How to Perform Windows Autopilot Reset in Microsoft Intune

Before performing an Autopilot Reset, confirm your device meets the requirements and has Windows Recovery Environment enabled. This is crucial because the reset process relies on WinRE to function properly.

Open Command Prompt as administrator on the target device and run:

reagentc /info

Look for "Windows RE status: Enabled" in the output. If WinRE is disabled, enable it with:

reagentc /enable

Next, verify the device's Intune enrollment status by running:

dsregcmd /status

Confirm these values in the output:

• AzureAdJoined : YES
• DomainJoined : NO (for pure Azure AD joined devices)
• MDMUrl : https://enrollment.manage.microsoft.com/

To enable local Autopilot Reset from the device lock screen, you need to create and deploy a device restrictions policy. This step is only required if you plan to use the local reset method.

Sign in to the Microsoft Intune admin center at endpoint.microsoft.com and navigate to:

Devices → Configuration profiles → Create profile

Configure the profile with these settings:

• Platform: Windows 10 and later
• Profile type: Device restrictions
• Name: "Allow Autopilot Reset"

In the configuration settings, navigate to:

General → Autopilot Reset: Allow

Assign the profile to your target device groups. If the UI option is unavailable, create a custom OMA-URI policy instead:

OMA-URI: ./Vendor/MSFT/Policy/Config/AutomaticRedeployment/AllowAutomaticRedeployment
Data type: Integer
Value: 1

The remote reset method is the most common approach for IT administrators. This allows you to reset devices from the Intune console without physical access to the device.

In the Microsoft Intune admin center, navigate to:

Devices → All devices

Locate your target device using the search function or by browsing the device list. Click on the device name to open its details page.

From the device overview page, click More in the top menu, then select Autopilot Reset from the dropdown menu.

A confirmation dialog will appear. Review the device information and click Yes to confirm the reset operation.

Monitor the reset progress by checking the device's status. You'll see:

• Initial status: "Pending"
• During reset: "In progress"
• Completion: "Completed"

The reset process typically takes 30-60 minutes depending on the device specifications and network connectivity.

Local reset is useful when you have physical access to the device and need to reset it immediately. This method requires the device restrictions policy configured in Step 2.

Ensure the device is at the Windows lock screen. If a user is currently signed in, sign them out first.

At the lock screen, press the key combination:

Ctrl + Windows + R

This opens the Autopilot Reset sign-in screen. You'll see a specialized login interface specifically for the reset process.

Sign in using local administrator credentials. These must be credentials for an account with local admin rights on the device, not regular user credentials.

After successful authentication, the reset process begins automatically. The device will display progress information and restart multiple times during the process.

If you have a provisioning package on a USB drive (created with Windows Configuration Designer), insert it before starting the reset. The system will automatically detect and apply the package during the reset process.

During the Autopilot Reset process, several issues can occur. Understanding how to monitor progress and troubleshoot problems ensures successful completion.

Monitor the reset progress through multiple channels:

• Intune admin center: Device status updates in real-time
• Device screen: Progress indicators and restart notifications
• Event logs: Windows Event Viewer for detailed troubleshooting

Common issues and their solutions:

Issue: Reset fails with "WinRE not available" error

reagentc /enable
reagentc /info

Issue: Device stuck at "Getting ready" screen

Wait 2-3 hours before considering the reset failed. Network connectivity issues can cause extended delays.

Issue: Primary user not updated after reset

Manually update the primary user in Intune:

Devices → All devices → Select device → Properties → Change primary user

Issue: Local reset option not available

Verify the device restrictions policy is deployed and the automaticRedeployment CSP value is set to 1.

After the Autopilot Reset completes, verify that the device is properly reset and ready for re-provisioning. This final step ensures the device is in the expected business-ready state.

Check the device status in Intune admin center:

Devices → All devices → Select your device

Verify these key indicators:

• Last check-in: Should be recent (within last hour)
• Compliance status: May show "Not evaluated" initially
• Enrollment status: Should remain "MDM"

On the device itself, confirm the reset was successful by checking:

Get-ComputerInfo | Select-Object WindowsProductName, TotalPhysicalMemory
dsregcmd /status | findstr "AzureAdJoined\|MDMUrl"

The device should show:

• Clean OOBE experience with no previous user profiles
• Preserved Azure AD join status
• Active Intune enrollment
• Original regional and language settings

Complete the device setup by:

1. Proceeding through OOBE with the intended user account
2. Allowing Intune policies to sync and apply
3. Installing required applications through Intune app deployment
4. Verifying compliance policy evaluation