Reset Microsoft Intune’s Mobile Device Management Authority

Author by Jesse Garcia

When an IT administrator deploys a brand new Microsoft Intune subscription there is an important decision that needs to be made. That decision is whether to make Microsoft Intune or System Center 2012 Configuration Manager your Mobile Device Management Authority. The route you choose will be influenced by such things as the size of your environment, whether you already own Configuration Manager and have it deployed, whether you want new Intune features immediately, and whether or not you want to manage all your devices from a single console.

So what if you chose a path and later decide you need to go a different route? As of this blog writing you will need to call Microsoft and have your subscription reset. Here are the basic steps you will want to follow. Our example was a situation where Intune was integrated with Configuration Manager, but the company wanted to move in the direction of Microsoft Intune in a standalone configuration instead.


  1. Make sure you really want to start over. This process will result in your Intune Subscription being wiped clean.
  2. For ease, make sure you are a Global Administrator for your company’s Microsoft Online Services. Microsoft will ask you about this during your call.
  3. Call Microsoft Intune Support. If you’re in the United States you can call 800-865-9408. Otherwise, find the correct support number for your country here:
  4. Follow the prompts for Technical Support (currently option 4) and then for Intune (currently option 2).
  5. Open the case with the friendly call router. During a recent case, I was told that I would receive a call back from somebody on the Microsoft Intune support team within 4 business hours. It took less than 2 hours, which was great.
  6. Intune Support will verify you are who you say you are, and then they will validate that you’re a Global Administrator. Once that is all said and done, you must do some tasks for Microsoft in order to scrub the subscription.

In the case where you were Configuration Manager integrated, and are seeking to undo that for whatever reason, the rest of the steps from Microsoft look like this:

  1. Retire all Modern Devices (mobile devices) from within the Configuration Manager Console. It is important that you do not attempt to retire a device from the device itself for this procedure to be executed properly. Let Microsoft know if any devices are in a pending state.
  2. Set the Intune User Group in the Intune Subscription to be “blank”, then restart SMS Executive, confirm in the CloudUserSync.log that all users are removed.
  3. Delete the iOS APNs certificate
  4. Delete any and all published applications that are for MDM Devices
  5. Delete any and all polices that are for MDM Devices
  6. Remove the Windows Intune Connector from within the Configuration Manager Console
  7. Once you have followed all these steps you must let Microsoft know via responding to an email they send you during the case.
  8. Microsoft will do their magic, and will let you know that resetting your subscription back to defaults may take up to five business days.
  9. Microsoft will contact you when you are all set!