Finally a real test. All of others just giving theory without a real example. Subscribed 😀

@zosoQatar

Жыл бұрын

So true

Real world test! finally! thank you so much.

Wonderful, really simple and to the point

Very well done and fully understand everything you're throwing at us! Makes complete sense! Thank you!!!

Brilliant demonstration. One that talks REAL! Brilliant

This video is immensely helpful - straight to the point and following along with you, worked like a charm. Thank you 🙂

Easy to follow thanks for video mate

thanks for making this video. filled in some of my gaps

This video is 10 stars, Great explanation and very helpful.

@theCMC

8 ай бұрын

Thank you !

That is just brilliant, thank you so much for the beneficial information. My current role is a kind of "jump in and swim" scenario, and the information you have provided helps me tremendously.

@SeedfulMusic

9 ай бұрын

Curious, what's your role? Are you systems admin? How many machines are you imaging/provisioning in your company? Thinking about using this for my company as well, would make it alot easier if we could automate some of these processes!

Thank you so much. this is a good lab

Nicely explained

This is brilliant. I've been looking for a way to bring our devices into autopilot that are already deployed. I needed the HWID and a script to grab it whilst accessing laptop via LMI remote and command prompt! Thank you!!

@theCMC

2 жыл бұрын

Are they deployed and managed via Intune or ConfigMgr?

Very informal 👌 Subscribed :D

Thanks!

Thanks for the nice video! The crackling microphone drove me a bit mad, but the informational character was so much worth :)

@theCMC

2 жыл бұрын

:-) thanks. Yeah the mic is a bit annoying. I’ve fixed that now, but i guess that doesn’t help this video 😂

thanks for share :)

Dean ignore my last comment. Should have listened to the next 10 seconds after I stopped your video!!

@theCMC

2 жыл бұрын

Thanks Richard! :-)

This is crystal clear video how it's done. I am a noob to Microsoft Intune, would it be too much to ask if you can demonstrate the very basic of enrollments (i always find this confusing) like Azure Ad Registered, MDM Enrolled, Azure AD enrolled etc. I know there are tons of articles available but i've noticed your videos have this extra bit of tip/information which makes it more helpful in understanding the concepts.

@theCMC

2 жыл бұрын

Thanks for the feedback. Glad you find them useful! Sure, I’ll do a short explainer on device states and enrolment; it can be confusing!

Finally i found an answer here, what i was exactly looking for CSV file information thank you @theCMC. i subscribed your channel 😀

Any chance that you’ll go into a deeper dive on this deployment? I’d like to see applications, configuration profiles, etc deployed to the workstation. I’m currently in a Hybrid setup but there are a few quirks to our deployment due to some other infrastructure “challenges” and while it works, I want to move to a cloud only / AADJ only model. I’m in the middle of testing this now but would love to see future videos on more real-world deployments. Thanks for the great info so far!

@theCMC

2 жыл бұрын

Sure - I can do that.

@Minerva___

2 жыл бұрын

@@theCMC that would be great! I’m not sure if you already have another video on it but full disk encryption is something I’ve been wrestling with as well. I’m still going through all of your videos so if it’s out there, I’ll find it. Thanks for providing these great resources.

@KamilHajiyev

6 ай бұрын

@@theCMC is there video? cannot find

Hello , i've tried the same script but i can't connect to the tenant , i got the error code 53000 ( This application contains sensitive information and is only accessible from: customer devices or devices that meet the requierements of the company management compliance strategy ) , what should i do ?

Great video - Love your presentation flow. Towards the end of the video you mentioned a video on provisioning existing devices with autopilot; I was unable to find it in your video library. Could you point me in the right direction?

@theCMC

Жыл бұрын

Sorry for the late reply Oscar. I didn't actually get around to making that video. I'll add it to the list!

8:28 keep in mind that this part requires internet connectivity to work.

Dean! In this vdeo you stated you would do a separate video on "Convert all targeted devices to Autopilot" please make that video as I am curious how that will play into rolling out Intune and Autopilot with existing deployed devices and how that setting will play a role. Thank you!

Thank you Dean. If i have already started doing manual enrollment and want to switch to automatic zero touch enrollment of Win10 devices. would you have a document/guide on that.

Any chance you could do the next video on what white glove is?

@theCMC

2 жыл бұрын

Sure - will do.

Thanks for explaining step by step. Quick question on AD user credentials- I see you using Global admin. what kind permission is required to enroll the devices?

@theCMC

2 жыл бұрын

Great question. To run the -Online command, you need Intune Administrator permissions.

9:30 can you build a script that would do all the commands and you would only need to enter Azure AD credentials?

Hey there, we are looking to implement this. Thanks for the great example! Is there a way to present the users with some onboarding slides? Perhaps you wanted a "These are the apps we are installing" slides...

@theCMC

2 жыл бұрын

Thanks Emil! There's nothing natively available to do that, no. The closest I've seen is the following from Joymalya Basu Roy, who has developed a solution to interrupt the native workflow for Autopilot to provide additional info to users. Check it out! joymalya.com/autopilot-hybrid-azure-ad-join-reworked-with-joy/

@Wander-iw6ej

2 жыл бұрын

We "solved" this by creating a Win32 App that deploys some PDF's to the public desktop.

Thanks for this very good and informative video, there werent really any videos they explained it as good as this! One question, since we're testing with intune right now we still dont know which licenses are needed for the user to be assigned with, i created a test user with just an office 365 e3 license and when i tried to assign, it said that the user isnt licensed for intune, what are the licenses needed so the assignment can work?

@theCMC

Жыл бұрын

You need M365 E3, rather than office 365 E3.

@theCMC

Жыл бұрын

Check this video: Licensing Autopilot? You NEED to see this! kzread.info/dash/bejne/pY6Yw8Omo7iYic4.html

@sirajch1469

Жыл бұрын

@@theCMC Thanks for the quick reply! I tested it out with my user and it worked out since i got the lincenses on there, though when i restart the device, the oobe windows doesn't change (it doesnt say "Hi, welcome to company xy!") instead there is the default oobe window. Any ideas how to fix that?

I have assigned the machine to the user . But it is not doing the personalised greeting on the initial start up . Is there anything else I need to check

Great video. I am trying to get up to speed with Intune and especially Autopilot. My question is this, I work for a church which has a private school. We issue laptops to our older students, which means we have about 300 laptops to get ready for the next school year. The laptops are already domain joined and we have AD Connect in place. What would be the best option for wiping the laptops at the end of each year and then getting them ready for the new year using Intune?

@Minerva___

2 жыл бұрын

Hey Tony, did you ever find an answer for this? I think the Fresh Start option would be the best way to get them ready for the new year or whenever you just want to get a machine back to an original configuration state. Fresh Start removes any apps that are installed on there (including OEM apps). It will ask you if you want to retain user data which keeps the device AAD Joined and allows it to re-enroll into the MDM again when an AAD enabled user signs into the device. Hope that helps or at least gets you in the right direction.

Hi, Very helpful content! One question. If you are setting this up for a new users where the device is sent directly to them from the vendor, how will they know what password use to log in?

@theCMC

2 жыл бұрын

I guess it depends. We usually wouldn’t be sending the user’s credentials with a laptop anyway, so having it go direct from the vendor doesn’t change the problem too much. We have seen customers sending initial passwords via mail or email, separately from the username. The safest method is probably to have the user phone the help desk when they receive the device so they can reset their password. Another method may be to send the user a Temporary Access Pass, which is valid only for a day, and ask them to log in to their account from a personal phone or browser to set their credentials.

It looks like this process currently doesn't work. When running the script the device information uploaded to endpoint manager is not recognised by dynamic membership groups. If you update Windows 10 to the latest version then the powershell no longer finds the hardware hash in WMI. I think this is only an issue in Windows 10 and a very recent problem. Let me know if you find out a way round this

Dean in the expression, (device.devicePhysicalIDs - any (_ contains "[ZTDId]")) is the ZTDId part something you have allocated via the portal, or is an inherent expression in ALL AutoPilot Devices? Don't want to just copy it in, want to understand where it comes from.

@theCMC

2 жыл бұрын

Appreciate you've sorted this now, but to answer the question for others - all devices created by the Autopilot devices import process are tagged with ZTDId (Zero Touch Deployment Id) by default. This cannot be modified.

Hi how to deploy pfx password protected file on device personal local through intune portal

Wonder how.. i am using this video and its great.. with the "ztdId" option Curious as how you would segregate different domains within the same tenant..trying to figure out how to split them up based on domain membership( or site location) or if its even possible

@theCMC

2 жыл бұрын

Group tags are great for that.

I know this is a daft question, but if it's a new pc/laptop then it won't have the necessary WiFi Connections to pull the Powershell Script of the internet. Am I right in assuming that you have your new PC connected in via ethernet cable? By the way bloody good video.

@theCMC

2 жыл бұрын

Correct. In the video I’m using a VM, so it’s effectively wired with a cable. If not using Wired, the device will prompt for the Keyboard layout to be chosen, then prompt for you to connect to Wifi before moving forward. Once those steps are completed you can proceed with the steps in the video :-) Thanks for the feedback by the way! Really appreciated.

Got a question if you want to use custom images bringing corporate software right away to the autopilot which would be the process?

@theCMC

Жыл бұрын

That would be something like OSDCloud or MDT with a custom WIM, possibly from WIMWitch? Both of these can add the autopilot json file to the device during provisioning. OSDCloud: Is this the FUTURE of Windows Deployment? kzread.info/dash/bejne/iKqrzLOqYpPWfqw.html WIMWitch: Getting Started with WIM Witch kzread.info/dash/bejne/Yp-X2biveNerpLg.html

Subscribed, But I'm trying to test this on a Virtual Machine, but not come up on the Sign-in page once it turn on, any idea? I have configured all the things as in the video. Please help.

@theCMC

2 жыл бұрын

Is the device in the autopilot list on the portal? It can take a little while for the device to be updated on the list.

@theCMC

2 жыл бұрын

I think I saw that you replied to say yes it is in the list, but I think that comment has been removed by YT. If it’s in the list, then make sure that you aren’t trying to enable White Glove, as that’s not possible to use in a VM (by design).

I have bought a refurbished Thinkpad T470 and after I re-installed Windows10 completely, I'm asked to login with a company e-mail address. I could however install W10, but the laptop still has a company name. Just a question: how can I see autopilot is installed and still active on the laptop? I might be able to send a mail to that company IT-department and ask them to remove the autopilot at all. What information do they need to know from my laptop? p/n, s/n, and what more? Will it be completely removed from the laptop, or will there be always a sign of a (former) autopilot function? The laptop runs W10 now, are there things I can not do as long it is running autopilot? (ps, the laptop is not stolen as it was bought in a second hand shop!) Hope you are able to put me in the right direction.

@theCMC

Жыл бұрын

Interesting question. If you perform a fresh install of Windows from USB and it still asks for company login, then that is Autopilot. IT would need the device name or serial number. You could get the name by pressing F10 at the prompt for email and typing “hostname” in the command prompt.

Good detailed video , BUT.. OK here's a prob that Ive found no answers for ! Win10 laptops already registered in AAD (Entra) . Need to enrol into Intune ..no AD domains so no GPO , users dont have local admin access so cant manually enrol. Local admin access not possible as all are remote users. Need to enrol without logging onto devices . Hav found nothing that solves this - wll be amazed if any solution offered!!

Nice video. The hybrid autopilot. Can you show how we can have the device connected via vpn connection. For hybrid autopilot you need a vpn connection? Right

@theCMC

3 жыл бұрын

Thanks! If you're doing Hybrid AP for users who are remote, then a VPN is required only for the initial user login, i.e., you can successfully deploy a device away from the office without a VPN, but the user must login with direct line-of-sight to a DC. I won't be showing this in the next Hybrid AP video (as it's already recorded and in editing), but I can add it to the list for future if it's something you'd be interested in seeing! /Dean

@imranawan7908

3 жыл бұрын

@@theCMC yes please that would be great. How users can log on via vpn for the first time when deployed with autopilot. I cannot find any videos on that

This video is great but.. it will not launch the autopilot after config. Using vmware vm to test. It mnakes it to the portal gets added to the group fine.. seems to all be configured correct but always just sits at the first oobe screen.. any thoughts on this?

@fenixdood3836

2 жыл бұрын

Seems i had to nav thru the keyboard stup first to get to the login screen.. but then when so far I am not getting the user name assigned to show,,,will continute to test

@fenixdood3836

2 жыл бұрын

any idea why the ser name wont appear on the wlecome screen?. redid this a cpl of time with no luck it does work for loggin in but the username juat doesnt show up for customization

how did you create a add dynamic group using the group tag like with the ztdId query

@fenixdood3836

2 жыл бұрын

figured it out "OrderID"

@theCMC

2 жыл бұрын

Yep!

Can the OEM provider send you the Hardware ID directly ?

@theCMC

2 жыл бұрын

Whilst they technically could grab the hardware hash by running the collection script, most OEMs don’t tend to unbox and switch on devices before they ship them to you, so no. They can upload to your tenant directly via their OEM Partner Center; you just need to confirm with them at the point of order and accept their Partner Center permission request using a Global Admin.

Doesn't work - restarting brings me to the Windows installation

If you already have existing devices, is there another way of importing them into AutoPilot devices without running the power shell script and importing the HWID? Cause that would mean remotely accessing every device here and would find that counter-productive?... Can you pull devices over from 'All Devices' or Intune? The last question, can this method automatically create an admin user with a specific password every time so when I login remotely, I know the admin username and password? Hopefully, that makes sense!

@theCMC

2 жыл бұрын

Hi Chad, When deploying an AP profile to a group of AAD devices, you can specify that they are converted to Autopilot devices at that stage. No need to collect the HWID for devices that are already in AAD / Intune.

@theCMC

2 жыл бұрын

With regards to the local admin thing, this is not supported by Intune / Autopilot. Local Admin accounts are theoretically not required, as any AAD user account can be made to be local admin through Intune role assignment. That said, there is a community solution that I made a video about: Getting Started with CloudLAPS kzread.info/dash/bejne/k3ajqZOro9mwXdI.html

Is there way to run this script in MDT task sequence while leaving windows 11 in OOBE?

@theCMC

Жыл бұрын

Pretty certain you can do that, but if you’re using MDT and imaging you should probably just put the Autopilot Profile in the image (or move it to the right place using a TS step). Here’s an example; osddeployment.dk/2018/12/08/how-to-deploy-autopilot-device-fast-with-mdt/

@martijn4525

Жыл бұрын

@@theCMC I actually followed that blog once, and it works pretty nicely, but it doesn't upload the hardware hash, so the device doesn't show up in Intune EPM. I tried to use the Powershell feature in WinPE and even tried to update powershell 5.1 to 7 to run the commands neccesary, but that didn't work. I don't want to manually type the commands or run a script on usb to upload the hardware hash.

@theCMC

Жыл бұрын

You don’t need the device hardware hash uploaded for the device to appear in Intune once the user has enrolled it via Autopilot. The process would be: 1) Build machine with AP profile built in 2) Give machine to user 3) User logs in and completes enrollment automatically 4) Machine appears in AAD and Intune

Question, does this setup don't need any Antivirus anymore to any devices being enrolled?

@rdontput733

2 жыл бұрын

Sorry im sooo dull. Dont we need it anymore?

@theCMC

2 жыл бұрын

@@rdontput733 Sorry! I missed this question! Windows 10 and 11 devices include Windows Defender antivirus / antimalware by default. This is a fairly basic signature-based protection. You can look at Defender for Endpoint to improve protection, but this requires an additional license. If you install a third party AV product, Windows Defender will disable itself until whilst the other product is active. Hope that helps.

@theCMC

2 жыл бұрын

I saw that you replied, @rDont put, but KZread likes to remove reply comments from our videos for no good reason. If you post a new comment, it should stick.

