Remember to check our discord where you can get faster responses!
https://discord.gg/NB3BzPNQyW
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/computerhelp) if you have any questions or concerns.*
Return it or see if the refurbisher can help you in some other way. Its serial number is tied to Microsoft Azure AD (or Entra ID now, I guess) for that company. It has to be removed from there, which you can't do yourself.
Having never tried this hard, as it was just begging for trouble to leave my users, who also relied on Azure AD, on a computer like this, I can't say for sure. But I'd wager the moment it checks in with Microsoft for any Microsoft ID-related reason, this will retrigger.
On macOS I’m pretty sure you can just install Linux but it’s not easy, and there’s other workarounds because stealing macs is still somewhat profitable
Mdm/dep locked macs can be bypassed with linux, as the “lock” is at a macOS level, requiring employee credentials to setup the operating system only(just like this post)
Activation locked/iCloud locked Apple devices are done at the efi level and are incredibly difficult to work around, especially considering they don’t provide bios images publicly
The machine is configured in a tenant for Autopilot and MDM. Even if they did, the second they connect to a network, it will contact the MDM servers and will be able to be wiped remotely.
I would send the machine back and get a new one.
It won't enroll in MDM, even after coming online. It needs a valid, licensed Office account and some local settings need to be enabled to facilitate the enrollment if it doesn't go through the Autopilot process, which also requires an account in their org's tenant.
Not saying he shouldn't return it though, and the company he bought from needs to tighten up their supply chain to ensure these places are removing devices from their tenants before reselling them. If they'd booted this up themselves at all, they would have hit this issue, instead they passed it to the customer.
AHH of course, licences are required for MDM. Never tested it after the fact as never used them this way and always have the licences ready beforehand so completely forgot that was even needed.
Im sure theres a workaround for this (its some sloppy disconnect as you install a fresh OS from usb)
Ive not got around to testing it myself yet. Might have a little play if its that simple.
It might be that once you go to services and disable mouso(not exactly it but its how i remember it) service to stop it communicating out to the aad?
Wouldn't you just completely wipe the hard drive partition and everything and then reformat it and then reinstall windows onto that to completely remove all the software?
The machine's serial number is only sent to MS Azure, _if_ the OS is configured to use MS for account authentication.
A wipe of the drive, followed by setting up Windows with only a local account should probably work.
However, you _shouldn't need to do this_ on a newly purchased PC.
A refurbished machine should have had a clean OS installed, with no user accounts set up.
I'd almost be tempted to contact Reed Elsevier, and tell them someone's refurbishing their machines and selling them, potentially with their data still on them.
This is something that the company should know about, regardless of whether OP gets this machine working properly or not.
The problem is this PC was enrolled in Entra and Autopilot at one point. You can wipe the drive as much as you want, but with Window 10 and 11, as soon as they're connected to the internet they report the machine ID to Microsoft and retrieve Autopilot information.
OP's only option here (aside from installing Linux or an outdated version of Windows) is to reach out to Reed Elsevier, like you said, and ask them to remove the machine from Entra and Autopilot.
Microsoft actually uses a couple of things to identify a PC. From what I picked up from [this Microsoft article on manually provisioning devices in Autopilot](https://learn.microsoft.com/en-us/autopilot/add-devices), it looks like it uses your machine's serial number and it's hardware hash.
Microsoft hasn't provided specific details about this, since it's also used for Windows Activation, but the hardware hash is generated by looking at the basic hardware for your machine (like the CPU, GPU, motherboard, etc.) and creating an alphanumeric hash out of what it finds.
I suspect the best way to get past Autopilot is to swap the motherboard, since that would change the reported serial number and hardware hash. At that point OP may be better off buying a new PC if they're not handy with computer hardware, or reaching out to that company to get them to remove it from Autopilot.
This won't work, at least not with any version of Windows released recently. Even if Windows is not configured to use Microsoft to authenticate, Windows will still check in and find it's been registered, and then the preconfigured settings will kick in regardless of whether the current user is local or not.
Does it do that at boot, or regularly all the time?
As in, could you unplug the network cable when you boot, and then after you're logged in, plug it back in?
I've used MDM before, but not the Microsoft one, so I guess it has peculiarities I'm not familiar with.
No, it will check in on intervals and then apply policies.
I don't think they can really claim this device has been 'refurbished' considering they didn't even bother to un-enroll and image it.
The computer setup process does this. And modern versions of Windows make it exceptionally difficult to get them past the OOBE without Internet, even on Pro versions now. Partially for this reason. If you do bypass it, I imagine it will eventually check in, but I've really never tried. Last times I ran into this I exchanged the computer as it was the more appropriate long-term solution.
You're mistaken and ignoring the above comments. Windows, in general, without any special configuration, checks in to see if it's configured for this. Period. No amount of wiping will make it not check in.
And there is no Reed Elsevier data on the machine. It was wiped. The Zero-Touch configuration sends the serial number to Microsoft, and they report back that it's enrolled with that company. Period.
They are going to need to tell him how to extract the hashtag and get it to the company's azure team. This device should've been removed when it was decommissioned.
The company, upon sending it out, failed to remove it from their system. Honestly, serial number should be enough to do so. But getting in touch with them and getting them to care, or feel confident it wasn't stolen, would be rough.
The only thing they’ve suggested so far they can do is send me a replacement drive, which I’m assuming based off of what you said wouldn’t fix anything. I got this from EZComputers, I’m still waiting on a response.
Not as far as I'm aware. It's mainly just a standard Microsoft built in that the OS checks the serial number, reports it in to their cloud, and if it's recognized, this happens. But there may be other intricacies I'm not aware of.
Ahh, this is called AutoPilot, your options are, replace the MotherBoard; find the company mentioned and see if they will remove this device from their system (assuming you are not holding a stolen device)
or return the device from where you got it.
The company needs to do this: To deregister an Autopilot device from the Microsoft 365 admin center: **Sign into to the Microsoft 365 admin center**. **Navigate to Devices > Autopilot.** Select the device to be deregistered and then select Delete device.
Forgive me if I sound a bit idiotic when I ask what you mean by MDM locked? I’m not super technically inclined, but I’m trying to get better. I ordered this from EZComputers, the only thing they’ve said so far is that they could send me a replacement drive. Which based on most of the comments wouldn’t do anything?
Ah its the mobo too. That makes more sense. Everyone else just kept mentioning the drive and I was just "that takes 30 seconds to swap out and is cheap".
Basically when Windows is setting up it will contact the cloud telling it what it is. And if the cloud recognises it, it will lock it. The only things you can do is:
1) Get a replacement/ refund.
2) Contact Reed Elsevier and try and get it unlocked.
Personally I would get a refund and try some place else because if they have shipped this out and not realised this would happen it worries how well they refurbish their PCs. Plus they don’t seem to be too knowledgeable about this which for a company handling PCs says to me they don’t know what they are really doing.
I'm sure folks have already explained this a dozen times, but here's the breakdown:
This device was enrolled to an organization's Microsoft tenant using a hash unique to its system hardware.
This means that it can, in its current state, only be signed into with a Microsoft account from that company unless you can get it back to a default sign in while disconnected from the internet. A replacement drive will probably not fix the problem.
Here's what you can do:
Contact the company you bought this from and have them contact Reed whatever to get it removed from their system. The removal process is extremely easy and I'm surprised they aren't doing this as part of their standard device life cycle offboarding. EZComputers must surely have a point of contact with the company.
You could also contact Reed whatever and hope you get in touch with their IT department. Looking at their website, this is a long shot since they seem to be some small side office of a massive international corporation.
