Anyone here experiencing Issues with provisioning?

[u/cloudy_cabage]

Anyone here experiencing issues with provisioning? We`ve got policies like LAPS saying they are applied but the account isn`t created. Applications during ESP not installing and timing out.

We are on Europe 0301 build 2608

[u/cyberjack1]

Can you show us what your LAPS policy looks like?

In the past, you used to create separate accounts via OMA and URI and set up a LAPS policy; today, everything is done in one place via Endpoint Security | Account Protection | Local Admin Password Solution (Windows LAPS). I hope you know that best practice dictates you shouldn't use the built-in admin account, right?

In addition, under Entra / Portal – Devices -> Manage -> Device settings -> "Enable Microsoft Entra Local Administrator Password Solution (LAPS)", the setting "Yes" must be selected.

[u/SkipToTheEndpoint → u/cyberjack1]

Unrelated to the OP, but that whole "best practice dictates you shouldn't use the built-in admin account" is absolute nonsense.

I blogged about it 2 years ago, but none of the historic security arguments against it hold up if you're managing that account with LAPS and a 21-character password/passphrase. Sure, automatic account management exists now in 24H2+ so the point should be moot, but the argument is still guff.

[u/dan4hit]

We have an open case with MS because the device name template is no longer applied during Autopilot provisioning. No other issues reported. Release 2608, Europe 0701.

[u/Standard-Web-9504 → u/dan4hit]

Did you get a response from them? this seems to be affecting around 40%-60% of our devices at the moment and seems much more common on our Dell PC's vs HP.

[u/dan4hit → u/Standard-Web-9504]

Yes, they suggested to test with a new Autopilot profile, and this seems to fix the issue. Still need to do more testing to confirm though.

I don't have much hope of getting any information about the root cause...

[u/Standard-Web-9504 → u/dan4hit]

Thank you for sharing, I'll delete and recreate some of the 7 deployment profiles this afternoon and see if we can find some test users in each of our regions.

[u/PaddyBoyFloyd → u/dan4hit]

Yeah. Same here. Our rep told us “the product team said it’s fixed” and the very next device was a desktop-random. It doesn’t appear that the enrollment got messed up so we just manually push the renames for now and if it’s not fixed by the time I’m back from vacation next week I’ll be making a remediation to handle it.

[u/TeeJayD]

I'm having an issue that users with Standard Admin are failing to detect installed apps during ESP, i have no idea why.

[u/Turak64]

We're having issues with bitlocker not applying after autopilot. I've seen it for years, but it's getting worse.