Share via

Autopilot device locked

Sql Kkr 5 Reputation points
2025-12-18T16:07:23.9733333+00:00

My company PC is locked during Windows setup and requires a work or school account.

The IT administrator left the company and the Microsoft tenant is no longer active.

We do not have admin access.

The device is enrolled in Windows Autopilot.

I request help to remove/release this device from Autopilot.

I can provide proof of ownership.


Moved from: Community Center | Not monitored

Windows for business | Windows Client for IT Pros | Devices and deployment | Set up, install, or upgrade
0 comments No comments
{count} vote

4 answers

Sort by: Most helpful
  1. VPHAN 25,000 Reputation points Independent Advisor
    2025-12-18T18:30:20.6066667+00:00

    Hello Sql Kkr,

    This situation occurs because the device's unique hardware hash is still registered in the Autopilot deployment service associated with the now-inactive tenant. When the device connects to the network during the Out-of-Box Experience (OOBE), it queries the Autopilot service, identifies the existing profile, and enforces the "Welcome to [Company]" login screen. Since the lock is server-side and tied to the hardware ID, reinstalling Windows or wiping the drive will not remove this restriction; the device will simply re-lock the moment it touches the internet.

    Because you do not have Global Admin access to the tenant to manually delete the device hash from the Microsoft Intune or Microsoft Entra admin center, and the tenant itself is inactive, you cannot perform the deregistration yourself. The only official and technically valid solution is to submit a support request to Microsoft to handle the deregistration on the backend. You will need to contact Microsoft Support for Business (often via the Global Customer Service phone numbers if you cannot access a portal) and request a "Device Deregistration" for a device stuck in a defunct tenant.

    The support team will strictly require proof of ownership to proceed. You must provide a copy of the original purchase invoice or receipt that explicitly lists the device's serial number and the company name. Once the Data Protection or Intune support team verifies the documentation and confirms the tenant is inaccessible, they can manually suppress or delete the hardware hash from the Autopilot database. Only after they confirm this action is complete should you reset the device again; at that point, the OOBE process will no longer detect the Autopilot profile, allowing you to set it up as a personal device or enroll it in a new tenant.

    I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!
    VP

    1 person found this answer helpful.
    0 comments No comments

  2. VPHAN 25,000 Reputation points Independent Advisor
    2025-12-19T14:41:31.08+00:00

    Hello Sql Kkr,

    I'm writing to follow up and see if you were able to successfully contact the Data Protection team using the regional support numbers provided in our previous exchange. If you have reached out to them and are waiting on a resolution, or if you encountered difficulties navigating the automated phone system, please let me know so we can discuss alternative options or specific keywords to expedite your request.

    If the issue has been successfully resolved, please consider accepting the answer as it helps other people sharing the same question benefit too. Thank you!

    VP


  3. VPHAN 25,000 Reputation points Independent Advisor
    2025-12-18T18:54:24.6166667+00:00

    The primary portal for managing support requests is the Microsoft 365 Admin Center at https://admin.microsoft.com. However, this creates a logical deadlock in your specific scenario: accessing this portal requires valid credentials for the tenant in question, which you have stated is inactive and inaccessible. If you cannot log in to that URL, you cannot generate a ticket digitally.

    In this situation, the "portal" you actually need is the directory of Global Customer Service phone numbers, located at https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

    The action plan for you is:

    1. Find your region: Scroll down to your specific country/region in the list.
    2. Call the number: Dial the number provided.
    3. Navigate the IVR: You will likely hit an automated system. Do not select options for "Home" or "Personal" use. Select options for "Business" or "Commercial" support.
    4. Keyword: If asked for the reason for your call, say "Data Protection" or "locked out of tenant".
    5. The Request: Once you reach a human agent, clearly state: "I need to open a Data Protection case. We have a device locked by Autopilot to an inactive tenant where the admin is gone, and we have the proof of purchase."

    I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message.

    VP


  4. Sql Kkr 5 Reputation points
    2025-12-18T18:37:06.12+00:00

    Can I get the portal link

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.