Mastering Windows Autopilot with Microsoft Intune

Explore how the Windows Autopilot hardware hash enables device enrollment by adding devices to the Autopilot devices list and targeting Autopilot profiles, and reveal the hash's inner workings.

Explore how autopilot hardware hash works as a base64 encoding, not a true hash, containing date and time details while still enabling device identification.

Learn how to obtain and decode the hardware hash with the Autopilot info script and the OS three tool, and why it is not unique and changes each run.

Demonstrates collecting the autopilot hardware hash with a PowerShell script, exporting to a file or USB, signing into the tenant, and verifying device import.

Discover how partners gain the advantage in autopilot by uploading devices using the partner center with just serial number, make, and model; no device boot needed.

Explore Windows Autopilot in action, create autopilot groups for targeting deployments, configure cloud only and hybrid autopilot profiles, and deploy a VM.

Create a dynamic group for autopilot devices in the endpoint manager admin center using a dynamic membership query on device ids and the ztdi deployment identifier.

Create a cloud-only autopilot profile in endpoint manager using user-driven enrollment, Azure joined devices, and targeted group assignments, then deploy the profile to a device for demonstration.

Deploy a Windows autopilot setup to a virtual machine, verify company branding, sign in with Windows Hello, and achieve zero-touch deployment for work or school devices.

Troubleshoot Windows Autopilot using the enrollment status page to diagnose where Autopilot goes wrong and learn how to collect and review logs to get devices back on track quickly.

Enable the enrollment status page (ASP) to monitor and lock device access during first sign-in, and avoid mixing MSI and Win32 apps in autopilot due to the trusted installer.

Configure the enrollment status page in Windows autopilot by editing the default ESP for all users and devices, setting a 60-minute install threshold and mandatory apps.

Review the enrollment status page to confirm hardware security, network joining, and mdm registration, then apply security policies, certificates, network connections, and apps, before signing the user into the desktop.

Troubleshoot autopilot app install failures by collecting diagnostics with the MDM diagnostics tool, exporting an observed timeline, and analyzing Intune and Graph-based reports of Win32 app installations.

Windows 11 enrollment status page adds view diagnostics to collect device details and logs, aiding Autopilot troubleshooting and deployment issue diagnosis.