Solved Disconnecting Windows from a Microsoft account

I recently (in June) built a PC for a friend, installing W11 Home (Version : 10.0.26100, I believe that is v24H2) using one of my MS accounts. I then set up two local admin accounts: one for the friend and one for myself as backup. I intended, but apparently failed, to remove the MS account - it is not being used. I was not bothered about that at the time.

I removed Copilot & OneDrive, and set him up with local backup (files and imaging).

More recently I read that Bitlocker may have been installed automatically - a worrying prospect, when I have no idea what the encryption key might be. So when I was last with him I checked, and could find no sign of it - although neither could I see anything that said Bitlocker was not installed. So I relaxed. In the pub yesterday I explained to him (again) why I felt he did not need or even want to use an MS account, although I suspect he liked the idea of the extra security of Bitlocker encryption - but I don't want to have to deal with that going pear-shaped.

But today I spotted a youtube video by Rob Braxman about the risks of using W11 with an MS account, and thought 'ah, I could send this to Terry to show him it is not just I that doesn't like them'. But on viewing it, I became a bit concerned with Rob's warning about doing just what I had done: installing with a MS acct, then using local ones. I don't really care if some TPM credential info is stored on my account (that can't hurt my friend AFAICT), but would like to know if anyone here thinks it would be worth following RB's advice and, at least, resetting the TPM. I certainly don't relish the thought of the recommended step for W11 of re-installing from scratch using the 'Rufus' method.

Any thoughts? Ta, Martin

Martin,

mngerhold said:

I intended, but apparently failed, to remove the MS account - it is not being used

Click to expand...

Failed?
Delete User Account - ElevenForumTutorials


Denis

Try3 said:

Failed?

Click to expand...

... as in forgot !

antspants said:

Switch to Local Account from Microsoft Account in Windows 11

This tutorial will show you how to switch to a local account from a Microsoft account to sign in to Windows 11 with instead. You can sign in to Windows 11 with a local account or a Microsoft account. However, you can easily switch between using a local account or a Microsoft account to sign in...

www.elevenforum.com

Click to expand...

Thanks, but I know that - the question is whether to do anythng now that only local accounts are in use.

mngerhold said:

the question is whether to do anythng now that only local accounts are in use.

Click to expand...

If you have deleted the MSAccount-linked user account then you have finished. There is nothing left to do.

I hope that, as a precaution against the increasingly rare instances of user profile corruption, you have more than a single Admin user account.
my ditty - Create two spare local, password-protected Admin accounts [post #2] in Windows 10, 11 - TenForums


Denis

Try3 said:

I hope that, as a precaution against the increasingly rare instances of user profile corruption, you have more than a single Admin user account.

Click to expand...

Yes I do. Ta

mngerhold said:

More recently I read that Bitlocker may have been installed automatically - a worrying prospect, when I have no idea what the encryption key might be. So when I was last with him I checked, and could find no sign of it - although neither could I see anything that said Bitlocker was not installed.

Click to expand...

There are three possibilities, the first being that there is no encryption.

The other two are that Device Encryption has been applied (drive is encrypted, but left unlocked with no bitlocker key) ot that full Bitlocker has been applied and a key generated. The simplest way to check is to open Terminal (Admin) or a command prompt (Admin) and type manage-bde -status



Whether Device Encryption or full Bitlocker, it can be removed with the command manage-bde -off C:

Type manage-bde /? for more details.

Bree said:

There are three possibilities, the first being that there is no encryption.

The other two are that Device Encryption has been applied (drive is encrypted, but left unlocked with no bitlocker key) ot that full Bitlocker has been applied and a key generated. The simplest way to check is to open Terminal (Admin) or a command prompt (Admin) and type manage-bde -status

Click to expand...

Thanks - I will try that when next with him. Martin

Bree said:

Type manage-bde /? for more details

Click to expand...

There's additional guidance in
manage-bde - SS64
manage-bde - MSLearn


Denis

Try3 said:

There's additional guidance in
manage-bde - SS64
manage-bde - MSLearn


Denis

Click to expand...

Your 2nd link doesn't work, this one does: manage-bde - MSLearn

Bree said:

Your 2nd link doesn't work

Click to expand...

I corrected it almost straightaway but your quick reactions defeated me.


All the best,
Denis

Thanks to all

Login to your Microsoft account.

Remove the computer from your Microsoft account.

On the users computer, login as an Admin user not Microsoft account.
Go to search or press the Windows key + R and type
sysdm.cpl and press enter. Go to the Advanced tab
Under User Profiles, click the Settings button
Select the Microsoft User account you want to remove and press the Delete key.

Will do - thanks. I had left that PC in my MS account until I knew it was OK to remove. Out of interest, does that account removal process do more than simply deleting the account under Settings>Accounts>other users ? I note it works in W10, and appears to be an alternative to using System32\SystemPropertiesAdvanced.exe.

Consider this solved!

In your Microsoft account online settings, it just removes that device from the Microsoft Account. Your Local Admin login on the computer will still work.

Run sysdm.cpl\Advanced and C:\Windows\System32\SystemPropertiesAdvanced.exe are the same path to remove the User Profile.