assistant begins by pressing Command + Option + Control + T together. Everything worked as expected. Look through the information on that profile and it Aug 27, 2020 · 11,852 points. There is no bypassing the FRP, and if they log back in with the device it got locked too, the device will auto-enroll itself back into the MDM when it gains a network. I purchased a new M2 Macbook Air two weeks ago, and I received it last week, only to see (to my horror) that apparently SpaceX was apparently remotely managing it, and I was unable to progress past the "Remote Management" screen. Then it picks up the command to enable Lost Mode. DimitriElephant. [deleted] • 9 yr. Can you tell me from where you can tell your device is enrolled via Microsoft's MDM software? Is it via Settings > Accounts > Access Work or School, or? Can you provide a screenshot or some sort so I can have a better idea of the issue itself? For typical MDM, you would have to initilize the process on the device and agree I think you have to DFU and then erase all contents and settings to be sure your device is uncompromised. Type: 1 and press enter. Visibly i am not able to find any profile in the setting option. There’s a page on xfinity’s support site on it. If this pane is present, and when you click into it you can see something about enrolment, then your device is enrolled in MDM and your employer potentially has visibility over what you’re doing on your machine. I tried removing all programs from profiles in my settings, using Malware anti-virus, and updating my computer, but none of these tricks have been successful. 3. Apr 4, 2023 · It may be useful to check the system logs for any possible access issues. Lmk if you want details, I can walk you through bcs it’s a process. It has an MDM on it. I didn’t steal it lmao. Conducting personal business on a company provided electronic device is a bad idea in general. If you’ve tried to connect to a public hotspot, it may have tried to verify the internet profile on your computer. But you'll have to compromise on SIP settings and won't be able to use system drive encryption. No other way around it. I would recommend trying Scalefusion MDM, for both mac & windows with easy to use dashboard with relatively great support. If you’re running iOS 15 or earlier, use this checklist to see who has access to your device or accounts. IF YOU GET IN TROUBLE, BRICK YOUR DEVICE, ETC. Auth with your new root account, rename both Setup User and it's account name, _ mbsetupuser, to something else. JAMF is way too heavy for what we need and some of the others are way too light. I checked and it has never been reported stolen. Price from $100. You need to have that IT Dept/Admin remove it from their fleet. nancybatespro. 2) Then go ahead and ask the seller to de-register the mac from his account right in front of you* if the serials do not match or don't exist its stolen, if he says something like As said, I do NOT install the MDM-profile on a private MacBook (I would never do that), but on a company machine on which I myself had to enrol and install the MDM-profile. (See ifixit / itweak links) Other software methods only work when some loophole was left open, or device was added to mdm etc before hand or with specific OS versions. If it’s a legitimate sale, they probably forgot to release the laptop from their MDM. Excellent advice. An employee cannot remove MDM Lock from a corporate device even if they leave work. Swapped out the SSD and installed the new 1TB. Get a better MDM. Hey all, I need a method of breaking a Mac Mini I own out of Apple's DEP (device enrollment program) controlled by another party. This has nothing to do with the iOS version, or the device model, or anything on the device. Feb 28, 2020 · You are reading what to do from the iPad. If you bought it from Amazon, then you should contact Amazon and explain the situation to them. Now find the system. The act of removing Setup. You can then explain to the seller what an MDM is and how it will appear on the laptop. There’s not much help. Look into Jamf or Kandji or Mosyle. Select the MDM profile you want to remove. Jan 16, 2024 · Here are the steps for you to remove MDM profile Macbook: Go to “System Preferences”. This comment on stackexchange outlines all the steps. This means that macOS Activation Lock is likely still enabled. Automated Device Enrollment saves IT time by automatically enrolling devices into an MDM solution. If there are no profiles listed under MDM Profile, the device is not enrolled If