What is Retire / Wipe / Delete / Fresh Start / Autopilot Reset in Microsoft Intune. Microsoft Intune offers several options for managing devices, including Retire, Wipe, Delete, Fresh Start, and Autopilot Reset. Each of these features serves a specific purpose in device management, ensuring security, efficiency, and control over company devices. Understanding when and how to use each setting is crucial for effective device management within your organization. We will first show you all the settings in a quick summary and will then describe the different settings in detail.
Table of Contents
What is Retire / Wipe / Delete / Fresh Start / Autopilot Reset in Microsoft Intune
In this section we will show you a quick summary of all the options available. If you want to learn more scroll down to have a detailed description.
| Method | What will happen | When to use it | Microsoft Intune Management |
|---|---|---|---|
| Retire | Remove ONLY company data and settings from a device while maintaining personal data. | This option is perfect for BYOD devices when for example an employee leaves the organization. | Removed |
| Wipe | Device will be resetted and everything will be deleted. | Before it is handed over to a new user, or if the device has been lost or stolen | Removed |
| Delete | The "Delete" action in Microsoft Intune removes the device record from Intune management, but it doesn't affect the device itself. | When you want to clean up your Intune environment by removing obsolete device records. | Removed |
| Fresh Start | With Fresh Start, you reset the device to the only built-in applications included in the standard ISO image of Microsoft Windows 10/11. | Fresh Start helps remove pre-installed (OEM) apps that are typically installed with a new PC | Keep or Removed (Both possible) |
| Autopilot Reset | Reset a device to its original state and automatically enroll it back into Intune management | Autopilot Reset is the best option for reusing a functional device in your company for a new user for example. | Keep |
What is Retire
Let’s begin with the Retire option. Selecting Retire will remove app data, settings, and Intune managed email profiles from the device. The device will remain visible in Intune until it checks in. If you need to remove outdated devices right away, opt for the Delete action instead. Delete not only executes the retire command but also instantly removes the device from the All devices list. Retire retains users’ personal data on the device.
When should this be used?
Retire should be utilized for devices that are no longer required. When it comes to corporate devices, it completely revokes all access, including the deletion of the Azure AD record.
An exception to this rule exists: If a device has an Autopilot hash assigned (Zero Touch ID, ZTDID), it will NOT be deleted from Azure AD. This exception arises because registering a device with Autopilot generates a linked stub device object in Azure AD, serving as the anchor for the Autopilot device. Consequently, the Azure AD team has implemented an additional safeguard to prevent the deletion of Azure AD device objects with assigned Windows Autopilot IDs.
What is Wipe and Delete
The Wipe action (previously known as Factory Reset) can result in data loss as it is a potentially destructive action. It resets a device to its default settings, known as the out-of-box experience (OOBE). With the Wipe action, there’s an option to retain the enrollment state and associated user account. If this option isn’t selected, all data, applications, and settings will be erased. Refer to the table for a comparison of the differences.
When should this be used?
A wipe proves beneficial for resetting a device prior to handing it over to a new user or in cases where the device has been misplaced or stolen.
The option “Wipe the device and continue wiping even if the device loses power” is a recent addition aimed at preventing the bypassing of a wipe by simply power cycling the device. This feature ensures that the device continues attempting to reset until the process is successfully completed.
What is Fresh Start
The Fresh Start device action eliminates any apps installed on a PC running Windows 10 or 11. It effectively removes pre-installed (OEM) apps commonly found on new PCs. Essentially, Fresh Start functions similarly to a wipe, but with the added advantage of removing OEM-preloaded applications (Bloatware) and automatically enroll to Microsoft Intune again.
Fresh Start offers a single option: If you choose not to retain user data, the device will be restored to the default completed state of the out-of-box experience (OOBE), while retaining the built-in administrator account.
When should this be used?
Fresh Start is recommended for devices that do not come with a clean installation of Windows (Signature Edition). For instance, if you’ve purchased a device from a local electronics store and it’s loaded with demo software and a trial version of a virus scanner, Fresh Start allows you to reset the device to its original state, removing all additional software and returning it to the default Microsoft Windows 10 or 11 ISO image with only built-in applications included.
What is Autopilot Reset
Autopilot Reset removes all files, applications, and settings on a device, including the user profile, while preserving the connection to Azure AD and Intune. Essentially, it wipes the device while retaining the enrollment state but not the user data. Moreover, Autopilot Reset also maintains settings such as region/language/keyboard, any applied machine provisioning packages, and Wi-Fi connections. Following an Autopilot Reset, there won’t be an Out-of-Box Experience (OOBE) or Autopilot setup, as this data is preserved. Instead, the user will be directed straight to the Windows 10 or 11 login screen, allowing for direct sign-in.
When should this be used?
Autopilot Reset stands out as the optimal choice for repurposing a functional device within your organization. Essentially, it involves removing the last user from the device, and depending on your Intune deployment configuration, it can be seamlessly passed on to the next person without any additional effort required.
Conclusion
You learned What is Retire / Wipe / Delete / Fresh Start / Autopilot Reset in Microsoft Intune. We have shown you the comprehensive differences between the options and when to use which one. Did you enjoy this article? Dont forget to follow us and share this article. You may also like the the following articles.
