Configure Autopilot profiles and deployment modes

  • 8 minutes

After devices are registered with Windows Autopilot, administrators must configure deployment profiles. A Windows Autopilot deployment profile defines how a device is configured during the Windows out-of-box experience (OOBE). It determines how the deployment process runs.

A deployment profile manages if the OOBE is:

  • User-driven: Devices with this profile are associated with the user enrolling the device. User credentials are required to enroll the device.
  • Self-deploying: Devices with this profile aren't associated with the user enrolling the device. User credentials aren't required to enroll the device. When a device has no user associated with it, user-based compliance policies don't apply to it. Only compliance policies targeting the device are applied.

Create a Windows Autopilot deployment profile

Deployment profiles can be assigned to groups to manage which devices are deployed the same way. To create a deployment profile:

  1. Sign in to the Microsoft Intune admin center. In the left pane, select Devices and under By platform, select Windows.
  2. In the Windows | Windows devices screen, under Device onboarding, select Enrollment.
  3. In the Windows | Enrollment screen, under Windows Autopilot, select Deployment Profiles. Select the Create Profile drop down menu, then select Windows PC.
  4. Provide a Name and Description.
  5. If you want all devices in the assigned groups to automatically register with Windows Autopilot, set Convert all targeted devices to Autopilot to Yes. All corporate-owned devices that aren't already Autopilot-enabled register within about 48 hours. Personal devices aren't included. After registration, devices automatically reenroll in Autopilot when they're reset. Turning this setting off or removing the assignment doesn't remove existing entries. You must delete those devices directly from the Autopilot service.
  6. On the Out-of-box experience (OOBE) page, select the desired deployment mode.
  7. In the Join to Microsoft Entra ID as box, select Microsoft Entra joined.
  8. Configure remaining OOBE settings, which include: language, keyboard, End User License Agreement (EULA), privacy settings, device name, and user account.
  9. On the Assignments page, select the groups to include and create the profile.

After you create a deployment profile, the devices it's assigned to follow the configuration options you selected when starting OOBE.