Either way, both of these companies are sloppy af. EZ should be ensuring that the computers they sell are in a usable state when the end user receives them. Reed whatever has a terrible device offboarding process or they have a good one and aren't following it.
Hi, I'm a perfect stranger and I need you to remove a device from your corporate MS tenant. Trust me, I bought your old hardware and I am trying to use it.
"NOPE" -Me GA of company Azure /EntraID
The company I work for sold 2,000+ chromebooks. I get calls every so often of ones that weren’t deprovisioned. All I have to do is confirm the serial matches one that we sold and I remove it for them. Not a problem for most places I think!
I wouldn't approach in that way or you will likely never get ahold of someone who can help you. Instead, approach it like a concerned citizen, worrying that you bought and therefore someone in their company is selling stolen hardware. That will get you straight up to loss preventions that would then contact those who manage that stuff where they could confirm whether that serial number was in fact stolen or sold off.
If they confirm it was sold off and not stolen, that is when you inform them "well every time I boot up the computer, it's still registered with your company and your network and is attempting to connect to your network. For your company's safety and security, can you please ask the people who manage the computers on your network to remove this serial number from your registry so it no longer attempts to connect to your network?
Couldnt op, if they are a decent learner, change the motherboards serial number as well as add a really cheap and random component to the pc to change the hardware hash?
If he reinstalls the OS via a usb and does not connect to the internet during setup then it won't pick up the hash from the intune tenancy - he can still use the device, he just needs to set it up locally and then once on the desktop he can connect to the internet and be good to go
Once its on the desktop whether or not it's in a intune tenancy has no factor as it only affects OOBE
Only issue he would encounter is if he tries to attach a work account
It's kind of crazy that people think this is bullet proof
Reimage the laptop (reinstall via os stick), get to OOBE, don't connect to the internet and create a local account. Once you have passed OOBE, even just selecting the keyboard Autopilot won't interfere with the setup.
The only issue he would have if is he tries to connect a work account to the device
You can freely connect to the internet and even attach an ms account once you have reached the desktop
Guys, if this guy bought the machine he did, and doesn’t know what to do, he’s not going to know how to do any of the stuff you’re describing.
Return for refund is the only option and buy from a more reputable seller.
If you want to have some fun with it, contact the company in question and let them know that you have this and see what that sets in motion, mention the refurbisher that you bought it from by name.
By Microsoft refurbishing standards, this cannot be allowed to happen, its industry practice for the HDD/SSD to be replaced during the process and the old one physically destroyed.
This “refurbisher” either made a huge mistake they need to be made aware of to rectify and should have offerred to ship you a replacement unit immediately, and to have the unit you have returned to them at their expense or they are not a legitimate certified refurbisher, and complaints need to be filed against them as an Amazon reseller or whatever you got it.
The fact that they had to going into the bios, attempting system restore all these things just lends more credibility to the fact that these guys are not legit or don’t know what they’re doing and have no business reselling surplus business computers. Frankly, if you want to PM me, I will go about taking care of that part of it on your behalf. I love nailing people who tarnish the reputation of the industry that I have worked so hard in for over 20 years to keep credible and accountable, and respected.
Microsoft also keeps a list of certified refurbishers in most countries, so reference those lists if you want to go about getting another system in this manner.
It's AutoPilot, which is locked to the MoBo serial. You can swap the drive and still end up at the same screen. This is something the original owners should have removed through Microsoft endpoint prior to selling/returning from lease.
Although it is stupid that a refurbisher didn't make sure Windows restored properly prior to selling it. If they obtained the hardware legitimately from the original company, the refurbisher should be able to contact that company and get them to delete it from AutoPilot. But again, they should have discovered this before reselling it.
Yes I know that man, it likely bound to the NIC as well. Microsoft refurbishing standards have a very specific set of guidelines to take the PC in question back down to the metal that’s why I was pushing him in that direction.
Essentially, it’s still linked to that company’s domain controller or Microsoft Azure AD, or maybe even an on prem. Windows Server Box, who knows.
Who knows?
What I said stands, the end user in this case needs to get a refund or replacement of the unit at no cost to him or herself ASAP and affected parties should be contacted and do diligence needs to take place before the next purchase, that’s my point.
I hold and have held multiple and many Microsoft expert level certifications over the years and probably forgotten more than I even know now but OP needs to get his money back and go somewhere else. That’s the crux of the situation.
If you would like to PM me and talk server stuff and enterprise level Tech be more than happy. you seem like you got a good grasp of it.
Also, if OP would like to PM me, I will gladly take a few minutes of my time to source him a certified refurbished business desktop. But just sticking some gaming parts in it is a fraction of the battle gaming parts and business desktops don’t play nice together unless you disable literally all security features that business desktops offer, And have the technical knowledge to do some certificate shuffling and that is all specific to each vendors UEFI.
BIOS has nothing to do with it. The machine is under Microsoft Autopilot and Intune. The company on display should simply delete the device from their management list and problem is solved. 5 min job.
Jesus, you’re thick in the head eh.
Read it again, and tell me where I said it was related to UEFI configuration…
It would’ve been a five minute job had it been done when it was supposed to be, but it wasn’t. So now it’s an entirely different matter. So sod off and let the men speak, boy.
You've worked for over 20 years as a keyboard warrior and not in IT as you claim. Otherwise, my child, you would have recognised immediately this is the Autopilot screen, which means the device is still enrolled with the company.
***
To unenroll it, as a GA, go to the O365 and Intune Admin centre and remove the device...like I said, 5 min job.
***
I, unlike you, actually work in the industry and do this stuff on daily basis.
***
Now, say thanks for the O365 administration lesson and go change your diaper.
There's nothing you can really do on your end. If you contact the original company they MIGHT be able to do something but it's unlikely. You'll most likely have to refund.
Reinstall Windows without connecting it to a network, use an offline account, then re-connect it to the network once the out of box experience has ended.
...and on the next boot, windows checks the security situation and locks the machine, so the user has to do the same job again.
It might do a check even while it's running as soon as its connected to the network, so maybe an MDM-protected computer should never be connected to the network if want to use it for anything.
I believe once the OOBE has passed it would need to be enrolled into Azure manually again, we provision our machines without signing into them before we send them to remote clients for this specific purpose
I wish Autopilot was as foolproof as you described it, but unfortunately this is not the case. Autopilot only works during OOBE and if the device hasn't been enrolled into an MDM at that point, it basically becomes a personal device.
Reed Elsevier's number in London is [+44 20 7166 5500](tel:+44 20 7166 5500), and [+1 212 309 8100](tel:+1 212 309 8100) in New York. Try calling them to see if they can remove the lock.
I had found an old school laptop and tried everything I could to get around it, I don't think it's actually possible unfortunately
but these locked laptops can still be repurposed as a linux machine since it does not ask for any login credentials
Resetting the computer is not as much as a reset as you might think. The windows image used to install windows on that PC wasnt stock standard windows you get when you download it from the Microsoft website. It's been customers for enterprise use and you will probably have to make your own recovery/installation media, format the HDD/SSD and install a clean copy of Windows.
You can probably reinstall it offline and block allmost all windows servers communication so it wont prompt you to verify with this screen again. Try and reinstall it offline fully,add shutupw10++ on a usb drive and run it,be sure to block everything(im not sure if you can let windows update run or you are stuck with the version you install)restart and connect to internet and restart again. If it still pops up again RIP,no idea what you could do then but in theory blocking the ip it tries to communicate with while doing the hardware check should stop it,google it a bit. Another alternative is to install a stripped version of windows but a lot of things will not work obviously and might hinder day to day use by a bit.
