Exam MD-102 topic 1 question 15 discussion

The clue in this question is: You need to remove Device1 from Intune immediately So basically the only option that is left is 'delete' as this instantly removes the device from intune and only removes company data. ref: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center

B retire

B. Retire action What it does: Removes Intune-provisioned apps, configuration profiles, and company data. Keeps user data, user-installed apps, and OEM apps. If the device is offline, the retire command will execute when it next checks in. ✅ Correct choice — exactly meets your requirements.

Delete devices from the Intune admin center If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. Intune issues a Retire or Wipe action depending on the OS/Enrollment type. Not all enrollment types support the Retire action. See the following table for the expected behavior based on the device platform and the enrollment type.

If you remove the device from intune the data is still there when the device comes back online again. Doesn't seem secure at all

B. Retire action: The "Retire" (also known as "Remove company data") action removes company apps and data from a device. It leaves personal data and user-installed apps intact. This perfectly matches the requirement of eliminating Intune-provisioned apps/data while retaining personal/OEM data. If the device checks in after the Retire action, it will receive the command to remove company data.

What each action does: Action Description A. Delete Removes the device from Intune immediately, but does not remove anything from the device. If the device checks in again, it might re-enroll unless blocked. ❌ Not sufficient. ✅ B. Retire Removes Intune-managed apps, policies, and company data, but leaves personal data, user-installed apps, and OEM apps intact. This is exactly what is required. ✅ Correct. C. Fresh Start Reinstalls Windows and removes most apps—including OEM and user apps—but keeps user data. Too aggressive for the requirement. ❌ D. Autopilot Reset Resets the device to a business-ready state and removes user data and settings. Not suitable here. ❌

I think the keyword here is delete "immediately". While retire does the what the questions asks for it does not remove the device from Intune until the device checks in to intune. But delete immediately removes the device from Intune. This was confusing at first, but I have gone through both the documentations for Retire, Delete as well as Wipe. Check this as it clearly says what I've mentioned: https://learn.microsoft.com/en-us/intune/intune-service/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center:~:text=device%20still%20shows%20up%20in%20Intune%20until%20the%20device%20checks%20in.%20If%20you%20want%20to%20remove%20stale%20devices%20immediately%2C%20use%20the%20Delete%20action

In order to accomplish with the maintaining of personal data, which is more important, I will vote for B. Retire. Retire The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. Effect of the Retire action on data that remains on the device When you use the Retire device action, the user's personal data is not removed from the device.

If you want to remove stale devices immediately, use the Delete action instead. https://learn.microsoft.com/en-us/mem/intune-service/remote-actions/devices-wipe#retire

Retire action is included in Delete action but with immediate effect. "Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead." Ref: https://learn.microsoft.com/en-us/mem/intune-service/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center:~:text=If%20you%20want%20to%20remove%20stale%20devices%20immediately%2C%20use%20the%20Delete%20action%20instead. Please, check the following comment.

Simply the question required the device to check-in again. So it's retire instead of delete. https://learn.microsoft.com/en-us/answers/questions/1791950/remote-actions-in-intune

To satisfy both requirements - You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. Select Delete. Why you may ask? Read carefully Delete If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. Intune issues a Retire or Wipe action depending on the OS/Enrollment type. Retire The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. Both requirements are met with delete action

The Retire action in Microsoft Intune removes company-managed apps and data while keeping user-installed apps, personal data, and OEM-installed apps intact. This aligns with the requirement to remove provisioned apps and data but retain personal and OEM-installed content. If the device checks in again, Intune will still ensure company data is removed.

B. a Retire action Explanation: The Retire action in Intune removes company apps and data but retains user-installed apps, personal data, and OEM-installed apps. If the device comes online again, Intune will still remove corporate data but won't fully wipe the device. This fits your requirement of ensuring corporate apps and data are removed while keeping personal content intact. Why not the other options? A. Delete action: This removes the device from Intune immediately, but it does not trigger the removal of company apps and data if the device comes online again. C. Fresh Start action: This reinstalls Windows while removing all apps except OEM-installed ones, which does not meet the requirement of keeping user-installed apps and data. D. Autopilot Reset action: This resets the device to a business-ready state, removing all apps and settings, including personal data, which does not meet the requirement.

Retiring a device removes corporate data, apps, and configurations that were deployed via Intune, but user data and OEM-installed apps are not removed.

Using the Delete option in Intune will remove the device from the Intune portal, but it does not automatically trigger the Retire action. The device will no longer appear in the Intune console, but it won’t be unenrolled from Intune, and the management profile will remain on the device. This means that any apps and data provisioned by Intune will not be removed. To ensure that the device is unenrolled from Intune and all Intune-provisioned apps and data are removed, you should use the Retire option2. This action will: Remove the Intune management profile and policies from the device. Remove any company apps and data installed by Intune. Retain user-installed apps, personal data, and OEM apps.