Second hand computer came with pirated Windows 11 Pro activation what can i do to unlink it from Microsoft?

Question

Second hand computer came with pirated Windows 11 Pro activation what can i do to unlink it from Microsoft?

MC Derril 25

So i bought this PC a few months ago and seller told me he used a pirated script to activate it and i would like to use a legitimate code for activation. It also seems that it is part of some InTune organization or whatever that might be i always get User Device Registration event id 360 in Event Viewer and others.

What are the steps for me to follow to completely unlink this PC from Microsoft servers? Do i need to post DeviceID and ProductID?

0 comments

Answer accepted by question author

Alex-L 6,715 Microsoft External Staff Moderator

Hi MC Derril

I was just assigned your case, please allow me to join in and hopefully be of help.

Taken from previous interactions here, yes, buying and activating a genuine Windows license will fully replace the old activation, even if the previous one was pirated. Once the new product key is entered and successfully activated, Microsoft’s activation servers store the new, valid digital license for your hardware and ignore whatever was there before.

Important details:

Windows activation is not historical. Microsoft does not keep a “stack” of previous activations.
Activation servers only retain the current valid activation associated with your hardware’s ID.
A pirated activation (e.g., KMS scripts, loaders, emulators) never creates a valid digital license, so it is simply overwritten by a genuine one.
You do not need to “clear” or request removal of the old activation.
The safest and cleanest approach is to perform a clean install before entering the new key, especially if the previous activation involved scripts or tampered system files.
After a clean install + genuine key activation, the system becomes fully legitimate, and future installs will automatically activate using the new digital license.

In short: Buying a new Windows license does replace the old activation record completely. The new genuine key becomes the sole activation stored on Microsoft’s servers for your device.

Let me know if there's anything unclear, I'll try my best to clarify.

Have a great day!

MC Derril 25 Reputation points

2026-01-08T17:56:24.5033333+00:00

Thank you for clearing this! I will buy a FPP version when i see them in offer and replace this. I was afraid the pirated one will never go away. One more thing... will the "fake" InTune association go away too?
Alex-L 6,715 Reputation points Microsoft External Staff Moderator

2026-01-12T06:52:46.9533333+00:00

Hi MC Derril

Thanks for the follow up!

If you perform a full clean install (delete all partitions), the Intune enrollment artifacts on the machine are removed. In most cases, this wipes out the “fake” or leftover MDM/Intune configuration that was put there by the previous owner or by a pirated activator script.

After a clean install, if the device does not automatically re-enroll in Intune, then you’re free.

However, If the PC is still registered in a real organization’s Intune tenant, Windows will re-enroll automatically even after reinstalling. In that situation, only the organization’s Intune admin can release the device from their tenant. Until they do, the PC will always behave like a company-managed device.
MC Derril 25 Reputation points

2026-01-13T16:49:43.7533333+00:00

Ok i get it. Is there any way i can make sure the PC never was in a Intune org? I don't want to spend money for nothing if you know what i mean.
Alex-L 6,715 Reputation points Microsoft External Staff Moderator

2026-01-14T07:01:59.5533333+00:00
Hi MC Derril

Yes, I get that, you can check if a PC was ever in an Intune organization. After a clean install, look at:

Settings → Accounts → Access work or school (should be empty)

Event Viewer → User Device Registration log (no MDM/Azure AD join events)

Settings → Workplace (ms-settings:workplace) (should show no management)

Registry: HKLM\SOFTWARE\Microsoft\Enrollments (should be empty)

If all of these are clean after reinstall, the PC was never in an Intune tenant or is no longer tied to one. Only if it auto‑re‑enrolls or shows “managed by your organization” does it mean it’s still in an Intune org.
Alex Derril 0 Reputation points

2026-03-27T00:39:31.3033333+00:00

Well it doesn't work for me i will open a new thread to explain it better.

1 additional answer

Your answer

MC Derril 25 Reputation points

2026-01-08T17:56:24.5033333+00:00

Thank you for clearing this! I will buy a FPP version when i see them in offer and replace this. I was afraid the pirated one will never go away. One more thing... will the "fake" InTune association go away too?
Alex-L 6,715 Reputation points Microsoft External Staff Moderator

2026-01-12T06:52:46.9533333+00:00

Hi MC Derril

Thanks for the follow up!

If you perform a full clean install (delete all partitions), the Intune enrollment artifacts on the machine are removed. In most cases, this wipes out the “fake” or leftover MDM/Intune configuration that was put there by the previous owner or by a pirated activator script.

After a clean install, if the device does not automatically re-enroll in Intune, then you’re free.

However, If the PC is still registered in a real organization’s Intune tenant, Windows will re-enroll automatically even after reinstalling. In that situation, only the organization’s Intune admin can release the device from their tenant. Until they do, the PC will always behave like a company-managed device.
MC Derril 25 Reputation points

2026-01-13T16:49:43.7533333+00:00

Ok i get it. Is there any way i can make sure the PC never was in a Intune org? I don't want to spend money for nothing if you know what i mean.
Alex-L 6,715 Reputation points Microsoft External Staff Moderator

2026-01-14T07:01:59.5533333+00:00

Hi MC Derril

Yes, I get that, you can check if a PC was ever in an Intune organization. After a clean install, look at:

Settings → Accounts → Access work or school (should be empty)

Event Viewer → User Device Registration log (no MDM/Azure AD join events)

Settings → Workplace (ms-settings:workplace) (should show no management)

Registry: HKLM\SOFTWARE\Microsoft\Enrollments (should be empty)

If all of these are clean after reinstall, the PC was never in an Intune tenant or is no longer tied to one. Only if it auto‑re‑enrolls or shows “managed by your organization” does it mean it’s still in an Intune org.
Alex Derril 0 Reputation points

2026-03-27T00:39:31.3033333+00:00

Well it doesn't work for me i will open a new thread to explain it better.

Answer 1

DaveM121 880.3K Independent Advisor

If that device is indicating it is linked to an Intune account, most likely, it was previously owned by a company or organization.

It is not easy to remove that link, if the company never removed the device from their Intune account, to resolve that and to remove the pirated version of Windows, the best option is to create a bootable Windows USB on an empty 8GB USB flash drive, then boot the PC from that and clean install Windows, if there is no pre-existing OEM licence on the motherboard of that device, you would need to purchase a Windows licence to activate Windows.

MC Derril 25 Reputation points

2025-12-24T15:05:22.8166667+00:00

I have already formatted this PC a few times, no matter what i do the moment i connect it to the internet it activates itself.
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-24T15:10:35.27+00:00

Does it always install Pro edition instead of Home. (the normal default)

Do you wipe all partitions at the Customised install step to install on Unallocated space?
DaveM121 880.3K Reputation points Independent Advisor

2025-12-24T15:12:12.51+00:00

Thank you for that information.

Download the free ShowKeyPlus app from the Microsoft Store.

Please provide a screenshot of that app window and please hide your product key in the screenshot.
MC Derril 25 Reputation points

2025-12-24T15:33:29.64+00:00

Yes it always becomes Pro and it seems to overwrite the key to a different one. Yes i have completely deleted all partitions etc. Seller told me the PC was never part of any organization it was his personal gaming pc but he had Enterprise LTSC IoT etc installed at a certain point. I know i can use ei.cfg on the USB drive if i want to change edition that's not an issue but even if i choose Home that becomes activated as well... More relevant information here: Device ID: [PII Removed]
DaveM121 880.3K Reputation points Independent Advisor

2025-12-24T15:38:09.02+00:00

In that case, the problem may be in BIOS, the best option is to go to the support page for the PC to download and manually install the latest version of BIOS they provide, then re-install Windows using the bootable USB and ensure the PC cannot access the Internet until you get into Windows desktop.
MC Derril 25 Reputation points

2025-12-24T16:14:32.8733333+00:00

Yes the BIOS has been flashed and reflashed a couple of times i have also reset the TPM module i cleared the secure boot keys to default i even tried MoKiChU's intel ME firmware and newer chipset/mei driver because this board has 2 BIOS chips so why not... I have tried every possible combination i can think of honestly i just want this PC unliked from Microsoft servers so i can properly activate it legally.
DaveM121 880.3K Reputation points Independent Advisor

2025-12-24T16:20:52.64+00:00

After performing all those steps, are you still seeing the device is linked to InTune?

If so, that does indicate that device was previously owned by a company or organization, and if they never unlinked the device from their InTune account, that is causing the problems, and the only way I know of to bypass that is to turn off your home router while installing Windows to ensure it cannot connect to the Internet.
MC Derril 25 Reputation points

2025-12-24T16:30:21.3766667+00:00

I'm not sure if it's linked or not. It's trying to link it all the time i get the Device enrollment stuff in Event manager, Windows hello for business etc stuff like this. I can assure you it did not belong to any company i know the seller personally this was his gaming pc. All this is happening because he used pirate activation and/or maybe some licenses from google. The thing is how do i get Microsoft to consider this a fresh new PC which is exactly what it is right now. I found out about the InTune stuff because of Event Viewer...
DaveM121 880.3K Reputation points Independent Advisor

2025-12-25T06:41:15.1966667+00:00

1

If you have purchased a new Windows licence, are you not able to enter the product key in the Activation settings window to activate Windows with your licence?

2

Before you do that, click your Start Button, type cmd then right click Command Prompt and choose 'Run as Administrator'

Run or paste this command and hit Enter:

slmgr.vbs /dlv

Please post a screenshot of the resulting dialog
Airbus A350 7,365 Reputation points Volunteer Moderator

2025-12-25T14:24:51.2166667+00:00

Hello,

Before I continue, no need to enter the Device or Product ID :)

That's personal information that you shouldn't post on a public forum.

If your PC had Windows preinstalled, your best bet is to probably reinstall Windows, as it's much easier to do this rather than trying to work harder.

First, check if you're under Intune management by going to Settings > Accounts > Access work or school and check for any accounts that aren't yours. If there are any, click them, and remove them.

Restart your PC and see if you still have those accounts.

Then, please open a Command Prompt window (as admin) and then type slmgr /dlv and take a screenshot of what you see.

Hope to hear back from you.
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-25T15:10:31.12+00:00

@Airbus A350 , the OP has reinstalled many times and already confirmed they have clean installed deleting all previous partitions and using unallocated space.
Airbus A350 7,365 Reputation points Volunteer Moderator

2025-12-25T23:01:00.5033333+00:00

Thanks for letting me know, I guess I forgot to hard refresh before posting.
MC Derril 25 Reputation points

2025-12-26T18:16:02.45+00:00

Well the key i have does not work it seems. I bought it online a few years ago but i am willing to buy a full physical copy of Windows 11 Pro retail. I will do that once i manage to get this PC unliked from Microsoft server. So i guess what i am trying to achieve right now is to get this PC unactivated. This is because even if i buy that retail copy now this fake activation will overwrite it. Here is the screenshot of /dlv note that i have been toying around cleaning WPA registry and other stuff but i can reformat the PC anytime and it's not any issue.
MC Derril 25 Reputation points

2025-12-26T18:25:32.6066667+00:00

Hello there! I have just posted a screenshot of dlv output in the upper discussion as it involves more people. Also please read my last answer from the same discussion. I don't have any issues with posting DeviceID or ProductID i honestly doubt anything can happen with that information. Since yesterday i have been using a local account because i thought i should try this option too but when i had hotmail linked it didn't show anything under Settings > Accounts > Access work... I have found this information online as well. I am trying to get this PC unliked from Microsoft servers so i can go ahead and buy a Retail copy of W11Pro. The way i see it right now anything i put in as a key gets overwritten by this pirated activation.
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-27T10:28:57.6566667+00:00

Looking at your screenshot for slmgr /dlv the Pro edition licence is OEM_DM which suggests it is embedded in the bios. The installation routine reads this and installs when edition based on the licence.

This is a standard routine for a branded PC/laptop.

