Unenroll your tenant

If you're looking to unenroll your tenant from Windows Autopatch, this article details what unenrollment means for your organization and what actions you must take.

Important

You must be a Global Administrator to unenroll your tenant.

Unenrolling from Windows Autopatch requires manual actions from both you and from the Windows Autopatch Service Engineering Team. The Windows Autopatch Service Engineering Team will:

• Remove Windows Autopatch access to your tenant.
• Exclude your devices from the Windows Autopatch service. Excluding your devices from Windows Autopatch won't remove your devices from Intune, Microsoft Entra ID or Configuration Manager. The Windows Autopatch Service Engineering Team follows the same process and principles as laid out in Exclude a device.
• Delete all data that we've stored in the Windows Autopatch data storage.

Note

We will not delete any of your customer or Intune data.

Microsoft's responsibilities during unenrollment

Responsibility	Description
Windows Autopatch data	Windows Autopatch will delete user data that is within the Windows Autopatch service. We won't make changes to any other data. For more information about how data is used in Windows Autopatch, see Privacy.
Excluding devices	Windows Autopatch will exclude all devices previously registered with the service. Only the Windows Autopatch device record is deleted. We won't delete Microsoft Intune and/or Microsoft Entra device records. For more information, see Exclude a device.

Your responsibilities after unenrolling your tenant

Responsibility	Description
Updates	After the Windows Autopatch service is unenrolled, we'll no longer provide updates to your devices. You must ensure that your devices continue to receive updates through your own policies to ensure they're secure and up to date.
Optional Windows Autopatch configuration	Windows Autopatch won't remove the configuration policies or groups used to enable updates on your devices. You're responsible for these policies following tenant unenrollment. If you don't wish to use these policies for your devices after unenrollment, you may safely delete them. For more information, see Changes made at tenant enrollment.
Microsoft Intune roles	After unenrollment, you may safely remove the Modern Workplace Intune Admin role.

Unenroll from Windows Autopatch

To unenroll from Windows Autopatch:

1. Submit a support request and request to unenroll from the Windows Autopatch service.
2. The Windows Autopatch Service Engineering Team communicates with your IT Administrator to confirm your intent to unenroll from the service.
   1. You have 14 days to review and confirm the communication sent by the Windows Autopatch Service Engineering Team.
   2. The Windows Autopatch Service Engineering Team can proceed sooner than 14 days if your confirmation arrives sooner.
3. The Windows Autopatch Service Engineering Team proceeds with the removal of all items listed under Microsoft's responsibilities during unenrollment.
4. The Windows Autopatch Service Engineering Team informs you when unenrollment is complete.
5. You're responsible for the items listed under Your responsibilities after unenrolling your tenant.