question

MikeGorski-8096 avatar image
0 Votes"
MikeGorski-8096 asked LuDaiMSFT-0289 commented

Autopilot Enrollment Device Limit

Hello all. Does anyone know if there is a device enrollment limit for a user that enrolls devices with Autopilot in self deploy mode? To provide some background, I have a process where I use SCCM to image laptops that are left in workgroups and never joined to a domain. After imaging, the laptops are tested for QA reasons and then shipped to the user. I would like to enroll these machines in Intune and join them to Azure AD before they are shipped. After much research I think using Autopilot in self deploy mode will be the best enrollment method. My question is after a laptop is imaged and OOBE runs to kick off Autopilot enrollment, a user must log in to complete the process. Is there a limit to the number of devices this user can enroll?

I am aware of the device enrollment limit settings in Azure and Intune but when I have an Autopilot enrolled device and I check it in Azure AD and Intune, neither show a user for the enrolled device, unlike when using a DEM account or bulk enrollment. This makes me think there is no limit for Autopilot because there is no username presented so how would I track it?


Thanks in advance.

mem-intune-enrollmentmem-autopilot
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

3 Answers

sandyzeng avatar image
0 Votes"
sandyzeng answered MikeGorski-8096 commented

Hello @MikeGorski-8096 .

"device enrollment limit settings in Azure and Intune", are you asking Intune enrollment restriction limit for Autopilot or Azure AD join limit for Autopilot?
Intune enrollment restriction limit is only for BYOD device

Device limit restrictions don't apply for the following Windows enrollment types:

Co-managed enrollments
GPO enrollments
Azure Active Directory joined enrollments
Bulk Azure Active Directory joined enrollments
Autopilot enrollments
Device Enrollment Manager enrollments
Device limit restrictions are not enforced for these enrollment types because they're considered shared device scenarios. You can set hard limits for these enrollment types in Azure Active Directory.

· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MikeGorski-8096 avatar image MikeGorski-8096 ·

Hi @sandyzeng. I am trying to determine if I use Autopilot in self deploy mode (so it enrolls in Intune and joins Azure AD) and I use my credentials to complete the enrollment when OOBE runs, is there a maximum number of devices that I can enroll? Based on your reply, I think the answer is no, there isn't a limit, which is exactly what I am hoping for.

Thanks.

0 Votes 0 ·
NickHogarth-MVP avatar image
0 Votes"
NickHogarth-MVP answered MikeGorski-8096 commented

You can also use pre-provisioning (white glove) with Autopilot to prepare the device and then ship it off to the user. Then the user can authenticate with their credentials once they receive the device. https://docs.microsoft.com/en-us/mem/autopilot/pre-provision

· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MikeGorski-8096 avatar image MikeGorski-8096 ·

Hi NickHogarth-MVP and thanks for your input. I thought doing this way but it will not work for us. After a laptop is imaged, it is put through a QA process to ensure all required apps are installed and everything is working properly, and then it is sent to the user. If I used white glove, I would need to build and then send to the user w/o running QA, which I cannot not do. For this to work, I would need to build it, run QA, then register it with Autopilot, then run OOBE which is a lot of additional overhead and not ideal. Unless there is a way to have the PC registered with Autopilot and then cancel out of enrollment when OOBE runs. I could then have the QA person run a small script to run sysprep and have OOBE run and next boot. Unfortunately I don't' believe canceling out of enrollment is possible.

0 Votes 0 ·
LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@MikeGorski-8096 Thanks for posting in our Q&A.

For Enrollment Device Limit, based on my experience, intune does not limit the number of Autopilot enrollment devices. We can read the following article to get some information about device limit.
https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#create-a-device-limit-restriction

Thanks for understanding and have a nice day.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MikeGorski-8096 avatar image MikeGorski-8096 ·

Hi LuDaiMSFT-0289. Yes I've read this document before but I am unable to tell if this also applies to Windows Autopilot enrolled devices. In addition, I am looking to use self deploy mode which joins the laptop to Azure AD and can't tell if there is a separate maximum limit. I know there is if I were to manually join a PC to Azure AD (based on how our tenant is configured.)

0 Votes 0 ·
LuDaiMSFT-0289 avatar image LuDaiMSFT-0289 MikeGorski-8096 ·

@MikeGorski-8096 Thanks for your reply.

Device limit restrictions don't apply for Autopilot enrolled devices.

For self-deploying mode, I find that it doesn't associate a user with the device. It doesn't specify a user ID and password in the process. We can read the following article as a reference. So I think there is no maximum limit.
https://docs.microsoft.com/en-us/mem/autopilot/self-deploying

Hope the above information will help.

0 Votes 0 ·