Autopilot White Glove at login screen?

%3CLINGO-SUB%20id%3D%22lingo-sub-2409805%22%20slang%3D%22en-US%22%3EAutopilot%20White%20Glove%20at%20login%20screen%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2409805%22%20slang%3D%22en-US%22%3E%3CP%3EWe're%20still%20early%20in%20our%20use%20of%20Autopilot%2C%20and%20I%20was%20running%20a%20test%20using%20White%20Glove.%26nbsp%3B%20I%20started%20the%20provisioning%20process%2C%20and%20checked%20in%20on%20it%20a%20couple%20of%20times.%26nbsp%3B%20The%20previous%20time%20I%20checked%20it%20was%20still%20installing%20applications%2C%20but%2C%20when%20I%20checked%20in%20next%2C%20oddly%20I%20ended%20up%20at%20a%20Windows%20login%20screen.%3C%2FP%3E%3CP%3EThe%20first%20time%20this%20happened%20I%20thought%20I%20had%20flaked%20and%20not%20entered%20the%20White%20Glove%20process%2C%20so%20I%20logged%20in%20with%20my%20user%20account.%26nbsp%3B%20It%20seemed%20to%20continue%20the%20process%2C%20and%20eventually%20I%20was%20at%20the%20green%20screen%20with%20the%20'Reseal'%20button.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3EAfter%20trying%20a%20few%20things%2C%20I%20found%20that%20if%20the%20system%20has%201909%20on%20it%2C%20everything%20proceeds%20as%20expected.%26nbsp%3B%20But%20if%20I%20have%202004%2C%2020H2%2C%20or%2021H1%20installed%2C%20this%20odd%20behavior%20occurs.%3C%2FP%3E%3CP%3ESo%20far%2C%20I'm%20only%20aware%20of%20this%20happening%20on%20a%20test%20Surface%20Pro%204.%26nbsp%3B%20I'll%20be%20pulling%20another%20device%20soon%20to%20see%20if%20I%20get%20the%20same%20results%20there.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2409805%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2411244%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20White%20Glove%20at%20login%20screen%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2411244%22%20slang%3D%22en-US%22%3EThat's%20really%20odd..%20I%20never%20have%20seen%20that%20behaviour%2C%20only%20a%20red%20screen%20%3A)%3C%2Fimg%3E%20..%20You%20should%20try%20excluding%20the%20apps.%20Just%20change%20most%20of%20them%20to%20not%20required.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2416167%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20White%20Glove%20at%20login%20screen%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2416167%22%20slang%3D%22en-US%22%3E%3CP%3ECheck%20your%20security%20baselines%20and%20make%20sure%20they%20are%20assigned%20to%20users%20and%20not%20to%20device%20groups.%20Security%20baselines%20tend%20to%20cause%20a%20reboot%20during%20autopilot%2FESP%20when%20assigned%20to%20device%20groups.%3CBR%20%2F%3E%3CBR%20%2F%3EComponents%20that%20might%20trigger%20a%20reboot%20when%20assigned%20to%20a%20device%3A%3CBR%20%2F%3EWindows%2010%20Security%20Baseline%3CBR%20%2F%3EMicrosoft%20Defender%20for%20Endpoint%20baseline%3CBR%20%2F%3EEndpoint%20security%20%E2%80%93%20Device%20control%3CBR%20%2F%3E%3CBR%20%2F%3EFor%20verification%20you%20can%20consult%20eventvwr%20in%20the%20System%20%E2%80%93%20Windows%20log%20and%20check%20for%20eventid%201074%20regarding%20a%20restart%20during%20autopilot.%20(The%20process%20CloudExpierienceHostbroker.exe%20has%20initiated%20the%20restart%20to%20reconfigure%20the%20operating%20system.)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2431300%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20White%20Glove%20at%20login%20screen%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2431300%22%20slang%3D%22en-US%22%3EThanks%20for%20the%20input.%3CBR%20%2F%3EI'm%20trying%20to%20validate%20what%20I've%20found%2C%20but%20it%20seems%20to%20be%20two%20scripts%20I%20was%20using%20to%20get%20an%20Always%20On%20VPN%20Device%20Tunnel%20installed%20and%20functional%2C%20by%20temporarily%20upgrading%20from%20Pro%20to%20Enterprise%2C%20and%20then%20going%20back%20to%20Pro%20to%20complete%20activation.%20I%20found%20these%20on%20Richard%20Hicks'%20site.%3C%2FLINGO-BODY%3E
New Contributor

We're still early in our use of Autopilot, and I was running a test using White Glove.  I started the provisioning process, and checked in on it a couple of times.  The previous time I checked it was still installing applications, but, when I checked in next, oddly I ended up at a Windows login screen.

The first time this happened I thought I had flaked and not entered the White Glove process, so I logged in with my user account.  It seemed to continue the process, and eventually I was at the green screen with the 'Reseal' button.  

After trying a few things, I found that if the system has 1909 on it, everything proceeds as expected.  But if I have 2004, 20H2, or 21H1 installed, this odd behavior occurs.

So far, I'm only aware of this happening on a test Surface Pro 4.  I'll be pulling another device soon to see if I get the same results there.

3 Replies
That's really odd.. I never have seen that behaviour, only a red screen :) .. You should try excluding the apps. Just change most of them to not required.

Check your security baselines and make sure they are assigned to users and not to device groups. Security baselines tend to cause a reboot during autopilot/ESP when assigned to device groups.

Components that might trigger a reboot when assigned to a device:
Windows 10 Security Baseline
Microsoft Defender for Endpoint baseline
Endpoint security – Device control

For verification you can consult eventvwr in the System – Windows log and check for eventid 1074 regarding a restart during autopilot. (The process CloudExpierienceHostbroker.exe has initiated the restart to reconfigure the operating system.)

Thanks for the input.
I'm trying to validate what I've found, but it seems to be two scripts I was using to get an Always On VPN Device Tunnel installed and functional, by temporarily upgrading from Pro to Enterprise, and then going back to Pro to complete activation. I found these on Richard Hicks' site.