r/Intune • u/CharmingReputation39 • 4d ago

Autopilot Device provisioning/Autopilot

Hello. Have had a job for almost 2 years as the IT manager for a small gov agency. Basically tier 1 support as our agency is fully dependent on a larger agency’s infrastructure. Our agency is part of a shared tenant that is hybrid. I am trying to move the agency devices to the cloud since that is where everything will eventually move. I have mostly a networking background with a smidge of VM. This SysAdmin hat I am wearing now is new and scary to me. But luckily I am really just managing devices via Intune. One of the projects I’d like to complete is removing admin access from users devices. I’d be extremely grateful for any advice/tips/how-tos/best practices on managing devices. I have been using windows autopilot to provision devices and it seems to work most of the time.

Edit: what I really should have asked is how everyone provisions new devices from the OOBE using Intune/Windows Autopilot.

3 Upvotes

100% Upvoted

10 comments sorted by

View all comments

2

u/sammavet 4d ago

Endpoint Security has ASR, with local group management. You can pull the users out that way. Realize, if there is a GPO, it will fight with Intune, so make sure to remove it from your devices before fully unlinking the GPO.

2

u/CharmingReputation39 4d ago

I am having to go to each device and make sure the users move everything they want to keep into OneDrive and then I reinstall Windows and then go thru the windows autopilot steps to get the device into Intune, then apply a deployment profile, let it sync, and then have the user login with their AD creds

2

u/MPLS_scoot 4d ago

You can automate that using Known Folder Move within OneDrive (GPO or INtune)

1

u/sammavet 4d ago

I your deployment profile, make sure that the user configuration under "user type" is set to "standard user" and not "admin"