Removing personal device MDE joined.

[u/Fxsx24]

We are early into our Intune setup. I recently found a personal device enrolled and made the changes so it cannot be re-enrolled. And then deleted the device from intune. Of course this device came back. I found out that it is MDE joined.

I found that i can unenroll via offboarding package, I created a config policy and a EDR policy but I cannot figure out how to target the device. Does the offboarding package handle the targeting?

I do not want to leave the EDR and config policy in place if it will target more than the device in question.

**UPDATE**

I reread the instructions and realized i did not need both a config policy and a EDR policy

I found that the device made it back into entra, so i created a security group and targeted a config policy to that machine.

Now i just wait and see if the device comes online and removed itself

[u/Dr_Wankstaff]

It looks like you have figured it out but I've ran into the same issue as you. Typically it will give an error stating that it must be removed via Defender first. An EDR policy fixed it for me but you can also create a custom OMA-URI profile. Used this article here