I'm looking for the correct way to disconnect the EC MDM profile from computers remotely. I see the deprovision option in MDM for a computer, but I don't want to remove any data just the MDM profile itself.

Is there also a way to turn off MDM auto enrollment for machines, so they don't connect to MDM when the agent gets installed?