Share via

Entra ID Joined disconnect issue

Ritesh Chaudhary 20 Reputation points
2026-03-30T07:14:40.1133333+00:00

I have an Entra ID joined device, and when I attempt to disconnect the device via Settings > Accounts > Access work or school, the system prompts for the device’s local administrator credentials.

However, after entering the correct local administrator credentials, the system returns the error message: “Password didn’t work. Check it and try again.” The credentials being used are verified and correct.

For reference:

  • Username: .\admin
  • Password: [device local administrator password]

Additionally, I have removed the work profile account from all Intune policies; however, the issue continues to persist.

Kindly assist in identifying the cause of this behavior and advise on the appropriate resolution.

User's image

Microsoft Security | Intune | Other
0 comments No comments

2 answers

Sort by: Most helpful
  1. Prathista Ilango 1,065 Reputation points Microsoft Employee
    2026-03-31T13:34:52.5333333+00:00

    Hello **Ritesh Chaudhary,**The suggestion provided here should ideally work. In addition to this, try renaming the device if that helps. Refer to: https://learn.microsoft.com/en-us/answers/questions/1521862/unable-to-disconnect-account-from-entra-domainHope this helps!

    If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.


  2. Q&A Assist
    2026-03-30T07:14:56.3633333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The behavior occurs because Windows requires valid local credentials to complete the disconnect of a Microsoft Entra joined device, and the account being entered isn’t being accepted as a valid local sign‑in for that device. The disconnect flow won’t proceed until Windows can verify an account that will still be able to sign in after the device is no longer Entra joined.

    For pure Microsoft Entra joined devices, the supported way to unjoin is:

    1. Ensure there is a working local administrator account that can sign in to Windows.
    2. Sign in with that local administrator account (not the Entra account).
    3. Go to Settings > Accounts > Access work or school.
    4. Select the Entra account and choose Disconnect.
    5. Follow the prompts and provide the local administrator credentials when requested.
    6. Reboot the device to finish the unjoin process.

    If the credentials are still rejected, the likely causes are:

    • The account isn’t actually a local account on that device (for example, it’s only known in another context, or was removed).
    • The account exists but the password stored/remembered is out of date.
    • The device isn’t a “pure” Entra joined device (for example, hybrid joined or domain joined) and the account type being provided doesn’t match what Windows expects for local sign‑in.

    Resolution options:

    1. Sign in locally and verify the account
      • Log off and attempt to sign in at the Windows logon screen using .<\\>admin and the password.
      • If sign‑in fails, the account or password is not valid on this device; create a new local administrator account instead.
    2. Create a new local administrator account
      • While still able to sign in with the Entra account, create a new local user and add it to the local Administrators group.
      • Sign out and sign back in with this new local admin to confirm it works.
      • Repeat the disconnect steps from Settings > Accounts > Access work or school while signed in as this local admin.
    3. If the device is hybrid joined
      • For Microsoft Entra hybrid joined devices, unjoin from Entra using dsregcmd /leave with elevated privileges and then allow the device to rejoin automatically as documented. This is the supported path when hybrid join is involved and avoids UI issues in Access work or school.

    Once a valid local administrator account is confirmed and used during the disconnect flow, the device should successfully unjoin from Microsoft Entra ID.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.