how to wipe an android work profile in intune for a departing employee

TL;DR

For a departing employee with an Android work profile, retiring the device in Intune removes the work profile and corporate data while leaving personal data alone. Do it as part of the offboarding checklist and verify the profile is gone.

The query

how to wipe an android work profile in intune for a departing employee

Use this when

• offboarding a BYOD Android user
• employee reports the work profile will not go away
• auditing that ex-employee data is removed

Not for

• company-owned fully managed Android (use full wipe)
• wiping the entire personal device (never do this for BYOD)
• iOS devices (different flow)

Steps

1. In Intune, find the user's Android device enrolled with a work profile. Expected output: the correct device identified
2. Issue the Retire command, which removes the work profile and corporate data. Expected output: retire command sent
3. Confirm with the user or the device record that the work profile is gone. Expected output: work profile removed, personal data intact
4. Revoke the user's sessions and app access as part of offboarding. Expected output: access fully removed
5. Remove licenses assigned to the user if your process requires it. Expected output: licenses reclaimed
6. Document the wipe in the offboarding ticket. Expected output: audit trail complete

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_eC9UeFcdHzIVLq670SMh0w