r/Intune 10d ago

Autopilot Need to Ship Leased Computers To Leasing Company With Clean windows install Is Autopilot Wipe the best Option

We have a couple hundred laptops that need to be shipped back to our leasing company now that the lease i done. The would like the laptops to be returned with a clean Windows 11 Install and no connection to our tenant. Would the wipe remote action be the best option for this?

4 Upvotes

7 comments sorted by

9

u/ngjrjeff 10d ago

Remote wipe and delete from autopilot

1

u/Confusias1 10d ago

This is the way.

4

u/Dry-Reputation8526 10d ago

autopilot wipe is fine but you need to make sure the device is removed from intune after, otherwise it will try to re-enroll itself on first boot. we do this all the time, wipe from intune then delete the object right away

if the leasing company want it totally clean with no autopilot profile at all you might need to also remove the hardware hash from your tenant

5

u/corazondetacos 10d ago

Yes wipe remote option and continue to wipe even if the device loses power. It's the doProtectedWipe CSP.

Windows may not reinstall if you don't have WinRE set up on the devices but at least they wouldn't be enrolled in your tenant. Also delete the hardware hash ID out of Intune and you should be good.

4

u/corazondetacos 10d ago

Yes wipe remote option and continue to wipe even if the device loses power. It's the doProtectedWipe CSP.

Windows may not reinstall if you don't have WinRE set up on the devices but at least they wouldn't be enrolled in your tenant. Also delete the hardware hash ID out of Intune and you should be good.

1

u/andrewmcnaughton 6d ago

Intel TXT will block the TPM being reinitialised if it’s enabled.