Home

multiple autopilot profiles

%3CLINGO-SUB%20id%3D%22lingo-sub-329237%22%20slang%3D%22en-US%22%3Emultiple%20autopilot%20profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329237%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20I%20am%20wondering%20how%20other%20companies%20handle%20multiple%20Autopilot%20Profiles.%20We%20will%20need%20at%20least%202%20different%20Profiles%20to%20decide%20between%20admin%20and%20standard%20users.%3C%2FP%3E%3CP%3EBut%20as%20the%20profile%20needs%20to%20be%20assigned%20to%20devices%20and%20not%20users%2C%20we%20will%20have%20to%20handle%20the%20group%20membership%20individually%20for%20each%20device.%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20Idea%20would%20be%20to%20only%20have%20one%20autopilot%20profile%20with%20standard%20users%2C%20dynamically%20assign%20all%20devices%20to%20this%20profile%20and%20handle%20the%20administrative%20users%20via%20a%20PowerShell%20script.%3C%2FP%3E%3CP%3EBut%20I%20am%20not%20sure%20if%20this%20will%20work%3F%20Maybe%20some%20other%20ideas%3F%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-329237%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAutopilot%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-359076%22%20slang%3D%22en-US%22%3ERe%3A%20multiple%20autopilot%20profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-359076%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20found%20a%20good%20a%20article%20that%20may%20be%20useful%20to%20you%20and%20or%20any%20one%20else%20out%20there.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftriplesixseven.com%2Fusing-multiple-autopilot-profiles%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftriplesixseven.com%2Fusing-multiple-autopilot-profiles%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEssentially%20taking%20the%20device%20list%20you%20get%20from%20your%20supplier%2Freseller%20(or%20manually%20created%20through%20Get-AutoPilotInfo)%20and%20adding%20a%20unique%20identifier%20onto%20the%20end%20of%20each%20%3CSTRONG%3EDevice%20hash%20ID%3C%2FSTRONG%3E%20in%20the%20CSV%20file%20you%20get.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20then%20creates%20Deployment%20Groups%20to%20which%20you%20can%20use%20to%20Dynamically%20assign%20the%20machines%20to%20Dynamic%20Groups%20based%20on%20this%20unique%20identifier%20and%20then%20deploy%20unique%20software%20%26amp%3B%20settings%20to%20each%20Dynamic%20Group%20of%20machines.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20that%20makes%20any%20sense.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334076%22%20slang%3D%22en-US%22%3ERe%3A%20multiple%20autopilot%20profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334076%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Per%2C%26nbsp%3BI%20had%20a%20try%20with%20the%20OrderID%20and%20dynamic%20groups.%20It%20does%20work%2C%20but%20then%20we%20need%20at%20least%202%20piles%20of%20laptops%2C%20one%20for%20admin%20and%20one%20for%20standard%20users.%20If%20we%20get%20more%20profiles%20even%20more%20piles.%3C%2FP%3E%3CP%3EIf%20there%E2%80%99s%20no%20other%20way%2C%20this%20might%20be%20a%20consideration%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20CSP%20for%20managing%20the%20Admin%20Group%20would%20not%20get%20us%20a%20solution%2C%20because%20we%20need%20the%20user%20who%20is%20logged%20in%20assigned%20to%20the%20admin%20group%20and%20not%20a%20static%20group%20or%20user.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20not%20sure%20if%20we%20can%20use%20a%20PowerShell%20script%2C%20at%20what%20stage%20during%20deployment%20the%20PowerShell%20scripts%20get%20executed%3F%20Can%20I%20get%20the%20logged%20on%20user%20within%20the%20script%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20would%20be%20great%20if%20we%20can%20set%20the%20Admin%2Fnon%20Admin%20decision%20per%20User%20and%20not%20Device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-333473%22%20slang%3D%22en-US%22%3ERe%3A%20multiple%20autopilot%20profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-333473%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20are%20using%20order%20id%20on%20the%20Autopilot%20object%20to%20accomplice%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECheck%20this%20one%20out%20%3A%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fosddeployment.dk%2F2018%2F07%2F22%2Fhow-to-auto-assign-windows-autopilot-profiles-in-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fosddeployment.dk%2F2018%2F07%2F22%2Fhow-to-auto-assign-windows-autopilot-profiles-in-intune%2F%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EKind%20regards%3C%2FP%3E%0A%3CP%3EPer%20Larsen%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329375%22%20slang%3D%22en-US%22%3ERe%3A%20multiple%20autopilot%20profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329375%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EYou%20can%20use%20OMA-URI%3A%26nbsp%3B%20.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfig%2FRestrictedGroups%2FConfigureGroupMembership%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3EValue%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E(Note%3A%20This%20is%20tested%20in%20Windows%2010%201803%20Enterprise)%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
marcrr
New Contributor

Hello, I am wondering how other companies handle multiple Autopilot Profiles. We will need at least 2 different Profiles to decide between admin and standard users.

But as the profile needs to be assigned to devices and not users, we will have to handle the group membership individually for each device. 

One Idea would be to only have one autopilot profile with standard users, dynamically assign all devices to this profile and handle the administrative users via a PowerShell script.

But I am not sure if this will work? Maybe some other ideas? 

Best Regards,

Marc

4 Replies

Hi,

 

You can use OMA-URI:  ./Device/Vendor/MSFT/Policy/Config/RestrictedGroups/ConfigureGroupMembership
Value:

(Note: This is tested in Windows 10 1803 Enterprise)

Hi

 

We are using order id on the Autopilot object to accomplice it.

 

Check this one out : https://osddeployment.dk/2018/07/22/how-to-auto-assign-windows-autopilot-profiles-in-intune/

 

Kind regards

Per Larsen

Hi Per, I had a try with the OrderID and dynamic groups. It does work, but then we need at least 2 piles of laptops, one for admin and one for standard users. If we get more profiles even more piles.

If there’s no other way, this might be a consideration :) 

 

The CSP for managing the Admin Group would not get us a solution, because we need the user who is logged in assigned to the admin group and not a static group or user. 

 

I'm not sure if we can use a PowerShell script, at what stage during deployment the PowerShell scripts get executed? Can I get the logged on user within the script? 

 

It would be great if we can set the Admin/non Admin decision per User and not Device.

 

Best Regards,

Marc

Hello,

 

I found a good a article that may be useful to you and or any one else out there.

 

https://triplesixseven.com/using-multiple-autopilot-profiles/

 

Essentially taking the device list you get from your supplier/reseller (or manually created through Get-AutoPilotInfo) and adding a unique identifier onto the end of each Device hash ID in the CSV file you get.

 

This then creates Deployment Groups to which you can use to Dynamically assign the machines to Dynamic Groups based on this unique identifier and then deploy unique software & settings to each Dynamic Group of machines.

If that makes any sense. :)

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies