This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello, I accidentally connected my personal PC to my work account and it applied several policies that I don't want on my personal PC.
To revert it I disconnected the account from Settings -> Accounts -> Access work or school. This didn't revert anything though.
I think I was able to manually re-enable the PIN-code I was previously using to sign in after this but I still cannot change my lock screen.
It still says "Some of these settings are managed by your organization".
I checked gpedit.msc for any kind of policy changing this but I have no policies at all configured. I checked "Computer Configuration -> Administrative Templates -> All settings" sorted by "State".
Same for "User Configuration".
I also ran all of these commands as administrator:
"
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKLM\Software\Microsoft\WindowsSelfHost" /f
reg delete "HKLM\Software\Policies" /f
reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f
reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKCU\Software\Microsoft\WindowsSelfHost" /f
reg delete "HKCU\Software\Policies" /f
reg delete "HKLM\Software\Microsoft\Policies" /f
"
It deleted a few keys but after restarting I still am not allowed to change my lock screen?! I asked IT in the company how they changed the lock screen and they said it was set by "Intune Microsoft Endpoint Manager" (MeM). Is there any way I can reset the damage that was done and get control of my lock screen again without reinstalling my personal PC?
I was able to finally unlock the lock screen by deleting this registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PersonalizationCSP
Although I'm not sure if there's any other unwanted settings still left on my PC so if anyone knows of any better way to revert/delete everything that could have been applied through MeM please let me know.
@Alexander Arques ， Thanks for sharing your solution. In General, Intune settings are based on the Windows configuration service provider (CSPs). The behavior depends on the CSP. Some CSPs remove the setting, and some CSPs keep the setting, also called tattooing when we remove the profile. Here is a link with more details for your reference:
https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot#what-happens-when-a-profile-is-deleted-or-no-longer-applicable
If one device is enrolled into Intune by accident, you can firstly ask Intune admin to check what are the policies applied to this device. If the setting is not what you want, change the setting via Intune portal before you unenroll it.
Hope it can help.