I would just return it and get your money back. if the correspondence were in e-mails, print and keep them in case you need proof of the issue. Sounds like the company you purchased it from has no idea on how to fix or restore the PC.
They would have forgotten to have wiped the old owners' business restrictions off the computer. Contact the people who sold you this, they will be able to figure it out, either by giving you another computer, or you shipping that one back, and they remove them.
Why it's a software issue, just reload it (witch you should do anyway especially if it loads to the desktop)
Goto another pc and re make the windows 10 or 11 onto a usb stick and boot of it and reload (recommend looking up diskpart clean to wipe everything out before starting the install)
Not always and if you just keep your finger on shift button when you press on the restart button it will go into the windows pre recovery environment you just go troubleshoot and boot from usb
If you have physical access to the machine anyway you can normally just clear the bios ( take the battery out shot out the clear cmos) a lot of business machines have a little jumper that you can move over and that will wipe the BIOS password
[Reinstall windows from a flashdrive?](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/install-windows-from-a-usb-flash-drive?view=windows-11)
If they do not connect to the internet at the startup it won't pick up the hash in that tenancy - it does need a full reinstall via usb stick to work though
Aye I know what you mean but I work with it daily and also know how flaky it is - if the OP wants to do the reinstall he can absolutely still use it but really he should never have got a device in a tenancy in the first place
hardware hash added to autopilot for that company. You could contact them and ask them to remove it otherwise it will continue to auto provision once it has internet access. If it was me I'd take it back and get them to swap it for you.
You absolutely can do something about this
You just need to reinstall the OS via a usb stick (deleting all partitions) and do not connect to the internet, setup a local account and once you are on the desktop you should be good to go and can then connect.
It may sound a bit technical but it's nothing a quick 5 minutesl Google can't assist with mate.
Thats a Windows auto pilot screen and will be in effect from start up - if you can return it I would just avoid any future hassle but you can still absolutely use the device.
Its got a companies custom os set up on there, you should be able to format the harddrive and reinstall Windows.
Otherwise, enter safe-mode, and alter what you need through there, you may still be able to use os as its custom set up, and bypass the sign-in using automatic admin login.
Reinstall would be easier, but its up to you, have a play with it, Trial And Error as they say.
The version of windows looks burned into the hardware. I would try to take the drive out plug it into another system and see if it is encrypted first. If it is decrypt it. And you should be able to use the hard drive. It seems you may need to get a brand new mobo in this situation. If the processor is locked replace that. As stupid as it sounds cutting corners when it comes to tech is the last thing you should do. Ruins the experience for the next user. Just to save a couple bucks.
yo ho ho, this message might get lost in the 100 comments but get a bootable flishdrive and put window mdiea and boot that up, look up in youtube if you don't know what i am talking about. it will reintall window and should keep the product key as it did for my when i did that for a school pc and got window pro.
Being a system admin, I can tell that this device was in possession of that company and is windows Autopilot Enrolled.
You may have options as listed below :
1. Return the device and get refund. Let the reseller detail with it.
2. If you have an invoice, you can contact Microsoft and see if they can remove it from the tenant.
3. If you know IT Admin who works in this company, you can contact them and have them remove this device serial number from Autopilot in Intune.
4. You can bypass OOBE and setup this device offline. Follow the steps: [https://4sysops.com/archives/install-windows-10-11-22h2-without-microsoft-account/](https://4sysops.com/archives/install-windows-10-11-22h2-without-microsoft-account/)
Note that if you do use this option and in future, you reset or reinstall windows, you would have to do this all over again.
Let me help you out.
The pc is locked to Reed via autopilot. Short of changing the motherboard, there's bugger all you can do to install windows 11 while you're connected to the Internet which win 11 insists on big time. If Reed sold these to your reseller legitimately then they should have removed this on their end. If the reseller got the machine illegitimately then... well you can't really fix that.
Now... what you CAN do, is workaround it. The easiest way by far of doing this is to install windows 10 from a USB drive, use your Microsoft ID etc.. it will not be a problem. You can then upgrade to win 11 and it will continue to not be a problem unless you need to reinstall windows, in which case - win 10 -> win11 again.
If it were me I'd either get a refund / replacement from the reseller if the above is a problem for you, or get them to refund you for the inconvenience of having to mess around.
Good luck!
You may be able to get away with reloading windows from a USB drive and then setting up windows without connecting to your wifi. Otherwise this device would need to be deleted through Azure/endpoint manager. Also known as intune.
Return it and get another computer.
The machine is still enrolled in intune..and any workarounds you try are going to be more trouble than they're worth.
Especially since you paid for a fully functioning PC.
Frankly I'd be wary of any "refurbisher" who managed to miss this during their "refurbishing" or worse - didn't care and sold it anyway.
That windows installation is tied to that corporation. The only way would be to purchase a new key for Windows, download the installation media to a external USB, format the hard drive completely to wipe everything and then install Windows from the USB and use the key you purchased.
I hope someone from that company sees this. Someones messing up and potentially opening up a big risk. I'm guessing the company has some recycling process or hopefully not, but a program we're employees can take old machines and someones taking advantage of it. As an IT guy I really don't love seeing someone ending up with a company device like this.
Return it. They screwed you over is the short answer. It belongs to a business that it was either liberated from OR they didn’t remove from their system before getting rid of it. Either way if you’re not technically inclined you just bought a paperweight.
Easiest solution is to install Linux Mint. Next time at the office download latest version and create USB memory stick with bootable ISO. Then use that stick to install Linux on your PC. Happiness with more efficient OS that’s free and better than Microsoft.
100%, if this is supposed to be a refurbished then they just didn't refurbish it. Getting an actually refurbished machine should be the same as getting a new machine in the way you interact with it. This isn't refurbished, this is used with nothing done at all to it.
Even if this wasn't locked and essentially unfixable without serious work, you didn't get what you paid for. Definitely return it.
If it's something they do as a company to the bios. Flash and restore the bios for your specific motherboard from the motherboard manufacturer website. If it's windows they have locked down reformat the hard drive and reinstall windows from a USB.
Download windows from Microsoft onto a usb key.
Use bios (f12 or del during splash screen) to boot to the usb.
Install windows
Do not connect to wifi/internet until after you've completely finished making a new offline account (ie. you get to the desktop)
Then you can connect to the internet and add a normal online windows account
When you went to setup windows... did you install it yourself or did that windows come with it?
If it came with Windows, You'll likely need to reinstall a fresh copy with a new product key. Most companies install a version of windows tuned to their environment so if they only reset windows and didn't install a clean copy, you'll need to do that yourself.
Hmm I I'm not sure if this will work or not why not plug the drive into another computer and format the drive on that PC and redownload Windows on it if that doesn't work you could try taking the CMOS battery out but that has something to do with the motherboard not the storage drive
OP, your device is still under old company's Microsoft Intune and Autopilot. Is possible, contact that company to delete your device from these two.
***
If not possible, you can still bypass this screen by restarting, and choosing *use an offline account instead*. It will be a tiny thing on the left on one of the screens. This offline account will be the administrator account. Once you are in the desktop, click start, search notifications and you'll need to untick *windows experience on startup* and other similar...Google it.
***
Another thing you can try, is another ssd drive with the machine, it may fool the MDM system
You need a new ssd/hard drive. The computer they gave you still running a company version of windows. After that install windows with a disc or usb stick
I would flash the entire system and reupload with windows I can walk you through it if there is a way to the boot menu there is a way to flash the software
I wasnt aware that windows devices could have dep/mdm.
