Intune-managed CoreImage - How to enroll an Autopilot-enabled Windows device in Intune


Introduction

Michigan Medicine faculty, staff, and students can enroll new U-M owned, HITS-managed Dell laptops and desktops in our new management system:  Microsoft Intune.

Intune was initially used at Michigan Medicine to manage just mobile devices.  HITS expanded its use in mid-2023 to include management of U-M owned Windows computers enabled with Microsoft Autopilot. Microsoft's Intune device management system is different than what is used to manage our "Classic" CoreImage computers, and it offers new capabilities such as Autopilot.  Autopilot allows a vendor such as Dell to configure a device for Michigan Medicine so that end-users can enroll the device with just a few simple steps using their Michigan Medicine email (uniqname@med.umich.edu).  When using Autopilot, neither HITS nor other IT service providers have to "image" the computer before giving it to the end-user.

The following instructions will guide you through the enrollment process. ​The process will take up to 90 minutes (with 30 minutes being average) before you can sign into the device and begin using it.

If your device is pre-provisioned, you will skip to step 5, or you can follow along here.  If your device was remotely wiped, the instructions in this article apply (even if your device was previously pre-provisioned).

Instructions

Requirements

Power:  Connected to AC power

Connectivity:  An active connection to the internet.  Note that if you are doing a user-based enrollment (as opposed to finishing the enrollment of a pre-provisioned device) while at a Michigan Medicine facility, your IT support will need to ensure the device can communicate on Michigan Medicine's ​privileged network.  If the network is not configured to permit your device to communicate, then you will see a message indicating that it does not have internet access (see notes in step 5).

Credentials:  Michigan Medicine email (uniqname@med.umich.edu)

 

Steps

  1. Turn on the device.

  2. Select United States and click Yes.


  3. Click Yes. "US" will already be preselected based on the region you chose in the last screen.
    windows_autopilot_keyboard_layout

  4. Select Skip.
     windows_autopilot_keyboard_layout

  5. Select a Wi-Fi network.  Click Connect.
    Note that if your device is plugged into a network (i.e., not using Wi-Fi), you will not see this screen.  Using Wi-Fi is more common when enrolling a device while not at a Michigan Medicine facility (e.g., your home).  If you are plugged into the network while at a Michigan Medical facility and see a message saying that the device is unable to connect to the network, please enter a ticket with HITS. 
    windows_autopilot_connect_to_network

  6. Enter the password and click Next.
    Note that this screen will not appear if your device is plugged into the network and not using Wi-Fi.
     windows_autopilot_connect_to_network

  7. Select Next.
    The device may restart before proceeding to the next step.


  8. If presented the End User License Agreement for Windows, accept it.

  9. Enter your Michigan Medicine email (uniqname@med.umich.edu) and select Next.


  10. Enter your UMICH password and select Sign in.


  11. ​Select and respond to your preferred DUO authentication method.  Once the DUO prompt is acknowledged, the device will proceed to the next screen.


  12. Please wait for device to complete enrollment.
    1. This takes an average of 30 minutes depending on the speed of your network connection to the internet.
    2. The device will restart between the Device setup and Account setup steps.
    3. You can click on "Show Details" for more information.

    4. You may encounter errors due to applications not installing correctly or within the 90 minute timeout window.

  13. Once the enrollment process completes, you will be presented with a generic Windows background.  Press the spacebar or click with the mouse to reveal the sign in screen.

    Note that after your first sign in, Michigan Medicine branding will appear.   

  14. Log in with your uniqname and UMICH password.


  15. Your Windows session will begin. Additional enterprise and other required applications will install in the background.  You may open the Company Portal application to queue up the installation of other applications such as Cisco Jabber and Adobe Creative Cloud.
    windows_autopilot_desktop