S01E02 - Setting up Windows Autopilot with Microsoft Intune - (I.T)

Steve and Adam discuss and configure Windows Autopilot in Microsoft Intune.
00:00 - Intro
01:41 - Overview of Windows Autopilot
docs.microsoft.com/en-us/wind...
11:01 - Enroll Windows devices in Intune by using Windows Autopilot
docs.microsoft.com/en-us/intu...
17:09 - Set the mobile device management authority
docs.microsoft.com/intune/mdm...
25:35 - Create an Autopilot deployment profile
docs.microsoft.com/intune/enr...
40:11 - Create the JSON file
docs.microsoft.com/windows/de...
50:08 - Set up an Enrollment Status Page
docs.microsoft.com/intune/win...
56:38 - What is passwordless?
docs.microsoft.com/azure/acti...
57:05 - Require multi-factor authentication for Intune device enrollments
docs.microsoft.com/intune/mul...
58:16 - Enable Enterprise State Roaming in Azure Active Directory
docs.microsoft.com/azure/acti...
1:06:51 - Integrate Windows Hello for Business with Microsoft Intune
docs.microsoft.com/intune/win...
Companion Guide:
www.sysmansquad.com/2019/12/1...
Visit our websites and social media for more or to get in touch with us
Steve Hosking - Microsoft MMD Team
/ onpremcloudguy
steven.hosking.com.au/
mvp.microsoft.com/en-us/Publi...
github.com/onpremcloudguy
Adam Gross - Microsoft MVP - Enterprise Mobility
/ adamgrosstx
www.asquaredozen.com
github.com/AdamGrossTX
mvp.microsoft.com/en-us/Publi...
Ben Reader - Microsoft MVP - Enterprise Mobility
/ powers_hell
www.powers-hell.com/
github.com/tabs-not-spaces
mvp.microsoft.com/en-us/Publi...

[@everydaykraft5523]

We are working to implement Intune at my job, and we are going to implement Autopilot as well, and these videos have been immensely helpful to understand the technology. Thank you! I can't wait until I can stop messing with creating golden reference images for every update!

[@MuffDiver71]

Excellent video and series so far! Thanks so much for taking the time to do this. One thing I'd like to point out regarding the naming of computers. We rename our computers to include the 6 digit number that is printed on our Asset Tags which is applied to all our devices. Our devices are charged to, and thus "owned" by their departments. So asset management is important to us. This also makes it very easy to find the device in our RMM platform. Sometimes a shared computer will still be showing the last logged on user in the RMM, in which case it's easier to search by device name.

[@itangeo]

My first comment in KZbin - thanks so much both walking through all the steps. I do like the way that I have my Intune portal (yes, now it is Endpoint Management portal), check and follow your steps one by one because you didn't run too fast - I have enough time to go through the settings and make sure everything is set correctly when you are doing live FAQ between Steve and Adam. Love it, A++++

[@tony6626]

Great video guys, look forward to working through the series!

[@tommy622222]

Hey guys, I've watched your videos several times now and it's all starting to make sense to a newb I.T. guy. Whilst this was very intimidating at first, step by step and slowly digesting all the information I am starting to tame this inTune beast with your assistance. You both have a very personable approach to teaching and it isn't bland and hard to understand like a lot of other I.T. related vids out there so kudos for your great work, commitment and understanding! Also I am an Aussie from Victoria so a bit a pride in my main inTune MVP Steve!

[@IntuneTraining]

Thank you for your feedback. Knowing that we are creating content that is helping people understand and adopt these tools is motivation for us to keep going.

[@Welshnel]

Hey Guys. Just want to say thank you for doing these video guides. We are starting to dip our toes into Azure, Intune and SharePoint so we can start moving away from onsite servers etc and I've been tasked with really diving into it all. Was a real struggle with so many different options and guides out there but your videos have made the learning process a lot easier. Keep up the good work and stay safe.

[@IntuneTraining]

Thanks for the feedback, We hope the channel helps you along the path.

[@michaelvandensteen7994]

Just managed to deploy my first device using Autopilot thanks to this video. Thanks a lot. Didn't succeed to complete the iso to vhxd process so just added the device manually.

[@darylunitt5099]

Excellent works Gents... will be working through the full series

[@bobert13581]

I get a lot of useful insights when they go off on tangents and discuss things. Nice

[@chrissmith5371]

I know this content is a little dated. But it is gold still. The way you guys slow down and explain things is perfect! Subscribed!

[@cannysam1234]

Love the way you guys present. Steve and adam you guys are doing great job.

[@cannysam1234]

Can we have one video on logs that we can get from intune as well as from user device. Because logs is something which should be familiar

[@NenoDjukanovic]

I hope you will keep up with this training videos even if it is for only '2' people :) . At least for me these are the best ones I could find. These digressions you folks make (based on experience) are noteworthy. Thank you.

[@IntuneTraining]

Thank you for the comments! There's so much to talk about and sometimes we feel like we (Adam mostly :-) ) get carried away. Glad to hear that you find the side discussions helpful.

[@dipendrakhatri6352]

maaan i agree with you

[@Ath3rs]

Very informative, thank you for this series!

[@Ginsayuri]

As a intune and SCCM administrator I'm really liking your video's guys. You really ask the right questions

[@IntuneTraining]

Thanks! Glad you’re enjoying them.

[@Ben-gb9dv]

Can you recommend something like this but for SCCM?

[@criptzom79]

Thank you, great work oncovering the edge cases

[@BillCooperOK]

Number 2! Thanks for the videos... good stuff!

[@NUkiwi]

Thank you for your videos. Huge help! Greetings from NZ

[@umbrellageeks9421]

guys, excellent job ! keep doing great !

[@Abhi-ph9fz]

Thanks for the great video. The JSON part, as prerequisite, got a bit complicated here for first-timers in intune. Kind of getting lost here. Can there be a clear clarity on the steps?

[@pattygq]

You ever get this sorted out?

[@wickedneurons]

Great video, guys.

[@lltagged]

1:07:28 "Only two people are going to watch this video..." 1 year & 50k views later. Well done, guys!

[@WillShawofficial]

Make that 3! :)

[@marines122]

Thank you guys. Just started watching and I like the series so far

[@danielsavage6854]

Really good video guys, and this answered a lot of questions that I've been trying to answer lately. What I struggle with is the "Intune/ Azure AD doesn't have that, you don't need it, let's move on!" It must be the Support Desk Analyst in me, very hard to tell end users how it's going to be!!

[@icenil]

100% agree. This is very good explained theory and what it can do. But very small % companies this will be useful after they understand all pre-requisites and limitations.

[@alexyou6102]

Great video. There is another way to copy json to a physical machine, just turn on and go to OOBE, then Ctrl+Shift+F3 to audit mode, copy the file and then go to OOBE

[@ChadTyrone77]

awesome discussion thanks guys

[@Accolades70]

Most excellent vid. Cheers

[@thomasbalder427]

Really nice video. I also like that you discussed the shift of mindset we need to get. Stop using holding users hands, and think more 'online' and the 'disposable' part (reset device when it's bricked by bitlocker) of devices. BTW I think the double quotes " thing not appearing until after you selected another character with the US-INTL keyboard is just something you need to get used to. In Europe (or at least the Netherlands) we don't know any better than continue typing after the " thing.

[@IntuneTraining]

Thanks Thomas. Glad you find it helpful. Be sure to subscribe for alerts on new videos.

[@user-zv8hv4hl9s]

I saw Steve said that there're only few people will watch this video. But you will never believe that here's a person in China, Shanghai who is looking at it very carefully. Because I'm going to deploy the Intune and Autopilot in our production infrastructure very soon. And I'm the administrator so I need to build up the roadmap and design the blueprint.

[@bosniak006]

Thanks for the great content!!!!

[@TheBenyi28]

Good videos ! Cheers from Dominican Republic

[@congobongoify]

I found this really helpful.

[@Synflood-dot-txt]

Thanks for Json pre=req explanation

[@ChristianEilskov]

When I put the Jasonfile on the vhdx image the install fails. If I remove it again it runs fine.

[@harpreetsinghwasu8604]

So far it has been super useful and excellent videos ! Hope you continue with this series and similar videos. These are the best that I could find so far on the internet across multiple learning platforms.

[@johnchereson1639]

Hey guys, big fan of this series that you are doing. I'm new to Intune and have watched some of your videos (not in order) based on what I've needed to accomplish in my environment so far. In this video you talk about deploying printer drivers through Windows Update for Business with Intune. I was wondering if you have another video that has covered this in depth and if you could point me in the right direction. If not, is this a topic you plan to cover in the future? Thanks for all your help so far!

[@gdr1174]

Superb! An insightful discussion! Thanks guys 👍 I just read that the SCCM hybrid option is being depreciated.. interested to know your thoughts on that

[@jamesg871]

I think you lost a lot of people at the Powershell part. It would have been good to show us the normal way of getting the JSON file using the one powershell command on the computer you are running on. It then kinda skips to creating the VM stuff which should have been a separate video maybe?

[@IntuneTraining]

We have newer videos covering this. Check out Revisiting Autopilot.

[@angryitalian3430]

I'm going to watch all of these, so it will be 3 people!

[@gigatar]

Thank you! Subscribed.

[@julianmesa3484]

Great video, learned of this on my own but it was good to watch for validation. What I was hoping to find in this video is how you treated app deployment during autopilot. I'm currently deploy about 5 apps sometimes 4 deploying on the autopilot profile, app assignment is currently scoped to the autopilot group. This does take a bit of time so I have had to make changes to my ESP to allow for more time, Microsoft suggested I switch app assignment to user and that the apps wouldn't deploy till the user signed into windows desktop for the first time, however in all of my test this was not the case. Do you have any suggestions on how to approach this? I know device Category would be an option

[@abuhamanni2451]

i did accomplished hybrid-ad-joined in our environment by windows auto-enrollment ;) took me almost couple of weeks though ;)

[@HishanMelanga]

How do you convert the iso to VHDX looks like i cannot get it to work. The Convert-WindowsImage command in a Windows 10 machine. Can you make a video on that?

[@poornachandraraomandalapud6867]

Nice video ... thanks

[@ivanshopov4477]

Great job guys! I really enjoy watching the videos!!!

[@scottluebke5012]

Around 1:04:00 they start talking about computer naming. It's incredible how much time gets spent trying to decide how a company will name and rename computers. Have sat in many meetings over many years discussing, and everyone has a different preference, and you can see the same dynamic here where they have different ideas.

[@MathiasOttsen]

Great video! Do anyone know if it's still today difficult and complex to implement Hybrid enrollment? And anyone with some great advices on how to tackle it? I noticed you mentioned in the video to go through GPOs so that's probably one of the things we will do.

[@FreshFresnido]

Good day, How do we do it if its a real mahine and not a vm. Thanks

[@joaotoscano]

On mine environment I'm missing the Microsoft Intune Enrollment application -is there anything to do with my current licence?

[@alexyou6102]

To say frankly, in the beginning, get lost in the JSON bit. Once understood its just copy the JSON file to C:\Windows\Provisioning\Autopilot. All going smoothly.Thank you.

[@vidanaweer1662]

Reall great video, thanks a lot . Could you please tell me how and where to inject the Json file if I'm using a Virtual machine.

[@paulanderson2054]

I am new to Intune and Azure in general. I work at a group of primary schools in the UK and would be interested in any advices in how to add my existing hardware, that has never been managed by any management tool, into Intune. Upwards of 500 PC's. Apologies if this is already covered in the series and I have just been impatient.

[@marcocuentas6784]

How do I go about wiping an intune win 10 device so when it resets I don't get the OOBE screen? This device being gifted. I tried a simple reset but the OOBE screen still came on. I believe I just need to delete it from Intune and AAD devices, correct?

[@IC4edes]

Hi, i'm actually doing my end of study work. I just want to know if it's mandatory to have the CSV file to enroll a device to launch it with windows autopilot. I am working on the autopilot to make it functional in the company in which I'm an intern (an IT company). We are a reseller of IT equipment and we want to set-up an autopilot for all our customers who order devices from us. That's why I would like to know if the CSV file is necessary (so if I have to call a manufacturer or CSP partner to have it) or not.

[@adammonsen5265]

If I have no virtual environment, how would you deploy autopilot. I got lost after the steps were for booting up a VM.

[@memem1792]

Can you have a list when deploying profiles to pcs to chose the right one you need to installed or not? Do you have a video about intune privacy? Thanks

[@FreeeWIFI]

I have an active directory domain but want to enroll windows 10 devices to Intune to push our VPN profiles. Will enrolling the windows 10 devices also join them to Azure AD? I dont want that to happen, and want my devices to still be able to log oi to active directory to obtain group policies etc...

[@jvicez]

Microsoft Intune Enrollment App is missing from my Azure. Any ideas?

[@michaelpietrzak2067]

Question regarding the benefit of hybrid vs AAD joined....What is my office is a medical office and I need to access local resources like an electronic health records system and need to print from network printers....I can still do all that with an AAD joined computer on my local network? *obviously all my Azure bits are setup...dns etc

[@RA-qr8gc]

Lol. First episode, I thought you said "The Stephen Adams show" and I thought that was a bit selfish of Stephen. I get it now.

[@memem1792]

How the pc knows what profile to install if you have lots of them?

[@brewdir]

I'm not having any issues with a hybrid rollout right now. We have an on-prem SQL server and I use Windows Authentication everywhere for connections to it. Could I do that using Azure AD?

[@IntuneTraining]

The short answer is yes you can do this as just AAD, there is a change required on you AD domain per this blog from Scott Duffy microscott.azurewebsites.net/2017/12/16/setting-up-windows-hello-for-business-with-intune/

[@smokingmangop]

So I have been working with another Config Manager, that we have successfully took a device that is 100% remote, and got it enrolled into Intune w/o them having to come internal and be fully controlled by Intune now.

[@sergiot3143]

are you using vpn?

[@deepakpadwal_dp]

Great Video... Thank you for sharing. 1 question - how did you assign profile to device as you did not add any in assignment group. i confused actually.

[@Ilitan004]

Hi! Did you get this right? I'm stuck on the same place. Need to add devices that I just received, which means they aren't encoded anywhere yet on my platforms...

[@KyleWilcox]

Hello, Thank you for these tutorials. I'm using this in a school environment. Most of the examples you give are about a laptop assigned to a specific employee. I need to deploy to Windows to laptops and desktops that will be shared by dozens of students. The devices are not owned by any one user. When selecting a Deployment mode should I choose User-Driven or Self-Deploying?

[@DMahalko]

These videos do not appear to apply to a K-12 school environment. The whole hands-off "we don't care, it's your problem" attitude doesn't work with student devices.

[@lavpatel9041]

What's the best way to enroll into Intune for existing users in the organization? I love watching your videos but not seeing anywhere how to join existing users to Intune?

[@TheCjbbb]

Hello, I have a few issues, not sure if they are related First issue - We have 2 autopilot profiles both with different names (Staff and Student) The Laptops that have the student name are correctly assigning the student autopilot profile But the laptops with the staff name are still assigning the Student profile even though the names are different and i cannot get them to assign the Staff Autopilot profile. Second Issue - When i run fresh start it used to reset the pc and go to language selection + WIFI etc.. (Which is correct) but now it jumps to the login page and doesn't apply the correct keyboard language because you cannot select the language or connect to WIFI basically the OOBE first turn on setup doesn't appear at all. Any help would be appreciated! Thanks

[@MikeCarpenter222]

I'm currently doing some testing with InTune since 95% of our workforce is now remote. Since we already have O365 E3 and Azure AD Premium licenses, I only added a stand alone InTune license. I mention this because in our Azure Ad portal, I only see the Microsoft InTune application, and not the Microsoft InTune Enrollment application. I'm wondering if that's why none of my deployed applications are showing up in my company portal. Just hoping someone here might have a little insight.

[@TravelSmart-Hacks]

script and commands you running in Powershell can we have please?

[@brettsanderson6368]

Thanks guys! Any ideas on why I don't see the "Microsoft Intune Enrollment" piece?

[@gregchapman8693]

I don't see it either... Seems normal though, Microsoft ALWAYS changing things around just to make it unclear int he future.

[@Trevor4ag]

Its way more the GPOs. Missing so much related to domain connectivity in a large enterprise

[@scott2495]

I agree with we shouldnt be hand holding users in certain scenarios but i dont agree with not backing up the recovery BL keys. Providing a BL key is far quicker then reimaging a windows device. What if the reimage process fails halfway through?

[@ngchongsin2009]

One of the biggest issue is that the display is just too small. Perhaps need to zoom into the screen display, and minimize the speaker’s facial view.

[@marcu1245]

Any way to talk about the process of pre installing applications , so far only .msi files are allowed, can i install .exe files or even show to to properly run .ps1 files.

[@IntuneTraining]

Stay tuned for Episode 7 where we go over Win32 applications.

[@joserosado7898]

Do you also have some training on config manager on a high level

[@examinationsquare]

Can anyone elaborate when and why we would want to do Hybrid Azure AD? I searched on google search and reddit and there isn't any clear explanation. Reason I am asking is because I am confused why choose Azure AD vs Hybrid Azure AD. They both do the same thing? A specific reason on why Hybrid Azure AD would absolutely be needed would help my understanding.

[@IntuneTraining]

Our opinion is that you SHOULDNT use Hybrid at all. Hybrid causes you to continue to rely on on-prem AD. AADJ removes this dependency and you move closer to zero trust and cloud native devices/management.

[@fbifido2]

We could try it out, but we have to watch the full setup of the Intune tenant, we don't reach there yet. as of 01-nov-2021, i have 44 more videos to go.

[@anthonycervelli6288]

I am interested in learning Intune Autopilot. Does Microsoft offer a license so I can practice? I know Microsoft 365 is an option, but I can’t afford the cost. Any assistance would be helpful.

[@passion9595]

Thank u so much for information.. can u help me out for Airwatch to intune migration

[@UA10i12]

How does one import devices from Azure AD into intune with the new Endpoint Manager?

[@IntuneTraining]

Check out our newer video on Autopilot where we use Endpoint. S01E43 - Revisiting Windows Autopilot - (I.T) kzbin.info/www/bejne/fGWTapecm5eYpZY

[@stephenforman7867]

Keeping devices Hybrid join or simply corporate owned-registered is as you said, not ideal.. but how do you go about AAD joining 100s of remote computers? Hybrid is ideal for our 1000s of existing devices because it doesn't require user interaction.

[@mubarakharuna6425]

i cant thank you enough.

[@alisawab1286]

Great video guys, for some reason i can't get the PowerShell commands you use @40.35 to work? I'm using the latest version and even tried with Vcode to use. Any advice?

[@IntuneTraining]

Yes. The commands changed after we recorded the video. sysmansquad.com/2019/12/18/autopilot-setup-part-1/

[@alisawab1286]

@@IntuneTraining Got this working now, so close. I have windows ISO file can i edit that file and place the JSON file in the autopilot folder and run it? Would the OOBE pick up my new JSON file that way?

[@Danissimode]

how can i connect my new laptop to autopilot without turning it on? if an employee bought a new HP laptop, I have to connect it to autopilot, but I do not have physical access to it

[@IntuneTraining]

You can’t. You either have to power it on and harvest the hash or have your OEM register it for you into your autopilot tenant.

[@donnagordon4658]

I can't figure out how to convert my ISO to VHDX format as soon in the video. I've looked at several Powershell Scripts and it always says the evaluation version of Win10 Enterprise I downloaded. It always says: Requested windows Image was not found on the WIM file! I am able do do a dism command and it shows the edition as EnterpriseEval. this is the command line I am using "Convert-WindowsImage -SourcePath "C:\temp\Win10.iso" -VHDFormat VHDX -Edition EnterpriseEval -VHDPartitionStyle GPT -Verbose" How can I get the json file in the image if I can't convert it to a VHDX?

[@leetjn5663]

A little late, but hopefully it'll be helpful to someone else having the same issue. gallery.technet.microsoft.com/scriptcenter/Convert-WindowsImageps1-0fe23a8f

[@joaotoscano]

After setting up my tenant i'm facing now the Endpoint Manager as 'new' interface for the rest of the training. I'm certain that you guys are already talking about this in more update videos. Just wondering if i'm on the right direction here.

[@sopota6469]

Same problem here. The clowns at Microsoft change everything so fast that training material becomes obsolete in record time. A lot of screens are a bit different and the Intune management page has moved to another place with a totally changed layout. You can enroll devices following this: docs.microsoft.com/es-es/mem/intune/user-help/enroll-windows-10-device. Also search for "Device enrollment" in Azure Portal and make sure your MDM Authority es Intune, is in General Information.

[@aztubeyou]

How is this "auto"? If you purchase endpoint from a vendor then have it direct ship to user... then you have the json file??

[@IntuneTraining]

The JSON file was one way to get the settings on the device. On a new device that’s pre-registered in your tenant, the settings will come down the first time the device connects to the internet. We cover it more in our newer Autopilot video S01E43 - Revisiting Windows Autopilot - (I.T)

[@popjibbletz]

Curious at 1:04:27 Your screen stays on setting up device and stays on that screen while it sets things up. Mine logs into Windows and just shows notifications but I like that UI better Is there something I missed?

[@IntuneTraining]

I believe what you’re missing is configuring your enrollment status page docs.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status Block device use until all apps and profiles are installed.

[@popjibbletz]

@@IntuneTraining Sweet Your videos are super helpful and I am thankful for the stuff you guys do

[@jimcopeland4011]

I don't understand. If I have to manually paste a .json file to all of my autopilot machines, doesn't that defeat the whole point of autopilot?

[@IntuneTraining]

We are using the json file for quickly testing on VMs. In production, you'd have your hardware vendor upload the hashes for you when you purchase the devices.

[@GavinS841]

Hi, with not using Hybrid AD Join how are shared drives managed? We have a lot of on prem file servers that we need to map for users and wont be moving these to onedrive/sharepoint. Currently rollling out Hybrid devices through autopilot but wondering if we should change this.

[@IntuneTraining]

We use a PowerShell script, and Azure function and a scheduled task to get around this issue, works pretty good.

[@MrDrojas25]

@@IntuneTraining Can you make a video on this? Or at least share that script? Thanks for the videos!

[@leetjn5663]

@@MrDrojas25 A bit late, but I use this guy's script and it works well: www.lieben.nu/liebensraum/2019/06/simplify-logon-scripts-in-intune-without-schedules/ Hopefully it'll help someone else looking with the same question.

[@deejayblacklight]

Is there no simpler way of doing that json file? I do not want to install visual studio on my comp

[@IntuneTraining]

It's VSCode and it's amazing. However, this is just powershell. You can run the commands in Powershell or PowerShell ISE. www.sysmansquad.com/2019/12/18/autopilot-setup-part-1/

[@KarlMathern]

is there a preferred way to set the timezone when enrolling a pc into intune? I don't see a clear way of doing it.

[@IntuneTraining]

Not really, but Ben has a great solution here on his blog. powers-hell.com/2020/08/31/setting-the-time-zone-of-an-intune-managed-device-using-azure-maps-powershell/

[@bitgamerx9574]

First off, thanks a bunch for creating these videos! My question is if you recommend watching these older videos or skipping ahead to the more recent videos? I'm specifically interested in Autopilot.

[@IntuneTraining]

Watch the more recent ones, the original videos are of the old Intune portal

[@bitgamerx9574]

@@IntuneTraining Great, thanks! I'm in total agreement that it's time to shift away from over customizing workstation imagines. I've seen too many organizations shoot themselves in the foot with unneeded changes.

[@rajbharath1871]

How can we Add trusted sites In Auto-Pilot machine? Adding site seems to be greyed out in all the browsers. I know it would have disabled by GPO policies. is there anyway to get them back?

[@IntuneTraining]

You can configure Device Configuration profiles in Intune for these.

[@KyleWilcox]

Second question. How do you actually enroll a real device into Intune? You example had you injecting code into a VM. I have physical devices that may or may not already have Windows loaded on them. What's my best option for loading Windows an enrolling the device?

[@IntuneTraining]

You can either boot the device and run some PowerShell to capture and upload the device hash, have your hardware vendor register the device for you, auto-register from ConfigMgr Co-Management, etc. There are several options, but essentially you would need to import your device hash into Intune. Or you could use the JSON file approach that we show, either from a USB or even a provisioning package, to bypass the registration requirement. docs.microsoft.com/en-us/windows/deployment/windows-autopilot/add-devices

[@KyleWilcox]

@@IntuneTraining Cool, that is good information. I know that Chromebooks can be enrolled in Google Chrome management by logging into them with a designated admin account. Could I do the same for PCs in Intune?

[@djamparo6636]

Hi, im not quite sure what the difference is between "Scope" and "Assignment". Could you further elaborate? Scope: for whom we allow access, Assigment: what group is targetted. Is this not the same thing?

[@IntuneTraining]

Scope is designed to combined with RBAC controls to limit who can see which items within the Intune console. Think of it as an Admin permissions/targeting setting. Assignment is which users/devices the item is targeting and will apply to. Generally you don’t need to mess with Scope unless you have a lot of admins and are trying to use granular controls to limit access to admins.

[@djhearnow3776]

Hi Guys, great videos and discussions. I wonder if you could share the script that you use for the json. Thanks for the good stuff!

[@MWJBURRELL]

Hi, Thanks for the video. Could I get the json as well please.

[@reesv01]

You would hope that in future, when signing in with your corporate e-mail addres and password, that it would simply connect to Azure, know your tenant and download the json file automatically? Or am I missing something here?..... just seems having to inject the json is a bit old school for a "User Driven" setup!

[@IntuneTraining]

We were injecting the json into the VM as it was quicker to do it that way, you can register the device from factory to autopilot/intune. If you just sign in with your work account it will land the user with local admin.

[@mistarfox23]

Hi Gents , the ConnectAutoPilotIntune is no longer working , instead the connect MS Graph command is used, how does one export the .json file ?

[@IntuneTraining]

Check out this blog for more info: sysmansquad.com/2019/12/18/autopilot-setup-part-1/

[@mistarfox23]

@@IntuneTraining Thank you, I was able to get the .json file , but my win10pro .iso that i converted to a VHDX doesnt not contain the AutoPilot folder in the Provisioning directory, I attempted to just create a new folder with "AutoPilot" booted the VM and still no Autopilot, any ideas?

[@bazzari123]

Nice one thanks, But i have only one point i appreciate if you can in somehow edit it in the video, regarding the MDM and MAM Scope , this option exclusive only for windows 10 devices and the main purpose for it to recognize when specific users try to Register their Windows 10 Device either those devices will be Automatically enrolled Into the whole MDM to receive configuration policies and Required Apps or Only on WIP Sand BOX (Apparently MAM Without enrollment) , another reason to use that if you set the MDM Scope to All or some with some users targeted , if those users tried to join windows 10 devices to Azure AD the devices will be also automatically enrolled to Intune this is why its required to enable the automatic enrollment for autopilot devices (MDM Scope) in order to allow the devices to enroll Automatically during the autopilot process once they authenticate and Join to Azure Ad on the branding page screen , if you set both options to All by default corporate devices will be enrolled in MDM scope and Personal Devices will be enrolled on MAM (WIP) Scope. Thanks.

[@johnmorgan4368]

Uhh... I missed the 1609 Feature Update.

[@RandomTorok]

Is Intune a standalone product or is it an add-on to SCCM?

[@IntuneTraining]

Both. They can be used independently or integrated together. It just depends on your needs. They both are products under the new Microsoft Endpoint Management (MEM) umbrella.