Skip to content

Commit b9e2b46

Browse files
Merge pull request #212667 from MicrosoftGuyJFlo/BitLockerDeleteNote
[Azure AD] Devices - Device cleanup BitLocker delete note
2 parents 16cbf6a + 4d9146a commit b9e2b46

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

articles/active-directory/devices/manage-stale-devices.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ services: active-directory
66
ms.service: active-directory
77
ms.subservice: devices
88
ms.topic: how-to
9-
ms.date: 06/01/2022
9+
ms.date: 09/27/2022
1010

1111
ms.author: joflore
1212
author: MicrosoftGuyJFlo
@@ -63,6 +63,9 @@ You have two options to retrieve the value of the activity timestamp:
6363

6464
To efficiently clean up stale devices in your environment, you should define a related policy. This policy helps you to ensure that you capture all considerations that are related to stale devices. The following sections provide you with examples for common policy considerations.
6565

66+
> [!CAUTION]
67+
> If your organization uses BitLocker drive encryption, you should ensure that BitLocker recovery keys are either backed up or no longer needed before deleting devices. Failure to do this may cause loss of data.
68+
6669
### Cleanup account
6770

6871
To update a device in Azure AD, you need an account that has one of the following roles assigned:
@@ -83,7 +86,7 @@ It isn't advisable to immediately delete a device that appears to be stale becau
8386

8487
### MDM-controlled devices
8588

86-
If your device is under control of Intune or any other MDM solution, retire the device in the management system before disabling or deleting it. For more information see the article [Remove devices by using wipe, retire, or manually unenrolling the device](/mem/intune/remote-actions/devices-wipe).
89+
If your device is under control of Intune or any other MDM solution, retire the device in the management system before disabling or deleting it. For more information, see the article [Remove devices by using wipe, retire, or manually unenrolling the device](/mem/intune/remote-actions/devices-wipe).
8790

8891
### System-managed devices
8992

0 commit comments

Comments
 (0)