Microsoft Endpoint Manager - Removal options of Intune MDM

[MYK-IT]

Hi,

 

In respect of school-owned laptops, a procedure is in place whereby we use Autopilot to configure, deploy and enrol into Intune (MDM) etc.

 

The grey area is (and always has been) in relation to LAC (funded) laptops whereby I have been advised they belong to the student (effectively to keep). Now, never entirely happy (primarily from a safeguarding PoV) to just literally hand over a boxed new laptop and MS Office licence etc, I was planning on also enrolling these laptops the same way too, via Autopilot into Intune (MDM) etc.

 

However, If I do, is it possible to remove the MDM from the laptop(s) as, and when the student leaves? - without 'resetting' the device (and loosing all existing data) for example? Leaving the laptop in a configuration that still can be used? (albeit without the M365 school licencing being applied?). I know the student could just reformat, install whatever they like... but regardless I need to ensure I follow my due diligence.

 

Thanks,

[Mr.Ben]

Not found a compromise solution beyond a written policy/signed agreement with the Student and Parents informing that they will be wiped one week after they leave.

 

As we have treated them as school owned, the important data would be held in OneDrive.

[CHiLL]

For LAC related equipment, we've always treated them as non-school devices, so they aren't enrolled into our MDM or imaged like a regular machine. Instead, we receive the device from the supplier and hand it as is to the student. We'll aid them in installing Office and other software and technical issues that arise while they're on roll, but other than that, it's their device through and through.

[IRL]

As I understand it, retiring the device in InTune will remove any corporate settings but retain the user data. I'm not sure how they would get to data unless a cached local profile is stored on the device for a certain amount of time. I'm going to test it next week and will post the results unless someone can tell you beforehand.

[MYK-IT]

For LAC related equipment, we've always treated them as non-school devices, so they aren't enrolled into our MDM or imaged like a regular machine. Instead, we receive the device from the supplier and hand it as is to the student. We'll aid them in installing Office and other software and technical issues that arise while they're on roll, but other than that, it's their device through and through.

 

After much internal debate, we concluded too that the devices do not belong to the school and therefore we are going with this scenario too. Although, we have clearly stipulated that 'any' / 'all' school procured / owned laptops 'will' be centrally and correctly managed etc. (in readiness for when department buy more, and say, "...we want them setup the same as the LAC ones etc...")

 

Thanks,