Cannot remove Microsoft Intune from the Azure Portal

Question

Cannot remove Microsoft Intune from the Azure Portal

Lee Stevens 1

I am having an issue with enrolling devices into Azure as I cannot delete "Microsoft Azure" from the portal. If I open this entry, the delete button is disabled. How do I remove this service so I can get devices to enroll? screenshot

Backstory: Years ago, I set up a SCCM connector to Intune/Azure and today, this is breaking device registrations as I do not use either SCCM or Intune. I just want to enroll them into Azure.

3 answers

Your answer

Answer 1

Simon Ren-MSFT 40,341 Microsoft External Staff

Hi,

Thank you for posting in Microsoft Q&A forum.

Per my experience, it's unable to delete Microsoft Intune option from Azure portal. If you no longer need Intune, you can set the MDM user scope and WIP user scope to none to have a try, as shown below:

user scope

Thanks for your time. Have a nice day!

Best regards,

Simon

If the response is helpful, please click "Accept Answer" and upvote it. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Lee Stevens 1 Reputation point

2024-02-05T16:52:09.1333333+00:00

Unfortunately, this didn't solve it. I did set both the options to None as you suggested, and then set Entrata join to All just to promote the least restrictive first.

You cannot change that setting "Users may register their devices with Microsoft Entra" per https://learn.microsoft.com/en-us/entra/identity/devices/manage-device-identities#configure-device-settings which states "Enrollment with Microsoft Intune or mobile device management for Microsoft 365 requires registration. If you've configured either of these services, ALL is selected, and NONE is unavailable." The problem is Intune, and not being able to remove it from the mix, I am sure of it. It is trying to connect to an unknown / nonexistent server. Upon trying to rejoin, I get the same error with the server message as: Number of retry attempts exceeds expectation.

Answer 2

Pavel yannara Mirochnitchenko 13,336 MVP

I believe this is by design, that the Intune App cannot be removed from there. What is you are trying to archive here, if may I ask :)

You want to join devices to Entra but not to Intune?

Lee Stevens 1 Reputation point

2024-02-05T22:04:18.01+00:00

Yes, I do not use SCCM or Intune any longer and haven't for years. This is just a lingering configuration item that I tested at one time.
But yes @Pavel yannara Mirochnitchenko that is exactly what I am trying to do. I want to join to Entra and not Intune.
Lee Stevens 1 Reputation point

2024-02-05T22:36:57.24+00:00

Based on the documentation, I am in a co-managed state and need to get out of that state. I cannot access SCCM or Intune as I have not used it in years. So this needs to be done without a SCCM server.
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2024-02-06T07:53:18.0733333+00:00

Any chance you still have CM agent installed there? Does the CCM and CCMSetup folder exist under Windows?

I haven't used EntraID / AAD without Intune, so I can't confirm how it would work in clean enviment where Intune is not "enabled" at all. Also please understand, what if user doesn't have M365 Business premium, E3 or E5 license, none of Intune activities will work. Also, if you don't touch Intune, do you need to worry about if device goes there or not?
Lee Stevens 1 Reputation point

2024-02-06T12:53:15.5133333+00:00

No, the client is long gone from my environment. I think this was a long since tried co-management of SCCM and Intune that was forgotten and buried. It came to a head trying to register a device. Honestly, I would be good just figuring out how to disable co-management without SCCM in the picture. I don't want to fully disable device management, but just manage it through Entra.
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2024-02-06T14:28:39.41+00:00

Device management always happends via Intune. Intune disablement should be enough just by not assigning anyone to MDM user scopes. If that doesn't work for you, I would open ms case for this. If your EntraID permissions are fine, you should be able to join devices to Entra with Windows sign-in settings. If not, open a case.
Lee Stevens 1 Reputation point

2024-02-06T17:27:14.9366667+00:00

Might have to be the answer tbh. Was hoping not to pay for a case on a lab environment when it seems so simple to disable co-management. Or maybe once you're in the grips, you aren't being let go. :)

Answer 3

Pavel yannara Mirochnitchenko 13,336 MVP

Those case you open via Console are free of charge. The thing is that if your SCCM is terminated, forget about co-management, it only exists on SCCM server connecting to Azure. If your Intune MDM user scope is not applied, what is the error message if you try to join device to Entra ID? And you need to be local admin of Windows machine during this action.

User's image

Lee Stevens 1 Reputation point

2024-02-06T22:51:32.3666667+00:00

I get this error signing in to sync Edge on the device in question. It asks for my account, I log in, do the MFA, and then after the long wait, get the error message in question. I'll attach it again. It is Server 2019, and yes, I can see SCCM is still trying to own co-management. There has to be a way to strip it. So I am not trying to directly connect to Entra.

Share via

Cannot remove Microsoft Intune from the Azure Portal

3 answers

Your answer