Windows 10: Azure configuration profile not applicable for user accounts logged into desktops and iPhones

We're facing such a strange issue,We're applying screen lock policy via configuration profiles for devices Windows 10 and later. This is successful for all profiles signed into a desktop, but if a profile is signed into a phone and a desktop, the policy shows "not applicable" even though policy should not apply to phones.We're setting screen lock using OMA-URI settings, by using ./Device/Vendor/MSFT/Policy/Config/DeviceLock/MaxInactivityTimeDeviceLock and setting integer to 15.We point the policy at groups whose members are devices. Once the device syncs, the system profile shows as "success

:)

 

How to completely remove a user account from windows (local OR Azure AD) - Fixes M365 log in issues.

This is less of a question than a post to correctly explain how to remove a user's (local or Azure AD) profile and data from a PC.

-This does not delete/remove their Azure account.

-In the case of M365 log in issues (Teams, Edge, OneDrive, and so on), remove the account per the following directions and reload the account.

• Windows key + R
  
• Sysdm.cpl - enter
  
• Advanced Tab
  
• User Profiles – Settings
  
• Select profile – click delete
  

 

Convert online Microsoft Azure account to local account?

Unfortunately, you cannot switch an Azure AD account to a local or Microsoft account. You need to create a new user account first, make it an admin account, then disconnect from your organizational account, restart and sign in to new local account.

All software remains installed and intact but all user specific customizations and settings are lost, new local user starting from scratch with default settings.

The whole process step by step:

1.) Copy your personal data (documents, images etc.) from current Azure AD user profile folder to respective folders in C:\Users\Public

2.) In Settings > Accounts > Other people, add a new local user (see Option One in this tutorial) and change it's account type to Administrator (tutorial)

3.) Check that everything is correct, that you will see your Azure AD account under Work or school users (yellow highlight), and your new local admin account under Other people (blue highlight):





4.) Select Access work or school on left pane, select the connected Azure AD domain, click Disconnect:





5.) Click Yes:





6.) Click Disconnect:





7.) Enter the username and password for your new local admin account, click OK:





8.) Click Restart now:





9.) When back on desktop with your new local admin account, move personal data from Public folder and its subfolders you backed up in step 1 above to respective subfolders on new user profile folder. If the old Azure AD user profile folder is still present in Users folder, it can be deleted now.

That's it.

 

What happens to local Windows 10 user profile, when machine is disconnected from work or school Azure AD?

We have a user with a machine that is currently connected to a corporate Azure AD account, and that account is the one their primary desktop profile is associated with.

If we Disconnect the computer from that Azure AD account, will the user still be able to get into that profile? Does it keep a cached version of the user's AD credentials locally so that they can log back in after reboot?

Or does the user need to create a local admin account for themselves, and migrate their data over to that profile by logging into that local account after the machine's association is broken when it's Disconnected from Azure AD?