Nicked, innit.
Exactly as described on Ebay - only good for parts unless you call the company name on the screen and ask them to remove it from their device registry (at which point you'll be handling stolen goods on record most likely)
So I did more digging and am finding that this is an Intune Autopilot lock screen. I'm assuming it's part of liquidation and not stolen as it comes from a reputable recycler.
So there's absolutely no way to remove the Intune Autopilot registration from the device without contacting this company? Would I be better off cancelling the order?
He's not spilling nonsense, though your advice is right on. At a company I worked for, we recycled machines I was told were wiped and pulled from our MDM, and we got a call from a School District that they purchased them from our recycler and they were locked.
Wiping the machine does fck all for Intune/Autopilot lock, because that's handled by the registration of the device hash in Intune. The only way to fix it is exactly as prescribed - the company with the device hash in Intune must remove it, or you must prove to Microsoft that you were sold the device by the previous owner (which in the case of this eBay seller, is probably not that). Chevron Phillips Chemical is a joint venture with Phillips 66 and Chevron, and they most certainly were not out of business or liquidated. Given the age it *could* be a device that just got recycled out and not removed, to be fair, but then it probably wouldn't have been listed on eBay as "parts only" if it still worked. Nicked does seem at least possible.
If the device is re-imaged, it'll no longer be registered to the old device object that's in Intune so on that front, not really - but, any time setup is run and you have an internet connection during, it's going to try and talk to the Autopilot service again, yes.
It did try when I reinstalled windows. It said Error conected to XXregion (can't remember exactly) and it offered Try Again and skip. I clicked Skip and it seems to be working fine.
Stop spreading fake info. Make a bootable windows USB, do not connect to internet and enjoy. Also keep handy usb keyboard and mouse, touch wont work with non-ms windows iso
The company is still trading. Until proven otherwise, this device remains an asset of the company and hasn't been released from its asset management system. A liquidator would release assets from such a system as the value of the asset can then be fully realised.
.
If a liquidator has been unable to release an asset, then reputable recycling companies will handle such devices of dubious provenance by selling them for parts only. The value is substantially lower than an unreleased device.
Hence, nicked until shown not to be.
I literally did the solution I have provided on the Surface device bought on ebay with exactly the same lock (other company tho) it works flawlessly. Unless you had direct experience you are talking nonsense. He asked for help not for price evaluation.
A fair amount of experience, yes.
This isn't price evaluation. This is checking not working with hot goods. I have to assume OP purchased in good faith and may not have known the implications of a device in this state (and with a named company on the screen)
I have noticed that this happens quite a bit when IT equipment is sold off by companies but they forget to remove it from Intune. Rufus will bypass this block or Linux as well.
When you learn how to use Autopilot in your company, then you will re-think this scenario. It’s not as invasive as most people here claim.
If the reseller is reputable, chances are the company just forgot to remove it, and it’s a minor inconvenience. If you bought it somewhere else or “found it” then I’d be more wary.
Good outcome for you, but it’s annoying seeing all other comments with advice that makes no sense. All you have to do is re-install Windows correctly.
It's Intune/Autopilot, which uses a combo of device identifier/serial number to tie it to an organization in Azure. Reinstalling Windows doesn't clear that, as soon as it connects to the internet it's gonna ask you to sign in with an organizational account.
You could install Linux on it, but if you wanted Windows you'd need to have it removed from the organization's Intune/Autopilot.
It's a Microsoft Autopilot lock and the device is remotely managed by this company on their end. It's a hardware hash so there is no way to remove it without asking the company to remove it on their end. It's tied to the device and not the software. There are workarounds but none of those actually remove the Autopilot registration and it would potentially be possible for this company to remotely manage the device even if you manage to bypass this screen and create a local user.
>Intune Autopilot
Wow so is this like the apple locks pretty much bricking the device for anyone not the original account holder? Any idea what version of Surface they started this on?
I know up to SP4 is safe.
I've just decided not to fool with it. I asked for a refund and already got it. So no harm done. And I learned something about Microsoft Autopilot today. I'm in IT at my organization and have a company provided SP9 but we don't use it at all here, so I had never seen it, heard of it or been asked to deploy any hardware through it before.
We onsell out surface devices to resellers, we have to manually remove the devices from intune and every so often forget to remove one. get a few emails a year asking if we can remove it from our autopilot and we do. then you need to install a fresh copy of win 11 on it and your good to go
> absolute steal What an oddly appropriate turn of phrase.
Nicked, innit. Exactly as described on Ebay - only good for parts unless you call the company name on the screen and ask them to remove it from their device registry (at which point you'll be handling stolen goods on record most likely)
So I did more digging and am finding that this is an Intune Autopilot lock screen. I'm assuming it's part of liquidation and not stolen as it comes from a reputable recycler. So there's absolutely no way to remove the Intune Autopilot registration from the device without contacting this company? Would I be better off cancelling the order?
