Setting up Windows Autopilot Enrollment Profiles

Now that we have our policies in place to manage devices, we can start configuring the policies so that we can enroll and provision them. The first of these is the Windows Autopilot Enrollment Profile, which tells the device what to do when it hits the Autopilot service during the Out of Box Experience (OOBE).

You can have multiple profiles assigned to different Entra ID groups, usually using the Group Tag functionality, which we will cover in Chapter 14. By using group tags when adding devices to Autopilot, you can then add devices to Dynamic Entra ID groups and assign them to the appropriate Autopilot profile. Here are a couple of examples of why you would want multiple profiles:

• Kiosk devices (using self-deploying mode): These profiles self-deploy and require no user input during provisioning. This means they can be configured to automatically sign in using a local device account. You can then configure policies to force...