Purpose:
To streamline Windows device deployment using Windows Autopilot with a temporary provisioning account ([email protected]) and then transition the device to the intended user with proper configuration and cleanup.
Pre-provisioning set up:
SKIP TO "TRANSITION TO END USER" BELOW IF YOU RECEIVED THIS LAPTOP WITH A QR CODE
Register device with Autopilot and assign Autopilot profile using this guide.
If the device is not in the enrollment area of Devices in Intune, please use this guide to get the Hash.
Pre-provision the device by following the below steps:
- Boot the laptop and connect to Wi-Fi.
- Autopilot will begin provisioning using the assigned profile.
- Sign in as [email protected] to complete setup and install required apps.
Transition to the end user:
a. Change Primary User in Intune
- Go to Intune Admin Center > Devices > Select the device.
- Click Properties > Primary User > Change to the actual user (e.g., [email protected]).
b. Sign In as End User (either with TAPs or their password)
- Sign in as the user multiple times to establish their profile and make their password the default sign-in method.
- This ensures biometric or PIN setup is tied to their credentials.
c. Remove Temporary Profile
- Log in as admin or use elevated privileges in Command Prompt.
- Delete the [email protected] profile:
Remove-Item -Path "C:\Users\itdeploy" -Recurse -Force
- Optionally, remove the account from Settings > Accounts > Access work or school or go to C:\Users and delete the profile.