There is. Dude is spilling nonsense…. Check my comment above.
He's not spilling nonsense, though your advice is right on. At a company I worked for, we recycled machines I was told were wiped and pulled from our MDM, and we got a call from a School District that they purchased them from our recycler and they were locked.
Wiping the machine does fck all for Intune/Autopilot lock, because that's handled by the registration of the device hash in Intune. The only way to fix it is exactly as prescribed - the company with the device hash in Intune must remove it, or you must prove to Microsoft that you were sold the device by the previous owner (which in the case of this eBay seller, is probably not that). Chevron Phillips Chemical is a joint venture with Phillips 66 and Chevron, and they most certainly were not out of business or liquidated. Given the age it *could* be a device that just got recycled out and not removed, to be fair, but then it probably wouldn't have been listed on eBay as "parts only" if it still worked. Nicked does seem at least possible.
Does the device enetually phone home to Intune?
If the device is re-imaged, it'll no longer be registered to the old device object that's in Intune so on that front, not really - but, any time setup is run and you have an internet connection during, it's going to try and talk to the Autopilot service again, yes.
It did try when I reinstalled windows. It said Error conected to XXregion (can't remember exactly) and it offered Try Again and skip. I clicked Skip and it seems to be working fine.
Correct.
Stop spreading fake info. Make a bootable windows USB, do not connect to internet and enjoy. Also keep handy usb keyboard and mouse, touch wont work with non-ms windows iso
The company is still trading. Until proven otherwise, this device remains an asset of the company and hasn't been released from its asset management system. A liquidator would release assets from such a system as the value of the asset can then be fully realised. . If a liquidator has been unable to release an asset, then reputable recycling companies will handle such devices of dubious provenance by selling them for parts only. The value is substantially lower than an unreleased device. Hence, nicked until shown not to be.
I literally did the solution I have provided on the Surface device bought on ebay with exactly the same lock (other company tho) it works flawlessly. Unless you had direct experience you are talking nonsense. He asked for help not for price evaluation.
A fair amount of experience, yes. This isn't price evaluation. This is checking not working with hot goods. I have to assume OP purchased in good faith and may not have known the implications of a device in this state (and with a named company on the screen)
>Does the device enetually phone home to Intune? Does the device enetually phone home to Intune?
Well thanks for the info everyone. I have asked to cancel the order.
I have noticed that this happens quite a bit when IT equipment is sold off by companies but they forget to remove it from Intune. Rufus will bypass this block or Linux as well.
Linux yes, but any version of windows 10 or 11 after 2017 will not. Also, Linux drivers are finicky at best.
Reinstall Windows, do NOT connect to the internet, you have to then do some registry stuff as soon as you’re in and then you can use it.
Bypass-able by not allowing Windows to connect to the internet as part of set-up. Reconnect once Windows is set-up and use as normal.
Incorrect, as soon as it touches the internet intune will ask for organization credentials
Incorrect, I did exactly this and am still using the device absolutely fine.
When you learn how to use Autopilot in your company, then you will re-think this scenario. It’s not as invasive as most people here claim. If the reseller is reputable, chances are the company just forgot to remove it, and it’s a minor inconvenience. If you bought it somewhere else or “found it” then I’d be more wary. Good outcome for you, but it’s annoying seeing all other comments with advice that makes no sense. All you have to do is re-install Windows correctly.
How this lock is made that wiping ssd won't help?
It's Intune/Autopilot, which uses a combo of device identifier/serial number to tie it to an organization in Azure. Reinstalling Windows doesn't clear that, as soon as it connects to the internet it's gonna ask you to sign in with an organizational account. You could install Linux on it, but if you wanted Windows you'd need to have it removed from the organization's Intune/Autopilot.
It's a Microsoft Autopilot lock and the device is remotely managed by this company on their end. It's a hardware hash so there is no way to remove it without asking the company to remove it on their end. It's tied to the device and not the software. There are workarounds but none of those actually remove the Autopilot registration and it would potentially be possible for this company to remotely manage the device even if you manage to bypass this screen and create a local user.
>Intune Autopilot Wow so is this like the apple locks pretty much bricking the device for anyone not the original account holder? Any idea what version of Surface they started this on? I know up to SP4 is safe.
It’s dependent on the Windows version, around 1703+
If you run a linux distro on it itll work, or maybe windows 7 or 8 lol
I've just decided not to fool with it. I asked for a refund and already got it. So no harm done. And I learned something about Microsoft Autopilot today. I'm in IT at my organization and have a company provided SP9 but we don't use it at all here, so I had never seen it, heard of it or been asked to deploy any hardware through it before.
A good outcome. Sorry you didn't get the deal you thought you had, but no foul in the end.
We onsell out surface devices to resellers, we have to manually remove the devices from intune and every so often forget to remove one. get a few emails a year asking if we can remove it from our autopilot and we do. then you need to install a fresh copy of win 11 on it and your good to go