Policy CSP example: How to make MDM profile non-removable on Windows 10 and 11
Remotely managed Windows 10 and 11 devices are connected to
GoTo Resolve MDM by installing a work account/
MDM
profile to the device.
Device users can, by default, disconnect the work account, which effectively removes the device from the management. In this article, we explain how you can make the work account non-removable and prevent users from disabling the management.
profile to the device.
Device users can, by default, disconnect the work account, which effectively removes the device from the management. In this article, we explain how you can make the work account non-removable and prevent users from disabling the management.
Before you begin: You must meet the following requirements:
- This policy is supported on Pro, Business, Enterprise, and Education editions of Windows 10 and 11.
- Fill in the CSP policy Area name, Policy name, and Value as described in Microsoft's Policy CSP documentation and click Add.
The layout of the screen may look different in the product.
Results: If a user tries to remove the work account after the deployment, he/she will see a message saying "This work or school account cannot be removed by system policy."
Article last updated: 11 October, 2022
You are viewing the latest version of this article.