Overview of Windows Autopilot device preparation

Use Windows Autopilot device preparation to set up and configure new devices, getting them ready for productive use. Windows Autopilot device preparation aims to simplify device deployment by delivering consistent configurations, enhancing the overall setup speed, and improving troubleshooting capabilities.

This article explores the capabilities of the Windows Autopilot device preparation, its benefits for administrators, and the user experience it offers.

  • Reduce the time IT spends on deploying devices.
  • Reduce the infrastructure required to maintain the devices.
  • Maximize ease of use for all types of end users.
  • Improve troubleshooting.
  • Achieve near real-time deployment status and monitoring.

Note

This article is for Windows Autopilot device preparation. For Windows Autopilot, see Overview of Windows Autopilot.

Requirements

  • Windows 11, version 24H2 or later.

  • Windows 11, version 23H2 with KB5035942 or later.

  • Windows 11, version 22H2 with KB5035942 or later.

  • Microsoft Entra ID. Only Microsoft Entra join is supported.

  • If the device is registered as a Windows Autopilot device, which deployment runs depends on the device's association state.

    • If the device isn't associated with the tenant, the Windows Autopilot profile takes precedence.
    • If the device is associated, device association takes precedence and the Windows Autopilot device preparation deployment runs.

    To use Windows Autopilot device preparation on a registered device without associating it, first deregister the device.

For additional detailed requirements, see Windows Autopilot device preparation requirements.

Process overview

When new Windows devices are initially deployed, Windows Autopilot device preparation uses the OEM-optimized version of Windows client. The OEM-optimized version of Windows client is preinstalled on the device. You don't need to maintain custom images and drivers for every device model. Instead of re-imaging the device, by using Windows Autopilot device preparation, you can transform the existing Windows installation into a business-ready state that can:

  • Deliver Windows Autopilot device preparation configuration during device provisioning.

  • Automatically add devices to the device security group and receive selected applications and PowerShell scripts assigned to the group.

Windows Autopilot device preparation improvements

Windows Autopilot device preparation is an improved profile experience that incorporates common customer requests. It improves the onboarding experience by providing a profile experience to deploy configurations efficiently, consistently, and remove the complexity out of troubleshooting. Its goal is to be:

  • Simple
  • Fast
  • Observable
  • Reliable

New features in Windows Autopilot device preparation include:

  • Utilizing enrollment time grouping in Intune. The device is added to a device security group at enrollment time and configuration is delivered immediately. This feature provides a faster and more reliable setup. For more information, see Enrollment Time Grouping.

  • Granular reporting. Improved monitoring and troubleshooting. Monitoring and reporting with near real-time status of deployments, including:

    • Applications status
    • PowerShell scripts status
    • Deployment time

    For more information, see Windows Autopilot device preparation reporting and monitoring.

  • Support for Government Community Cloud High (GCCH) and Department of Defense (DoD) environments. Windows Autopilot device preparation supports GCCH and DoD environments.

Important

Windows 365 Flex in shared mode isn't supported for GCCH and DoD at this time.

Capabilities

Windows Autopilot device preparation capabilities include:

  • Set up user-driven or automatic deployment flow.
  • By default, ensure users are standard non-administrator users.
  • Select application and PowerShell script to deliver during device setup.
  • Simplified and clear OOBE user experience with percentage progress indicator for user-driven flows.
  • Deployment report for better troubleshooting.

Improved experiences

Admin experience

  • Windows Autopilot device preparation simplifies admin configuration by providing a single profile to provision all policies in one location, including deployment and OOBE settings.
  • Deploy line-of-business (LOB) and Win32 applications in the same deployment.

User experience

Windows Autopilot device preparation also improves the user experience in the following ways:

  • A simplified view during OOBE where the percentage of progress is displayed.
  • The experience is more consistent.
  • The user is informed when the OOBE setup is complete.
  • When issues arise, you can export logs with ease.
  • The end user gets to the desktop faster.

Troubleshooting and reporting

Windows Autopilot device preparation offers near real-time status updates on deployments. Windows Autopilot device preparation monitoring includes application and PowerShell script status information, allowing for improved troubleshooting and reporting. Deployment monitoring includes the following features:

  • Easily track which devices went through Windows Autopilot device preparation.

  • Track status and deployment phase for each device in near real-time.

  • Each device has the following details in the monitoring report:

    • Device details
    • Profile name and version
    • Deployment status details
    • Apps applied with status
    • Scripts applied with status

Enrollment time grouping

The key to Windows Autopilot device preparation is enrollment time grouping. When a user authenticates into a device, the device is added to a predefined device security group during enrollment. The device then receives applications, scripts, and policies assigned to that device group. When you directly assign devices to the device group, the deployment of applications, scripts, and policies happens faster and more efficiently than when you use a dynamic device group.

Enrollment time grouping consists of the following phases:

  • Configure applications and policies to a security group. User authenticates and the Windows Autopilot device preparation configuration is delivered.
  • Select applications and PowerShell scripts to install during OOBE. The device installs selected applications and PowerShell scripts assigned to the device security group. The device also joins the device security group.

For Windows Autopilot device preparation:

  • You select the device group in the Windows Autopilot device preparation profile.
  • Only applications and PowerShell scripts that you select in the Windows Autopilot device preparation profile deploy during OOBE. If the device group has other applications or PowerShell scripts assigned, the device installs them after the Windows Autopilot device preparation deployment finishes.
  • For policies, Windows Autopilot device preparation syncs any policies assigned to the device group. However, it doesn't track if the policies are applied during the deployment. The policies might be applied either during the deployment or after the deployment finishes.

For more information, see Enrollment time grouping in Microsoft Intune.

Corporate identifiers for Windows

Windows Autopilot device preparation supports the Intune corporate identifier enrollment feature. By using corporate identifiers in Intune, you can pre-upload Windows device identifiers such as the serial number, manufacturer, and model. This process ensures only trusted devices go through Windows Autopilot device preparation.

Windows Autopilot device preparation only requires corporate identifiers for Windows if you use Intune enrollment restrictions to block personal device enrollments. For more information, see:

Device association

Windows Autopilot device preparation supports device association, which binds a physical Windows 11 device to your tenant before enrollment. Associated devices are automatically marked as corporate-owned and can receive device-targeted policy assignments and additional OOBE customizations. For more information, see Overview of Windows Autopilot device association.

Tutorial

For tutorials with detailed instructions on configuring Windows Autopilot device preparation, see Windows Autopilot device preparation scenarios.

Related content

  • Last updated on