Enroll Windows 10 Device

Enrolling your devices into Microsoft Intune allows your Windows 10 devices to get access to your organization’s secure data. For instructions on enrolling your Windows 10 devices to Microsoft Intune, refer to the Microsoft Quickstart: Enroll your Windows 10 device.

Confirm Installation of CA and Device Certificates

To confirm that the CA and device certificates have been installed, do the following.

1. To open the Computer Certificate Store console, click the Windows Start icon and select Settings to display Windows Settings options.
   

   

2. In the Search field, enter "manage computer certificates" and select the Manage computer certificates application.

3. Confirm that the device certificate has been installed under Local Computer > Personal > Certificates, certificate store.
   

   

4. Confirm that the Root CA certificate has been installed under Local Computer > Trusted Root Certification Authorities > Certificates, certificate store.
   

   

5. Confirm that the following certificates have been added to Local Computer > Intermediate Certification Authorities > Certificates, certificate store.
   

   1. The Issuing CA.

   2. The Root CA.

   3. The Microsoft Intune MDM Device CA.
      

      

Remove Windows 10 Devices from Intune

Removing devices from Microsoft Intune can be performed from Intune or from the device itself. When devices are unenrolled, the certificates are removed from the devices but are not revoked. For more information, refer to the Microsoft doc Removing certificates.

Also note, that if a device is re-enrolled, a new device certificate will be issued.