In this quick blog post, you will learn more details about how to setup Automatic Intune device cleanup rules. This cleanup task is similar to SCCM maintenance tasks. However, you don’t have same (like SCCM) control on Intune maintenance task.
NOTE! – It’s not mandatory to set the cleanup rules within your Intune tenant because of the default behavior explained below.
Table of Contents
Automatic Device Cleanup Rules Options
These Device Cleanup rules are available that let you automatically remove devices that haven’t checked in for several days that you set. To see the new rule, go to the Intune pane, choose Devices, and select Device cleanup rules.
When set to this Intune Device Cleanup Rule to Yes, then Intune deletes devices based on the custom number of days you specify.
- Delete Devices based on last check-in Date – YES
- Delete Devices that haven’t checked in for this many days – 90 Days (Checkout NOTE 1 for more details)
- Click on SAVE button to apply the rule (Checkout NOTE 2 for more information)
NOTE 1 – You can have custom days value between 90 to 270. When you enter 89 or 269, Intune won’t allow you to save the settings.
NOTE 2 – Once you click Save button, all devices that have been inactive for the specified number of days will immediately be deleted from Intune. Intune will continue to delete devices as they exceed the number of set days. Reports with data about the removed devices may take up to 48 hours to refresh.
When you set Delete Devices based on last check-in Date to No, Intune automatically deletes all devices that haven’t checked in to Intune for more than 270 days.
Intune Device Cleanup Rules Behavior
Set your Intune device cleanup rules to delete Intune MDM Enrolled and Co-Managed SCCM devices that appear as any of the following condition, then Intune applies cleanup rules immediately.
NOTE 1 – Intune will also make sure the device relevant by performing this cleanup task continuously so that your device records remain current.
NOTE 2 – This deletion action won’t remove or delete or clean up the device from Azure Active Directory. More details in the Resources section.
How to Find Out Affected Devices
Intune provides an option to find out and export the affected devices with Device Cleanup rules which you just implemented above.
Once you click Save button on Device Cleanup Rules, all devices that have been inactive for the specified number of days (90 Days in the above example) will immediately be deleted from Intune.
NOTE! – To make sure whether you are deleting the correct devices, I would recommend clicking on “View Affected Devices” link and confirm whether you want to remove those devices.
These are the devices that haven’t checked in for 90 Days.
- How to use Intune Cleanup Rules
- Rules for Removing Intune Devices
- Delete Device from Azure Active Directory