How to Setup Windows Autopilot in Microsoft Intune

[@Tooxcade]

I followed this video step by step, and now I am managing 250 devices within the company I work for. I can't thank you enough.

[@bearded365guy]

Love this!

[@AhmedKhalid-su2io]

Since Yesterday I got this channel, I watched 11 videos its really straight to point , English is very understandable for those non-native speaker. Thank you so much Jonathan.

[@jamesr6268]

From one long bearded IT guy to another your videos are always a huge help navigating Microsoft products! Thank you for the time and effort you put it!

[@bearded365guy]

Thanks James.

[@Wahinies]

Bravo John, you went the distance on this one, a lot of ground was covered. Particularly the Sharepoint automount! I just got off a month long investigation with Intune and OneDrive support for these automounts not appearing and it turned out to be the machine wide install of Onedrive needed to be installed so I set up an Intune package similar to what you covered here but a Win32 based on a blog post I found that was very specific. Also there is a registry setting to eliminate the eight hour delay with automount that can be pushed out as a Platform script. Spectacular video John, I look forward to the course videos. You must be protected at all costs.

[@bearded365guy]

Thank you. Yes, the SharePoint/OneDrive is a bit ‘fiddly’!

[@KojoEstant]

That was beautifully presented. Watching the video three times

[@ArbeteArbete]

Jonathan you save my day, nice video again!!!

[@AdamskiHamski]

Yeah... this is a belter 👍 I've looked into Autopilot previously and found nothing as clear and well explained as this.

[@bearded365guy]

Thanks Adam, go and get it setup in your tenant!

[@AdamskiHamski]

@@bearded365guy Did exactly that this morning... worked like a charm. Much appreciated 👍

[@joew4373]

Jonathan the details you put into your videos are outstanding and a huge help in getting to know the Microsoft 365 products. Thank you so much!

[@sonny.eblacas]

I truly appreciate your kindness and continuous dedication sharing these amazing videos, Jonathan. I can simply watch your videos anytime and learn useful stuffs! ❤

[@bearded365guy]

Sonny!!

[@nickaudette3738]

Another great video! You explain everything in ways that make sense to me. My one hangup with Autopilot is when the laptop is setting itself up, I wish it would stay on the getting things ready screen until everything is installed. Even though I tell a person they need to be patient and wait for 1/2 hour before using it, they never listen.

[@bearded365guy]

Users…. Wouldn’t life be great without them? 😂

[@th7321]

@@bearded365guyspoken like a true geek. Thanks for he video and clear explanation 😂

[@TechFromYorkshire]

Have you seen the 'Block device use until all apps and profiles are installed' settings Devices > Enrollment > Enrollment Status Page? Cheers

[@nickaudette3738]

@@TechFromYorkshire I have not, but I'll give it a try. Thanks for the tip!

[@macm3086]

As a huge fan of your videos, every video you produce is right on target!!!

[@bearded365guy]

Thanks mate

[@g04tn4d0]

What a convoluted way to pre-configure a device. Leave it to Microsoft! Well, you certainly did an excellent job of detangling the basics. 🐐😎🎉

[@akterCloudPro]

You're truly a master! What a seamless wonderful Autopilot journey it was. Brilliant!

[@bearded365guy]

Thank you 🙏

[@Wahinies]

I have got to watch this later I am excited, your teaching style is unique and easy followed. Your team is very lucky to work with you.

[@fbifido2]

@23:24 - we wanted to see the auto pilot device enrollment stage, just before it asks you to sign-in?

[@InsanityTech1337]

Oh brother, this is exactly what I needed today! Automation is King!

[@alexk7837]

Can you talk about adjusting conditional access for autopilot devices and steps to take before sending a device for repair?

[@shanishmoidunni1682]

I am a huge fan of your videos, every video you produce is right on target.

[@puthynguon4408]

Thanks Jonathan for this video. Great job👍

[@sgmmaffe]

Another great film, especially with your sharp editing, head movements, and the onliner: 'without further ado'. Keep on the good work!

[@leebailey-hague1513]

When creating the dynamic group use the following expression as it includes Autopilot devices created by a hardware hash upload which the one in the video doesn't: (device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]"))

[@bearded365guy]

Thanks for mopping up Lee.

[@daelra]

Another great video. You're practically the only person who deals with M365 admin for small business users. I've been caught so many times trying to follow advice for M365 Enterprise admin for them to not be appropriate on M365 Business licences. It's so good to have a resource dedicated to the little guys. Autopilot will possibly sort out about 40% of my installation chores. Can it help with the remaining chores which are mostly about deleting bloat? Can AutoPilot help me with... * Removing McAfee and other 3rd party bloatware. * Removing Microsoft bloatware (games, etc) * Setting Up Edge 'New Tab' without all the MSN garbage and setting the default Search Engine to Google * Configuring the Start menu, Taskbar and making sure file suffixes are switched on in File Explorer. * Help with installing manufacturer's specific updates (BIOS, device drivers, etc) * What's it like with Macs? I think some of these q's are more Intune q's and if so, a tutorial on Intune 'cleanup' would be amazing.

[@bearded365guy]

I will be adding more videos on Intune stuff. At first glance, I think yes. Will you be using Autopilot for brand new devices direct from manufacturer or rebuilding existing devices?

[@daelra]

@@bearded365guy A bit of both really. We usually get laptops sent from the manufacturer but also do the odd special request for specific use cases. In some really horrible cases, we buy consumer laptops and have to upgrade to Windows Pro over the top of Windows Home.

[@davidadams421]

@@daelra Urgh, I've had so many problems doing this. I feel your pain.

[@AlBergstein]

@@daelra I've demanded that my clients only buy Windows Pro machines

[@HuesoPerriko]

🌋BOOM!!!!!!! That's Super!! you have got a new follower !!

[@fbifido2]

@17:40 - Intune does not provide a list of popular apps to add ??? - do we have to come back into this config to re-upload the new version when it's available ?

[@onerpeksirin1607]

It's a great presentation. I saved it and I will look when I need. Thank you again.

[@obedv2081]

Wow, your content is truly exceptional! The level of detail and the spot-on case scenarios you provide leave me speechless. I genuinely admire it. If you ever consider a career as a college professor, count me in as your first student! This is just next-level stuff. Wow, just wow.

[@bearded365guy]

Thank you!

[@rajatdhuldhoye2507]

Thank You So Much Sir, Jonathan. It's very helpful in mid of my Job Hunt as System administrator.

[@ncdlloyd]

Another great video, thanks Jonathan 🤓🤓

[@StrangeDoctor_]

23:30 this step takes long and then fails when i put credentials in why?

[@gjcox]

Is the entra ID plan 1 license required for each user, or only for the administrator?

[@GregStimpson101]

Every user

[@azeemhaider4535]

Hello Jonathan, is there way to prevent or block screen lock on MDM machine, i am looking to block auto screen lock on some critical machine, by default it locking screen after 15 min.

[@fbifido2]

@18:29 - Love this video :) I did not know about the SharePoint & OneDrive stuff. how did you not see the device setup screen after the factory reset ????, how did you bypass it? that screen is a pain, it sometimes takes ~2hrs: - device setup - user setup - i forgot the other one.

[@bearded365guy]

I cut that bit out to speed the video up a bit 😀

[@thelongbacker]

2 questions - why the decision to deploy chrome as a LOB app vs packaging up as a win32 intunewin one? And why when deploying your configuration for SP/OD you choose both users and devices? Should it not be one or the other...in this case, I'd have thought all users based on it being user based config. Thanks in advance, your videos are very informative

[@hoskyseriousinvestor]

great video!! directly to the point! thanks for sharing this

[@AnushkaSilva-tr9il]

Thank you, Jonathan. I honestly appreciate your dedication sharing these amazing videos. By the way have you done any videos with Windows Autopilot Hybrid environment. Thnaks again :)

[@bearded365guy]

I haven’t…. Yet.

[@entengs7627]

Superb video, thank you for sharing this informative lesson. 👍👏

[@mgee_7]

are there backend setting to automatically connect with intune aswell once user signs in? from my research it should install company portal and enroll into intune

[@Philliprgarcia]

Which would you recommend to use pre-provision or user sign in method?

[@miravida9778]

somehow, profile status still showing as Not assigned. Do I need to connect the vm into entra ID? I'm currently have the vm join on proemise domain.

[@SamuelNera]

Informative for a beginner like me 🙏

[@fbifido2]

@1:35 - please show how this can auto configure apps??? I still do it the old fashion way. even if I use autopilot, I am the one to setup the laptop for the users. The only slowdown is that the users have to login and MFA, because we don't keep/know their password.

[@fbifido2]

@23:11 - you did the reset April 20, 2024 at 2:04pm it finishes factory reset and finish setup with Intune at 06:45 (army time) on 20th of April 2024 then it fully setup at 15:26 (army time) or 3:26pm on 20th of April 2024. - what this a double take, or time just messed up.

[@bearded365guy]

Time messed up. I hadn’t noticed but must of been the time zone settings

[@dis1guy]

Can you talk more about group tag in intune? I want to know how to configure that so it can just assign what's needed for specific applications or policies.

[@JamieRichards-z8n]

Followed your guide step by step but during the device being built, the device preparation screen is not displaying and apps are not installing. Have you got any hints/tips?

[@bearded365guy]

@@JamieRichards-z8n Difficult to support over comments. Have you got the hardware hash’s in Intune?

[@amirzakrishan]

Really glad to have discovered your channel recently, learning a lot. This is off-topic but can you create a video on configuring a Device Tunnel to P2S Azure VPN?

[@bearded365guy]

Maybe one day….

[@markzul1609]

Hey Jonathan! Thank you for this video. I am doing AP at the moment and I'm getting an error on the device " TPM is still not suited for Autopilot Pre-Provisioning". I see that Attestation is off, and I cleared the TPM, and did windows update and that wasn't working. Do you thinking flashing the BIOS would fix this?

[@adeking2255]

Great stuff mates, I will revisit this again

[@5kyX0]

Awesome video! Cleanest setup video ive seen yet. does autopilot reset, reset the enrolled GUID? In the past, that was an issue when changing the enrollment user.

[@bearded365guy]

The GUID will stay the same.

[@anujtel]

Nicely done video! Need to ask you if there is a way to get the hardware hash when there is no OS installed. Thank you

[@bearded365guy]

I don’t think so, unless it’s direct from device manufacturer (Dell etc).

[@martinlamberti4394]

Extraordinario, te ganaste un subscriptor. Extraordinary, you have just won a new subscriber. .

[@bearded365guy]

Thanks!

[@mistal85]

So solid content, you gain my subscribe :)

[@joshmac5906]

Great video, thank you.

[@fekasng2010]

Great video. You have saves me from three days mental breakdown.. Thank you very much.. Do you have any other video on Linux or Mac os enrollment.. Thank you very much.

[@muhammademad-kt8kg]

Thanks for the video. I want to create a single security group that includes devices running Windows 11, Windows 10, and on-premises hybrid devices. I've attempted to use expressions within a single dynamic security group to achieve this, but it's not working as expected. Only Windows 11 worked. Do you have any suggestions? Thanks in advance.

[@ianmelencio5752]

first, i want to thank you for this video. i have a question regarding policy. can you provide the link of that common policy you create for your clients I want to know more about POLICY like you did in SHAREPOINT that you sample in the video

[@JamilBM007]

Hello Jonathan, this is a very helpful video. At the stage where you validated the rules (added the devices-6:05), shouldn't the devices be brand new. I see the devices you added are already on azure. Or was it done to just verify that those devices actually use windows 11?

[@LokeshKumar-np8px]

Awesome video like always. Are you going to have a video on Microsoft private access profile soon?

[@bearded365guy]

Hopefully

[@TateSpirit]

I mean, I am hooked to your videos, explained like a pro, great videos Jonathan, create a udemy course, I will be the first one to buy.

[@bearded365guy]

Watch this space! Courses coming in summer

[@TateSpirit]

@@bearded365guy Was just thinking, what if the end point is bare metal? No pre-installed OS, will Autopilot work?

[@davidadams421]

@@TateSpirit No, but windows can be deployed over a network PXE-boot. It's a faff to setup but the machine basically boots to the network, a windows image is then deployed, on reboot you have a Windows login prompt. Google 'windows pxe'

[@TechFromYorkshire]

@@TateSpirit autopilot isn’t a OS image deployment tool, more of a configuration tool. You’ll need the base image of Windows installed first i.e. can get to the OOBE screen. Autopilot takes over from there. We use a PXE boot image to get Windows across to the device but a USB ISO image is just has good.

[@envayed]

Hey there. great video. Running into an issue importing a device for autopilot. Error message 806 ztddevicealready assigned. Any tips?

[@خالدعبدالله-ج7غ5ي]

Are you from Mars...And you got me to subscribe...

[@gotdamnimin]

Great stuff!

[@thetalltwink2015]

This video is awesome super simplified for us IT guys thank you so much. Question I have is when you setup the Dynamic Group to add anything Win 11. Does this affect remaining devices already added to In Tune? Just want to ensure it doesn't add laptops previously setup to wipe and redeploy again, Silly question I know but just wanted to check.

[@bearded365guy]

Yes it would add all devices into the dynamic group.

[@ag-sn2gm]

Great video! Subscribed ✔

[@kearneyIT]

loving it, just found you.

[@admalvinanticamara5731]

Can you also cover the ESP configuration part and its best practices? Thanks

[@hellofolks31]

Great! i've got to work on it this week; thks

[@EricC1060]

Great video as always. It makes sense to set the end user as a Standard User, but wouldn't I also need/want to have a local administrator account? Is there a way to deploy using Autopilot, set the Primary assigned user to the person you are assigning the laptop to, but also auto create a local Admin account?

[@bearded365guy]

We like LAPs for this. Video to follow…

[@SaschaWeidinger]

Hi Professionals, I’m currently preparing PCs for teachers to use in the classroom at school, and I’m deciding between deployment methods in Autopilot. Specifically, I’m debating whether to avoid the User-Driven method and instead go for Self-Deploying. One advantage of Self-Deploying that I’ve noticed is that users can log in using just their first and last name, without requiring the domain. This seems like it could simplify things for teachers. What are your thoughts or recommendations? Is there a clear benefit to one method over the other for this scenario? I’d really appreciate your insights-thank you in advance for your guidance!

[@Raviragam]

Great explanation. Thanks for your time :)

[@TrucNguyen-ku1yh]

Nice training video, thank you so much!

[@IrlymMylros]

MR Bearded Edwards another clear as honey INTUNE video and you seem to excel more after every video you publish. I think, you as a business and technical man, you could produce complete training Video courses (Such as INTUNE, Sharepoint, M365..etc) that will be best for learners to understand, as you could include alot of your busines cases to show how these technologies work in business. I for one would really like some intermediate and advanced course to learn from. Best wishes

[@bearded365guy]

Watch this space! Thanks for the comment.

[@davidadams421]

@@bearded365guy Ha! I was totally expecting you to just send a link to your training offers!

[@PedramKalantari-oy5me]

to auto login to SharePoint. you use a PowerShell command. what is that command?

[@bearded365guy]

I didn’t use a command for that?

[@MrToast-hj6kp]

Great video. Just at this stage of setting up InTune. Maybe do an advance version of how to use compliance and configuration for stuff like bit locker and OneDrive, etc. With WFH, there is a need to push out only the devices you want and users log into only those devices. Nothing else and/or web.

[@AlBergstein]

Great video as usual. I've been stymied by Autopilot for over a year. One thing I did not catch: You did a manual install of one machine. Can I preset this entire configuration up in advance and then use it by assigning the machine ID when I get a new one? I assume so.

[@bearded365guy]

Yes, you can!

[@fbifido2]

the sharePoint and oneDrive stuff is for users, so why did you add it to devices under Assignments?

[@robertneal1973]

Hi Jonathan, another great video, thank you! Our environment is a hybrid AD joined configuration. I see from Microsoft's own recommendation to not configure hybrid joined as part of Autopilot. I'm assuming this is because for remote workers, you're unlikely to have access to the on-prem DC at the time of the Autopilot process running. So if we forego doing hybrid join as part of Autopilot, can hybrid join be performed easily after Autopilot?

[@whoanelly-]

so following this, intune started to deploy office again to all my registered PCs that already had office already installed on it. I was hoping that this would only apply during computer setup/initial enrollment.

[@bearded365guy]

@@whoanelly- How did you setup the groups? If you did all Win10 and all Win11, then it would do.

[@section3212]

Great video and super helpful. We rolled out a couple hundred laptops about a year ago before knowing about autopilot. is there a way to capture the hardware hash without going to each device and running PS?

[@bearded365guy]

Do you have any kind of management software or RMM?

[@sahadmk840]

Good job 👍

[@BRALVisuals]

valuable video thank you sir

[@ChanceTEK]

Fantastic! Thank you.

[@xkorbekx]

can i run autopilot reset without removing ond drive mount and sharepoint map?

[@bearded365guy]

@@xkorbekx It will set back up after reset

[@DipDESI]

Excellent explanation

[@Clairefrzr]

that was actually very useful! Thanks!

[@josephbevilacqua9505]

Will the Apps configured with this policy be pushed out to existing machines, or will they only install during the first boot (OOBE)?

[@kosarob8]

Great video, thanks for this. A question: how could I practice this? What do I need to be able to test this? I'd like to play with this, testing ideas, setups and whatnot. Cheers

[@bearded365guy]

As I’ve done…. A tenant with a business premium license and then build a virtual Windows 11 PC on your PC.

[@marcdupont3762]

Thanks a lot Jonathan ! yours videos are really helpful. Our company is not using yet Autopilot because it's very slow to deploy huge apps (over 3-6 GB). We working on MDT and it's faster. For us, hardware hash is a big issue. we waiting improvement on that from microsoft.

[@TheStevenWhiting]

You also need to be full Azure and not hybrid like we are. If you're hybrid as we are, you can only to part of the autopilot setup at home, the rest you have to go back into the office to do. So at home, its still just quicker to use djoin and do it from a USB stick.

[@gmc111568]

If you add programs to the profile after it’s been deployed to a computer, will they get installed?

[@johnbourne5182]

Great video as always, best explained demo with real life experience for Autopilot. One question I have is when you setup deployment profile you set users correctly to be standard users, but is there a away you can set a particular user to be in the local admin user group of the device?

[@davidadams421]

Users only become Administrators through their membership of the local Administrators group so by selecting 'Administrator' that user would by default be added (this is the same even for the local 'Administrator' account). You would then have to carefully target the deployment profile.

[@bearded365guy]

We’re big fans of LAPS. Video to follow in a couple of weeks

[@leanreyes69]

Great video as always!!!

[@hoskyseriousinvestor]

is there a way to have jnstalled everything before to send the lapto to the user? or a generic user to leave installing the apps in background?

[@bearded365guy]

Yes, you could do that.

[@davidadams421]

That's basically what IT admins _used_ to do. With this, it's a 'set-and-forget' system, just ship out the new laptop and the computer auto configures itself. I used to deploy images via a network PXE-boot but I actually do prefer this method because all the user has to do is turn it on and login, no faffing around with BIOS.

[@hoskyseriousinvestor]

@@davidadams421 thanks , but it is not "ready". the process begins when the user is logged... so..there is 1hour or 2 two until laptop is fully ready to work and that is not "acceptable". thats what im looking for a generic user to log, install all, and send the laptop this time fully configured

[@davidadams421]

@@hoskyseriousinvestor I see your point, open up the lid ... and you're productive. Imaging and then deploying those images is likely you're best bet, then. Instead of 'a guy' installing everything needed on each machine, 'the guy' does it once, creates an image of that machine and then 'the system' deploys that image. I used to do this via a network PXE-boot back in the day. If you google 'windows imaging and deployment' you'll find the right docs.

[@section3212]

@@hoskyseriousinvestorwe've currently looked into the same but the only option is to have a 3rd party do that step for you. Whether it's they log in with that user or deploy an image with a base set of apps installed. Anything other than autopilot is either going to come at a time or cost.

[@ArronBorson-r5y]

Really great video would be good if you could show me a video on customisation

[@MichaelGreen831]

This was great. Couple of points. You had to be joking when you said you don’t need IT. How do you get the hardware hash on a Dell drop-shipped computer? How do you join a computer to an on-premises Active Directory? How do you remove bloatware from a Dell drop-shipped computer?

[@bearded365guy]

Yes, I was joking 🙃 You can contact the hardware manufacturer or your hardware supplier and they’ll send you the hashes. Devices need to be hybrid or Entra ID joined for Autopilot. You can run a script to remove bloatware and run via Intune. I might make a video on this… or you can do a quick Google search and there are plenty out there.

[@martiniproductions185]

12:19 why you press no?

[@hypotheticallywhatiskyle]

Just bought a batch of laptops from auction from a company that’s gone under. They’re all enrolled in autopilot through intune. Without admin control access. Any way to bypass or remove them from it?

[@bearded365guy]

Download Windows 11 onto a USB key and wipe them?

[@hypotheticallywhatiskyle]

@@bearded365guy no, as soon as the device sees wifi, regardless of fresh install and new windows license it reverts back to an autopilot enviornment

[@shaikbaji]

Hi @hypotheticallywhatiskyle I have the same situation please share the resolution for this if you have resolve the İSsue

[@dawidekosrs896]

@@hypotheticallywhatiskylewhat do you mean as soon as it sees Wi-Fi? I don’t understand how changing the boot order to, boot off the usb and installing a fresh windows install wouldn’t work….. you login to a new Microsoft account if needed as well….

[@hypotheticallywhatiskyle]

@@dawidekosrs896 because it’s enrolled in a company policy, through Microsoft service. I could change every component, other then the main board of the laptop and install a fresh copy of windows - and it’ll phone home and reset to its past state.

[@thanksbutnothanks65413]

Bravo good sir!

[@boga9990]

Great video! All that body movement it's really annoying but really good teaching skills, thanks!😁

[@bearded365guy]

Next time, I’ll be really still.

[@richbeck02]

In case this helps anyone else (19:46). You can retrieve the Sharepoint Library ID as a Sharepoint Admin, the Copy Library ID doesn't appear to a Standard user.

[@sgmmaffe]

I think that just the license: Entra ID P1 is not sufficient. If I follow your video exactly, I keep getting errors like these: -Fetch enablement failed -Unable to fetch per platform device counts -Insufficient or lack of permissions is causing access restriction And also i cannot import a csv file at Autopilot devices. Button is greyed out and error: "No permission to view this list"