Unlinking Windows Home Systems from Enterprise Environments – Ivan Carlos Consultoria

Unlike Windows Professional systems, where you can log in as a local user, leave a domain or Entra ID link, and start using a new profile in a new entity, Windows Home systems with profiles shared between corporate and personal activities usually are not willing to give up their user so a new one can be configured.

This obstacle can affect environment migrations, such as tenant changes in Microsoft 365.

To unlink users from their corporate profiles, some suggested measures are:

Log out of applications like Microsoft 365 and Microsoft Teams

Disconnect work accounts or choose the local user account

Delete OneAuth authentication tokens from the following locations:

%LocalAppData%\Microsoft\OneAuth\accounts
%LocalAppData%\Microsoft\OneAuth\blobs

On MacOS systems, you can search for the following words and delete all related keys in the Keychain:

microsoft
sharepoint
windows

Folders that can help for a more thorough cleanup on Windows:

%LocalAppData%\Packages\MSTeams_8wekyb3d8bbwe
%LocalAppData%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy
%LocalAppData%\Microsoft\OneAuth
%LocalAppData%\Microsoft\TokenBroker
%LocalAppData%\Microsoft\IdentityCache

Keys that can help for a more thorough cleanup on MacOS:

office
live
oneauth
microsoft
sharepoint
windows

On Android and iOS systems, it is important to take the following steps:

* Remove the unwanted account from the Microsoft Authenticator app, always choosing the option to "remove from all apps" when prompted.

Log out and remove the account from all related apps, such as Microsoft Outlook, Microsoft Teams, Microsoft 365, and from system-integrated accounts like Apple Mail and Android Account Management.

Clear the Microsoft Authenticator app cache on Android, or delete the app on iOS by selecting the "delete app" option.

Clear the cache of the related webview app, such as Android System WebView, Samsung Internet, Google Chrome, and Apple Safari. In this case, it is recommended to delete all app data; you can also choose to delete the internet cache and cookies of these apps when possible.

For specific Teams cleanup, run this block of commands in PowerShell, using the current user's session; do not use administrative privileges:

Get-Process -Name "ms-teams", "Teams", "msteams" -ErrorAction SilentlyContinue | Stop-Process -Force
Remove-Item -Path "$env:LOCALAPPDATA\Packages\MSTeams_8wekyb3d8bbwe" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item -Path "$env:LOCALAPPDATA\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item -Path "$env:APPDATA\Microsoft\Teams" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item -Path "$env:LOCALAPPDATA\Microsoft\OneAuth" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item -Path "$env:LOCALAPPDATA\Microsoft\TokenBroker" -Recurse -Force -ErrorAction SilentlyContinue
Remove-Item -Path "$env:LOCALAPPDATA\Microsoft\IdentityCache" -Recurse -Force -ErrorAction SilentlyContinue

With this, Teams should be cleaned and no longer show stored users.

Related articles