Conditional Access Problems

Why Are Devices Removed from Microsoft Intune? Causes & Solutions

Jason MillerJason Miller Oct 23, 2026 870 views

Question details

Organizations and users need to understand why devices are automatically removed or unenrolled from Microsoft Intune when users stop signing in with their work accounts.

Why Are Devices Removed from Microsoft Intune?
Product
Microsoft Intune
Device & OS
not provided
Scenario
Administrators are investigating why mobile devices disappear from the Intune management console after users stop using the Company Portal.
Observed behavior
Devices are unexpectedly removed or retired from Intune, often correlating with Company Portal sign-out behavior or prolonged device inactivity.
Before you start

Ensure you have Intune Administrator or Global Administrator privileges to view device compliance policies and device clean-up rules in the Microsoft Endpoint Manager admin center.

Solution 1Recommended

Check Intune Device Clean-up Rules

Intune can automatically delete devices that fail to check in after a specified number of days due to sign-out or inactivity.

When a user signs out of the Company Portal app, the device stops syncing with Microsoft Intune. If the device remains offline and fails to sync for an extended period, it may trigger the organization's automated device clean-up rules.

1
Access Endpoint Manager

Sign in to the Microsoft Endpoint Manager admin center using your administrator credentials.

2
Navigate to Device Rules

Select 'Devices' from the left-hand navigation pane, then click on 'Device clean-up rules'.

3
Review Inactivity Limits

Check the value set for 'Delete devices that haven't checked in for this many days'. If a signed-out device exceeds this threshold, Intune will automatically remove it.

Check Intune Device Clean-up Rules
Default Settings: By default, device clean-up rules are usually disabled or set to a high number (e.g., 90 to 270 days). Adjusting this setting will impact how quickly inactive devices are purged.
Free Microsoft Office alternative

Looking for a Lightweight, Easy-to-Deploy Office Alternative?

While you manage endpoint security and compliance with Microsoft Intune, you may also want to streamline productivity software across your organization's devices. WPS Office is a highly compatible, free Microsoft Office alternative that is lightweight and ideal for deployment across diverse mobile and desktop environments.

  1. 1. Download the Installer: Visit the official WPS website and download the free installer for your specific operating system.
  2. 2. Install the Software: Run the setup file and follow the on-screen prompts to complete the lightweight installation.
  3. 3. Open and Edit: Launch WPS Office and immediately begin opening, editing, and saving your existing Microsoft Office documents.
Seamlessly compatible with Microsoft Word, Excel, and PowerPoint formats.Familiar user interface requiring zero learning curve for transitioning teams.Lightweight installation ideal for managed mobile devices and endpoints.Cost-effective productivity suite with built-in PDF editing capabilities.
microsoft office alternative - wps office

Frequently Asked Questions

Does signing out of the Company Portal remove the device from Intune?

Signing out of the Company Portal app typically stops the device from syncing with Intune. While it doesn't immediately remove the device, failing to sync for a period that exceeds your organization's device clean-up rules will result in automatic removal.

How can I restore a device that was automatically removed from Intune?

To restore a device, the user must re-download the Intune Company Portal app, sign in with their active work or school account, and complete the enrollment process again.

What is the default device clean-up limit in Intune?

By default, Microsoft Intune does not automatically delete devices unless an administrator specifically configures a device clean-up rule. When enabled, this limit can be set anywhere between 30 and 270 days of inactivity.

Can Conditional Access policies directly delete a device?

No, Conditional Access policies block access to corporate resources if a device is non-compliant, but they do not delete the device. However, corresponding compliance policies can be configured to automatically retire a device if it remains non-compliant for a set number of days.