Intune Retire vs Delete for Offline Devices

MD-102 By islever Editorial Last updated

Perform remote actions on devices

Short answer

B Use a Retire action to remove Intune-provisioned apps and data upon the device's next check-in while retaining user-installed apps, personal data, and OEM apps.

Question

You have a Microsoft 365 subscription that uses Microsoft Intune Suite.
You use Microsoft Intune to manage devices.
You have a Windows 11 device named Device1 that is enrolled in Intune. Device1 has been offline for 30 days.
You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.
What should you use?
  1. a Delete action
  2. a Retire action Correct Answer
  3. a Fresh Start action
  4. an Autopilot Reset action

Key Takeaways

The trap is confusing 'Delete' (which only removes the record) with 'Retire' (which triggers a wipe of managed content on next check-in).

This question tests the difference between Intune's Retire and Delete actions for devices offline for over 30 days. The correct solution is Retire, as it ensures corporate data removal upon reconnection while preserving user data.

Common mistake: Candidates often choose Delete because it seems immediate, failing to realize that Delete does not trigger a remote wipe of the device's data if the device is currently unreachable or offline.

Expert Analysis

Why the Answer Is Correct

The correct answer is B, a Retire action. According to Microsoft documentation, retiring a device removes Intune management and provisions the removal of company apps and data. Crucially, this action is queued and executed when the device checks in again. This perfectly matches the requirement to remove provisioned apps/data upon reconnection while retaining user-installed apps, personal data, and OEM apps.

Why the Other Options Are Wrong

Option A (Delete) is incorrect because deleting a device from Intune only removes the device record from the admin center; it does not send a command to wipe the device. If the device is offline, no wipe occurs, and even if online, Delete doesn't guarantee the specific retention of user/OEM data in the same structured way Retire does for compliance. Option C (Fresh Start) is a reset feature for troubleshooting, not for simple offboarding. Option D (Autopilot Reset) is for restoring a device to its original state via Autopilot, which is not applicable here.

Community Comment Notes

Many learners initially lean toward Delete due to the word 'immediately,' but comments clarify that Delete does not remove data from the device itself (as noted by users like ExamKiller020 and iTomi). Users such as ThePrutser and frack correctly point out that Retire is the standard method for removing management and corporate data while keeping personal data, citing official docs. The consensus among those who understood the nuance is B.

Official Reference

https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#retire-devices-from-the-intune-admin-center

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always distinguish between administrative removal (Delete) and data remediation (Retire/Wipe). When 'user data retention' is specified alongside 'corporate data removal', Retire is almost always the answer.

Frequently Asked Questions

Why isn't Delete the correct answer?

Delete only removes the device record from Intune. It does not send a wipe command to the device, so corporate data remains on the device if it reconnects later.

Can I retire an offline device?

Yes. The retire command is queued in Intune and will be applied automatically the next time the device connects to the internet and checks in with Intune.

