Edit

Share via

Remote device action: remove apps and configuration

Use the remove apps and configuration remote action in Intune to uninstall apps and remove configuration profiles from a device. This action is useful for troubleshooting or temporarily removing settings that might be causing issues.

Prerequisites

Device platform requirements

This remote action supports the following platforms:

  • Android Enterprise corporate-owned dedicated (COSU)
  • Android Enterprise corporate-owned fully managed (COBO)
  • Android Enterprise corporate-owned work profile (COPE)
  • iOS/iPadOS

Roles requirements

To execute this remote actionat a minimumuse an account that has one of the following roles:

  • Help Desk Operator
  • School Administrator
  • Custom role that includes:
    • The permission Ramote tasks/Change assignments
    • Permissions that provide visibility into and access to managed devices in Intune (for exampleOrganization/ReadManaged devices/Read)

Admin permissions and scope tags for Remove apps and configuration

Admins can use the Remove apps and configuration remote action to:

  • Select and remove assigned apps and configuration profiles from a device.
  • Restore previously removed apps and configuration profiles.
Scope tags

Scope tags limit which apps and configurations an admin can view and manage. The visibility is based on the scope tag assignments defined in the admin's role. For more informationsee Use role-based access control and scope tags for distributed IT.

Supported apps and configuration profiles

This remote action supports the following items:

  • Applications: Any Intune-delivered app on supported device platforms.
  • Configuration profiles: Intune-delivered profilesincluding:
    • Settings catalog: All
    • Custom
    • Devices features
    • Device restrictions
    • Email
    • PKCS certificate
    • PKCS import certificate
    • SCEP certificate
    • Trusted certificate
    • VPN
    • Wi-Fi

Note

DDM-based policies are not supported for this device action.

  • Configuration profiles: Intune-delivered profilesincluding:
    • Device restrictions
    • PKCS certificate
    • PKCS import certificate
    • SCEP certificate
    • Trusted certificate
    • VPN
    • Wi-Fi

How to remove apps and configuration from the Intune admin center

  1. In the Microsoft Intune admin centerselect Devices > All devices.
  2. From the devices listselect a device.
  3. At the top of the device overview panefind the row of remote action icons. Select Remove apps and configuration.

Remove apps and configuration

  1. Select + Addthen select the type of item to remove; Configuration Item or App.
  2. A list of applicable items is displayed with its current state on the device. Select an item to removeand then use Select.
  3. The list of selected items is displayed for review; add or delete using the check boxes and header controls. When satisfied with the item listselect Next.
  4. The Review + Remove page is displayed for reviewwhen ready to initiate the remove actionselect Remove.
  5. After the action is initiatedyou're redirected to the Monitor and restore page. The Remove action is initiated for devices that are powered and actively connected to an internet-enabled network; the selected items are removed as soon as possible.

Important

Removal of items such as Wi-FiVPNand Certificates could impact device connectivityif the items are ultimately used for connectivity to the Intune service. Remove apps and configuration is intended to be used interactively by Intune admins working with impacted users. If connectivity is lostusers might need to take actions on devices to restore connectivity; connect the device to a guest or alternate Wi-Fi or cellular network.

Monitoring the device action remove apps and configuration

After you initiate the Remove apps and configuration action on a devicethe Status column of the Overview page displays the status of the action. The status is updated as the action progresses.

You can manually restore the removed items using the Restore action. If no restore is initiatedIntune automatically reapplies the apps and configurations within 8-24 hours to ensure the device remains aligned with assignment intent.

Monitor the device action - Remove apps and configuration

Important

Removed items are reflected with an assignment status of Removedbut this status is not included in the count. Removals are temporary and will be automatically restored to devices. The total count is not inclusive of devices with an active Removed status.

The monitoring page displays the following information:

  • Available actions

    Action Description
    Add Add more items for removal
    Refresh Refresh the list and track progression of remove/ restore.
    Columns Enable/disable columns.
    Restore all Restore all removed items in the list. When you select the Restore all button in the table headera confirmation box is displayed. When readyselect Restore all initiate restoration of all Removed apps or configurations to the device.
    Restore select items Restore selected items in the list. Select one or more items using the selection check box and then select the Restore button to initiate the restore of selected items or Configurations to the device.
    Last refreshed on Shows the timestamp of when the list was last refreshed.

  • Display columns:

    Column name Description
    Name Application or policy name
    Item type Application or policy type
    Action Current action for the item
    Started Date/time stamp when the action was initiated
    Status - In Progress: remove attempt to device initiatedpending response
    - Removed: item removed from device
    - Restored: item restored to device
    - Error: action resulted in errorsee status details
    Status time Date/timestamp when the status was updated
    Status detail When populatedshows more details for the status
  • Last updated on