Simplify device setup with Windows Autopilot
Windows Autopilot streamlines and secures device setup for new Windows 10 Pro devices from first boot in only a few steps. To learn more, see Overview of Windows AutoPilot.
- Disable local administrator permissions for the end users setting up devices
- Show an organization's login page. The organization can predefine a logon page that adds the device as a work device, and joins the device with Azure Active Directory.
- Enroll the device into a Mobile Device Manager (MDM), for example: Microsoft Intune, after OOBE is complete.
- Streamline the out-of-box experience (OOBE) to use just the steps and decisions required, using a Windows AutoPilot Deployment profile.
- Devices pre-installed with Windows 10 Pro Creators Update (version 1703 or later) or Windows 10 Pro for Advanced PCs.
- Device identifier known as a hardware hash (128 HWH or 4k HWH), which is typically provided by an OEM. You'll use identifiers to assign organization profiles in the Partner Center.
- The devices must have access to the internet. When the device can’t connect, it shows the default Windows out-of-box experience (OOBE) screens.
- Enrolling the device into an MDM requires Azure Active Directory Premium.
Add organization login pages to OOBE
To add organization-specific pages, add the devices into your organization’s Azure AD directory and create login pages.
Remove Windows pages from OOBE with a Windows AutoPilot deployment profile
Examples of settings in a Windows AutoPilot deployment profile
- Skip Privacy Settings in setup
- Disable local admin account in setup
- Automatically skip pages in setup
- Automatically select setup for work or school
- Skip Cortana, OneDrive, and OEM registration setup pages
Add devices and apply a profile
From Partner Center, you can create a Windows AutoPilot deployment profile and apply it to a list of the devices.
To configure devices, upload a list of the devices, create a profile that applies to the devices, and apply it.
Add the list of devices.
Sales agents and admin agents have access to add the list of devices into Partner Center.
Indirect resellers can work with their indirect provider to add this.
a. Create a .csv file using the PowerShell script from the topic: Overview of Windows AutoPilot. This .csv file contains device info including the serial number, OEM name, model name, product ID and device identifier.
b. From Partner Center, go to Customers > select the customer that’s receiving the devices > Devices > Add devices.
c. Name the batch of devices, for example, “Contoso Sales Department PCs – April 2017 order.”
d. Click Browse > select the device info file > Validate.
Note: If you get an error message after trying to upload the .csv file, check the format of the file. After August, you can use the Hardware Hash only, or the OEM name, serial number, and model in that column order, or the Windows Product ID. You can also use the sample .csv file provided from the link next to Add devices.
Create a profile that you can apply to the devices. (Only admin agents have access to create and apply profiles in the Partner Center.)
a. From Devices, click Add new profile.
b. Name the profile, for example, “Contoso Desktop Profile – Skip All OOBE”.
c. Configure the OOBE settings. For example, check Skip Express Settings in setup.
d. Click Submit.
Apply the profile.
a. From Devices, in the Assign and delete devices pane, select the devices that you want to configure. To select an entire batch, click the checkbox next to the batch name (for example, “Contoso Sales Department PCs – March 2017 order”).
b. Click Apply profile, and select the profile (for example, “Contoso Desktop Profile – Skip All OOBE”). The devices will show the profile in the Profile column.
Optional: Test to see that your profile works.
a. Connect a device to the network, and turn it on.
b. Verify that the appropriate OOBE screens (if any) appear.
c. To prepare the device for a new user, complete the OOBE experience, then reset the device to its factory default settings.
To update or delete a profile
Once you’ve assigned a profile to a device, you can update it, even if you’ve already given the device to your customer. When the device connects to the internet, it downloads the latest version of your profile during the OOBE process. If your customer restores their device to its factory default settings, the device will again download the latest updates to your profile.
You can remove a profile from a device
Select the device (or batch of devices) you want to remove the profile from.
In Assign and delete devices pane, select Remove profile.
Go to the profile you want to remove and delete it. The profile will be deleted from all devices.
From Devices, select the profile. From here, you can modify the existing settings.
Windows Autopilot EULA dismissal – important information
Using this tool allows you to configure individual installations of Windows on devices you manage for your customers. If authorized to do so by the customer, you may choose to suppress or hide certain set-up screens that are normally presented to users when setting up Windows, including the EULA acceptance screen.
By using this function, you agree that suppressing or hiding any screens that are designed to provide users with notice or acceptance of terms means that you have obtained sufficient consent and authorization from your customer to hide terms, and that you on behalf of your customer (whether an organization or an individual user as the case may be), consent to any notices and accept any terms that are applicable to your customer. This includes agreement to the terms and conditions of the license or notice that would be presented to the user if you did not suppress or hide it using this tool. Your customer may not use the Windows software on those devices if the customer has not validly acquired a license for the software from Microsoft or its licensed distributors.