Event banner
AMA: Windows management with Intune
Event Ended
Wednesday, Mar 20, 2024, 08:30 AM PDTEvent details
Do you manage Windows endpoints in Intune? Do you have questions that extend beyond configuration and involve ensuring security, compliance, and a seamless user experience on Windows? Join this Ask M...
Char_Cheesman
Updated Dec 27, 2024
DerekTEAL
Mar 20, 2024Copper Contributor
It is possible to remove all policies from a device without having to reset/wipe the computer. We have issues where policies "tattoo" onto the device and refuse to be removed. Would be useful when Admin sign into a student laptop that needs access to an area a student has been blocked from gaining access.
- JaminAlmondMar 20, 2024
Microsoft
Hello Derek, When you remove a device from the targeted group, it should automatically be disassociated from the applicable policies. If you notice that certain policies are still being applied to the device—a situation often referred to as 'tattooing'—please initiate a support case. We'll investigate and resolve the issue.- DerekTEALMar 20, 2024Copper ContributorI understand that we've encountered situations where policies are pushed to the student signed in. The admin, who hasn't had policies pushed to them, signs in afterward to make minor changes but finds themselves unable to do so due to the student policies taking precedence. While removing the device from the group to eliminate the policies might resolve the issue, it appears to be an unnecessary step for the admin to make minor adjustments.