Event banner
Event details
131 Comments
- Any information when Autopilot devices will recognize AAD or on-prem AD groups in Computer Management instead or SID and have to rely on powershell scripts?
- Cristina_Osorio
Microsoft
Hi Jeffry, is this for device registration? we do have the option to Convert to Autopilot the devices in a AAD group: https://learn.microsoft.com/en-us/mem/autopilot/automatic-registration- When you open computer management on autopilot devices you can not see friendly names you can only see SID's and I know that adding groups and ID's can be done remotely in the console but it does not help the user when troubleshooting on the device.
- OOBE - Option B, but with the name of the user "Welcom Jean!
- Autopilot devices are AzureAD joined but devices are in a Workgroup, does MS recommend changing the workgroup name? Identifying the device is important as we deal with domain joined, BYOD and AzureAD. At the moment we are adding SCCM client so we are looking to isolate by category.
- Herman_Arnedo_ByrneHi Jeffry, I would like to understand why you would like to do this. Please, feel free to reach out to me via private message
Option A on User ESP looks best to me
- Is there a plan to bring Scope Tags into the Autopilot device list to allow for scoped administration via custom admin roles? (i.e. scoped admin can only change group tags/profile assignment or delete devices that are scoped to their role.)
- Cristina_OsorioThanks Troy, we hear your feedback, we will investigate this item.
- I did share some years ago create a script to upload the hashes before the cloud native method came along - https://techcommunity.microsoft.com/t5/windows-management/get-windowsautopilotinfo-a-quicker-way/m-p/3424199#M61I9
- The thing I mis most is the ability to bring devices with bloatware/marketingware back to basic to a, as we say, known state. We now use MDT for that step, but it shouldn't be necessary at all and you should be able to use the device out of the box. Maybe Microsoft should make a standard "Autopilot Ready". If a manufacturer uses that tag, the device should be in a certain state. I can imagine it could be a unique selling point to businesses and enterprises.
- Joe_LurieWe all agree with that, Rob. The OEMs typically have an option get a vanilla build of the OS, but it's not their default. Some may charge for this as the games and other "bloatware" apps pay them to include it in the image. But you should be able to get a vanilla image. It's one reason why Autopilot on Surface device is might be a better option - we don't put bloatware on our images, so there's nothing to remove.
- I totally agree. I would love to sell Surface products only to our customers 😉 I love the products! Dell, HP and Lenovo are also still major players on the market however. I would love to see some sort of certification like "AutoPilot Ready". I believe that could force major OEMs to produce without al the marketingware stuf. If Enterprise customers are only buying devices with that certification, then they will need to change their game.
- We want to use Always on VPN for our autopilot, but we want to cut the always on VPN after the computer is join for a obvious security reason. How can we cut the always on VPN
- I think in a company network you can work with Set-NetConnectionProfile, but outside of coporarte network it can be bit diffcult...
- Herman_Arnedo_ByrneHi Eric, I would like to know more about this scenario. Please, feel free to reach out to me via private message
- We have been having issues with auto pilot reset initiating a mandatory windows hello setup. First time deployments do not have this issue, only devices that reset with autopilot. Is anyone else having that issue?
- We encounter the same issue even with Windows Hello disabled on the tenant.
- Herman_Arnedo_ByrneHi Skyler, I would like to know more about this scenario. Please, feel free to reach out to me via private message
- Is there an update on getting an option for users to select what time zone they are in during the OOBE? I know there has been many others requesting this feature.
- Cristina_OsorioThank you Timothy, we hear the feedback, we are investigating this item.
- We run W32tm /resync /force in OOBE as a workaround 🙂
