Unenroll a device from Windows device management

As an administrator, you can unenroll a Windows 10 device that's enrolled in Windows device management.

Before you begin

When you unenroll a device:

  • Only some Windows settings that were pushed to the device are reset to their default values. Many device-level settings remain. For example, if BitLocker encryption was turned on, the device stays encrypted after you unenroll a device. If another user enrolls in Windows device management, their settings override the existing settings unless the value is Not configured.
  • The device won't receive any new or updated Windows settings that are pushed to devices.
  • No corporate or personal data is removed from the device.
  • The device remains in the device list in your Admin console, in case you want to use the device for another purpose. To remove the device from the list, you can delete it. For details, go to Approve, block, unblock, or delete a device.
  • If you installed Google Credential Provider for Windows (GCPW) on the device, the device will be automatically re-enrolled in Windows device management the next time a user signs in through GCPW, unless you disable automatic enrollment. For details, go to Apply settings for Windows 10 devices.

Unenroll a device

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. Click Endpoints.
  4. Select the computer that you want to unenroll from Windows device management.
  5. At the top left, click More "" and then Unenroll Device
  6. Click Unenroll Device to confirm.


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue