AMA: Windows Autopilot

This is a general recommendation when using hybrid join even by us, however, this is not generally recommended when using Entra join. We don't recommend that you use hybrid join with Autopilot in the first place though because of the complexity and friction often involved (among other reasons). Disabling the user ESP addresses a small part of this friction and thus the recommendation. But, to avoid the friction completely and best prepare yourself for the current world environment and Zero Trust, we strongly recommend customers move to full Entra join for new device provisioning.