More MD-102 FAQ →

Discussion 142 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 30 of 142

  1. ExamKiller020 👍 41 Answered A
    The clue in this question is: You need to remove Device1 from Intune immediately So basically the only option that is left is 'delete' as this instantly removes the device from intune and only removes company data. ref: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center
  2. ThePrutser 👍 17
    Straight from learn.microsoft.com: If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. The next time the device checks in, any company data on it will be removed as Intune also retires a device when deleting it from the admin center. So I vote A
  3. 7793 👍 12 Answered B
    Retiring a device removes corporate data, apps, and configurations that were deployed via Intune, but user data and OEM-installed apps are not removed.
  4. krzysztofbr 👍 7
    please read carefully question " The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed" answer B
  5. iTomi 👍 5
    This action immediately deletes the device from Intune, and it cannot be undone. However, it does not trigger a wipe of the device.
Show 25 more comments
  1. Tr619899 👍 4
    B. a Retire action Explanation: The Retire action in Microsoft Intune removes Intune-provisioned apps, settings, and data from the device while keeping user-installed apps, personal data, and OEM-installed apps. This is the recommended action when you want to remove management from a device but retain personal content, which aligns with your requirement. - Delete would only remove the device from Intune without affecting the device itself, so if the device checks in again, the settings would still remain. - Fresh Start removes most apps, settings, and personal files. - Autopilot Reset resets the device to a business-ready state but does not retain user-installed apps and personal data as required.
  2. frack 👍 4 Answered B
    A retire action removes a device from Intune management and removes any apps and data provisioned by Intune. User-installed apps, personal data, and OEM-installed apps are retained. A retire action can be performed on devices that are offline for more than 30 days. https://docs.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe
  3. solitudewriter 👍 4 Answered A
    This exact question was in my exam on 6/22/2026. Passed with 959/1000. I answered Delete.
  4. cpaljchc4 👍 3
    "The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. (If you want to remove stale devices immediately, use the Delete action instead.)" ref: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center
  5. iTomi 👍 3 Answered B
    Retire action: This action marks the device as retired in Intune, and it initiates an unenrollment process on the device. When the device comes online, it will receive the retire command and perform an unenrollment, removing Intune management. This action helps retain user-installed apps, personal data, and OEM-installed apps while removing Intune-specific apps and settings.
  6. VirtualJP 👍 3 Answered A
    As the question states "You need to remove Device1 from Intune immediately" I'd be inclined to go with option A as a delete yields: The next time the device checks in, any company data on it will be removed as Intune also retires a device when deleting it. https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center
  7. Omerozb 👍 3 Answered B
    I choose b read closely You need to remove Device1 from Intune immediately. “”The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.”” When the device checks in again, then it needs to be removed
  8. LionelDerBoven 👍 3
    Not right: Delete Action: Purpose: The Delete action removes the device from Intune’s management console, but it does not affect the device itself. This means no data or configurations are removed from the device—it simply stops showing up in Intune’s list of managed devices.
  9. edo1803 👍 3 Answered B
    Delete does not remove corporate data from device, only deletes device from Intune. Correct option is B - Retire.
  10. madsa 👍 3
    It is B correct, remove the device immediately from management, and keeps OEM and user data.
  11. Jz23 👍 2 Answered B
    B. a Retire action Explanation: The Retire action in Intune removes company apps and data but retains user-installed apps, personal data, and OEM-installed apps. If the device comes online again, Intune will still remove corporate data but won't fully wipe the device. This fits your requirement of ensuring corporate apps and data are removed while keeping personal content intact. Why not the other options? A. Delete action: This removes the device from Intune immediately, but it does not trigger the removal of company apps and data if the device comes online again. C. Fresh Start action: This reinstalls Windows while removing all apps except OEM-installed ones, which does not meet the requirement of keeping user-installed apps and data. D. Autopilot Reset action: This resets the device to a business-ready state, removing all apps and settings, including personal data, which does not meet the requirement.
  12. HiddenQuest 👍 2 Answered A
    To satisfy both requirements - You need to remove Device1 from Intune immediately. The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. Select Delete. Why you may ask? Read carefully Delete If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. Intune issues a Retire or Wipe action depending on the OS/Enrollment type. Retire The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. Both requirements are met with delete action
  13. StudyBM 👍 2 Answered B
    Using the Delete option in Intune will remove the device from the Intune portal, but it does not automatically trigger the Retire action. The device will no longer appear in the Intune console, but it won’t be unenrolled from Intune, and the management profile will remain on the device. This means that any apps and data provisioned by Intune will not be removed. To ensure that the device is unenrolled from Intune and all Intune-provisioned apps and data are removed, you should use the Retire option2. This action will: Remove the Intune management profile and policies from the device. Remove any company apps and data installed by Intune. Retain user-installed apps, personal data, and OEM apps.
  14. mehdyzaki 👍 2 Answered B
    What each action does: Action Description A. Delete Removes the device from Intune immediately, but does not remove anything from the device. If the device checks in again, it might re-enroll unless blocked. ❌ Not sufficient. ✅ B. Retire Removes Intune-managed apps, policies, and company data, but leaves personal data, user-installed apps, and OEM apps intact. This is exactly what is required. ✅ Correct. C. Fresh Start Reinstalls Windows and removes most apps—including OEM and user apps—but keeps user data. Too aggressive for the requirement. ❌ D. Autopilot Reset Resets the device to a business-ready state and removes user data and settings. Not suitable here. ❌
  15. RomanV 👍 2
    From Microsoft Learn: The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. As the question states "immediately", the answer is A)Delete Source: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center
  16. Knight_Of_Peace 👍 2 Answered A
    Retire action is included in Delete action but with immediate effect. "Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead." Ref: https://learn.microsoft.com/en-us/mem/intune-service/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center:~:text=If%20you%20want%20to%20remove%20stale%20devices%20immediately%2C%20use%20the%20Delete%20action%20instead. Please, check the following comment.
  17. ronct 👍 2
    Retire: The Retire action removes app data, settings, and Intune managed email profiles from the device12. The device will still show up in Intune until the device checks in12. Retire leaves users’ personal data on the device2. If your device has an Autopilot hash assigned (Zero Touch ID, ZTDID) it will NOT be deleted from Azure AD2. Delete: Delete performs the same tasks that Retire does3. However, it removes the device from the Intune “All devices” list immediately3. If you want to remove stale devices immediately, use the Delete action instead12. answer is A Delete
  18. Merrybob 👍 2 Answered A
    A. Delete "The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead." Ref: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#retire
  19. OyYaGotta 👍 2
    I agree it's a bad question that contradicts it's self, ,but deleting the device leaves the company data and apps on the device. Retire will remove company data and apps as soon as it's next online. Delete will just prevent Intune management /access to Company Portal, but will no longer give you the ability to control data under DLP for example which you likely want to remove. Retire will do this, and as the device is offline anyway, there should be no reason to remove it "immediately" from Intune.
  20. Grimmgore 👍 2 Answered B
    Why "Retire" is the Correct Action: Behavior of Retire: Removes Intune-provisioned apps, settings, and data from the device. Leaves user-installed apps, personal data, and OEM-installed apps intact. If the device comes online and checks in with Intune later, the retire action will be enforced. Steps to Perform Retire Action: Open the Microsoft Intune admin center. Navigate to Devices > All Devices. Select Device1 from the device list. Choose Retire from the list of available actions.
  21. moshkoshbgosh 👍 2 Answered A
    The requirement is immediate removal, so I would choose A instead. From https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe " If you want to remove stale devices immediately, use the Delete action instead" "If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. The next time the device checks in, any company data on it will be removed as Intune also retires a device when deleting it from the admin center."
  22. dnt91 👍 2 Answered A
    The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe
  23. METAM 👍 2
    ChatGPT: The correct answer is C. Fresh Start. Explanation: The Fresh Start action in Microsoft Intune removes corporate apps and settings while keeping user-installed apps, personal data, and original equipment manufacturer (OEM) apps. This fits your requirement to remove apps and data provisioned by Intune while preserving user data and personal apps. Other options, like deletion or retirement, do not ensure that corporate apps and data are removed if the device reconnects.
  24. CheMetto 👍 2
    From: https://learn.microsoft.com/en-us/intune/intune-service/remote-actions/devices-wipe Delete devices from the Intune admin center If you want to remove devices from the Intune admin center, you can delete them from the specific device pane. Intune issues a Retire or Wipe action depending on the OS/Enrollment type. Not all enrollment types support the Retire action. See the following table for the expected behavior based on the device platform and the enrollment type.
  25. Bu5ter 👍 2
    So I had a chat with ChatGPT on this and it clarified something for me. When you delete a device in Intune, it immediately removes any trace that the device was in Intune. In this scenario, we want to ensure the company data is removed if the device comes back online. If we were to delete the device, we would not be able to ensure that the data gets removed since it is no longer in Intune. This is what makes retiring the correct answer in my opinion.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Assigning Intune and Cloud PC Roles with Least Privilege

S-grade

SCEP Root Certificate Location for Intune

S-grade

How Many Intune Profiles Are Needed for Cloud PKI User Certificates?

S-grade

What Must Be Purchased First for Intune Device Query at Minimum Cost?

S-grade

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide