Windows Autopilot Enrollment

Licensing Required:

Intune is included in the following licenses:

Microsoft 365 E5
Microsoft 365 E3
Enterprise Mobility + Security E5
Enterprise Mobility + Security E3
Microsoft 365 Business Premium
Microsoft 365 F1
Microsoft 365 F3
Microsoft 365 Government G5
Microsoft 365 Government G3

Intune for Education is included in the following licenses:

Microsoft 365 Education A5
Microsoft 365 Education A3

Step 1: Enable Intune to manage MDM under Azure AD 

Open Azure AD Mobility --> Microsoft Intune + Microsoft Intune Enrollment

Step 2: Capture the hardware ID

Open an elevated Windows PowerShell prompt and run the following commands. These commands are the same regardless of whether you are using a VM or a physical device. Note: This step can only be performed AFTER windows has been installed on the device

md c:\HWID

Set-Location c:\HWID

Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force

Install-Script -Name Get-WindowsAutopilotInfo -Force

$env:Path += ";C:\Program Files\WindowsPowerShell\Scripts"

Get-WindowsAutopilotInfo.ps1 -OutputFile AutopilotHWID.csv

The csv file can be found in C:\HWID folder.

After importing the HWID into Intune, reset the windows device.

Step 3: Create A Dynamic Device Group In Azure AD

Open Azure AD --> Groups --> Add Group --> Assignment Dynamic

rule syntax: (device.devicePhysicalIds -any _ -contains "[ZTDId]")

Per the rule - serial numbered devices are added into this group dynamically

Step 4: Create an AutoPilot Profile

Open Endpoint manager --> Devices --> Windows Enrollment --> Deployment profiles --> Create New

Name the policy: user driven policy

Below is common configuration, these options should be tailored as per Organization requirement:

Step 5: Restart the Device

Restart the device to see the enrollment page. Enter credentials and allow Intune to apply device and app configurations to the device

Once the device logs into Windows 10, the device is fully configured and ready for use

Microsoft Article: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm