How to setup Windows autopilot in Intune

This guide will teach you how to setup Windows autopilot in Intune. To begin open the following Admin portals:

• Microsoft Entra
• Microsoft Intune

Step 1: Enable Automatic Enrollment in Intune

1. In Intune navigate to ‘Devices > Device onboarding > Enrollment > Automatic Enrollment’.
2. Select ‘Some’ if you want to allow a group of users to enroll devices into Intune or ‘All’ to allow all users to enroll devices into Intune.
3. Click ‘Save’.

Step 2: Make sure users are allowed to join devices to Microsoft Entra

1. Open Microsoft Entra and navigate to ‘Devices > Device settings’.
2. Set ‘Users may join devices to Microsoft Entra’ to ‘All’ or a selected group or groups.

Step 3: Create an Autopilot device group

1. Open Microsoft Entra and navigate to ‘Groups > All groups’
2. Create a new dynamic device group.
3. Create the group with the following rule syntax: (device.devicePhysicalIds -any (_ -contains “[ZTDId]”)) -and (device.devicePhysicalIds -any (_ -contains “[OrderID]:GROUPTAG”))
4. Change the GROUPTAG to a tag you want to use for your AutoPilot profile. In my case i named it: ‘Windows_Laptops’.
5. Save the new group.

Step 4: Create an ESP

1. Open Intune and navigate to ‘Devices > Device onboarding > Enrollment > Enrollment Status Page’.
2. Click ‘Create’ and give it a name.
3. Select ‘Yes’ at ‘Show app and profile configuration progress’.
4. Check the ESP options and change them to your organization requirements.
5. Select ‘Next’ and proceed to the Assignments.
6. Select the group you created in step 3 and create the ESP.

Step 5: Create the Autopilot profile

1. Open Intune and navigate to ‘Devices > Device onboarding > Enrollment > Deployment profiles’.
2. Click ‘Create profile’ and select ‘Windows PC’.
3. Give the profile a name and description and select ‘Next’.
4. Change the settings to your organization needs and select ‘Next’.
5. Assign the profile to the group you created in step 3 and click ‘Create’.

Check out part 2 to see how you can register and enroll devices!