Intune

[Mehmet58]

Dear community members,

One of our clients are using Intune as their MDM system. 

Now I've come across the following issue. 

Some users lost or forgot their laptop and then they will use a loan laptop. This device is Intune enrolled and Entra ID joined. Once they sign in it will go through the OOBE proces. Is there a solution to prevent this, shared devices profile? 

[#2]

You could configure the ESP profile for that, set the option "Only show page to devices provisioned by out-of-box experience (OOBE)" to Yes

Use this setting to stop the enrollment status page from reappearing to every new user who signs into the device. Your options:

No: The enrollment status page is shown during the device phase and the out-of-box experience (OOBE). The page is also shown during the user phase to every user who signs into the device for the first time.
Yes: The enrollment status page is shown during the device phase and the OOBE. The page is also shown during the user phase, but only to the first user who signs into the device. It isn't shown to subsequent users who sign into the device.

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If one of the posts was helpful in other ways, please consider giving it a Like.

[#3]

Hi Harm,

Thank you for sharing your knowledge.

I've changed the setting, but I still received a call from a user that was stuck at the OOBE screen, she has been using this laptop for a while.

Do you know what the cause of this can be?

Thank you in advance for your reaction.

Kind regards,

Mehmet Gül

[#4]

Changing the setting should be enough so that the ESP page doesn't appear for existing devices that have already been provisioned using OOBE/AutoPilot. I don't know why; if you changed the setting to Yes, it shouldn't be shown.

Can you confirm if the ESP page doesn't appear when logging into a deployed device?

[#5]

I found out that this device has been installed with a USB stick and manually registrered through the "Access work or school" setting. Could this be a reason that the OOBE shows up for this device?

The devices I enrolled through OOBE/Autopilot don't have this issue.

[#6]

@Mehmet58 

Yes, that's correct. The setting is only for OOBE/Autopilot devices (provisioned by out-of-box experience (OOBE)).

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If one of the posts was helpful in other ways, please consider giving it a Like.

[#7]

Fair enough.

So this issue can occur on devices that haven't gone through the OOBE/Autopilot proces?

[#8]

For any new user on that device, yes, I don't think that changing the setting will force an ESP page on all existing devices that use the "Access work or school" option... Perhaps using enrollment restrictions to block enrolling devices outside of the autopilot process (https://learn.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#blocking-persona...) would help to prevent users from enrolling their devices like that (When they enroll a personal device, they receive the question if their current account should be made admin of the machine)