Window Hello for Business dsregcmd /debug /leave got Error

Question

Hi, we had user with Azure PRT show No in her window laptop so we can't sign up for Window Hello for business. I ran dsregcmd /debug /leave command and got error below:

C:\Users\johndoe>dsregcmd <file:///C:/Users/johndoe%3edsregcmd> /debug /leave DsrCLI: logging initialized. DsrCmdJoinHelper::Leave: ClientRequestId: 7ea03a5d-7638-4379-a344-b7c45ef123fdUnjoin request ID: 7ea03a5d-7638-4379-a344-b7c45ef880fd Unjoin response time: 10-13-2021 17:36:31Z Unjoin HTTP status: 400 Unjoin error code: DirectoryError Unjoin message: The device object with id '77457947-fdc9-41bc-b489-583a1223444' in tenant '8d088ff8-7e52-4d0f-8187-xyzzzzzz' could not be removed from the store because it is managed by MDM application '54b943f8-d761-4f8d-951e-9cea1846zx12'. Only the NGC for the current user is being removed. To remove all rerun as SYSTEM. DSREGCMD_END_STATUS AzureAdJoined : NO EnterpriseJoined : NO

Can you tell us what could be wrong and how to leave without above error?

Thanks

Answer 1

@Nguyen, Tee Thanks for reaching out.

The error just means that the device was also being managed by Intune service (MDM) and thus it cannot directly just leave using the command you typed.
That command in turn actually initiates a unenrollment from the MDM service and after 5-10 minutes you should be able to run the same command just fine.

Run the same command again and let me know if you face any error. If you do get any error, you will need to manually delete the entry for this device from Intune portal.

-----------------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.