The biggest issue that I have with Autopilot Device Preparation is that the hardware isn't tied to our tenant by uploading a hash.

There is nothing to prevent a use setting up a device with a personal account, e.g. they have left the business & not returned the equipment or setting it up with another tenant.

Traditional Autopilot locks the device to our tenant as long as it can access the appropriate Microsoft endpoints. 

Device Association sounds like it may resolve that, any vague ideas on timeline?

We will not make Company Portal the default until it is installed on our co-mgmt devices, but have been unable to create a dependable app/package in SCCM. We haven't moved the workload slider for Device Configuration for multiple reasons so this isn't an option. The Company Portal files obtained from winget are imported as an appx package but installations aren't consistent. I eventually tracked down the SC errors to the appx installation not finding registry keys and certain files. I haven't been able to determine any pattern. I attempted to just use PSADT and install with add-appxpackage (user and all) but this also didn't work.

Anything I find online is outdated- most suggest WS4B. Any suggestions to how we can get Company Portal onto our co-mgmt devices? Thanks

Thanks for joining today’s session on “Why smarter Windows management starts with Intune” at Microsoft Technical Takeoff. Q&A will remain open through Friday so keep your comments and questions coming! Up next: Reporting at scale with Windows Autopatch update readiness.

 

Is there a way to prevent users from accessing the desktop until they enroll in Windows Hello during OOBE? There's a known bypass where the user can close the prompt which causes an error and the user can click on a button that says "continue anyway". The Windows Hello enrollment won't appear again until the device reboots and the user signs in again. 

Welcome to “Why smarter Windows management starts with Intune” at Microsoft Technical Takeoff. Q&A is open now and throughout the week. Please post any questions or feedback here in the Comments. [Note: If your organization’s policies prevent you from seeing the video on this page, you can also tune in on LinkedIn.]