How to Perform an Intune Reset from Windows Recovery Environment

• The article explains how to perform an Intune reset from WinRE, which is a feature that can fix Windows 10 devices that are enrolled in Autopilot and Intune.
• The article shows how to enable and trigger the reset process, as well as some common troubleshooting tips and frequently asked questions.

If you are using Windows 10 devices that are enrolled in Autopilot and Intune, you may encounter a situation where your device fails to boot and goes into the Windows Recovery Environment (WinRE). In this case, you may want to perform an Intune reset, which is a feature that allows you to quickly remove personal files, apps, and settings, and reset Windows 10 devices to their original state and management enrollment. This can help you troubleshoot and fix any issues that prevent your device from starting normally.

However, performing an Intune reset from WinRE is not as straightforward as it may seem. There is no graphical user interface (GUI) option to do this from the WinRE screens, and the command line options may not be available either. This article will show you how to enable and trigger an Intune reset from WinRE, as well as some common troubleshooting tips.

Enable Autopilot Reset

To use Intune reset, you need to enable a policy called DisableAutomaticReDeploymentCredentials, which controls the visibility of the credentials for Autopilot Reset. Autopilot Reset is a feature that enables Intune reset on devices that are enrolled in Autopilot. By default, this policy is set to 1 (Disable), which means that the credentials for Autopilot Reset are hidden from the WinRE screens. This is to prevent accidental triggering of the reset.

You can enable this policy by setting it to 0 (Enable) using one of the following methods:

• MDM provider: Check your MDM provider documentation on how to set this policy. If your MDM provider does not explicitly support this policy, you can manually set this policy if your MDM provider allows specific OMA-URIs to be manually set. For example, in Intune, create a new configuration policy and add an OMA-URI with the following values:
  • OMA-URI: ./Vendor/MSFT/Policy/Config/CredentialProviders/DisableAutomaticReDeploymentCredentials
  • Data type: Integer
  • Value: 0
• Windows Configuration Designer: You can use Windows Configuration Designer to set the Runtime settings > Policies > CredentialProviders > DisableAutomaticReDeploymentCredentials setting and create a provisioning package.
• Set up School PCs app: If you are using the Set up School PCs app to configure student PCs, you can enable the Windows 10 Autopilot Reset setting in the Configure student PC settings screen.

Trigger Autopilot Reset

Once you have enabled the policy for Autopilot Reset, you can trigger it from WinRE by following these steps:

1. On the device that is stuck in WinRE, press Ctrl+Alt+F10 on the keyboard. This will bring up a login screen that asks for your credentials.
2. Enter your Azure AD credentials that have permissions to reset the device. These are usually the same credentials that you use to sign in to the device normally.
3. After you enter your credentials, you will see a confirmation screen that asks if you want to reset the device. Click Yes to proceed.
4. The device will start resetting and show a progress screen. This may take several minutes depending on the speed of your device and network connection.
5. After the reset is complete, the device will reboot and go through the Out-of-Box Experience (OOBE) process. It will automatically enroll in Azure AD and Intune again using the original settings and policies.

Troubleshoot Autopilot Reset

If you encounter any issues or errors while performing an Intune reset from WinRE, here are some possible solutions:

• Make sure that your device has an active internet connection. You can check this by clicking on the network icon on the lower right corner of the WinRE screen and selecting a Wi-Fi network or plugging in an Ethernet cable.
• Make sure that your device has Windows Recovery Environment (WinRE) enabled. You can check this by opening Command Prompt from the WinRE screen and typing reagentc /info. If WinRE is disabled, you can enable it by typing reagentc /enable.
• Make sure that your device has enough disk space for the reset process. You can check this by opening Command Prompt from the WinRE screen and typing diskpart. Then type list disk and select disk x, where x is the number of your system disk. Then type list partition and select partition y, where y is the number of your system partition. Then type detail partition and check the Free Space value. If it is less than 10 GB, you may need to delete some files or resize the partition using diskpart commands or a third-party tool.
• Make sure that your Azure AD credentials are correct and have permissions to reset the device. You can check this by signing in to another device with the same credentials and accessing the Intune portal or the Azure portal. If you have forgotten your password, you can reset it using the self-service password reset (SSPR) feature or contact your administrator.
• Make sure that your device is enrolled in Autopilot and Intune. You can check this by signing in to another device with the same credentials and accessing the Intune portal or the Azure portal. You can also check the device status and details in the Devices section of the portals. If your device is not enrolled, you may need to register it again using the hardware ID or the serial number.

Frequently Asked Questions (FAQs)

Here are some frequently asked questions related to Intune reset from WinRE:

Question: What is the difference between Intune reset and Autopilot Reset?

Answer: Intune reset is a feature that allows you to reset Windows 10 devices that are enrolled in Intune to their original state and management enrollment. Autopilot Reset is a feature that enables Intune reset on devices that are enrolled in Autopilot, which is a service that automates the enrollment and configuration of Windows 10 devices.

Question: What is the difference between Intune reset and Reset this PC?

Answer: Reset this PC is a built-in feature of Windows 10 that allows you to reset your PC to its factory settings. You can access it from the Settings app or the WinRE screen. However, Reset this PC does not preserve the Azure AD and Intune enrollment of your device, which means that you will lose the management and security policies that are applied to your device. Intune reset, on the other hand, preserves the Azure AD and Intune enrollment of your device, which means that you will keep the management and security policies that are applied to your device.

Question: What happens to my personal files, apps, and settings when I perform an Intune reset?

Answer: When you perform an Intune reset, all your personal files, apps, and settings will be deleted from your device. This includes any documents, photos, videos, music, bookmarks, passwords, preferences, and so on. The only things that will remain on your device are the original settings and policies that are applied by Azure AD and Intune. Therefore, you should back up any important data before performing an Intune reset.

Conclusion

In conclusion, this article has shown you how to perform an Intune reset from WinRE, which is a useful feature that can help you fix your Windows 10 device that is enrolled in Autopilot and Intune. You have learned how to enable and trigger the reset process, as well as some common troubleshooting tips. You have also found some answers to frequently asked questions related to this topic. We hope that this article has been helpful and informative for you. If you have any feedback or questions, please feel free to leave a comment below or contact us through our website. Thank you for reading! 😊

Disclaimer: This article is for informational purposes only and does not constitute professional advice. The author and publisher are not responsible for any damages or losses that may result from following the instructions or recommendations in this article. Always consult your IT administrator or Microsoft support before performing any actions on your device.