If you used your own laptop for work, it may still have your employer management agent, security tools and policies on it. The right order matters: disconnect the work account first, then clean up what remains. If the device belongs to your company, talk to IT instead.
These are the locations a standard uninstall commonly misses.
| Location | Type | Note |
|---|---|---|
HKLM\SOFTWARE\Microsoft\Enrollments | registry | MDM enrollment records. |
HKLM\SOFTWARE\Microsoft\PolicyManager | registry | Policies delivered through MDM. |
HKLM\SOFTWARE\Policies | registry | Windows and browser policies, including forced extensions. |
Task Scheduler folder \Microsoft\Windows\EnterpriseMgmt | task | MDM sync tasks for each enrollment. |
C:\Program Files (x86)\Microsoft Intune Management Extension | folder | Intune agent used to deploy apps and scripts. |
C:\ProgramData\Microsoft\IntuneManagementExtension | folder | Intune agent logs and cached content. |
IntuneManagementExtension | service | Microsoft Intune Management Extension service. |
The Windows-only way. It works, but takes longer and has no undo.
Only continue on a personal device. On a company-owned PC, contact IT, and check your employment agreement before removing anything.
Copy personal files somewhere safe, and keep any work files your employer needs returned.
Open Settings > Accounts > Access work or school, select the work account and click Disconnect, then restart.
Go to Settings > Apps > Installed apps and remove Company Portal and work apps that remain, such as VPN clients or remote support tools.
Remove work profiles from Edge and Chrome, then check edge://policy and chrome://policy for leftover policies.
In Task Scheduler, check \Microsoft\Windows\EnterpriseMgmt for empty enrollment folders. Back up the registry before removing leftover policy keys.
Restart, confirm Access work or school is empty and that the message Some settings are managed by your organization is gone.
Faster, complete, and reversible — everything is backed up to the Recovery Vault first.
UniClean will not bypass device management. Disconnect from Settings > Accounts > Access work or school before cleaning up.
See every program installed by your employer or management agent, with install date and installer.
Management agents and security sensors are marked High Risk, so UniClean forces a vault backup.
Remove leftover agents, then let the Leftover Scanner clear services, scheduled tasks, folders and registry keys.
Restart Windows. Everything removed stays in the Recovery Vault, so you can restore it if needed.
Yes, once you have disconnected the work account and handled company data as required. Check your employment agreement first if you still work there.
Windows unenrolls the device from management, and policies and required apps are usually removed or stop being enforced.
Leftover policy keys remain in the registry. Remove them carefully after a backup, or let UniClean sweep them with a vault backup.
No. Disconnecting a work or school account does not affect your personal Microsoft account.
Wondering if your employer is monitoring your personal laptop? Learn what a work account, MDM enrollment or company agent can actually see, and how to check in minutes.
Free download. No account needed. Windows 11 & 10. Fully local.