Skip to content
WinBookUnofficial

Used Windows PC checklist: 12 checks before you pay

Verified 2 min read

Verify activation, TPM, Secure Boot, disk health, battery, MDM enrolment and hidden locks on a used or refurbished Windows machine.

Tested onPro (26H2) · Build 26300.9457 · x64
E1
Build
26300.9457
Edition
Pro (26H2)
Architecture
x64
Support
Documentation (E1)
Evidence
E1Official documentation
Verified
2026-10-29
Page type
Checklist

The short answer

Section titled “The short answer”

A used Windows machine has three kinds of risk: hardware wear, licence and enrolment state, and hidden locks. The first is measurable, the second is checkable in two minutes, the third is the one that ruins the purchase.

Run the checks below on the machine itself, before money changes hands. Bring a USB stick with the tools, not just good intentions.

Licence and enrolment (check first, it is fastest)

Section titled “Licence and enrolment (check first, it is fastest)”
  1. Activation — Settings → System → Activation. “Windows is activated with a digital licence” is what you want. A retail key that can be transferred is better than an OEM one.
  2. Enrolment leftovers — dsregcmd /status. If AzureAdJoined : YES or an MDM URL appears, the device belonged to an organisation.
  3. Autopilot — a business machine can be registered so that OOBE re-enrols it. Ask the seller to release it; there is no user-side fix.
  4. BIOS password — enter firmware setup. If it asks for a password you do not have, stop. Some models require a service visit to clear it.

Hardware health

Section titled “Hardware health”
  1. Disk — Get-PhysicalDisk | Select FriendlyName,HealthStatus,OperationalStatus, then read SMART with the vendor tool or CrystalDiskInfo. Watch reallocated sectors, percentage used (NVMe) and power-on hours.
  2. Battery — powercfg /batteryreport /output C:\battery.html. Compare design capacity with full charge capacity; below ~70% means a replacement is due.
  3. RAM — Get-CimInstance Win32_PhysicalMemory | Select Capacity,Speed,Manufacturer,PartNumber. Confirm the channels are populated as advertised.
  4. Thermals under light load — idle temperatures and fan noise tell you more about dust and dried paste than any benchmark.
  5. Ports — test every USB port, both video outputs, Ethernet, audio jack, and the card reader if present.
  6. Screen (laptops) — a full-screen solid colour at max and min brightness reveals dead pixels, backlight bleed and pressure marks.

Hidden locks and provenance

Section titled “Hidden locks and provenance”
  1. Serial number — check it against the vendor’s warranty lookup. A serial that returns “no such device” on a machine sold as “still under warranty” is a red flag.
  2. Firmware state — Secure Boot on, TPM present, no Computrace/Absolute persistence, no custom boot entries you cannot remove.
Terminal window
Get-Tpm | Select-Object TpmPresent,TpmReady,TpmEnabled
Confirm-SecureBootUEFI
Get-CimInstance Win32_ComputerSystem | Select-Object Manufacturer,Model,TotalPhysicalMemory
Get-CimInstance Win32_BIOS | Select-Object SerialNumber,SMBIOSBIOSVersion,ReleaseDate

Confirm-SecureBootUEFI returning an error usually means the machine booted in legacy/CSM mode — which also means it will not meet Windows 11 requirements as configured.

What “refurbished” should include

Section titled “What “refurbished” should include”
  • A new or verified SSD, stated in writing.
  • Battery capacity stated as a percentage, not “good”.
  • A return window long enough to run the checks above.
  • The original licence type stated explicitly (retail / OEM / digital).

After you buy

Section titled “After you buy”

Before installing anything: image the disk or note the licence, enable fTPM and Secure Boot, then do a clean install from vendor media. A fresh install removes the previous owner’s leftovers more reliably than any cleanup tool.

Lab boundary

Section titled “Lab boundary”

E1. The commands are Microsoft-documented; this checklist was not run against a purchased used machine.

Sources