Junior question here, im the solo IT guy and had been deploying laptops manually for our company in the beginning because i had no experience in autopilot. so i basically installed everything manually and after joined them to azure ad. What will happen if i add these devices to autopilot? will it fully reset the laptop because i added them after in autopilot using the cmd commands etc?

@theCMC

2 жыл бұрын

Hey - Autopilot only takes affect during Out of Box Experience. Adding devices to the Autopilot list, deploying profiles or anything else related to Autopilot will not cause a device to take any action at all, until it's reset. The only "Autopilot" related thing that would cause a device to reset would be an Autopilot Reset device action from Intune. /Dean

@MuslimWojak

2 жыл бұрын

Oh okay thanks! So just adding them afterwards won't really "change" anything to the device except for some policies i might have assigned to the autopilot group?

@theCMC

2 жыл бұрын

Correct, exactly.

The boss of my boss wants to replace sccm with in tune autopilot... Not sure how to handle this as we are a non-profit and half of the users barely know how to use the computer... If the laptop does not arrive ready to go... I am not sure wtf I'm going to do with them users

Maybe a new comment will work..yes found the issue and its MS that took away the option to add username

@theCMC

2 жыл бұрын

oh! they did? That's interesting. I wasn't aware of that.

so the oem has a space on azure or do they have your azure ad creds? lol

@theCMC

Жыл бұрын

The OEM (and Partners) have a partner portal where they can upload devices for you. Or they automate it with powershell. If they ask for your Azure creds, find a different partner.

@matiashuartamendia7977

Жыл бұрын

@@theCMC thanks!

Hello, i did all the steps exactly the same and waited for everything to sync up, but still when i restart the VM it does not go the the sign in page its like i did nothing, what can i do ?

@Treebeard88

2 жыл бұрын

Does the VM need to be enrolled in intunes for that to work ??

@theCMC

2 жыл бұрын

Check that you have the company branding set up in AzureAD

@theCMC

2 жыл бұрын

Also check this video for a full guide: The Ultimate Guide to Intune Autopilot - How to use Windows Autopilot with Microsoft Intune kzread.info/dash/bejne/pmqGrtqsd6azZqQ.html

@Treebeard88

2 жыл бұрын

@@theCMC Company branding is definitely setup, i am now switching from VMware pro to virtual box maybe that helps, maybe the issue is with the VM itself

@Treebeard88

2 жыл бұрын

And thank you i really enjoyed your videos, i learned alot😀

Device has to be connected to the internet or it will not do anything. Just a friendly note.

@theCMC

2 жыл бұрын

Great info, thanks. I did completely miss that info out. It’s worth also noting that if the device doesn’t have Ethernet, it will prompt for keyboard language so that you can join a wifi network.

I continue to have no members in the group. Even after leaving it for over 24 hours. Following the steps exactly with a VM. Bizarre

@theCMC

10 ай бұрын

Very odd. Reach out on Twitter or LinkedIn if you like and we can talk through it /dean

@PatrickGarcha

10 ай бұрын

Hey mate! Ignore me, somehow didn't grasp that I had to reset the PC at the time. Was just restarting. Works like a charm. Thanks for getting me into Intune!@@theCMC

It would be nice if this works 100%, but sadly 30-40% of the devices is not added to autopilot until hours later, even if they say they are added. This making our IT guy wait until the next day to finish the device setup. Sadly, Intune is very slow, even incredible slow at times. I have experienced devices added to autopilot taking up to 5 days to be added in intune.

@theCMC

2 жыл бұрын

Indeed. As I called out in the video, the preferred method is to either use an OEM or distributor to perform the device registration for you.

why would youtube be removing my comments.. this is strange.. there is an artcile about it at microsoft. i post the link and it gets removed.

@theCMC

2 жыл бұрын

There are a lot of reports across the Creators forums. a lot of legitimate comments are being removed incorrectly - we've reported it also, as it's affecting our channel.

Should speak even faster

Thanks for the Great video mate, helped heaps. CloudManagement.Community - Windows Autopilot Intune Deployment Easy Complete