- This topic is empty.
- Post
-
- January 1, 2025 at 1:03 pm
Weekend WikiKeymasterIn Microsoft Intune, the terms Retire, Wipe, Delete, Fresh Start, and Autopilot Reset refer to different device management actions that administrators can perform. Each action serves a specific purpose, and understanding them is key to effectively managing devices in your organization. Here’s an explanation of each:Here’s a detailed “What Happens” and “Behavior” table for the 5 Microsoft Intune actions:
Action What Happens Behavior Retire – Removes the Intune management profile. – Deletes all company data, settings, policies, and managed apps. – Leaves user data and personal apps untouched. – Device is no longer managed by Intune. – Personal apps, files, and settings remain intact. – Suitable for user to keep the device for personal use. Wipe – Deletes all company and personal data. – Resets device to factory settings. – Optionally retains Azure AD and Intune enrollment (Selective Wipe). – Device is fully reset, erasing everything. – Can optionally remain enrolled in Intune and Azure AD if needed. – Best for lost, stolen, or repurposed devices. Delete – Removes the device record from Intune or Azure AD. – Does not make any changes to the physical device. – Device is no longer visible in the Intune console. – No impact on device functionality or configuration. – Use to clean up old/stale records. Fresh Start – Removes pre-installed OEM apps and settings (except essential apps and drivers). – Retains Azure AD join and Intune enrollment. – Device remains managed by Intune. – Policies and configurations are reapplied. – Ideal for removing bloatware and starting clean. Autopilot Reset – Removes all personal files, settings, and apps. – Resets the device to a business-ready state. – Retains Azure AD join and Intune enrollment. – Device is reset and reconfigured with Intune policies. – Ready for new user or redeployment without re-enrollment. – Suitable for corporate use cases. Key Highlights
- Retire: Focuses on removing company management while keeping user data.
- Wipe: Completely erases all data and optionally re-enrolls the device.
- Delete: Affects only the Intune/Azure AD record, not the device.
- Fresh Start: Cleans the system but keeps device management and enrollment.
- Autopilot Reset: Prepares the device for a clean handover while maintaining enrollment.
1. Retire
- Purpose: Used when a device is no longer needed to be managed by Intune but the user may still need access to personal data or apps.
- Key Features:
- Removes the Intune management profile from the device.
- Deletes company data and settings (e.g., policies, email accounts, and managed apps) from the device.
- Leaves user data and apps untouched.
- Best for: Decommissioning a device while allowing it to remain functional for personal use.
2. Wipe
- Purpose: Used to completely erase all data from the device, restoring it to factory settings.
- Key Features:
- Removes all company and personal data, including settings, apps, and files.
- Resets the device to its factory default settings.
- Optionally, you can retain Azure Active Directory (AAD) enrollment for corporate-owned devices (selective wipe).
- Best for: When a device is lost, stolen, or being repurposed for a new user.
3. Delete
- Purpose: Used to remove a device record from Intune or the Azure AD portal.
- Key Features:
- Deletes the device record from the Intune console.
- Does not impact the device itself—no changes are made to the device’s data or settings.
- Best for: Cleaning up stale or obsolete device records in Intune or Azure AD.
4. Fresh Start
- Purpose: Used to remove bloatware and restore a device to its original operating system configuration while retaining AAD and Intune enrollment.
- Key Features:
- Removes preinstalled OEM apps (except essential drivers and apps like Microsoft Office).
- Retains Azure AD join and Intune management.
- Best for: Re-deploying devices to a new user or starting fresh while keeping management and enrollment intact.
5. Autopilot Reset
- Purpose: Used to quickly reset a device to a business-ready state while keeping it enrolled in Intune.
- Key Features:
- Resets all user and application data.
- Removes personal files, settings, and apps but retains the device’s enrollment in Intune and Azure AD.
- Automatically reapplies Intune policies, settings, and configurations during the reset process.
- Best for: Preparing a device for a new user or refreshing a device to a clean state without re-enrolling it.
Summary Comparison
Action Removes Company Data Removes Personal Data Factory Reset Keeps Intune Enrollment Use Case Retire Yes No No No Decommissioning for personal use Wipe Yes Yes Yes Optional Lost/stolen or device repurposing Delete No No No No Cleaning up records Fresh Start Yes Yes No Yes Removing bloatware for clean setup Autopilot Reset Yes Yes No Yes Reset to business-ready state Here’s a step-by-step guide on how to perform Retire, Wipe, Delete, Fresh Start, and Autopilot Reset in Microsoft Intune:
1. Retire
Steps:
- Log in to the Microsoft Intune Admin Center (Intune Admin Center).
- Navigate to Devices > All Devices.
- Select the device you want to retire.
- Click Retire from the top menu or the device actions menu.
- Confirm the action.
Notes:
- The Retire action removes the Intune management profile and company data but does not reset the device.
2. Wipe
Steps:
- Go to the Intune Admin Center.
- Navigate to Devices > All Devices.
- Select the device to wipe.
- Click Wipe from the top menu.
- Choose one of the options:
- Wipe and retain enrollment state and user account (if you want to keep Azure AD and Intune enrollment intact).
- Wipe without retaining enrollment (full factory reset).
- Confirm the action.
Notes:
- Use the “retain enrollment” option for corporate-owned devices you plan to reuse.
- Ensure the device is powered on and connected to the internet for the wipe command to succeed.
3. Delete
Steps:
- Log in to the Intune Admin Center.
- Navigate to Devices > All Devices.
- Select the device you want to delete.
- Click Delete from the top menu or actions menu.
- Confirm the action.
Notes:
- This removes the device record from Intune or Azure AD but does not affect the physical device.
- Perform this action only for stale or decommissioned devices.
4. Fresh Start
Steps:
- Log in to the Intune Admin Center.
- Navigate to Devices > All Devices.
- Select the Windows device for which you want to perform a Fresh Start.
- Click Fresh Start from the top menu.
- Confirm the action and decide whether to retain user data and settings:
- If you do not retain user data, the device will be fully reset while keeping management settings intact.
Notes:
- This action applies only to Windows 10 and 11 devices.
- Fresh Start removes pre-installed OEM software but retains essential drivers.
5. Autopilot Reset
Steps:
- Log in to the Intune Admin Center.
- Navigate to Devices > Windows Autopilot Devices.
- Select the device for which you want to perform an Autopilot Reset.
- Click Autopilot Reset from the menu.
- Confirm the action.
Notes:
- The device must be enrolled in Autopilot and connected to the internet.
- After the reset, the device will reapply policies and configurations automatically.
Additional Considerations
- Ensure devices are online and have access to the internet for the commands to execute successfully.
- Use the Device Management Logs in Intune to monitor the status of these actions.
- Always verify the impact of the selected action, as some (e.g., Wipe) can result in irreversible data loss.
Let me know if you need help setting up or troubleshooting any of these actions!
- You must be logged in to reply to this topic.