We’ve heard feedback from you that you’ve wanted the ability to remove email and certificates from devices when you remove a user from being targeted by one of those profiles in Intune. That functionality is shipping this month! In the past, certificates and email profiles would remain on the device, even though you’d removed the user from being targeted.
If you find that email or certificates are being removed unexpectedly from users, please use the following troubleshooting steps:
If you’ve configured an email profile, double check that the user is part of the targeted group.