5.7 KiB
title, description, ms.date, ms.prod, ms.technology, ms.topic, ms.localizationpriority, author, ms.author, manager, ms.collection, appliesto
title | description | ms.date | ms.prod | ms.technology | ms.topic | ms.localizationpriority | author | ms.author | manager | ms.collection | appliesto | ||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Reset and wipe | reset and wipe | 08/31/2022 | windows | windows | tutorial | medium | paolomatarazzo | paoloma | aaroncz | education |
|
Device reset
When a device is lost, stolen, or needs to be replaced, or when a user moves to another position, it is usually time to wipe or reset the device. There are several ways you can do this—including resetting the device, removing it from management, or wiping the personal and school data on it. In scenarios where a device needs to be exchanged or returned, additional steps are required to prepare the device and then send it for repair. With Intune, IT administrators can remotely execute all these actions for device reset.
:::image type="content" source="./images/retire.png" alt-text="The device lifecycle for Intune-managed devices - retire devices" border="false":::
Resetting a device
Two Reset Device actions can be used to reset and deregister student devices in preparation for next year: Autopilot Reset and factory reset. With Autopilot Reset, you return the device to a fully configured or known IT-approved state. With factory reset, you wipe all personal and school data and settings from the device, returning it to the default factory settings.
Autopilot Reset
This reset action is ideal when all data on a device needs to be wiped, but the device will remain enrolled in your school. You can use Autopilot Reset to remove personal files, apps, and settings; reset Windows 11 SE devices from the lock screen; and apply original Intune settings and management enrollment (Azure Active Directory and device management).
With Intune for Education, wiping can be performed remotely:
- In Intune for Education, choose Groups → Choose a device group.
- Choose a device, and then select Autopilot Reset.
- To confirm the reset, select Autopilot Reset again. A message appears when the reset is initiated. The device will reset the next time it connects to the Internet.
ADD PIC HERE Using Autopilot Reset in Microsoft Endpoint Manager admin center
Factory reset (wipe)
A factory reset, or a wipe, reverts a device to the original settings when it was purchased. All apps and data installed on the device after purchase are removed. The device is also removed from Intune management, and all data and settings are wiped from the device.
To perform a factory reset:
- In Microsoft Endpoint Manager, go to Devices → Windows devices to view all enrolled devices.
- Choose the device you want to reset, and on the next screen, select Wipe.
- NOTE: We recommend keeping the enrollment state and associated user account. This option ensures that the Wipe action cannot be circumvented by turning off the device.
- Select Yes to reset the device to its factory defaults and delete the Intune object.
ADD PIC HERE Using factory reset in Microsoft Endpoint Manager admin center
Wiping and removing a device
With this action, a device's data is wiped, and the device is removed from the school deployment. This action should only be performed for devices that are no longer going to be used. To completely remove a device, you need to perform two actions:
- Perform a factory reset (wipe) on the device.
- Complete one of the following actions, depending on Intune enrollment:
- If the device is not enrolled in Intune, delete it from Autopilot.
- If the device is enrolled in Intune, delete it from Microsoft Endpoint Manager. (This removes device records from Intune, Azure AD, and Autopilot).
Delete a device from Autopilot
To delete Autopilot devices that are not enrolled in Intune:
- In Windows Autopilot, go to Devices → Windows → Windows enrollment.
- Under Windows Autopilot Deployment Program, select Devices.
- Choose the device you want to delete, and then select Delete. Note that device deletion can take a few minutes to complete.
Delete a device using Intune
To delete devices that are enrolled in Intune:
- Delete the device from the All devices blade in Microsoft Endpoint Manager:
- Sign in to the Microsoft Endpoint Manager admin center.
- Select Devices → All devices.
- Choose the device you want to delete, and then select Delete.
- Delete the device from Azure Active Directory:
- From the Azure portal, sign in to Azure Active Directory.
- Select Devices → Azure AD devices.
- Follow the steps outlined in Delete devices from the Azure Active Directory portal.
ADD PIC HERE Device and account deletion page in Azure Active Directory admin center
Autopilot motherboard replacement
Repairing Autopilot-enrolled devices can be complex, as OEM requirements must be balanced with Autopilot requirements. If a motherboard replacement is needed on an Autopilot device, we recommend the following process:
- Deregister the device from Autopilot.
- Replace the motherboard.
- Capture a new device ID (4K HH).
- Reregister the device with Autopilot. NOTE: For DFCI management, the device must be reregistered by a partner or OEM. Self-registration of devices is not supported with DFCI management.
- Reset the device.
- Return the device.
For more information, see Autopilot motherboard replacement scenario guidance.