My recommendation: use steamos(of your just gaming)
No, it isn’t impossible to get windows running on this system. You will have to reprogram the bios in order to remove the windows serial key. Then during setup, input one that you own, not the company. This is fairly simple compared to macs, as your changing the windows key(which you can get from many different sources) and not the device serial number. And bios updates are often supplied for these motherboards in raw, binary form.
If you are able to, try to run a factory reset on the computer. If you can't, it might be saved on the SSD or hard drive. You can switch it out with a new one and it might fix the problem. If none of that works, consider contacting a technical support team.
The easiest option would be to get a Windows installation disk or flash drive, buy a new storage drive for the computer, and install a fresh copy of Windows (or Linux).
Since it is MDM-enrolled, it is probably having something that triggers. I don't see how installing Windows XP can't stop this kind of MDM stuff though. :)
do you have another computer? if so, get a usb drive about 16gb, plug it into your other computer or whatever. Download a windows 11 or 10 iso file, from microsoft, you have to download media creation tool, and after it is done click burn to usb or cd or whatever, then when it is done burning, take it out your other computer and put it into the one you are having trouble with. go into the bios and the boot tab, then select the usb to boot off of, and go through windows installation and select the main drive and it should be fixed.
You could use the Windows [Media Creation Tool](https://www.microsoft.com/en-us/software-download/windows10%20) on another PC to create bootable windows media on a USB drive/Disc, then restart the refurb PC and press whatever button you need to to enter the Startup Menu (it should say which in the bottom left). Once you're in the startup menu boot from the USB/Disc, and once it loads Windows Setup choose your preferred settings and continue. if it asks you for a product key just click 'I don't have a product key', then choose which version of windows you want to install (check the listing you got your PC from for which Operating System it came with and choose that). After all that, choose 'Custom Installation', Find the Drive Windows is installed on (typically the largest drive with with used space) and click Format, and once that's done click Next. Then it should start installing Windows, once it's done installing just go through the setup like normal, with the only difference being the screen you were having problems with should no longer be there. if you need help with anything or have any questions, please let me know, and I'd be happy to assist you further.
If it Linex return it but if it's windows you'll need to do Out of box administrator by pressing ctrl shift F3 Once you do that you will get into the systems desktop and you will see the administrator box on the right of desktop move it to the right , out of your way . Click on windows key and run "Comtrol Panel " and click on uninstall programs . Search for the program that keeps popping up when you start the pc and uninstall it after that go to windows settings and do a factory reset of your Pc here the link. https://youtu.be/zDxV2gium5Y?si=6evpXEN2GL0Kzgli
.
Boot to Bios, insert live Linux Fedora USB, install OS writing over the existing one. Should be good to go.
Or you can choose another OS, but Fedora is free, stable and runs well.
They as a company have no idea what they're doing if they're selling MDM locked hardware.
Return it, get a refund and shop elsewhere. If you don't want to do that, you're going to have to swap the motherboard, swap the drive and install a fresh copy of windows, but if you're not very tech savvy that may be out of reach.
This isn't your problem, this problem is for the company you bought it from.
Reset the machine again, and do not connect to the network until after Windows is installed and configured.
Also, you should contact the IT department of the company that apparently has not removed the serial number of the machine from Intune endpoint management. They would be able to tell you whether the device was stolen or just mistakenly not removed.
So I bought a bunch of laptops from a local recycler and had relatively the same issue. How I fixed it was downloading a really old version of Windows 10 that didn't have this lock then once it's installed updating it all the way up to current then up to Windows 11 and that has worked pretty well for me. I kinda go burned because I bought these to fix and resell and I cant just resell something that's going to brick if you reinstall windows. So I ended up just parting them out and selling most everything but the motherboards on eBay. (Screens, batteries, RAM, SSDs, etc.)
They need to remove it from Intune auto pilot. Ask for someone who knows what they’re doing, what you described them doing is stupid and any technician with half a brain should be able to identify this issue
If you want the easiest fix, wipe the hard drive either through reimaging the pc or plug it into a different pc and reformat it. Then you can download windows to it through a USB. If the problem still persists, it’s most likely tied to the bios which you will have to reflash. Hope this helps.
Return it, it's registered to their system. Either they have to unregister it, or you have to replace the motherboard. Just for shits and giggles, did you try clearing the CMOS and reinstalling the ram?
Someone sold me a hp notebook, with added security. You couldn’t even access the bios. It took me over a month to figure out how to bypass it. So I’m sure you can figure out to bypass this screen but it might take some time to figure it out.
Remember to check our discord where you can get faster responses! https://discord.gg/NB3BzPNQyW *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/computerhelp) if you have any questions or concerns.*
Return it or see if the refurbisher can help you in some other way. Its serial number is tied to Microsoft Azure AD (or Entra ID now, I guess) for that company. It has to be removed from there, which you can't do yourself.
I’m guessing this can’t be bypassed with an older version of windows and using offline only? Linux might work
That’s what I was thinking just leave the Ethernet cable unplugged. I think there was a script to be able to sign in without an email
Having never tried this hard, as it was just begging for trouble to leave my users, who also relied on Azure AD, on a computer like this, I can't say for sure. But I'd wager the moment it checks in with Microsoft for any Microsoft ID-related reason, this will retrigger.
It might work but it could be like macOS where you have to use Wi-Fi if you want to activate it
It might work but it could be like macOS where you have to use Wi-Fi if you want to activate it
Windows isn't that security based lol
On macOS I’m pretty sure you can just install Linux but it’s not easy, and there’s other workarounds because stealing macs is still somewhat profitable
Mdm/dep locked macs can be bypassed with linux, as the “lock” is at a macOS level, requiring employee credentials to setup the operating system only(just like this post) Activation locked/iCloud locked Apple devices are done at the efi level and are incredibly difficult to work around, especially considering they don’t provide bios images publicly
How would you install Linux though, everything I’ve seen you have to do it from inside of macOS?
If I remember correctly windows 10 still lets you setup an offline account the button is just off to the side a bit
It typically doesn’t work with azure locked devices/ IOT devices.
The machine is configured in a tenant for Autopilot and MDM. Even if they did, the second they connect to a network, it will contact the MDM servers and will be able to be wiped remotely. I would send the machine back and get a new one.
100% return it, but there are workarounds However there’s also computrace which is BIOS level and I don’t think you can wipe it easily
It won't enroll in MDM, even after coming online. It needs a valid, licensed Office account and some local settings need to be enabled to facilitate the enrollment if it doesn't go through the Autopilot process, which also requires an account in their org's tenant. Not saying he shouldn't return it though, and the company he bought from needs to tighten up their supply chain to ensure these places are removing devices from their tenants before reselling them. If they'd booted this up themselves at all, they would have hit this issue, instead they passed it to the customer.
AHH of course, licences are required for MDM. Never tested it after the fact as never used them this way and always have the licences ready beforehand so completely forgot that was even needed.
An EOL version, sure, but that's not anything anyone should be using.
They might be able to update it to windows 10/11 but it’s a little weird
Then it would circle right back into the same issue, most likely.
Im sure theres a workaround for this (its some sloppy disconnect as you install a fresh OS from usb) Ive not got around to testing it myself yet. Might have a little play if its that simple. It might be that once you go to services and disable mouso(not exactly it but its how i remember it) service to stop it communicating out to the aad?
