A cloud-based identity and access management service for securing user authentication and resource access
There’s no supported way for a new owner to remove a device from a previous organization’s Microsoft Entra ID / Intune / Windows Autopilot tenant without that organization (or Microsoft Support acting for that customer) doing it.
Key points from the documented behavior:
- As long as the device remains registered in Windows Autopilot under the previous tenant, any wipe or reinstall that leaves a supported Windows version in place will continue to trigger the organization’s Autopilot experience on first boot.
- The FAQ explicitly states that if a device is still registered for Windows Autopilot and running a supported Windows version, it will receive the Windows Autopilot experience again after a wipe and restart.
- Proper removal requires deregistration from Windows Autopilot and cleanup of related objects in that organization’s environment:
- The documented deregistration process is designed to ensure related records in Windows Autopilot, Intune, and Microsoft Entra ID are handled correctly.
- Skipping steps or deleting records out of order can leave the device in an unrecoverable state, which then requires that organization to contact Microsoft support.
- For Surface devices specifically, Microsoft provides Autopilot registration and deregistration only to the owning customer or its CSP via Microsoft Support:
- “Surface Device Autopilot Deregistration” is a supported scenario, but it is initiated by the customer or CSP that owns the tenant where the device is registered.
Given this, the only supported options are:
- The previous organization cooperates:
- They follow the documented “deregister a device” steps in their tenant (Autopilot, Intune, and Entra ID) or submit a “Surface Device Autopilot Deregistration” request through Microsoft Support for their tenant.
- After deregistration and object cleanup, the device can be re-registered in a new tenant.
- Return the device to the seller:
- If the organization refuses to deregister it, the device effectively remains managed by them. The seller should either get it properly removed from that tenant or provide a different device.
There is no supported technical workaround for a new owner to unbind the device from the previous organization’s Autopilot/Entra/Intune control without that organization (or its CSP/Microsoft Support acting on its behalf) performing the deregistration.
References: