'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Impact of Removing a Domain from an Intune Tenant
Question details
An administrator needs to know whether devices will be blocked if a domain name is removed from a Microsoft 365 tenant containing Intune-enrolled or Microsoft Entra joined devices.
- Product
- Microsoft Intune
- Device & OS
- not provided
- Scenario
- Planning to remove a domain name from a Microsoft 365 tenant with active managed devices.
- Observed behavior
- Concerns about potential disruptions to device management, user sign-in processes, and Microsoft 365 service access.
Before attempting to remove any domain, ensure you have Global Administrator access to the Microsoft 365 Admin Center and have thoroughly mapped out all active user accounts, certificates, and devices tied to the target domain.
Review Dependencies and Open a Microsoft Support Request
Removing a domain from an Intune tenant can significantly disrupt access and device management. Follow these steps to verify dependencies and engage support before making changes.
Removing or changing a domain can prevent users from signing in, severely affect device management, and disrupt access to Microsoft 365 services. The exact impact depends heavily on your organization's specific configuration. Do not remove the domain until all dependencies are reviewed.
Navigate to the Active Users section in the Microsoft 365 Admin Center. Ensure no user accounts are actively using the domain you plan to remove as their User Principal Name (UPN).
Check your Microsoft Entra ID and Intune administration portals to identify any devices joined or enrolled using credentials tied to the target domain.
Review your tenant's certificates, registered enterprise applications, and custom authentication settings that might rely on the domain's DNS records.
Go to the Microsoft 365 admin center, open the Help & support pane, and create a ticket specifically for Microsoft Intune or Microsoft Entra to safely plan your domain removal without blocking existing devices.
Deploy WPS Office to Your Managed Devices
Managing Microsoft 365 domains and Intune device policies can be a complex task. When outfitting your workforce with productivity software, consider WPS Office as a free, lightweight, and user-friendly alternative to Microsoft Office that is fully compatible with standard document formats and easy to deploy across your organization's managed devices.
- 1. Download the Installer: Obtain the official WPS Office installation package for your desired operating system.
- 2. Deploy via MDM: Use your mobile device management (MDM) solution, such as Intune, to distribute the software to your endpoints.
- 3. Open Office Files: Users can instantly open, edit, and save their existing Microsoft Office files without formatting issues.
Frequently Asked Questions
Can I change the primary domain in Microsoft 365 without affecting Intune devices?
Changing the primary domain can still affect user UPNs. If a user's UPN changes, they may need to re-authenticate on their Intune-enrolled or Entra-joined devices to restore full service access.
What happens to users if their domain is removed abruptly?
Removing a domain tied to active users will prevent them from signing into Microsoft 365 services and will disrupt authentication on their Microsoft Entra joined devices.
How do I open a support request for Intune domain removal?
Sign in to the Microsoft 365 Admin Center, click on 'Support' and then 'Help & support' in the left navigation pane. Briefly describe your domain removal scenario to request guidance from the Intune or Entra support team.
