Today we're going to scorch a device from MEM and Azure AD. Let's get started.
Removing a Device from Endpoint Manager and Autopilot
You will need to have access to Azure AD and Microsoft Endpoint Manager on a device that's not being scorched.
We are going to be working in Endpoint Manager. You can use Chrome or Edge for good results.
Record the serial number of the device that needs to be removed.
In my example you'll find that I'm working on device 5X38M63.
Log into Office 365.
Either using the tiles to the left of your screen or selecting the "Waffle" in the top left look for the Admin tile.
Select the Admin Tile.
The tile looks like this and will open a new screen:
Select "Show All" on the left menu area.
Select "Endpoint Manager".
Chose "Devices" on the left panel.
Chose "Windows".
You can search for the device by its Serial Number.
Select the record you want to work with.
Select the Delete option (Looks like a trash can).
Select "Yes" when asked to confirm deleting the record.
Caution - You'll want to note the device name especially if its different than the serial number. We'll need it soon.
Next we'll need to remove the Autopilot record from MEM.
Click Devices.
Click Enroll Devices.
Under "Windows Autopilot Deployment Program" select Devices.
Put the serial number of the device you want to check up on here.
Check the box to the left of the box of the device we want to remove.
Click the "Delete" option.
Select the "Yes" option to confirm the operation.
If you click the bell icon you can see the status of the deletions taking place. Autopilot deletion will take several minutes. You don't have to wait. You can move onto the next step.
Removing a device record from Azure Active Directory
We are going to work in Azure Active Directory. Chrome or Edge both work to do this.
You may skip the first few steps if you know how to navigate to Azure Active Directory.
Log into Office 365.
Either using the tiles to the left of your screen or selecting the "Waffle" in the top left look for the Admin tile.
Select the Admin Tile.
The tile looks like this and will open a new screen:
Select "Show All" on the left menu area.
Select "Azure Active Directory".
You will select "Azure Active Directory" again on the panel on the left.
Select "Devices".
Search for the device name. In my case I'm looking up SSD-5X38M63. In most cases (While we're in a Hybrid environment) there will be two results.
Select both of the checkboxes next to the device records.
When you do this the trash can icon with the selection "Delete" will be available. Chose this.
If the records do not delete then its likely there's something connected to MEM still.
Removing a Device Record from the local on premise Active Directory
We are going to be working in Users and Computers - Active Directory.
If you go to Add and Remove Programs on a Windows 10 Domain Joined System you can select RSAT: Active Directory Domain Services
Now search for Turn Windows Features On and Off. Make sure Active Directory Lightweight Services is checked. Finally, after download, installs, restart you can search "Users and Computers" and you'll find the AD environment we're working in.
You should see the following screen when you open Users and Computers.
If co.ssd.k12.mo.us is not an option you'll need to right click on the top item "Active Directory Users and Computers" and select "Change domain".
Type in co.ssd.k12.mo.us and select the "Ok" button.
Right click on co.ssd.k12.mo.us and select "Find..."
You should see the following screen.
Select the down arrow next to Users, Contacts and Groups and select "Computers".
Type in the SSD-SERIALNUMBER of the computer we're working with.
When you click "Find Now" you should see the following:
Right click on the device record we want to remove.
Select "Delete".
Confirm the operation by clicking "Yes".
Congratulations, you're now ready to put a vanilla Windows 10 install onto the device and go through enrollment again. There's very few options when scorching a device as in this is the only option so please use it.
Caution - You need to follow the steps below before enrolling:
Format and reinstall Windows 10 onto main system drive.
Create a local SSD account.
Rename the computer to SSD-SERIALNUMBER.
Bind the system to the on prem domain.