# Check device ownership after a local or remote Autopilot Reset

> Will the primary-user and device-owner records match the intended reassignment after Autopilot Reset?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-004-check-device-ownership-after-a-local-or-remote-autopilot-reset/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:31:52+00:00
- Modified: 2026-09-10T00:31:59+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Will the primary-user and device-owner records match the intended reassignment after Autopilot Reset?

## Potentially affected

Use this review for an approved reset of an eligible managed device. Identify whether the action will be local or remote and whether the device is assigned to a person or deliberately shared.

## DSE recommendation

Record the intended post-reset ownership before authorizing an action that removes user material.

## Article

## Source facts

Autopilot Reset removes personal files, applications, and settings while retaining the connections to Entra ID and Intune. A local reset leaves the primary user and Entra device owner unchanged. A remote reset removes those associations and assigns the next signing-in user; shared devices remain shared. Microsoft requires a working Windows Recovery Environment and excludes hybrid-joined devices and Surface Hub from this reset method. [Microsoft Learn](https://learn.microsoft.com/en-us/autopilot/windows-autopilot-reset).

## Applicability

Use this review for an approved reset of an eligible managed device. Identify whether the action will be local or remote and whether the device is assigned to a person or deliberately shared.

## DSE recommendation

Record the intended post-reset ownership before authorizing an action that removes user material. Arrange protection of required data and verify the recovery-environment prerequisite through the approved support process. For a local reset, include an explicit administrator review of the unchanged ownership records. For a remote reset, coordinate which authorized person should complete the next sign-in. Keep shared-device intent visible in the handoff.

## Verification

After the reset completes, inspect both the Intune primary-user record and the Entra device owner against the handoff plan. Confirm the expected management connection and perform the agreed user or shared-device workflow. Do not close the reassignment merely because the desktop opens. Resolve an unexpected owner before issuing the device, and retain identifiers and observed outcomes without copying credentials into the record.

## Official references

[Microsoft Learn: Windows Autopilot Reset](https://learn.microsoft.com/en-us/autopilot/windows-autopilot-reset).

## Primary reference

- Name: Windows Autopilot Reset | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/autopilot/windows-autopilot-reset
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Check device ownership after a local or remote Autopilot Reset,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-004-check-device-ownership-after-a-local-or-remote-autopilot-reset/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.