Focus of This Guide
This guide focuses on a specific aspect of Windows Autopilot – registering a device during the Out-of-Box Experience (OOBE) using an online method. This approach is particularly useful for IT administrators who need to enroll devices into their organization’s management infrastructure without needing physical access to each device. The process involves using PowerShell to authenticate with your Azure AD tenant and upload necessary device details for Autopilot registration.
Prerequisites
- A device running a compatible version of Windows.
- Access to an Azure Active Directory (AAD) account with necessary permissions.
- PowerShell installed on the device.
Start the Out-of-Box Experience (OOBE):
- Begin the initial setup process for your Windows device. This is typically the first thing you see when you start a new Windows device for the first time.
Open Command Prompt during OOBE:
- During the OOBE, press Shift + F10 to open the Command Prompt. On some devices, you might need to press Fn + Shift + F10.
Launch PowerShell:
- In the Command Prompt window, type PowerShell and press Enter. This switches the context from Command Prompt to PowerShell.
Set Execution Policy:
- Run the command Set-ExecutionPolicy bypass. This command changes the PowerShell execution policy to bypass, which allows scripts to run without being blocked.
Install the Get-WindowsAutoPilotInfo Script:
- Type Install-Script -Name Get-WindowsAutoPilotInfo and press Enter. This command installs a script that can retrieve information necessary for Autopilot registration.
- If prompted, confirm the installation by pressing Y.
Run the Get-WindowsAutoPilotInfo Script:
- After the script is installed, run it by typing Get-WindowsAutoPilotInfo.ps1 -Online and press Enter.
- This script collects the device’s hardware details (like the serial number and hardware hash) and prepares it for Autopilot registration.
Authenticate with Azure AD:
- You will be prompted to sign in with your Azure AD credentials. Enter your username and password.
- Ensure that the account used has the necessary permissions to enrol devices in Autopilot.
Complete the Registration:
- After authentication, the script will automatically upload the device’s information to your Azure AD tenant. This step links the device to your organization for management through Intune and Autopilot.
Finish the OOBE:
- Once the script completes its execution, you can close PowerShell and Command Prompt, then continue with the rest of the OOBE process.
Verification (Optional):
- To verify that the device is registered, you can log into the Microsoft Intune Admin Center and check under Devices > Windows > Windows Enrollment > Devices. The new device should be listed there.
Post-Registration
- After the device is registered with Autopilot, it can be managed through Microsoft Intune and will follow the deployment profile assigned to it.