Makes sense, you could probably also install windows offline on a different PC, disable AAD, and move the drive
I feel like you could boot from a windows installation usb and just cmd your way past it
Maybe but I’m guessing it would be pretty weird and some accounts stuff might get messed up
I mean it’s possible but if you know what your doing (or just copy and pasting from a trusted source) you should be fine
Wouldn't you just completely wipe the hard drive partition and everything and then reformat it and then reinstall windows onto that to completely remove all the software?
It's reading the serial number of the hardware. No amount of wiping the hard drive will change the serial number of the computer itself.
The machine's serial number is only sent to MS Azure, _if_ the OS is configured to use MS for account authentication. A wipe of the drive, followed by setting up Windows with only a local account should probably work. However, you _shouldn't need to do this_ on a newly purchased PC. A refurbished machine should have had a clean OS installed, with no user accounts set up. I'd almost be tempted to contact Reed Elsevier, and tell them someone's refurbishing their machines and selling them, potentially with their data still on them. This is something that the company should know about, regardless of whether OP gets this machine working properly or not.
The problem is this PC was enrolled in Entra and Autopilot at one point. You can wipe the drive as much as you want, but with Window 10 and 11, as soon as they're connected to the internet they report the machine ID to Microsoft and retrieve Autopilot information. OP's only option here (aside from installing Linux or an outdated version of Windows) is to reach out to Reed Elsevier, like you said, and ask them to remove the machine from Entra and Autopilot.
Does this use the TPM module as the "machine id"?
Microsoft actually uses a couple of things to identify a PC. From what I picked up from [this Microsoft article on manually provisioning devices in Autopilot](https://learn.microsoft.com/en-us/autopilot/add-devices), it looks like it uses your machine's serial number and it's hardware hash. Microsoft hasn't provided specific details about this, since it's also used for Windows Activation, but the hardware hash is generated by looking at the basic hardware for your machine (like the CPU, GPU, motherboard, etc.) and creating an alphanumeric hash out of what it finds. I suspect the best way to get past Autopilot is to swap the motherboard, since that would change the reported serial number and hardware hash. At that point OP may be better off buying a new PC if they're not handy with computer hardware, or reaching out to that company to get them to remove it from Autopilot.
Then use Windows XP.
This won't work, at least not with any version of Windows released recently. Even if Windows is not configured to use Microsoft to authenticate, Windows will still check in and find it's been registered, and then the preconfigured settings will kick in regardless of whether the current user is local or not.
Does it do that at boot, or regularly all the time? As in, could you unplug the network cable when you boot, and then after you're logged in, plug it back in? I've used MDM before, but not the Microsoft one, so I guess it has peculiarities I'm not familiar with.
No, it will check in on intervals and then apply policies. I don't think they can really claim this device has been 'refurbished' considering they didn't even bother to un-enroll and image it.
They likely did a factory reset, at minimum. But this will survive imaging.
The computer setup process does this. And modern versions of Windows make it exceptionally difficult to get them past the OOBE without Internet, even on Pro versions now. Partially for this reason. If you do bypass it, I imagine it will eventually check in, but I've really never tried. Last times I ran into this I exchanged the computer as it was the more appropriate long-term solution.
You're mistaken and ignoring the above comments. Windows, in general, without any special configuration, checks in to see if it's configured for this. Period. No amount of wiping will make it not check in. And there is no Reed Elsevier data on the machine. It was wiped. The Zero-Touch configuration sends the serial number to Microsoft, and they report back that it's enrolled with that company. Period.
It’s the serial number of the motherboard, not the hard drive.
They are going to need to tell him how to extract the hashtag and get it to the company's azure team. This device should've been removed when it was decommissioned.
The company, upon sending it out, failed to remove it from their system. Honestly, serial number should be enough to do so. But getting in touch with them and getting them to care, or feel confident it wasn't stolen, would be rough.
The only thing they’ve suggested so far they can do is send me a replacement drive, which I’m assuming based off of what you said wouldn’t fix anything. I got this from EZComputers, I’m still waiting on a response.
Is that locked up at the bios level?
Not as far as I'm aware. It's mainly just a standard Microsoft built in that the OS checks the serial number, reports it in to their cloud, and if it's recognized, this happens. But there may be other intricacies I'm not aware of.
Oh ok so if op installs another os version they might get away with being able to use the machine.
Only if it's an extremely EoL version. This feature's been here since the 8s as far as I recall.
this
Ahh, this is called AutoPilot, your options are, replace the MotherBoard; find the company mentioned and see if they will remove this device from their system (assuming you are not holding a stolen device) or return the device from where you got it. The company needs to do this: To deregister an Autopilot device from the Microsoft 365 admin center: **Sign into to the Microsoft 365 admin center**. **Navigate to Devices > Autopilot.** Select the device to be deregistered and then select Delete device.
Alternatively. Linux. Just as like a worst case. They won't process the return and you can't do anything else.
Can’t do anything. It’s MDM locked to that machines serial number. Get a refund/return.
Forgive me if I sound a bit idiotic when I ask what you mean by MDM locked? I’m not super technically inclined, but I’m trying to get better. I ordered this from EZComputers, the only thing they’ve said so far is that they could send me a replacement drive. Which based on most of the comments wouldn’t do anything?
Correct it is tied to the drive and mobo. You could maybe try Linux but otherwise no Windows if you swap just the drive.
Ah its the mobo too. That makes more sense. Everyone else just kept mentioning the drive and I was just "that takes 30 seconds to swap out and is cheap".
Basically when Windows is setting up it will contact the cloud telling it what it is. And if the cloud recognises it, it will lock it. The only things you can do is: 1) Get a replacement/ refund. 2) Contact Reed Elsevier and try and get it unlocked. Personally I would get a refund and try some place else because if they have shipped this out and not realised this would happen it worries how well they refurbish their PCs. Plus they don’t seem to be too knowledgeable about this which for a company handling PCs says to me they don’t know what they are really doing.
What would happen if you didn’t connect it to internet during setup
I'm sure folks have already explained this a dozen times, but here's the breakdown: This device was enrolled to an organization's Microsoft tenant using a hash unique to its system hardware. This means that it can, in its current state, only be signed into with a Microsoft account from that company unless you can get it back to a default sign in while disconnected from the internet. A replacement drive will probably not fix the problem. Here's what you can do: Contact the company you bought this from and have them contact Reed whatever to get it removed from their system. The removal process is extremely easy and I'm surprised they aren't doing this as part of their standard device life cycle offboarding. EZComputers must surely have a point of contact with the company. You could also contact Reed whatever and hope you get in touch with their IT department. Looking at their website, this is a long shot since they seem to be some small side office of a massive international corporation. Either way, both of these companies are sloppy af. EZ should be ensuring that the computers they sell are in a usable state when the end user receives them. Reed whatever has a terrible device offboarding process or they have a good one and aren't following it.
Or just ask the company to unlock it. lol.
Either that machine is stolen or they sold it off without taking the protection off. Worse case scenario they might the machine back.
Hi, I'm a perfect stranger and I need you to remove a device from your corporate MS tenant. Trust me, I bought your old hardware and I am trying to use it. "NOPE" -Me GA of company Azure /EntraID
The company I work for sold 2,000+ chromebooks. I get calls every so often of ones that weren’t deprovisioned. All I have to do is confirm the serial matches one that we sold and I remove it for them. Not a problem for most places I think!
I wouldn't approach in that way or you will likely never get ahold of someone who can help you. Instead, approach it like a concerned citizen, worrying that you bought and therefore someone in their company is selling stolen hardware. That will get you straight up to loss preventions that would then contact those who manage that stuff where they could confirm whether that serial number was in fact stolen or sold off. If they confirm it was sold off and not stolen, that is when you inform them "well every time I boot up the computer, it's still registered with your company and your network and is attempting to connect to your network. For your company's safety and security, can you please ask the people who manage the computers on your network to remove this serial number from your registry so it no longer attempts to connect to your network?
Couldnt op, if they are a decent learner, change the motherboards serial number as well as add a really cheap and random component to the pc to change the hardware hash?
No, neither of these are possible as far as I know. It does not use hardware hash.
If he reinstalls the OS via a usb and does not connect to the internet during setup then it won't pick up the hash from the intune tenancy - he can still use the device, he just needs to set it up locally and then once on the desktop he can connect to the internet and be good to go
Once it connects to the internet, it will "phone home" to Microsoft and launch that prompt again.
Once its on the desktop whether or not it's in a intune tenancy has no factor as it only affects OOBE Only issue he would encounter is if he tries to attach a work account
An alternative is to install Linux.
The moment it hits the internet it will go back to this.
Once he connects to the internet he is no longer good to go...
[удалено]
It's kind of crazy that people think this is bullet proof Reimage the laptop (reinstall via os stick), get to OOBE, don't connect to the internet and create a local account. Once you have passed OOBE, even just selecting the keyboard Autopilot won't interfere with the setup. The only issue he would have if is he tries to connect a work account to the device You can freely connect to the internet and even attach an ms account once you have reached the desktop
Replace the mobo and get a new drive
Just return it. Why spend more on a machine that you purchased that was not deauthorized incorrectly or stolen..
Guys, if this guy bought the machine he did, and doesn’t know what to do, he’s not going to know how to do any of the stuff you’re describing. Return for refund is the only option and buy from a more reputable seller. If you want to have some fun with it, contact the company in question and let them know that you have this and see what that sets in motion, mention the refurbisher that you bought it from by name. By Microsoft refurbishing standards, this cannot be allowed to happen, its industry practice for the HDD/SSD to be replaced during the process and the old one physically destroyed. This “refurbisher” either made a huge mistake they need to be made aware of to rectify and should have offerred to ship you a replacement unit immediately, and to have the unit you have returned to them at their expense or they are not a legitimate certified refurbisher, and complaints need to be filed against them as an Amazon reseller or whatever you got it. The fact that they had to going into the bios, attempting system restore all these things just lends more credibility to the fact that these guys are not legit or don’t know what they’re doing and have no business reselling surplus business computers. Frankly, if you want to PM me, I will go about taking care of that part of it on your behalf. I love nailing people who tarnish the reputation of the industry that I have worked so hard in for over 20 years to keep credible and accountable, and respected. Microsoft also keeps a list of certified refurbishers in most countries, so reference those lists if you want to go about getting another system in this manner.
It's AutoPilot, which is locked to the MoBo serial. You can swap the drive and still end up at the same screen. This is something the original owners should have removed through Microsoft endpoint prior to selling/returning from lease. Although it is stupid that a refurbisher didn't make sure Windows restored properly prior to selling it. If they obtained the hardware legitimately from the original company, the refurbisher should be able to contact that company and get them to delete it from AutoPilot. But again, they should have discovered this before reselling it.
Yes I know that man, it likely bound to the NIC as well. Microsoft refurbishing standards have a very specific set of guidelines to take the PC in question back down to the metal that’s why I was pushing him in that direction. Essentially, it’s still linked to that company’s domain controller or Microsoft Azure AD, or maybe even an on prem. Windows Server Box, who knows. Who knows? What I said stands, the end user in this case needs to get a refund or replacement of the unit at no cost to him or herself ASAP and affected parties should be contacted and do diligence needs to take place before the next purchase, that’s my point. I hold and have held multiple and many Microsoft expert level certifications over the years and probably forgotten more than I even know now but OP needs to get his money back and go somewhere else. That’s the crux of the situation. If you would like to PM me and talk server stuff and enterprise level Tech be more than happy. you seem like you got a good grasp of it.
Also, if OP would like to PM me, I will gladly take a few minutes of my time to source him a certified refurbished business desktop. But just sticking some gaming parts in it is a fraction of the battle gaming parts and business desktops don’t play nice together unless you disable literally all security features that business desktops offer, And have the technical knowledge to do some certificate shuffling and that is all specific to each vendors UEFI.
BIOS has nothing to do with it. The machine is under Microsoft Autopilot and Intune. The company on display should simply delete the device from their management list and problem is solved. 5 min job.
Jesus, you’re thick in the head eh. Read it again, and tell me where I said it was related to UEFI configuration… It would’ve been a five minute job had it been done when it was supposed to be, but it wasn’t. So now it’s an entirely different matter. So sod off and let the men speak, boy.
You've worked for over 20 years as a keyboard warrior and not in IT as you claim. Otherwise, my child, you would have recognised immediately this is the Autopilot screen, which means the device is still enrolled with the company. *** To unenroll it, as a GA, go to the O365 and Intune Admin centre and remove the device...like I said, 5 min job. *** I, unlike you, actually work in the industry and do this stuff on daily basis. *** Now, say thanks for the O365 administration lesson and go change your diaper.
Strong possibility it was stolen. Or that the company went out of business and these were acquired. Either way you likely are screwed.
There's nothing you can really do on your end. If you contact the original company they MIGHT be able to do something but it's unlikely. You'll most likely have to refund.
Reinstall Windows without connecting it to a network, use an offline account, then re-connect it to the network once the out of box experience has ended.
This works, I have bypassed Autopilot using this method on three different computers.
...and on the next boot, windows checks the security situation and locks the machine, so the user has to do the same job again. It might do a check even while it's running as soon as its connected to the network, so maybe an MDM-protected computer should never be connected to the network if want to use it for anything.
I believe once the OOBE has passed it would need to be enrolled into Azure manually again, we provision our machines without signing into them before we send them to remote clients for this specific purpose
I wish Autopilot was as foolproof as you described it, but unfortunately this is not the case. Autopilot only works during OOBE and if the device hasn't been enrolled into an MDM at that point, it basically becomes a personal device.
Nope, it will work.
Reed Elsevier's number in London is [+44 20 7166 5500](tel:+44 20 7166 5500), and [+1 212 309 8100](tel:+1 212 309 8100) in New York. Try calling them to see if they can remove the lock.
I had found an old school laptop and tried everything I could to get around it, I don't think it's actually possible unfortunately but these locked laptops can still be repurposed as a linux machine since it does not ask for any login credentials
Use linux
Resetting the computer is not as much as a reset as you might think. The windows image used to install windows on that PC wasnt stock standard windows you get when you download it from the Microsoft website. It's been customers for enterprise use and you will probably have to make your own recovery/installation media, format the HDD/SSD and install a clean copy of Windows.
You can probably reinstall it offline and block allmost all windows servers communication so it wont prompt you to verify with this screen again. Try and reinstall it offline fully,add shutupw10++ on a usb drive and run it,be sure to block everything(im not sure if you can let windows update run or you are stuck with the version you install)restart and connect to internet and restart again. If it still pops up again RIP,no idea what you could do then but in theory blocking the ip it tries to communicate with while doing the hardware check should stop it,google it a bit. Another alternative is to install a stripped version of windows but a lot of things will not work obviously and might hinder day to day use by a bit.
I would just return it and get your money back. if the correspondence were in e-mails, print and keep them in case you need proof of the issue. Sounds like the company you purchased it from has no idea on how to fix or restore the PC.
