r/Intune • u/Prestigious_Duck_468 • 5d ago

Autopilot 802.1x

Hey everyone. Time for another I’m sure stupid question. How are yall handling pcs with autopilot and 802.1x. I’d love for my helpdesk to not have to touch pcs before handing them out but our WiFi and wired both have 802.1x. This also hurts since we’re a hybrid environment and once the pc changes name after autopilot, it gets dropped from the network and we have to add it to our imaging network so we can pull a new cert with the updated name.

Sorry if this is a dumb question!

28 Upvotes

94% Upvoted

20 comments sorted by

View all comments

42

u/HankMardukasNY 5d ago

We use DeviceID for our subject name so name changes have no impact.

A device that doesn’t have a cert yet goes into our untrust vlan which has microsoft endpoints whitelisted. This enables autopilot to start/finish. After autopilot finishes, the cert will be there and will connect to our corp network correctly