Remove Windows Autopilot Device from Intune Safely

This guide walks you through removing a Windows Autopilot device from Intune cleanly, covering the correct order of steps so you avoid orphaned records, stuck enrollment states, or devices that refuse to re-enroll later. You’ll need Global Administrator or Intune Administrator access in the Microsoft Intune admin center, and you should know whether the device is still physically in your possession or being retired.

What You’ll Need

• Access to endpoint.microsoft.com (Intune admin center) with an account that has Intune Administrator or Global Administrator role.
• The device’s serial number, Windows Autopilot device ID, or its Intune device name (visible in the device list).
• Confirmation of whether the device is still active in your environment (e.g., is it currently enrolled, offline, or being wiped?).
• If the device is still in use, plan to either wipe it or have the user back up data before removal.

Step-by-Step

1. Decide if you need to wipe first. If the device is still being used by an employee, go to Devices > All devices, select the device, and choose Wipe (or Retire if you don’t need to clear the disk). This unenrolls it from Intune and removes company data. Wait for the wipe to complete before continuing.
2. Delete the device from Intune. In Devices > All devices, select the device, then click Delete in the toolbar. This removes the device record from Intune. If the device is still online, it may re-enroll automatically; if you’re decommissioning it, that’s fine, but if you’re reusing it, you’ll want to block it first (see step 4).
3. Remove the Autopilot record. Go to Devices > Enroll devices > Windows enrollment > Devices (under Autopilot). Find the device by serial number or Autopilot device ID. Select it and click Delete. This removes the device from the Autopilot device list, so it will no longer be recognized as an Autopilot device.
4. Block or unassign the device (if reusing). If you plan to reassign the device to a different user or department, you can either: (a) leave it unassigned in Autopilot and let it enroll with default settings, or (b) assign it to a new user/group now. If you’re retiring it permanently, you can skip this.
5. Clean up Azure AD (Entra ID) object. In Microsoft Entra admin center (entra.microsoft.com), go to Identity > Devices > All devices. Find the device by name or ID. If it still exists, select it and click Delete. This removes the Azure AD device object, which is separate from the Intune record.
6. Remove any stale enrollment state. If the device shows as “Enrollment state: Failed” or “Not registered” after deletion, it’s usually because the Autopilot record wasn’t deleted first. Go back to step 3 and confirm the device is gone from the Autopilot list.
7. Verify removal. Refresh the Intune device list and the Autopilot device list. The device should no longer appear in either. Also check Entra ID to confirm the device object is gone.

Common Mistakes

• Deleting the Intune record but not the Autopilot record. This leaves a ghost Autopilot entry that can cause the device to re-enroll with wrong settings when it’s reset.
• Deleting the Autopilot record while the device is still enrolled. This can cause the device to lose its enrollment state and show as “Not registered” in Intune, even though it’s still active.
• Forgetting to wipe before deletion. If you delete the Intune record without wiping, the device may keep company data on it and could re-enroll automatically when it next connects.
• Deleting from Entra ID first. This breaks the link and can leave the Intune record orphaned, making it harder to clean up later.
• Not waiting for the wipe to finish. Deleting the device while a wipe is still in progress can leave the device in a half-enrolled state.

Tips

• Always remove the Autopilot record before deleting the Intune device record if you’re not wiping. The reverse order can cause re-enrollment loops.
• If you’re retiring a device permanently, you can skip the wipe and just delete both records. But if there’s any chance the device will be reused, always wipe first.
• Use the Bulk delete option in the Autopilot devices list if you’re removing many devices at once (e.g., decommissioning a lab).
• Keep a note of the serial number and Autopilot device ID before deleting. You’ll need them if you ever need to re-add the device.
• For devices that are lost or stolen, you should also consider a remote lock or wipe before deletion, if the device is still online.
• If the device is still assigned to a user, unassign it in Autopilot before deleting, to avoid confusion in reports.

Troubleshooting

Device still shows in Autopilot after deletion. Refresh the page and wait a few minutes. If it persists, check that you’re looking at the correct Autopilot device list (Devices > Enroll devices > Windows enrollment > Devices). If it still appears, you may have deleted the Intune record but not the Autopilot record. Delete it again from the Autopilot list.

Device re-enrolls automatically after deletion. This happens when the Autopilot record still exists. Delete the Autopilot record (step 3) and also remove the Azure AD device object (step 5). If it still re-enrolls, check if the device is in a provisioning package or has a stale enrollment certificate.

Device shows “Enrollment failed” after re-adding. This often means the Autopilot record was deleted but the device’s TPM or hardware hash is still cached. Wait 15–30 minutes and try again. If it persists, you may need to clear the device’s TPM or run dsregcmd /leave on the device (if you have physical access).

Can’t find the device in the Autopilot list. Search by serial number, not just the display name. If you don’t see it, the device may have been enrolled via a different method (e.g., manual enrollment) and never had an Autopilot record. In that case, only the Intune and Entra ID deletions are needed.

Delete button is greyed out. This usually means you don’t have the right permissions. Check that your account has Intune Administrator or Global Administrator role. If you’re using a delegated admin, you may need to request access.

Device reappears in Intune after a few days. This is likely because the device is still active and re-enrolled via MDM. You need to wipe or retire the device first (step 1) before deleting, or block the device in Entra ID to prevent re-enrollment.

Frequently Asked Questions

Q: Do I need to delete the Azure AD device too?
A: Yes, if you want a complete cleanup. The Intune record and the Azure AD device object are separate. Deleting only the Intune record leaves the Azure AD object orphaned, which can cause sign-in issues.

Q: What happens if I delete the Autopilot record but not the Intune record?
A: The device will remain enrolled in Intune, but it will lose its Autopilot association. If the device is reset later, it won’t automatically re-enroll via Autopilot and may require manual setup.

Q: Can I remove a device that’s offline?
A: Yes. You can delete the Intune record, Autopilot record, and Azure AD object even if the device is offline. However, if the device comes back online later, it may re-enroll unless you’ve also blocked it in Entra ID.

Q: How long does it take for the deletion to propagate?
A: Usually within minutes, but sometimes up to an hour for the Autopilot service to fully clear. If you’re re-adding the same device, wait at least 15 minutes.

Q: What if I don’t have the serial number?
A: You can find the serial number in the Intune device list under the device’s hardware details, or on the physical device (usually on a sticker or in System Information). If you don’t have access, you can search by device name or Autopilot device ID.

Q: Is there a way to bulk remove devices?
A: Yes. In the Autopilot devices list, you can select multiple devices and use the “Delete” action. For Intune, you can use PowerShell with the Remove-IntuneManagedDevice cmdlet, but that requires the Microsoft Graph PowerShell module.

Related

• Solved system image error 0x80780172?
• Fix iPad Battery Draining Fast: Causes & Solutions
• Gmail Notification Sound Not Working: 12 Fixes