Export (0) Print
Expand All

Retiring a Device by Using the Windows Intune Administrator Console

Updated: November 1, 2013

Applies To: Windows Intune

IT administrators can use the Windows Intune administrator console to retire a computer or mobile device from the Windows Intune service.

When an IT administrator retires a managed computer by using the Windows Intune administrator console, the following occurs:

  • The computer is removed from the Windows Intune inventory, and the available client seat count increases by one.

  • The computer’s status is no longer displayed in the Windows Intune administrator console.

  • Windows Intune attempts to remove the Windows Intune client software from the computer. If the computer is not connected to the Windows Intune service, the Windows Intune client software is not immediately removed. Windows Intune will remove the Windows Intune client software the next time that the computer connects to the Windows Intune service.

  • Windows Intune Endpoint Protection is removed from the computer. If the computer has another endpoint application installed and it is disabled, that application may be re-enabled after Windows Intune Endpoint Protection is removed. If the other endpoint protection application is not re-enabled or if no other endpoint protection application is installed, the computer may be left in a less secure state.

  • If an IT administrator is using Windows Intune policies to manage the computer, those policies are removed from the computer. As a result, the computer reverts to its previous settings. For example, if Windows Intune policies are used to manage Windows Firewall settings on the computer, the Windows Firewall settings revert to their previous state.

  • The computer no longer receives software updates or malicious software definition updates from the Windows Intune service.

  • Depending on how they are configured, retired computers can continue to receive updates by using Windows Server Update Services, Windows Update, or Microsoft Update.

To re-enroll a computer into the Windows Intune service, reinstall the Windows Intune client software on the computer. For information about how to install the Windows Intune client software, see Downloading the Windows Intune Client Software.

When an IT administrator retires a mobile device by using the Windows Intune administrator console, the following occurs:

  • The device is retired from the Windows Intune inventory.

  • The mobile device’s status is no longer displayed in the Windows Intune administrator console.

  • Line of business applications that were installed through Windows Intune will:

    • Be uninstalled from iOS and Windows Phone 8 devices.

    • Have the sideloading keys removed from Windows RT devices.

  • Retiring a mobile device will result in removing the association between the mobile device and its email server. As a result, information workers can no longer synchronize email or install software by using the Windows Intune company portal or the Windows Intune mobile company portal.

  • If Windows Intune policies are applied to the mobile device, the last policies that are in effect when the device is retired may continue to be in effect until the user removes his or her email account from the device. After the user’s email account is removed from the mobile device and the policies are no longer in effect, this may remove any encryption and password protection for the device and leave it in a less secure state.

When an IT administrator retires a covered mobile device, he or she can choose to wipe the device as well as remove it from the inventory.

  1. Open the Windows Intune administrator console.

  2. In the workspace shortcuts pane, click the Groups icon.

  3. In the navigation pane, click All Devices or the device group that contains the computer or device that you want to retire.

  4. To search for a device, in the Search devices box, type the partial or full name of the device for which you want to search.

    If the device is located, the name and additional information about the device appears in the device list.

  5. In the list, click the device or devices that you want to retire, and then on the taskbar click Retire/Wipe.

  6. When prompted to confirm whether you want to retire the device or devices, do one of the following:

    • For computers, click Yes.

    • For mobile devices, select one of the following options, and then click Retire Mobile Device:

      • Retire the mobile device from inventory only

      • Wipe device and remove it from inventory

  • If a managed device is actively refusing notifications from Windows Intune, it will display a management state of Unhealthy. Devices in this state may be retired, but cannot be wiped.

  • If a managed device displays a management state of Retire failed after attempting to retire the device, you will need to retry the retire operation. Some reasons for a failed retirement to investigate include:

    • Problems with the Exchange server

    • Problems with the Exchange connector

You may be unable to retire a computer in the following cases:

  • If the Windows Intune program was uninstalled explicitly, and the rest of the Windows Intune software was not uninstalled.

  • The computer has no network access, or is not recognized by Windows Intune as enrolled.

For either of these cases, or if your computer was not retired successfully for any other reason, you can retire the computer by downloading and running the uninstall scripts, or using the ProvisioningUtil.exe command line tool, as shown in the following procedures.

To remove the client software from a computer on which the client software was deployed by using Group Policy, you must remove the Group Policy Object (GPO) before you can remove the client software. If you do not first remove the GPO, the client software remains in the list of installed programs on that computer.

  1. Access the uninstall scripts at Windows Intune Uninstall Scripts.

  2. Agree to the Microsoft Software License Terms.

  3. Extract the contents to any folder.

  4. Follow the instructions in the Windows Intune and AIS client software uninstall Instructions document to uninstall.

  1. Open a command prompt in administrator mode.

  2. Navigate to %programfiles%\Microsoft\OnlineManagement\Common

  3. Run the following command - ProvisioningUtil.exe /UninstallAgents /WindowsIntune

The client retirement will start after a few minutes.

See Also

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft