Purpose:
To streamline Windows device deployment using Windows Autopilot with a temporary provisioning account ([email protected]) and then transition the device to the intended user with proper configuration and cleanup.
Pre-provision the device by following the below steps:
- Boot the laptop and connect to Wi-Fi.
- Autopilot will begin provisioning using the assigned profile.
- Sign in as [email protected] to complete setup and install required apps. Use the iPad next to Shaun's desk to get Authenticator code.
Pre-provisioning set up:
SKIP TO "TRANSITION TO END USER" BELOW IF YOU RECEIVED THIS LAPTOP WITH A "PRE-PROVISIONED" STICKER
Register device with Autopilot and assign Autopilot profile using this guide.
If the device is not in the Enrollment area of Devices in Intune, please use this guide to get the Hash. Make sure the serial/device is deleted from the Devices area of Intune first.
Transition to the end user:
a. Change Primary User in Intune
- Go to Intune Admin Center > Devices > Search for and select the device.
- Click Properties > Primary User > Change to the actual user (e.g., [email protected]).
b. Sign In as End User (either with TAPs or their password) on the new laptop
- Sign in as the user multiple times to establish their profile and make their password the default sign-in method.
- This ensures biometric or PIN setup is tied to their credentials.
c. Remove Temporary Profile
- Log in as admin or use elevated privileges in Command Prompt.
- Delete the [email protected] profile:
Remove-Item -Path "C:\Users\itdeploy" -Recurse -Force
- Optionally, remove the account by going to C:\Users and delete the itdeploy folder.
d. Use the attached checklist to complete laptop setup after the "Synced Company Portal" step.