Windows Autopilot Flashcards
(11 cards)
What are the 8 steps to configure and perform a Windows autopilot user driven ?
Step 1: Set up Windows automatic Intune enrollment
Step 2: Allow users to join devices to Microsoft Entra ID
Step 3: Register devices as Windows Autopilot devices
Step 4: Create a device group
Step 5: Configure and assign Windows Autopilot Enrollment Status Page (ESP)
Step 6: Create and assign Windows Autopilot profile
Step 7: Assign Windows Autopilot device to a user (optional)
Step 8: Deploy the device
4 steps
How to set up automatic Intune enrollment?
Step 1 : Go to MS Entra ID
Step 2 : On the left pane, under Settings click on Mobility
Step 3 : n the Mobility (MDM and WIP) screen, under Name select Microsoft Intune.
Step 4: In the Microsoft Intune page that opens, under MDM user scope, select either All or Some
And Save
Device groups car be —— or ——-
assigned or dynamic
* Assigned groups - Devices are manually added to the group and are static. Windows Autopilot device preparation only uses assigned groups.
* Dynamic groups - Devices are automatically added to the group based on rules. Windows Autopilot device preparation doesn’t use dynamic groups.
8 steps
How to create an assigned security device group for use with Windows Autopilot ?
Step 1. In Intune, select Groups in the left hand pane.
Step 2. In the Groups | All groups screen, make sure All groups is selected, and then select New group.
Step 3. For Group type, select Security.
Step 4. For Group name, enter a name + description,
Step 5. For Microsoft Entra roles can be assigned to the group, select No.
Step 6. For Membership type, select dynamic.
Step 7. For Owners, select the ones you want
Step 8. For Dynamic device members, select Add dynamic query. The Dynamic membership rules screen opens
a. Make sure that Configure Rules is selected at the top.
b. Select Add expression.
c. Select the Edit option in the Rule syntax section.
Paste in the following rule in the Edit rule syntax screen under Rule syntax:
(device.devicePhysicalIDs -any (_ -startsWith “[ZTDid]”))
Why do you need to create a device group for Windows Autopilot device preparation ?
in an enterprise environment, dynamic groups are primarily used since a large number of devices are normally involved
But you can create assigned groups
List the 5 Windows Autopilot Enrollment Status Page (ESP) configuration options
- Show an error when installation takes longer than specified number of minutes
- Show custom message when time limit or error occur (Y/N)
- Turn on log collection and diagnostics page for end users. MS recommands YES. Diagnostic page on W11
- Only show page to devices provisioned by out-of-box experience (OOBE)
- Block device use until all apps and profiles are installed
If YES, Additional options
When you set “Block device use until all apps and profiles are installed” to YES, list the 3 additional options
-
Allow users to reset device if installation error occurs (No/Yes)
Yes: The ESP gives users the option to reset their devices when an installation fails. -
Allow users to use device if installation error occurs (No/Yes)
Yes: The ESP gives users the option to bypass the ESP and use their devices when an installation fails. -
Block device use until these required apps are installed if they are assigned to the user/device:
All: All assigned apps must be installed before users can use their devices.
Selected: Selected apps must be installed before users can use their devices. After enabling this option, select Select apps to select the managed apps from Intune that are required to be installed before users can use their device.
Describe the 7 steps to configure and assign the Enrollment Status Page
Step 1 : In Intune, select Devices > Overview > under By Platform > select Windows
Step 2 : Under Windows Autopilot, select Enrollment Status Page and select Create
Step 3 : Basics, enter name+description
Step 4 : Settings page, toggle the option Show app and profile configuration progress to Yes.
Configure the options + Next
Step 5 : Assignments
a. Under Included groups, select Add groups.
b. select the device groups to target the ESP profile
Step 6 : Scope tags
Step 7 : review + create
options to configure in settings are the the 5 Windows Autopilot Enrollment Status Page (ESP) configuration options
What is the purpose of Windows Autopilot profile ?
It specifies how the device is configured during Windows Setup and what is shown during the out-of-box experience (OOBE)
Describe the 7 steps to create a Windows Autopilot profile
Step 1 : Go to Devices > By Platform > Windows > Device onboarding > Enrollment
Step 2 : Under Windows Autopilot, select Deployment Profiles
Step 3 : select the Create Profile drop down menu and then select Windows PC.
Step 4 : Basic enter name+description
Step 5 : Out-of-box experience (OOBE) page
Deployment mode : User-driven…
Join to Microsoft Entra ID as: Microsoft Entra joined/hybrid
Microsoft Software License Terms, select Hide to skip the EULA page.
Privacy settings : select Hide to skip the privacy settings.
Hide change account options
User account type : The options are either Administrator or Standard user.
Allow pre-provisioned deployment
Language (Region)
Automatically configure keyboard
Apply device name template if yes %SERIAL% macro or %RAND:x% macro
Step 6 : Assignments page. Select groups to include
Step 7 : Review + Create
What are the 5 possible status you can find for Profile status
- Not assigned : A Windows Autopilot deployment profile isn’t assigned to the device.
- Assigning : A Windows Autopilot deployment profile is being assigned to the device.
- Assigned : A Windows Autopilot deployment profile is assigned to the device.
- Fix pending : When a hardware change occurs on a device, this status displays while Intune tries to register the new hardware
- Attention required : If Intune is unable to register the new hardware after a hardware change occurs on a device, the device can’t receive the Windows Autopilot profile until the device is reset and the device re-registers