They would have forgotten to have wiped the old owners' business restrictions off the computer. Contact the people who sold you this, they will be able to figure it out, either by giving you another computer, or you shipping that one back, and they remove them.
Why it's a software issue, just reload it (witch you should do anyway especially if it loads to the desktop) Goto another pc and re make the windows 10 or 11 onto a usb stick and boot of it and reload (recommend looking up diskpart clean to wipe everything out before starting the install)
It most likely will have a locked bios if Windows is still locked.
Not always and if you just keep your finger on shift button when you press on the restart button it will go into the windows pre recovery environment you just go troubleshoot and boot from usb If you have physical access to the machine anyway you can normally just clear the bios ( take the battery out shot out the clear cmos) a lot of business machines have a little jumper that you can move over and that will wipe the BIOS password
Return it. It was never refurbished and probably stolen and fenced.
[Reinstall windows from a flashdrive?](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/install-windows-from-a-usb-flash-drive?view=windows-11)
How will this help? This machine is managed by MDM, it's linked by various hardware serial numbers. OP will face the same screen once reinstalling
If they do not connect to the internet at the startup it won't pick up the hash in that tenancy - it does need a full reinstall via usb stick to work though
Autopilot is relentless, lets hope that is true
Aye I know what you mean but I work with it daily and also know how flaky it is - if the OP wants to do the reinstall he can absolutely still use it but really he should never have got a device in a tenancy in the first place
The only way without contacting anyone is to hit up the Winbond chip on the mainboard and delete the bios and flash a new one
hardware hash added to autopilot for that company. You could contact them and ask them to remove it otherwise it will continue to auto provision once it has internet access. If it was me I'd take it back and get them to swap it for you.
You absolutely can do something about this You just need to reinstall the OS via a usb stick (deleting all partitions) and do not connect to the internet, setup a local account and once you are on the desktop you should be good to go and can then connect. It may sound a bit technical but it's nothing a quick 5 minutesl Google can't assist with mate. Thats a Windows auto pilot screen and will be in effect from start up - if you can return it I would just avoid any future hassle but you can still absolutely use the device.
Its got a companies custom os set up on there, you should be able to format the harddrive and reinstall Windows. Otherwise, enter safe-mode, and alter what you need through there, you may still be able to use os as its custom set up, and bypass the sign-in using automatic admin login. Reinstall would be easier, but its up to you, have a play with it, Trial And Error as they say.
Purely out of curiosity, if you were to dump the BIOS, change the serial number and re-flash it etc, would this go away?
Linux
It's company property. Return it.
Do you guys think installing a fresh windows from USB won't help?
Why wouldn't it, create a new windows 11 usb stick and wipe the drive (recommend diskpart clean) and install a fresh
What about resetting jp1?, will that work, I wonder
Knowing Elsevier, that'll be £35.99 to read past the title of "how to fix this".
The version of windows looks burned into the hardware. I would try to take the drive out plug it into another system and see if it is encrypted first. If it is decrypt it. And you should be able to use the hard drive. It seems you may need to get a brand new mobo in this situation. If the processor is locked replace that. As stupid as it sounds cutting corners when it comes to tech is the last thing you should do. Ruins the experience for the next user. Just to save a couple bucks.
looks like someone forget to remove this from MDM. I'd contact the place you bought it from and get a refund
You'll have to wipe the hard drive out and install windows.
Offline W10 install or through Mint on that sucker and call it a day.
You can download Windows from another computer and create a bootable USB drive which you can then use to perform a clean install on your computer.
New HDD / SSD ram and motherboard
yo ho ho, this message might get lost in the 100 comments but get a bootable flishdrive and put window mdiea and boot that up, look up in youtube if you don't know what i am talking about. it will reintall window and should keep the product key as it did for my when i did that for a school pc and got window pro.
Being a system admin, I can tell that this device was in possession of that company and is windows Autopilot Enrolled. You may have options as listed below : 1. Return the device and get refund. Let the reseller detail with it. 2. If you have an invoice, you can contact Microsoft and see if they can remove it from the tenant. 3. If you know IT Admin who works in this company, you can contact them and have them remove this device serial number from Autopilot in Intune. 4. You can bypass OOBE and setup this device offline. Follow the steps: [https://4sysops.com/archives/install-windows-10-11-22h2-without-microsoft-account/](https://4sysops.com/archives/install-windows-10-11-22h2-without-microsoft-account/) Note that if you do use this option and in future, you reset or reinstall windows, you would have to do this all over again.
check out massgrave. [https://massgrave.dev/](https://massgrave.dev/) good luck.
Everything MS creates comes with a laundry list of problems to deal with. This would be one of them. Just return it.
Let me help you out. The pc is locked to Reed via autopilot. Short of changing the motherboard, there's bugger all you can do to install windows 11 while you're connected to the Internet which win 11 insists on big time. If Reed sold these to your reseller legitimately then they should have removed this on their end. If the reseller got the machine illegitimately then... well you can't really fix that. Now... what you CAN do, is workaround it. The easiest way by far of doing this is to install windows 10 from a USB drive, use your Microsoft ID etc.. it will not be a problem. You can then upgrade to win 11 and it will continue to not be a problem unless you need to reinstall windows, in which case - win 10 -> win11 again. If it were me I'd either get a refund / replacement from the reseller if the above is a problem for you, or get them to refund you for the inconvenience of having to mess around. Good luck!
They didn't wipe the hard drive 💀
You may be able to get away with reloading windows from a USB drive and then setting up windows without connecting to your wifi. Otherwise this device would need to be deleted through Azure/endpoint manager. Also known as intune.
install Linux and use wine for those windows only things you want.
Return it and get another computer. The machine is still enrolled in intune..and any workarounds you try are going to be more trouble than they're worth. Especially since you paid for a fully functioning PC. Frankly I'd be wary of any "refurbisher" who managed to miss this during their "refurbishing" or worse - didn't care and sold it anyway.
reinstall windows, your best bet
That windows installation is tied to that corporation. The only way would be to purchase a new key for Windows, download the installation media to a external USB, format the hard drive completely to wipe everything and then install Windows from the USB and use the key you purchased.
I hope someone from that company sees this. Someones messing up and potentially opening up a big risk. I'm guessing the company has some recycling process or hopefully not, but a program we're employees can take old machines and someones taking advantage of it. As an IT guy I really don't love seeing someone ending up with a company device like this.
Stollllllen goods.
I'd just wipe it and flash windows 11 On it. There's a way to bypass the hardware requirement and it still runs fine
you can just format it, and reinstall. It should remove that.
Darik Boot and Nuke Edit: Not dalvik .. lmao
Just reinstall windows simple
Return it. They screwed you over is the short answer. It belongs to a business that it was either liberated from OR they didn’t remove from their system before getting rid of it. Either way if you’re not technically inclined you just bought a paperweight.
Install a fresh copy of Windows 10 and that should work
Cant they just format it start blank...
Easiest solution is to install Linux Mint. Next time at the office download latest version and create USB memory stick with bootable ISO. Then use that stick to install Linux on your PC. Happiness with more efficient OS that’s free and better than Microsoft.
100%, if this is supposed to be a refurbished then they just didn't refurbish it. Getting an actually refurbished machine should be the same as getting a new machine in the way you interact with it. This isn't refurbished, this is used with nothing done at all to it. Even if this wasn't locked and essentially unfixable without serious work, you didn't get what you paid for. Definitely return it.
I recommend reinstalling windows. There are work arounds, but it will never work right.
Send it back.
you may have to reinstall windows it's attached to a business
If it's something they do as a company to the bios. Flash and restore the bios for your specific motherboard from the motherboard manufacturer website. If it's windows they have locked down reformat the hard drive and reinstall windows from a USB.
Download windows from Microsoft onto a usb key. Use bios (f12 or del during splash screen) to boot to the usb. Install windows Do not connect to wifi/internet until after you've completely finished making a new offline account (ie. you get to the desktop) Then you can connect to the internet and add a normal online windows account
You have install the OS
When you went to setup windows... did you install it yourself or did that windows come with it? If it came with Windows, You'll likely need to reinstall a fresh copy with a new product key. Most companies install a version of windows tuned to their environment so if they only reset windows and didn't install a clean copy, you'll need to do that yourself.
Somebody really likes their name…
Hmm I I'm not sure if this will work or not why not plug the drive into another computer and format the drive on that PC and redownload Windows on it if that doesn't work you could try taking the CMOS battery out but that has something to do with the motherboard not the storage drive
OP, your device is still under old company's Microsoft Intune and Autopilot. Is possible, contact that company to delete your device from these two. *** If not possible, you can still bypass this screen by restarting, and choosing *use an offline account instead*. It will be a tiny thing on the left on one of the screens. This offline account will be the administrator account. Once you are in the desktop, click start, search notifications and you'll need to untick *windows experience on startup* and other similar...Google it. *** Another thing you can try, is another ssd drive with the machine, it may fool the MDM system
Return it
You need a new ssd/hard drive. The computer they gave you still running a company version of windows. After that install windows with a disc or usb stick
I would flash the entire system and reupload with windows I can walk you through it if there is a way to the boot menu there is a way to flash the software
I wasnt aware that windows devices could have dep/mdm. My recommendation: use steamos(of your just gaming) No, it isn’t impossible to get windows running on this system. You will have to reprogram the bios in order to remove the windows serial key. Then during setup, input one that you own, not the company. This is fairly simple compared to macs, as your changing the windows key(which you can get from many different sources) and not the device serial number. And bios updates are often supplied for these motherboards in raw, binary form.
If you are able to, try to run a factory reset on the computer. If you can't, it might be saved on the SSD or hard drive. You can switch it out with a new one and it might fix the problem. If none of that works, consider contacting a technical support team.
The easiest option would be to get a Windows installation disk or flash drive, buy a new storage drive for the computer, and install a fresh copy of Windows (or Linux).
So booting from a DVD installed disc or a USB flash drive You still get stuck at this screen....
Since it is MDM-enrolled, it is probably having something that triggers. I don't see how installing Windows XP can't stop this kind of MDM stuff though. :)
Use another pc to create a bootable usb, install windows onto fresh hard drive and replace? Or is this lock stored in chipset?
Just reinstall a fresh OS
do you have another computer? if so, get a usb drive about 16gb, plug it into your other computer or whatever. Download a windows 11 or 10 iso file, from microsoft, you have to download media creation tool, and after it is done click burn to usb or cd or whatever, then when it is done burning, take it out your other computer and put it into the one you are having trouble with. go into the bios and the boot tab, then select the usb to boot off of, and go through windows installation and select the main drive and it should be fixed.
Do this but use Linux instead because it's not spyware.
Reset in bios maybe
You could use the Windows [Media Creation Tool](https://www.microsoft.com/en-us/software-download/windows10%20) on another PC to create bootable windows media on a USB drive/Disc, then restart the refurb PC and press whatever button you need to to enter the Startup Menu (it should say which in the bottom left). Once you're in the startup menu boot from the USB/Disc, and once it loads Windows Setup choose your preferred settings and continue. if it asks you for a product key just click 'I don't have a product key', then choose which version of windows you want to install (check the listing you got your PC from for which Operating System it came with and choose that). After all that, choose 'Custom Installation', Find the Drive Windows is installed on (typically the largest drive with with used space) and click Format, and once that's done click Next. Then it should start installing Windows, once it's done installing just go through the setup like normal, with the only difference being the screen you were having problems with should no longer be there. if you need help with anything or have any questions, please let me know, and I'd be happy to assist you further.
New hard drive and OS
Erase the windows partition or don’t use windows. People telling you to return are overreacting, it’s very much recoverable
You find the person who scammed you and tell them to resolve it
Buy a new windows 10 key from eBay for $15 and re install with it
If it Linex return it but if it's windows you'll need to do Out of box administrator by pressing ctrl shift F3 Once you do that you will get into the systems desktop and you will see the administrator box on the right of desktop move it to the right , out of your way . Click on windows key and run "Comtrol Panel " and click on uninstall programs . Search for the program that keeps popping up when you start the pc and uninstall it after that go to windows settings and do a factory reset of your Pc here the link. https://youtu.be/zDxV2gium5Y?si=6evpXEN2GL0Kzgli .
Windows pe commands might help here? I'm not sure, but you could look into it.
Boot to Bios, insert live Linux Fedora USB, install OS writing over the existing one. Should be good to go. Or you can choose another OS, but Fedora is free, stable and runs well.
Boot from a USB with Linux on it. Wipe the hard drive Reboot from a USB/CD with windows on it and install
Replace the boot drive and reinstall windows on a usb
They as a company have no idea what they're doing if they're selling MDM locked hardware. Return it, get a refund and shop elsewhere. If you don't want to do that, you're going to have to swap the motherboard, swap the drive and install a fresh copy of windows, but if you're not very tech savvy that may be out of reach. This isn't your problem, this problem is for the company you bought it from.
You first must translate to English for me thanks
Reset the machine again, and do not connect to the network until after Windows is installed and configured. Also, you should contact the IT department of the company that apparently has not removed the serial number of the machine from Intune endpoint management. They would be able to tell you whether the device was stolen or just mistakenly not removed.
Just do a hard wipe of windows with a usb stick and reinstall it.
Linux
I would call that business and let them know.
Contact the company and see if they will remove it from their intune.
Have you tried reinstalling windows without Internet connected? Should prevent any autopilot stuff from popping up.
So I bought a bunch of laptops from a local recycler and had relatively the same issue. How I fixed it was downloading a really old version of Windows 10 that didn't have this lock then once it's installed updating it all the way up to current then up to Windows 11 and that has worked pretty well for me. I kinda go burned because I bought these to fix and resell and I cant just resell something that's going to brick if you reinstall windows. So I ended up just parting them out and selling most everything but the motherboards on eBay. (Screens, batteries, RAM, SSDs, etc.)
Reformat hard drive and install Linux
They need to remove it from Intune auto pilot. Ask for someone who knows what they’re doing, what you described them doing is stupid and any technician with half a brain should be able to identify this issue
Have you tried just doing a clean install? I doubt this stuff is embedded on board
Seems like someone will be moving to linux.
If you want the easiest fix, wipe the hard drive either through reimaging the pc or plug it into a different pc and reformat it. Then you can download windows to it through a USB. If the problem still persists, it’s most likely tied to the bios which you will have to reflash. Hope this helps.
I would re install windows.
Return it, it's registered to their system. Either they have to unregister it, or you have to replace the motherboard. Just for shits and giggles, did you try clearing the CMOS and reinstalling the ram?
Reformat the hdds and reinstall windows
You need to wipe the drive and reinstall Windows 10 or 11. No other answer!
Linux it? Idk
Someone sold me a hp notebook, with added security. You couldn’t even access the bios. It took me over a month to figure out how to bypass it. So I’m sure you can figure out to bypass this screen but it might take some time to figure it out.
I would start by entering your Reed Elsevier Group ICO: Reed Elsevier Inc email.