May 03 2020 10:07 PM
Hi Community Support
Anyone who can help me figure it out this issue.
1. created a sec group for intune licenses (added all AAD USERS), and added Microsoft 365 E5 License.
2. created a "Windows Autopilot deployment profiles:. the OOBE settings below are not being pulled when I initiate an autopilot.
3. settings ALL NOT REFLECTING
Deployment mode: User-Driven
Join to Azure AD as: Azure AD joined
Language (Region): English (United States)
Automatically configure keyboard: Yes
Microsoft Software License Terms: Hide
Privacy settings: Hide
Hide change account options: Hide
User account type: Standard
Allow White Glove OOBE: No
Apply device name template: Yes
Enter a name: HELLO-%RAND:4%
4. Am I missing something on the provisioning?
May 03 2020 10:50 PM
Hi, how are you trying to test this? On new devices shipped from your OEM, or by reformatting an existing Windows 10 machine or upgrading a Windows 7? If the latter, have you created a csv file for the machine and imported into Windows Autopilot devices as shown in the below image?
May 03 2020 11:16 PM - edited May 03 2020 11:17 PM
@PeterRising I did the import(machine1) and manually joined (machine2) and also I was able to push remote autopilot reset to these 2 machines. what I don't get is why it doesnt get the autopilot profiles I created.
Machines are 1 physical machine lenovo t470 and machine 2 is VM both are in 1909 version.
please see attachment details(not sure if it helps)
May 03 2020 11:23 PM
OK, Profile status needs to show as Assigned before this will work, and it can take some time for this to happen. How long has it been since you configured these settings?
May 03 2020 11:31 PM
May 03 2020 11:32 PM
@PeterRising since saturday May 2 2020. based on the windows autopilot profile, no devices. see attached file.
May 03 2020 11:38 PM
@PeterRising I havent created the machine sec group(assigned type)..I'm doing it now. I will autopilot reset again and try if it sees from the autopilot profile I created. and if it will work, I test too the dynamic group setup.
May 03 2020 11:40 PM
May 04 2020 02:56 AM - edited May 04 2020 03:02 AM
@PeterRising It worked. fixed using Group Assigned and Dynamic Device.
Another 2 issues related to Autopilot Profiles are:
1. I have machine where I autopilot reset, and then when I logged in as standard user, the old user account(auto added as local administrator) still there.
2. Machine name conversion is not following the rule set DYD-%RAND:5% or DYD-%SERIAL%
is it related to microsoft announcement. any knowledge about it? https://techcommunity.microsoft.com/t5/intune-customer-success/known-issue-with-rename-device-settin...
May 04 2020 03:56 AM - edited May 04 2020 03:59 AM
Glad to hear it worked for you. To answer your questions;
1). The Admin user issue is highlight from this known issues page - https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/known-issues and shown below;
2). Machine name conversion issue, What machine name is being generated in the autopilot setup? A random name? I do know that this doesn't work / work well with Hybrid Azure AD join, but you are using just Azure AD join right?
May 04 2020 04:15 AM - edited May 04 2020 04:17 AM
1). this is purely Intune & AAD. The machine was AAD joined(automatically added as local admin), and then repurposed to a standard user(autopilot reset). I can still see the previous user(local admin) after autopilot reset. My solution might be:
2) The naming conversation reflected in intune/aad is the same as the device name. No changes at all.
I found the solution, instead of using MyCompany-%RAND:5% or %SERIAL%, use this format MyCompany-{{serialnumber}} or MyCompany-{{RAND:5}}
May 04 2020 04:21 AM
May 04 2020 04:26 AM
@PeterRising I found the solution, instead of using MyCompany-%RAND:5% or %SERIAL%, use this format MyCompany-{{serialnumber}} or MyCompany-{{RAND:5}}
****Correction: got excited. this will only work if you are renaming each of the devices. it does not accept if you apply this kind of format on "Windows Autopilot deployment profiles". 😞
May 04 2020 12:36 PM
Well I'm pleased you were at least able to get it working with the group. I'll have to play around with the naming templates when I have some time, as i've never really applied this.