Quantcast
Channel: Robert Marshall - MVP's Activities
Viewing all articles
Browse latest Browse all 154

Intune–AutoPilot–Quick and Easy walkthrough–Part 2

$
0
0

Following on from Part 1 of this quick and easy walkthrough of Intune AutoPilot.

Login to the VM, unlock or whatever, and visit Settings.

Visit Updates & Security:

Click Get Started for Reset this PC:

Choose the Remove everything option:

Choose the Just remove my files option:

Wheels will turn:

Select Reset:

This will take a while, keeping an eye on it will bind you to the screen depending on how fast your VM’s disk sub-system is.

SSD’s will chase through this entire process in less than an hour I would imagine.

Decent spec (x4 7200RPM HDD’s in RAID 10 configuration) disks with an existing average-VM workload (other lab devices running on your Hyper-V host) will get the job done within 2 hours.

I have 11 VM’s running on this Hyper-V host, so there is some disk contention\congestion taking place, I will put the VM’s disk onto an SSD to speed things up next time:

My Hyper-V hosts disk-subsystem isn’t flooded:

When it is done it’ll induce a reboot and enter Windows Setup to continue the process:

It took about 1 hour to get to this point:

About 15 minutes later we’re at the OOBE stage of Windows Setup!

Select the Region:

Select the Keyboard layout:

Skip adding additional keyboard layouts:

Whenever it says Just a moment… I’ll skip those bits.

At this point its talking to Intune, giving it some identifying information and getting a response back.

We are a go, green lit to proceed:

Several minutes later:

And hey presto, it welcomes me!

Maybe Hello Robert wasn’t a good friendly user name, but I’m being greeted and prompted for my password without lifting a finger.

Tap in a password and experience some:

and some:

Then:

And a quick:

And now … the Legendary Enrollment Status Page!

If this wasn’t turned on we’d be at the desktop by now.

First the device is prepared:

The first stage rushes passed leading onto Device setup:

Device setup takes a while, significantly increased due to the inclusion of Office 365.

If you have Delivery Optimization turned on and another VM has those files, it could accelerate future deployments by staving off another download of the full Office 365 payload over the internet offered up by Intune.

The first application PatchMaster has installed, and now it is handling Office 365:

In the shot above you can see that our Device Configuration policy was applied (Security Policies) to the device, and that it has begun the installation of the 2 applications deployed to the AutoPilotDevice Azure security group.

Left alone, so I could go get lunch, it’s got to this point:

And then a short while after:

Then we’re back to the Enrollment Status Page:

Now the user is being processed, any security policy assigned to the user (and other things, see shot) is then applied.

About two hours all told, we’re almost done, now the user has to deal with the device configuration, in this case setting a Pin:

I’ve already done this with TestUser1 so MFA has been processed, I just approve the authentication request prompt using the Azure Authenticator mobile device app:

Deal with the Pin requirement:

And we’re now just a click away from completion:

We’re eventually dropped onto the desktop, and as you can see the applications have installed:

You probably wouldn’t want to give this device over to a user as it is, but the results are really promising.

If you join the device to an on-premise AD (a preview feature), you can get your management from AD GPO, or you can configure with CSP’s (Configuration Service Providers) and device configuration profiles, to best match up with your AD GPO’s, and leave the device just joined to the Azure AD.

There’s so much more to explore, and in future posts I’ll drill down a bit on what is happening in those Autopilot stages, and touch on how to configure Windows 10 further.

Autopilot won’t switch the SCCM OSD lights off, not for a long time if ever, but it has to be taken seriously as an option in the bag such as SCCM OSD and MDT OSD.

Take out an E5 EMS evaluation\trial and give Autopilot some time. If you have a corporate tenant then use that to test out Autopilot and setup a POC that’ll lead to production usage of Autopilot.

Enjoy.


Viewing all articles
Browse latest Browse all 154

Trending Articles