Microsoft Intune Device Resets: When to Use Wipe, Fresh Start or Autopilot Reset

Ever found yourself scratching your head over Microsoft Intune’s reset methods? With three options—Wipe, Fresh Start, and Autopilot Reset—it’s easy to feel overwhelmed. Fear not! Let’s break down these options, their quirks, and when to use them, so you can confidently hit the reset button when the time comes.

Microsoft Intune offers several remote actions to reset Windows devices. Knowing which reset option to choose can save you time, reduce disruption and protect sensitive client data.

According to Microsoft, the Wipe action restores a device to its factory default settings, erasing all data, apps and configurations.

Fresh Start removes pre‑installed OEM software, reinstalls a clean version of Windows and can preserve user data and enrolment if desired.

Autopilot Reset deletes user files and apps while keeping the device connected to Azure AD and Intune so it’s ready for a new user in minutes.

In this article we explain each reset method, when to use it and how it compares to other actions like Retire and Delete.

Why remote reset matters

For professional services firms, laptops and tablets contain sensitive client information. Resetting devices remotely lets you securely repurpose equipment, respond quickly when an employee leaves and wipe data if a device is lost or stolen. Intune’s reset actions help you manage compliance with data‑protection regulations without complicated manual processes. If your organisation relies on Microsoft 365, our Microsoft Intune and Conditional Access solutions simplify device management and enforce appropriate access controls across your fleet.

Wipe: The Nuclear Option

When you need to send a device back to square one, Wipe is the go-to. This method is as thorough as it gets, stripping the device of anything remotely personal or corporate and setting it back to factory settings. Here’s what it does:

• Deletes all personal and corporate data.

• Nukes all settings and applications.

• Unregisters the device from Azure AD and Intune.

• Returns the device to its pristine, out-of-the-box state.

Wipe is ideal when

• A device is lost, stolen or compromised.

• You need to hand over hardware to a new employee and want to ensure all previous data is gone.

• You’re disposing of or repurposing a device and need a thorough reset.

Be cautious: wiping a device without retaining enrolment requires re‑assigning licenses and reconfiguring policies. It’s a powerful security tool but should be used deliberately.

Fresh Start: A Clean Slate (With Benefits)

Sometimes, you just need a refresh without throwing the baby out with the bathwater. Enter Fresh Start. This method reinstalls Windows but leaves some key things intact:

• Keeps Azure AD and MDM registration.

• Purges preinstalled bloatware (good riddance).

• Preserves user data.

• Delivers a clean, up-to-date version of Windows.

When to use Fresh Start:

Use Fresh Start for devices that are sluggish, bloated, or just need a good decluttering. It’s the ideal method for a fresh Windows experience without losing critical data or having to reconfigure everything from scratch.

Note that Fresh Start removes installed Win32 applications and MDM policies, so you’ll need to reinstall your essential business software. For more on keeping devices in peak condition, explore our managed IT support services.

Autopilot Reset: Quick and Organised

Autopilot Reset is the fastest way to prepare a device for a new user. It removes all user data, apps and settings while maintaining the device’s connection to Azure AD and Intune. The reset preserves regional and Wi‑Fi settings and brings the device straight back to the Windows sign‑in screen.

Use Autopilot Reset when:

• You’re onboarding a new employee or contractor and need to hand them a clean device quickly.

• A device is returning from long‑term loan and needs to be re‑assigned without a full rebuild.

• You want to keep enrolment and configuration but remove the previous user’s footprint.

  
  

Autopilot Reset is particularly effective for organisations deploying Windows Autopilot.

It retains the device’s identity in Azure AD, so there’s no need to reprovision. For more on secure user provisioning, see our article on managed cyber security services.

Retire vs. Delete: clearing management profiles

While not strictly reset actions, Retire and Delete help you remove devices from Intune. Retire unenrols a device, removing company apps, profiles and policies but leaving personal data intact Delete performs the same tasks but removes the device record from Intune immediately. These actions are suited to bring‑your‑own‑device (BYOD) scenarios where employees keep their devices but should no longer receive corporate policies.

Choosing the right reset method

Final thoughts and next steps

Understanding Intune’s reset methods helps you manage devices more confidently and securely. Choosing the right option at the right time protects confidential information, keeps your fleet efficient and reduces the risk of breaches. If you’d like expert guidance on device management or wish to integrate zero‑touch provisioning into your workflow, reach out to us.

At Initial IT, we make technology simple, secure and personal. From comprehensive IT services to advanced AI solutions and cybersecurity, our jargon‑free support lets professional services firms focus on what they do best. Book a call today and let’s build an IT strategy that keeps your people productive and your data safe.