Automate Enrollment of Windows 10 devices with Windows Autopilot

Step #1: Create an AutoPilot profile

The first step is to create an AutoPilot profile, which will be associated to the devices. To create the profile, follow the steps given below

• Go to this link and login if need be. You can also go to Windows Store for Business and click on Manage from the top menu and select Devices. Click on AutoPilot deployment and select Create new profile



• Provide a name for the profile. The following settings cannot be configured, as they are restricted by default:
  • Cortana, OneDrive and OEM registration setup
  • Work or school setup
  • Sign-in experience with company brand
  In addition to this, you can also choose to skip configuring of privacy settings, local admin account creation and End-User License Agreement (EULA). Once done click on Create, to complete the profile creation.

Step #2: Obtain device details

You need to obtain device details, which is then to be uploaded as explained in Step #3. This data is usually available with the resellers or if you want to add details yourself, you can obtain this data as explained below:

• Download the zip file given here, on a Windows machine and expand its contents.
• Now open Command Prompt as an Administrator, on the expanded folder and run the following script after providing relevant data for the requested parameters, as explained in the table below. This script can obtain device details, only if present in the same domain.

SPECIFICATION	DESCRIPTION
common-username	The user name associated with the IT administrator account, present in all the machines
password	The password associated with the IT administrator account, specified previously.
machineName1,machineName2,...	The names of the machines, you want to manage using MDM.
outputFileName	Name of the file, where the device/machine details are to be saved.





powershell -ExecutionPolicy bypass .\Get-DeviceDetails.ps1 -username <common-username> -password <password> -hostNameList <machineName1,machineName2,...> -outputFile <outputFileName>

Step #3: Upload device details

The next step is to upload the device details and associate the profile created in Step #2. To do that, follow the steps given below:

• Click on the Add devices link and upload the CSV file, containing the device details created in Step #1.

  

• Once uploaded, you are prompted to name the device list uploaded to proceed with device addition. You can verify it has been added by clicking on Refresh my list.







• After the devices are added, you can choose to associate the profile to all the devices or selected devices using the checkbox(es) present.



• After selecting the devices, click on the AutoPilot deployment link and select the profile created.



• On successful association, you will see the profile name listed under the Profile column.

Step #3.1 (Optional): Branding the device activation screen

In addition to skipping the initial setup screens, you can also choose to optionally personalize the device activation screens to display the organization name and/or logo. To do that, follow the below given steps:

• Go to this link and login, if need be. You can also go to Azure portal, click on Azure Active Directory and select Company Branding. Click on the Configure dialog box as shown on the image below.



• Now configure details such as the organization logo and the background color for the sign in screen etc., Once done, click on Save. You can also choose to configure the sign in screen for different languages by clicking on New Language option, which is shown on selecting Company Branding.



• You can also display the organization name on the sign in screen. To do that, go to this link or navigate to Azure Active Directory and select Properties. Provide the organization name under Name, for it to be displayed on the sign in screen. Once done, click on Save.

Step #4: Assign Users

The devices can either be enrolled by the users themselves or enrolled by the Admin and then assign it to the corresponding user. Now, you need to assign users to these enrolled device, to complete enrollment. Additionally, you can also add devices to multiple groups to automate the distribution of apps, profiles and documents to devices. To do that, follow the steps given below:

• On the MDM server, click on Enrollment from the top menu and select Windows Azure Enrollment (AutoPilot), from the left pane.
• Here all the devices enrolled via Azure enrollment but yet to be assigned users are listed.
• You can assign users on a device-to-device basis, by clicking on the Assign User option present under Action. If the users themselves have enrolled the device, you need to select Same User for the option Assign to or New User, if it was enrolled by the Admin. You can also assign users in bulk, by click on the Assign Users button, present above the table and uploading a CSV file, based on the specifications given here.

What happens on the device?

During device activation, you need to configure Wi-Fi settings, region and Keyboard settings after which the device will show the following screen:

The device restarts, after which the user is prompted to specify AD credentials. Once done, the device gets enrolled with MDM, after which users are to be assigned to the enrolled devices as explained here.