Intune-managed CoreImage - How to complete Autopilot enrollment (Pre-Provisioned)


Introduction

Michigan Medicine faculty, staff, and students can enroll U-M owned, HITS-managed Dell laptops and desktops configured with Autopilot into our new management system:  Microsoft Intune. 

Intune was initially used at Michigan Medicine to manage just mobile devices.  HITS expanded its use in mid-2023 to include management of U-M owned Windows computers enabled with Microsoft Autopilot. Microsoft's Intune device management system is different than what is used to manage our "Classic" CoreImage computers, and it offers new capabilities such as Autopilot.  Autopilot allows a vendor such as Dell to configure a device for Michigan Medicine so that end-users can enroll the device with just a few simple steps using their Michigan Medicine email address.  When using Autopilot, neither HITS nor other IT service providers have to "image" the computer before giving it to the end-user.

This article refers to the optional pre-provisioning feature of Autopilot where an end-user's IT service provider is more involved in the deployment process.  IT service providers, such as HITS, may use pre-provisioning to install the base applications and configuration profiles before giving it to the end-user so that those users can get up and running more quickly. 

The following instructions will guide you, the end-user, through the completion of the enrollment process after your IT service provider has pre-provisioned your device.  These instructions are slightly different from those used if the computer has not been pre-provisioned.  Please refer to the user-driven enrollment process if your Autopilot-enabled Windows computer has not been pre-provisioned or has been remotely wiped.

The process below may take several minutes depending on the speed of your network connection to the internet and if any updates are needed.  After which, you can sign into the device and begin using it.

​

Instructions

Requirements

Power:  Connected to AC power

Connectivity: An active connection to the internet.​

Credentials:  Michigan Medicine email and UMICH password

Steps

  1. Power on the computer and the enrollment process will take you to the following Network connectivity screen automatically.  If it does not then the computer has not been pre-provisioned, and you must follow the user-driven enrollment instructions located here.

  2. Select a Wi-Fi network.  Click Connect.
    Note that if your device is plugged into a network (i.e., not using Wi-Fi), you will not see this screen.  Using Wi-Fi is more common when enrolling a device while not at a Michigan Medicine facility (e.g., your home).  If you are plugged into the network while at a Michigan Medical facility and see a message saying that the device is unable to connect to the network, please enter a ticket with HITS.  
    windows_autopilot_connect_to_network

  3. Enter the password and click Next.
    Note that this screen will not appear if your device is plugged into the network and not using Wi-Fi. 
     windows_autopilot_connect_to_network

  4. Select Next.
    The device may restart before proceeding to the next step.

      
  5. Enter your Michigan Medicine email (uniqname@med.umich.edu) and select Next.


  6. Enter your UMICH password and select Sign in.


  7. ​Select and respond to your preferred DUO authentication method.  Once the DUO prompt is acknowledged, the device will proceed to the next screen.


  8. Please wait for device to complete enrollment.
    1. This may take several minutes depending on the speed of your network connection to the internet.  Many of the applications and configuration settings have already been applied by HITS or your IT service provider to speed up your access to signing in.
    2. The device will restart between the Device setup and Account setup steps.
    3. You can click on "Show Details" for more information.


  9. Once the enrollment process completes, you will be presented with a generic Windows background.  Press the spacebar or click with the mouse to reveal the default Windows sign in screen.

    Note that after your first sign in, Michigan Medicine branding will appear.

  10. Log in with your Michigan Medicine email (uniqname@med.umich.edu) and UMICH password.


  11. Your Windows session will begin. Additional enterprise and other required applications will install in the background.  You may open the Company Portal application to queue up the installation of other applications such as Cisco Jabber and Adobe Creative Cloud.
     windows_autopilot_desktop