There’s a known issue for Windows Autopilot device preparation. When a managed installer policy is enabled and you’re trying to install Win32 apps during device preparation, you will experience deplo...
Published Oct 17, 2024
Version 1.0
Blog Post
2 MIN READ
Known issue: Windows Autopilot device preparation with Win32 apps and managed installer policy
Hi butters
Thanks for reaching out, and we've addressed the Managed Installer issue in this new blog: Deep dive into Windows Autopilot device preparation: How to deploy and when to use it | Microsoft Community Hub referencing: Managed installer issues: If Managed Installer policy is enabled for your tenant, Win32 and Microsoft Store apps are skipped. This will be addressed in a future release.
Thanks!
^Intune Support Team
Do you by chance have an estimate for when it will be addressed? We talking Q1/Q2 2026 or later? Once some additional features make their way to DPP we would like to make the switch, and this would be a requirement as we are using app control.
Just interested. You're not concerned about how Device Preparation uses Serial numbers for enrollment which are easily spoofed, whereas Autopilot uses hardware Hash?
- Jason_Sandys
Microsoft
The Corporate Identifier construct (which leverages serial numbers) is not exclusive to Windows Autopilot device preparation and can also be used for Windows Autopilot. Also, corporate identifiers is simply about making a device corporate or personal owned. It's not a registration/association process and is not required. For Windows Autopilot device preparation, we are working on a new method for associating a device with a tenant. I don't think we've published anything officially about this yet but it's getting close to GA (don't remember the timeline just I'll just leave it at close).
Keep in mind though that neither device registration (used for Windows Autopilot device preparation) nor this new association construct are security mechanisms or security boundaries in any way. They are simply automation enablers.
I am sure you have heard it said many times. Autopilot device registration is not meant to be your lone security control, as you will find there are multiple ways around it. You should have other controls in place.
