Reset devices with Autopilot Reset
- Windows 10, version 1709
IT admins or technical teachers can use Autopilot Reset to quickly remove personal files, apps, and settings, and reset Windows 10 devices from the lock screen any time and apply original settings and management enrollment (Azure Active Directory and device management) so the devices are ready to use. With Autopilot Reset, devices are returned to a fully configured or known IT-approved state.
To enable Autopilot Reset in Windows 10, version 1709 (Fall Creators Update), you must:
Enable Autopilot Reset
To use Autopilot Reset, Windows Recovery Environment (WinRE) must be enabled on the device.
DisableAutomaticReDeploymentCredentials is a policy that enables or disables the visibility of the credentials for Autopilot Reset. It is a policy node in the Policy CSP, CredentialProviders/DisableAutomaticReDeploymentCredentials. By default, this policy is set to 1 (Disable). This ensures that Autopilot Reset isn't triggered by accident.
You can set the policy using one of these methods:
- Autopilot Reset in Intune for Education is coming soon. In a future update of Intune for Education, new tenants will automatically have the Autopilot Reset setting enabled by default on the All devices group as part of initial tenant configuration. You will also be able to manage this setting to target different groups in the admin console.
If you're using an MDM provider other than Intune for Education, check your MDM provider documentation on how to set this policy. If your MDM provider doesn't explicitly support this policy, you can manually set this policy if your MDM provider allows specific OMA-URIs to be manually set.
For example, in Intune, create a new configuration policy and add an OMA-URI.
- OMA-URI: ./Vendor/MSFT/Policy/Config/CredentialProviders/DisableAutomaticReDeploymentCredentials
- Data type: Integer
- Value: 0
Windows Configuration Designer
You can use Windows Configuration Designer to set the Runtime settings > Policies > CredentialProviders > DisableAutomaticReDeploymentCredentials setting and create a provisioning package.
Set up School PCs app
Autopilot Reset in the Set up School PCs app is available in the latest release of the app. Make sure you are running Windows 10, version 1709 on the student PCs if you want to use Autopilot Reset through the Set up School PCs app. You can check the version several ways:
- Reach out to your device manufacturer.
- If you manage your PCs using Intune or Intune for Education, you can check the OS version by checking the OS version info for the device. If you are using another MDM provider, check the documentation for the MDM provider to confirm the OS version.
Log into the PCs, go to the Settings > System > About page, look in the Windows specifications section and confirm Version is set to 1709.
To use the Autopilot Reset setting in the Set up School PCs app:
When using Set up School PCs, in the Configure student PC settings screen, select Enable Windows 10 Autopilot Reset among the list of settings for the student PC as shown in the following example:
Trigger Autopilot Reset
Autopilot Reset is a two-step process: trigger it and then authenticate. Once you've done these two steps, you can let the process execute and once it's done, the device is again ready for use.
To trigger Autopilot Reset
From the Windows device lock screen, enter the keystroke: CTRL + + R.
This will open up a custom login screen for Autopilot Reset. The screen serves two purposes:
- Confirm/verify that the end user has the right to trigger Autopilot Reset
Notify the user in case a provisioning package, created using Windows Configuration Designer or Set up School PCs, will be used as part of the process.
Sign in with the admin account credentials. If you created a provisioning package, plug in the USB drive and trigger Autopilot Reset.
To reestablish Wi-Fi connectivity after reset, make sure the Connect automatically box is checked for the device's wireless network connection.
Once Autopilot Reset is triggered, the reset process starts. After reset, the device: - Sets the region, language, and keyboard. - Connects to Wi-Fi. - If you provided a provisioning package when Autopilot Reset is triggered, the system will apply this new provisioning package. Otherwise, the system will re-apply the original provisioning package on the device. - Is returned to a known good managed state, connected to Azure AD and MDM. ![Notification that provisioning is complete](images/autopilot-reset-provisioningcomplete.png) Once provisioning is complete, the device is again ready for use.
Troubleshoot Autopilot Reset
Autopilot Reset will fail when the Windows Recovery Environment (WinRE) is not enabled on the device. You will see
Error code: ERROR_NOT_SUPPORTED (0x80070032).
To make sure WinRE is enabled, use the REAgentC.exe tool to run the following command:
If Autopilot Reset fails after enabling WinRE, or if you are unable to enable WinRE, please contact Microsoft Support for assistance.
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.