Intune Device Clean Up rule

Question

Greetings,

I have some questions about the Device Clean up rule. I have set the rule to delete device inactive for 90 days and as per the Microsoft documentation, it would have a 180 days grace period to re-appear in Intune if the device reconnect (subject to the cert validity)

Question:

1. What happens to the device if the cert expired during the 180 days? Would this issue a wipe to the device, or would it stayed at its current state when it reconnects?
2. What happens to the device after the 180 days? Would this issue a wipe to the device, or would it stayed at its current state when it reconnects?

Thanks

Answer 1

@Ken Khor Thanks for posting in our Q&A.

For these questions, both will not wipe devices. Wipe action restores a device to its factory default settings. The device clean up rule doesn't trigger a wipe or retire. Device Clean Up rule only disconnects the connection between devices and intune. We just couldn't see the device records in intune portal.

Based on my understanding, for these two scenarios, the device will not reconnect to intune. The device check-in will be denied. The policies on the device will stay and intune portal won't have any updated information about this device. If we want intune manage the device again, it is suggested to delete the device record in Azure AD portal and do re-enrollment.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.