To check for the product key try using a Command prompt (Admin) and enter:

wmic path SoftwareLicensingService get OA3xOriginalProductKey [press return] does it show a 25 character product key?
MC Derril 25 Reputation points

2025-12-27T21:20:31.09+00:00

Well i have formatted the PC again this time i just let it do everything automatically and this is the result:

As i said before this PC was never part of any organization as a matter of fact it never moved from my friends house and from what i can tell he probably used massg hwid activator or tsforge, maybe both? The other dlv screenshot was after i messed around a bit with KMS and WPA registry. There must be a way to delink this from Microsoft so i can go buy my original windows copy.
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-28T16:09:40.06+00:00

If you want to use a licence you have bought you should be able to buy a retail product and using the option in windows to Change product key apply the new licence.

The command line you use in PowerShell is incorrect to use in PowerShell. The command is for use in a Command prompt (Admin).
MC Derril 25 Reputation points

2025-12-29T19:12:21.87+00:00

Well it doesn't seem to say anything different in cmd. The thing is that i first want to see this PC delinked, deactivated and then i can buy my windows no problem. If not how can i be sure it will work? As you can see i have 0 ways to deactivate it...
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-29T19:54:45.2966667+00:00

The screenshot shows the command has worked but there is no licence embedded in the bios.

Your previous screenshot where you used PowerShell had failed errors.

I don't know how you would unlink the device from it's current licence without applying a new one. I don't think even Microsoft Support would do it.

If you bought a licence using a product key then the command slmgr /dlv would show the last 5 characters of the new product key you had bought.

Other than that I can't help any further. Activation would still appear the same so far as I know but you would be using your licence instead of someone else's.
MC Derril 25 Reputation points

2025-12-30T14:24:24.9866667+00:00

That's what i'm trying to say here. I want to buy an original license but there are no assurances that once i use that code this PC will use it. It's amazing how this pirated activation keeps coming back no matter what...
Neil D 33,095 Reputation points Volunteer Moderator

2025-12-30T15:59:11.6466667+00:00

I'm sorry I can't offer any further advice.

I can try and escalate this thread if you wish to see if you can get a clear answer.
Nathan Roberts (SN) 11,291 Reputation points Volunteer Moderator

2025-12-30T20:58:29.6333333+00:00

Hey there, MC Derril

When you got the fresh install media for Windows 11, did you get it from this download link: https://www.microsoft.com/en-gb/software-download/windows11?msockid=012fee8ffecc600a2c82fb63ff776173

Then downloaded the Windows 11 media creation tool for the USB stick?

I am trying to work out if, when installing Windows 11 on your device, you installed a fresh reformatting the drives during the process. It has been ages since I last did this, but do remember an option to erase everything and start fresh.

Is this what you did, but end up with Windows 11 Pro?

Thanks,
Nathan
MC Derril 25 Reputation points

2025-12-31T17:01:32.4+00:00

Hello @Nathan Roberts (SN) Yes i have downloaded directly from Microsoft, i mostly use the en-US version although i did once try the en-GB just to see if it's any different. I did try to use the mediacreationtool but i don't like the fact that it defaults to bitlocker encrypting drives automatically so now i mostly use autounattended.xml or rufus to write the usb, not that it matters. I find it much easier to setup with autounattended and honestly it's pretty much the best de-bloater available. Yes i always reformat completely the drive i install Windows on. I can assure you the problem is that this PC is activated (fake) by HWID and there is not much i can unless someone from Microsoft removes it. I work in this sector so i really know what I'm doing, i hope nobody feels offended or anything.
Nathan Roberts (SN) 11,291 Reputation points Volunteer Moderator

2025-12-31T20:55:25.1866667+00:00

Hey there, MC Derril

No, you didn't offend me. I just wanted to doublecheck what you have done to make sure nothing was missed. It is just a habit of mine 😎

Happy New Year though!
Nathan

Share via

Second hand computer came with pirated Windows 11 Pro activation what can i do to unlink it from Microsoft?

1 additional answer

Your answer