Forum Discussion
Orphaned TPM-bound Entra Workplace Join device — no tenant access, backend deletion required
I have a personal Windows device that remains stuck in a TPM-protected Workplace Join to a former Microsoft Entra ID tenant.
I no longer have tenant access and am not an admin.
Local remediation completed:
- dsregcmd /leave executed as SYSTEM
- All MS-Organization / AAD certificates removed
- Device still reports WorkplaceJoined : YES
Azure Support ticket creation fails with:
AADSTS160021 – interaction_required
Application requested a user session which does not exist.
Tenant inaccessible / user not present in tenant.
This is an orphaned Entra ID device object. Requesting guidance or escalation for backend deletion.
Tenant ID: 99f9b903-8447-4711-a2df-c5bd1ad1adf7
Device ID: f47987f4-a20b-4c34-a5f7-40ab0f593c6c
1 Reply
Hi S3B0rd3, if the device is still tied to a tenant you no longer control, local cleanup can only go so far. dsregcmd /leave, removing the work account, and clearing related workplace join certificates can remove the local registration, but backend deletion needs a tenant admin or Microsoft support with proof of ownership. If this is a personal device and the stale join keeps returning, a clean Windows reinstall may be the most practical local fix.
