Good days guys, We have a trouble with login on Windows. We needed to re-enroll the pc and user. So I disconnected the pc from our intune service to be re-enrolled. During this time there became a problem and logged out in somehow. Now on the login page seems current user information but the login attempts are useless. Even we resetted the password on intune the problem continues. What is the solution to re login the pc? Anyone can has any idea? Thanks in advance Regards

By disconnecting to Intune, did you delete the account or wipe it? If so, you will then see after PC real restart that also user credentials will be gone from login screen. After this, if you did not previously created local user/admin account, only way is to re-install computer with USB installation media. This is by design. What is the status of device account in EntraID? Does the account exist anymore?

Cannot login after disconnecting from intune

Accepted answer

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-13T13:24:25.9466667+00:00

By disconnecting to Intune, did you delete the account or wipe it? If so, you will then see after PC real restart that also user credentials will be gone from login screen. After this, if you did not previously created local user/admin account, only way is to re-install computer with USB installation media. This is by design.

What is the status of device account in EntraID? Does the account exist anymore?
Please sign in to rate this answer.
Hasan Bozkurt 20 Reputation points

2024-05-13T16:21:24.33+00:00

The device does not exist on Entra. So as you said we have opened the pc on recovery modus and re-installed via online way. The thing what I did not understand is if we created a local admin user would it be ok to manage the users?

I mean What is the plausible solution for this scenario after that? So for our clients we want to set up our windows according to it.

Initially we create a user directly connected to our o365. So there is no local admin user.

Does it make sense to create a local admin user to avoid this type of issue?

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-13T17:52:02.3566667+00:00

Deleting and Wiping devices from Intune will give the result as you described, so that is by design. Also by default, Local Administrator built-in account is disabled. Excpecially with Cloud LABS, I do create custom local admin account with password managed by LAPS then. If you would do so, you would get access on local Windows installation, yes. But that is not needed typically. By deleting accounts from Intune, you will prevent the access, that is by design :)

@Hasan Bozkurt fyi

Hasan Bozkurt 20 Reputation points

2024-05-13T22:03:20.6733333+00:00

As far as I understand do not manage by old way directly pc, manage the pc via intune instead. Right? if yes can you explain me which is the best way to re-enroll a pc seamless? could you please provide any link?

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-14T09:02:33.4233333+00:00

For existing PCs in your AD perhaps, you can first sync them into intune by applying Entra Sync and get them into Entra. If you later want to re-enroll them as fresh devices, you can Wipe them or use Autopilot Reset. My opinion is, that Wipe is better because then you will get fresh machine. It is all based on Windows Reset functionality which is basically like a factory reset, depending on your choises.

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-14T10:26:22.0966667+00:00

DELETED by user

Jon Chu 0 Reputation points

2024-05-14T21:03:30.7933333+00:00

Really appreciate the responses, gents.

Our IT team is having a similar issue. Our company is letting the user keeping his laptop, however, the company wants to keep the data in his AAD joined account. However, once we retired the laptop, he lost access immediately, even with known logins. Now that the machine is retired, can we also assume that all the data under his AAD account are gone when the machine is retired?

And just to confirm, in order for a users to access a retired laptop from Intune. The ONLY way is to create a local admin account at some point after the machine is enrolled in Intune, Correct? Thank you.

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-15T08:17:52.9066667+00:00

@Jon Chu , when machine is retired (delete from Intune), user could only access existing Windows OS installation if he knows local account which should be created before retiring. Also data stored in OneDrive will not be accessile, naturally. If Bitlocker was used, files saved on local disk drive will not be accessible either.

Hasan Bozkurt 20 Reputation points

2024-05-15T08:47:14.75+00:00

@Pavel yannara Mirochnitchenko But this make no sense to me at all. Because if a user wants to join an AD then there should be possibilty default. Because after I disconnected from intune it became useless laptop. As you know it needed a fresh win installation to set up all config. So there should be possibility for even after disconnection. Am I right?

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-15T10:45:12.3366667+00:00

Let me test this to be sure 😊

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-15T15:41:18.3+00:00

Sorry I was wrong, when you delete device account from Intune, user can still sign in to Windows with existing user account and also new accounts can sign in to Windows as well from that tenant. Sure it makes sense, because Entra ID device account still exists. But data, onedrive, teams etc are not accasseble anymore.

Jon Chu 0 Reputation points

2024-05-15T15:50:31.8433333+00:00

@Pavel Thank you very much for your input. To me, it just sounds like Microsoft is not doing a good job on the technical documentations in terms of aftermath of certain actions. And a more robust solution is needed in case of a machine is retired, a user can still login to a laptop without hassle. Ex. Automatically create a local admin account with pre-determined username and password after a machine is retired.

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-15T16:05:02.6266667+00:00

To get the secured result, you need to disable or to delete account in Entra ID. But still, old user will be enabled to logged into Windows with cached credentials. I have totally different recollection of this few years ago, but maybe something is changed...

Pavel yannara Mirochnitchenko 12,221 Reputation points MVP

2024-05-16T03:57:19.49+00:00

During my testing, yesterday evening I was able to login with cached credentials, even still after multiple rebooting. Then waited 3 hours, powered on again and the credentials were gone. So, originally I was right, delete will eventually make it impossible to login to workstation, which is good!

Hasan Bozkurt 20 Reputation points

2024-05-16T13:43:44.4066667+00:00

Did you try to disconnect on account section on settings ? What
Sign in to comment

Share via

Cannot login after disconnecting from intune

0 additional answers