119: Autopilot User Enrollment
Implementation Effort: Medium
User Impact: Medium
Overview
Windows Autopilot user-driven mode is the standard self-service provisioning pattern for many Microsoft Entra joined Windows devices. It allows a user to receive a new or reset device, sign in with organizational credentials, and let Microsoft Intune apply required apps, policies, and security controls during setup. In a Zero Trust program, this supports consistent provisioning without manual imaging and reduces the need for broad technician access to user devices.
Implementation Guidance
- Use the current Windows Autopilot terminology in the published content so admins can find the matching Microsoft documentation and admin-center settings. For most scenarios, call this user-driven mode.
- Prepare the device registration process early. Decide whether the OEM, reseller, partner, or internal team will provide hardware hashes and how duplicates or replacement devices will be handled.
- Create a deployment profile that reflects your target join model, usually Microsoft Entra join for new cloud-managed devices. Review naming, privacy settings, user account type, and enrollment status page behavior.
- Keep the initial required app set small. The first sign-in experience should prioritize security, connectivity, and the few business-critical apps needed on day one; everything else can be phased later.
- Pilot with both office and remote users. Measure first-boot time, MFA prompts, Wi-Fi readiness, device ESP reliability, and whether users have enough instructions to complete setup without local IT help.
- Define reset, reissue, and replacement procedures so user-driven mode remains the default even when devices are repurposed or returned.
Video Walkthrough
Reference
- Windows Autopilot user-driven mode — Describes the user-driven Windows Autopilot deployment flow.
- Configure Windows Autopilot profiles — Explains how to create and manage Windows Autopilot deployment profiles in Intune.
- Step 5 – Enroll devices in Microsoft Intune - Microsoft Intune — Includes guidance for enabling and using the Enrollment Status Page during Intune enrollment.