1. Remove device in Azure AD

2. Disconnect device from Azure AD

3. Clear TPM

4. Reboot

5. Add device back to Azure AD via 'access work or school'