there is an MDM Profile listed as Verified by the University of Minnesota, the device is enrolled Alternate Method Aug 14, 2023 · Apple Footer. ago. I sometimes randomly come across devices that aren't properly enrolled and I want to see if I can somehow get a list of all the devices so I can fix them manually. THIS WAS ALL ON YOU** Install checkra1n If you see the checkra1n app on the home screen, congrats! Does anyone know how to remove a MDM profile without having the need to contact apple business manager to remove the devise? Wiping and reinstalling does not seems to remove the profile. Yeah I know how, as long as it’s iOS 14 or below. Seller told me it was issue free and I checked for profiles at the time of purchase and saw it had none so I assumed it was fine. It supports bulk enrollment with remote management and compatible with Android, iOS & Windows 10. Jan 25, 2022 · See who has access to your iPhone or iPad. >cd store (or maybe even sudo cd store) >rm *. there is nothing that either apple or the people helping here can do. I did have to connect it to internet to run the download for the High Sierra installer. However, I had purchased it planning to install a 1TB SSD drive. Why would you want your company to potentially have access to your banking and social media account information. Yeah they're mixing messages with the new MDM since the mess is intertwined. Booted from USB, installed Monterey and open a terminal window. 1 comment. To get past the MDM login screen on setup all I did was skip wifi, touch ID and passcode setup. Feb 7, 2022 · Open the Apple menu. open terminal (tools --> terminal) command + v to paste the command and press enter. The sneaky answer is yes, you can. Long press power button to boot into recovery. Erase your iDevice. if you are certain they did remove it from Apple Business/School Manager, I would fully wipe and reset it, either via usb or recovery Thank you! No!, do not buy it. The four stages of User Enrollment into MDM are: Service discovery: The device identifies itself to the MDM solution. Talked to Apple Support's phone lines (which was, by the way, the most pleasant customer service I've ever had), and Turn off the modem if you have to. Hi guys, I just used the iActivate for $45 and it worked flawlessly on the latest ios 15. The Mac is activation locked, probably to a personal Apple ID. If you are going to buy a used one, it is better that it be free of all suspicion. 26K Members. When I received it, I booted up and went through diagnostics and all the obvious stuff just to make sure it worked. To that end grab KnockKnock and TaskExplorer. Former school computer still has MDM locks on it. Good question. Is there any other way to detect if the device is owned by MDM? Look into Apple DEP and I would suggest Mosyle for an MDM. quit safari. However if you do not have dedicated Mac People any of the below solutions mentioned will get the job done. That said I'll have to see how the MDM is doing in 2012 too. r/setupapp. The machine has already been wiped of all company data and has a account named “admin zero” and we have the password, which is how we could start recovery. With MDM enabled they can watch you jerk off in front of the macbook into your professional sock. It will not manage updates either. Zoho/manageengine is OK and licensing costs are reasonable. the only person that can remove an MDM profile is the person who created the profile. If it is Scalefusion MDM, then the answer is no. You have to wrap apps using a Mac to deploy them. Save changes. If you like being neglected as a Mac admin intune is the mdm for you. After you setup your mac installs LPRO MDM MACBOOK BYPASS and run the software to completely delete MDM profile. Fast-forward to today and I can see it online with r/Mosyle - I have the guy's full name, most recent public IP, name of Wi-Fi network, etc. Not sure how Apple vets these, but I'm sure that helps prevent issues. You’ll need to coordinate with the user to get the activation lock removed. Once complete click the Apple logo -> Reboot or in Terminal type Reboot then press Enter and let macOS start-up. Instead of using Option-Command-R, use Option-Shift-Command-R on startup so it tries to install the oldest version of macOS that the computer supports (in the case of the 2018 MBP - High Sierra). iPad enables Lost Mode and sends GPS coordinates to MDM. All users have to do is boot up their Mac, select a language, and connect to a Wi-Fi network. If this machine was obtained legally from a company they would remove MDM especially if it's being removed from a domain. Look for “Mobile Device Management” under “Software Environment”. 