Does disconnecting from the "Access work or school" settings page prevents my organiztion from performing remote actions on my personal pc?

Question

Does disconnecting from the "Access work or school" settings page prevents my organiztion from performing remote actions on my personal pc?

TA 1

I unintentionally allowed my organization to manage my personal home pc and it's worrying me because I know they have the ability to remotely fully wipe my device. So does disconnecting it from the "Access work or school" settings page is the same as "retiring" my personal home pc from their Azure Active Directory or will I still need to coordinate with my organization's IT department for my pc to be fully retired?

1 answer

Your answer

Answer 1

AmanpreetSingh-MSFT 56,876 Moderator

Hi @TA • Thank you for reaching out.

If the device is registered, after disconnecting from the "Access work or school" settings your organization won't be able to manage your personal home PC.

If the device is Azure AD Joined, you will need to run dsregcmd /leave to leave the organization. You can run dsregcmd /status to confirm if the Device is AAD Joined by checking if the Device State is AzureAdJoined : YES (as highlighted below). After you run dsregcmd /leave, it will change to NO, which means device is no longer AAD Joined. It may require you to signout and sign in again to show the updated status.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

AmanpreetSingh-MSFT 56,876 Reputation points Moderator

2022-02-16T05:15:44.587+00:00

@TA • Just checking if you had a chance to try it out.
TA 1 Reputation point

2022-03-19T01:08:06.567+00:00
Hi yes! I've been trying to figure out what's a clear cut way of finding out if my org account is still logged in on my personal PC. What happened was using my org email I logged in on MS teams; I also tried via Mail app but cancelled midway while MS was verifying my credentials. But I know it was a successful log in because there were hint's that my org account got through the log in process.

It was automatically logged in on MS Office apps.

Even after logging out of MS Teams, I changed my password online and my Win 10 OS was asking for the new password.

To answer your question it says AzureAdJoined : NO

I just would like to confirm if dsregcmd /status is a clear cut way of knowing if my OS and all other apps aren't connected to my organization's AD?

Thank you for your response!
AmanpreetSingh-MSFT 56,876 Reputation points Moderator

2022-03-21T06:46:17.783+00:00
@TA • There are three types of device registration with Azure AD:

Azure AD Registered

Azure AD Hybrid Joined

Azure AD Joined

If the device is Azure AD Registered, you will always get AzureAdJoined : NO because registering a device is different than Joining. In this case, you will need to go to your windows Settings > Accounts > Access work or school > Click on the Disconnect button next to disconnect this account. Once the account disconnected, it will not be displayed under Access work or school, which confirms that you are no longer registered with the organization. If you have already done these steps, and still getting SSO experience, restart the computer to make sure PRT (Primary Refresh Token), which facilitates SSO, is removed.

You can also check Event Viewer > Applications and Services Logs > Microsoft > Windows > User Device Registration > Admin to get more detailed logs.

If the device is Azure AD Hybrid Joined or Azure AD Joined, you will get AzureAdJoined : YES. If the device is disjoined, the output of dsregcmd /status command will show AzureAdJoined : NO. If this is already NO, you are no longer connected to your organization via the Azure AD Join/hybrid join process.
Student - Carter, Aiden M 0 Reputation points

2025-04-07T18:30:01.58+00:00

help me hhdghftrf

Share via

Does disconnecting from the "Access work or school" settings page prevents my organiztion from performing remote actions on my personal pc?

1 answer

Your answer