I'm curious to learn how others are using Intune for enrolling and deploying devices. Currently, we buy our computers directly from Dell, which are then added to Autopilot. I have a configuration policy set up to handle the necessary installations. However, I've run into a bit of a snag: when I power on the computer for the first time, it prompts for a login, but the new employee often hasn't started yet or set up their MFA. So, I wonder, do you all use a separate account for device enrollment, or do you prefer technical account provisioning (TAP)? I've also heard about provisioning packages, but I'm not quite familiar with them. Are there any better strategies you all have found?
5 Answers
I also use Autopilot without needing to touch the devices. The employee logs in, sets up MFA, and they’re good to go! If the new hire hasn't started yet, the laptop just waits on the shelf until they're ready. That’s the beauty of Autopilot—it’s hands-off for IT!
I hear you. It’s great when it works, but sometimes I like to double-check since weird issues can pop up after setup.
We're in the middle of setting things up, but I want it to be a system where the user can simply unpack their device, power it on, and have it ready to go without IT involvement. Seems like a good plan to aim for!
Definitely! I can see how important it is for efficiency.
I’ve used TAP as a one-time solution, shared with HR to give to the employee on their first day. It’s not ideal since it skips MFA at the first login, which could be a concern for security. I've found it easier to have them set up MFA first before logging in to avoid any hiccups.
That’s a smart idea, I think. It’s crucial that they set it up right away for security.
With us, the devices are enrolled via a VAR, and the users log in and set up everything themselves with a new hire packet. We’re aiming for a completely zero-touch deployment if possible, where MFA setup happens during their first login. It’s nice to see how others are approaching this as well!
Zero-touch is the dream! It would save us a lot of overhead.
We’re working on streamlining our deployment process so that users get a sealed laptop and just log in with zero setup required from us. If we can get it right, it should all happen automatically without the need to touch the device pre-deployment.
That’s exactly what I’m aiming for too. It saves so much time for IT!
Yeah, the goal is definitely to minimize IT's involvement. I basically hand the laptop to the user, and they get everything set up themselves, which is super efficient.