windows-itpro-docs/windows/deployment/update/includes/wufb-deployment-graph-unenroll.md

author, ms.author, manager, ms.technology, ms.prod, ms.topic, ms.date, ms.localizationpriority

author	ms.author	manager	ms.technology	ms.prod	ms.topic	ms.date	ms.localizationpriority
mestew	mstewart	aaroncz	itpro-updates	windows-client	include	02/14/2023	medium

When a device no longer needs to be managed by the deployment service, unenroll it. Just like enrolling a device, specify either driver or feature as the value for the updateCategory. The device will no longer receive updates from the deployment service for the specified update category. Depending on the device's configuration, it may start to receive updates from Windows Update. For instance, if a device is still enrolled for feature updates, but it's unenrolled from drivers:

• Existing driver deployments from the service won't be offered to the device
• The device will continue to receive feature updates from the deployment service
• Drivers may start being installed from Windows Update depending on the device's configuration

To unenroll a device, POST to updatableAssets using unenrollAssets. In the request body, specify:

• Microsoft Entra Device ID as id for the device
• Either feature or driver for the updateCategory

The following example removes driver enrollment for two devices, 01234567-89ab-cdef-0123-456789abcdef and 01234567-89ab-cdef-0123-456789abcde0:

POST https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/unenrollAssets
content-type: application/json

{
  "updateCategory": "driver",
  "assets": [
    {
      "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
      "id": "01234567-89ab-cdef-0123-456789abcdef"
    },
    {
      "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice",
      "id": "01234567-89ab-cdef-0123-456789abcde0"
    }
  ]
}