00. Intune doesn't bootstraps the secure token still. If you do not have Profiles listed, you are not enrolled in MDM. Intune, works for Mac as well. The 100% sure shot way is to do (or get some techie friend to do) the following using a tiny peice of hardware called T203. Maybe contact the seller as a start but there isn’t much to do. app is no more than a filesystem modification made possible through jailbreaking, which is legal under DMCA. The password was changed as soon as I heard the news, but I would like to restore the computer to factory settings. We use Apple MDM on our users phones and Mac (the Windows machines use Bitlocker). Top 4% Rank by size. I purchased a 2015 MacBook Pro off eBay and it came with a 256MB SSD. User Enrollment is designed for BYOD—or bring-your-own-device deployments—where the user, not the organization, owns the device. Apple forces all computers on Sonoma to check in with Apple Business/School Manager to see if a device is owned by an org. Peace of mind is invaluable. That does nothing to remove a device that’s part of DEP. Through MDM (Mobile Device Management), the company can administer all devices remotely with just a click. This option gives you much more of the MDM features, but less privacy. You can't overlook it. Nov 12, 2020 · macOS Big Sur will continue to support the latest device management (MDM) features, like Automated Device Enrollment. Connect your device with the USB cable (charger, prob) Wait, and go to toolbox. MacBook Pro added to ABM (Apple Configurator) not triggered during setup. Hoping to figure out if this is even possible - I was recently laid off from a job where I used a MacBook Pro 17,1 with an MDM (Rippling). Connect to wifi to activate mac. 3. To unlock a locked device, the only thing that can be done would be to directly contact Apple. MobileIron is a weak solution for managing Macs. Hold down the Option key and select System Information . This site contains user submitted content, comments and opinions and is for informational purposes only. This is the best answer. It's inexpensive and easy to setup with great 24/7 support. 1. dneto82. It does not appear to be enrolled in MDM. They have a free platform, so I suggest you check that out. Does anybody know how I can remove the verified MDM from this without a password? Worst case scenario I can contact the old manager and see if they are willing to unlock it for us. Sounds like it's registered with InTune in an AutoPilot group, in which case it's likely pulling the logo and such from Azure, based on the serial number. It's pretty clearly an issue with the MaaS360 software that is being loaded, and they don't know how to fix it. Easily remove Remote Mobile Device Management (MDM) from your Macs within minutes! Our permanent MDM removal solution is perfect for M1, M2, M3, and T2 Macs. Click Install. Might be my device gets targeted by remote MDM. ResponsibleHardship. >cd /var/db/ConfigurationProfiles. Then when it got to the MDM screen I just went back and forth a few times, hit the home button to enable WiFi on the MDM login after it failed to load the profile and presto. go to: skipmdm. I was just wondering how I should go about removing the MacBook M1 says not Enrolled via DEP and MDM enrollment “no”, but has Device Enrollment Configuration Made a mistake and bought a M1 MacBook Air off of Facebook marketplace. Open 3uTools. Edit to add: The simplest way to hide an MDM profile in a jailbreak would be to make Settings ignore it when showing installed profiles. Mosyle is education only MDM. Mac malware is not sophisticated so chances are it will pop up then an there. It doesn't matter if you made it past setup. Feb 15, 2022 · If the Mac boots you're either going to see "Hello" to indicate that macOS has been reinstalled, or you'll see a login window with the account holder's name. If I bought a previously used iPad or iPhone the first thing I would do would be to go into settings / general / reset and erase all content and settings. If you want a cheaper or free method you’ll have to ask around, there are no public free mdm methods that support iOS 15 as far as I’m aware. Most of the normal things are being able to see installed apps and what version they are, seeing the computer IP address/location and last online time, whether or not the disk is User owned, which means setup the phone, then add on the