Set up an enrollment status page

During device setup using Intune, the Enrollment Status Page displays installation information on the device. Some applications, profiles, and certificates might not be installed by the time a user completes the out-of-box enrollment signs in to the device. An enrollment status page can help users understand the status of their device during device setup. You can create multiple enrollment status page profiles and apply them to different groups. Profiles can be set to:

  • Show installation progress.
  • Block usage until installation completes.
  • Specify what a user can do if device setup fails.

You can also set the priority order for each profile to account for conflicting profile assignments ot the same user or device.

Turn on default enrollment status page for all users

To turn on the enrollment status page, follow the steps below.

  1. In Intune, choose Device enrollment > Windows enrollment > Enrollment Status Page (Preview).
  2. In the Enrollment Status Page blade, choose Default > Settings.
  3. For Show app and profile installation progress, choose Yes.
  4. Choose the other settings that you want to turn on and then choose Save.

Create enrollment status page profile and assign to a group

  1. In Intune, choose Device enrollment > Windows enrollment > Enrollment Status Page (Preview) > Create profile.
  2. Provide a Name and Description.
  3. Choose Create.
  4. Choose the new profile in the Enrollment Status Page list.
  5. Choose Assignments > Select groups > choose the groups that you want to adopt this profile > Select > Save.
  6. Choose Settings > choose the settings you want to apply to this profile > Save.

Set the enrollment status page priority

A device or user might be in multiple groups and have multiple enrollment status page profiles. To deal with such conflicts, you can set the priorities for each profile. If someone has more than one enrollment status page profile, only the profile with the highest priority will be applied.

  1. In Intune, choose Device enrollment > Windows enrollment > Enrollment Status Page (Preview).
  2. Hover over the profile in the list.
  3. Using the three vertical dots, drag the profile to the desired position on the list.

Block access to a device until a specific application is installed

You can specify which apps need to be installed before the user can access the desktop.

  1. In Intune, choose Device enrollment > Windows enrollment > Enrollment Status Page (Preview).
  2. Choose a profile > Settings.
  3. Choose Yes for Show app and profile installation progress.
  4. Choose Yes for Block device use until all apps and profiles are installed.
  5. Choose Selected for Block device use until these required apps are installed if they are assigned to the user/device.
  6. Choose Select apps > choose the apps > Select > Save.

Enrollment status page tracking information

The status page tracks information for device preparation, device setup, and account setup.

Device preparation

For device preparation, the enrollment status page tracks Trusted Platform Module (TPM) key attestations (when applicable), progress in joining Azure Active Directory, and enrolling into Intune.

Device setup

For device setup, the enrollment status page tracks the following items if they're assigned to All Devices:

  • Security policies
    • One configuration service provider (CSP) for all enrollments.
    • Actual CSPs configured by Intune aren't tracked here.
  • Applications
    • Per machine Line-of-business (LoB) MSI apps.
    • LoB store apps with installation context = Device.
    • Offline store and LoB store apps with installation context = Device.
  • Connectivity profiles
    • VPN or Wi-Fi profiles that are assigned to All Devices or a device group in which the enrolling device is a member, but only for Autopilot devices
  • Certificate profiles that are assigned to All Devices or a device group in which the enrolling device is a member, but only for Autopilot devices

Account setup

For account setup, the enrollment status page tracks the following items:

  • Security policies
    • One CSP for all enrollments.
    • Actual CSPs configured by Intune aren't tracked here.
  • Applications
    • Per user LoB MSI apps that are assigned to All Devices, All Users, or a user group in which the user enrolling the device is a member.
    • Per machine LoB MSI apps that are assigned to All Users or a user group in which the user enrolling device is a member.
    • LoB store apps, online store apps, and offline store apps that are assigned to any of the following:
      • All Devices
      • All Users
      • a user group in which the user enrolling the device is a member with installation context set to User.
  • Connectivity profiles
    • VPN or Wi-Fi profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.
  • Certificates
    • Certificate profiles that are assigned to All Users or a user group in which the user enrolling the device is a member.

Next steps

After you set up Windows enrollment pages, learn how to manage Windows devices. For more information, see What is Microsoft Intune device management?