MDM; this option doesn't give you as many features as privacy is a big concern. Mar 4, 2023 · 11,689 points. You can wipe the device all day long and it will Aug 12, 2023 · Bypassing MDM is 100% no longer possible. If you see a login window, be aware that the Mac is still likely linked to the old owner. I would like to recommend Scalefusion MDM, it would be a great option according to your requirement. Apple uses Jamf internally so do these companies ( Cisco, Walmart, SAP, IBM, HomeDepot, ) If you have a dedicated Mac Admin there is no choice better then Jamf. Aug 28, 2020 10:25 AM in response to Community User. Related MacBook Pro Apple Macintosh Apple Inc. To see if your MacBook is enrolled in an MDM open System Preferences, and look for a Profiles pane (usually bottom-right). They won't always work. That works like a charm. It gets heated normally. User enrollment: The user provides credentials to an identity provider That command sits in the queue in case the iPad ever turns back on. You can confirm by going to Settings > General and seeing if you have a section for Profiles. If the iPad ever turns back on, it reaches out to it's MDM as soon as it boots and has an active internet connection. no one here can help you remove it without breaking the sub rules/Apple's ToS. Setup an appointment at the Genius Bar at a local Apple Store. We bought a MacBook Air M1 2020 13-inch, I assigned it to our organisation in Apple Business Manager through Apple Configurator app on iOS. Then don’t connect to any wifi during the setup and you are fine. thats where its gonna stay (especially if its stolen). Even if they don’t actually take the product back, at least you will have proof that you tried to get in touch with them. I have recently been given a 2011 MacBook Pro, and it still has MDM locks installed on it. It'd be "nifty" if Apple started truly giving a damn about corporate customers in audited environments and catch up 1. You should have more info on what it does and what company is controlling it. MDM Profile on iPhone/iPad. 1. Reply. And again, during initial setup where you create the admin user, the device will alert you if it's MDM managed. Thanks! What ISN’T easily removable is the Mac’s record in Apple Business Manager - a cloud service. Go to System Settings, Users & Groups. It has to start from somewhere. The ipad was bought on FB marketplace with the MDM lock, the seller was honest about it but I bought it since I knew about the MDM bypass thing. (edit: the user, of course it might not be the thief) I have not locked the device yet as I'm not sure we want to "show our hand" and let the thief know he's essentially been caught (edit: or the user know Once you're enrolled, you have an MDM Profile installed, which allows for the MDM server to demand your devices attention via the Apple Push Notification Service. Mar 4, 2023 5:48 AM in response to tommy_rb. Have a 21 macbook air with proof of purchase but because I am not the "original " owner, Apple denied activation. I've also tried to unassign a device from our MDM via Apple Business Manger and manually install a profile, but it still fails. They are not Windows machines and trying to make The unofficial subreddit for all discussion and news related to the removal of Setup. I have the ability to run scripts or check registery paths etc. Once I got to the Recovery screen for I have a form of proof of purchase on my profile. I don't care about the method or how it needs to be done, but I need a way to break this out of the MDM control or get around it. Every time that a Mac is set up from scratch, it checks in with Apple servers to see if it exists in Apple Business Manager, and if it’s assigned to an MDM server. Dec 30, 2023 · Go to System Preferences > Profiles. Sep 15, 2022 · Sep 16, 2022. If it’s theirs, then it shouldn’t have Activation Lock. Once unlocked, your Mac will break free from MDM control permanently, giving you full freedom. May 19, 2023 · My iPhone feels lighter and heavier while connecting to the internet. There are several steps to get this working and they have to be redone everytime you get an OS update. The MDM could update it self and the you’re logged out. If the Serial Number is still up in Meta’s MDM,. Note: If you don’t see Activation Lock Status under Hardware Overview, that indicates your Mac doesn’t If its setup with an MDM, and they trigger an FRP, the only account that will be able to setup the device is the one signed in with prior to the reset. ve hz kj km ee eq so jj mt pz