Our company received a report that someone in another country is seeing our customized Windows Autopilot login page while setting up a very old desktop PC, roughly first-generation Intel Core i5 era. The unusual part is that the prompt supposedly appears only when a particular graphics card is installed. With the GPU removed, Windows setup reportedly continues normally.
A reused or incorrectly sold company device would make sense, and I'm also aware that warranty motherboard replacements, stolen equipment, or previously leased systems can remain registered in another organization's Autopilot tenant. However, I don't believe we ever owned a graphics card of this age. Could a GPU somehow affect the hardware identity used by Autopilot, or is there another explanation for this behavior? I've asked for the system serial number so we can compare it against our registered devices.
2 Answers
Autopilot uses a collection of hardware attributes rather than a simple serial-number-only lookup, so unusual identification issues or collisions are theoretically possible. Even so, a particular GPU causing enrollment to appear or disappear would be highly unusual and should not be treated as an expected workaround. Check the motherboard serial, BIOS details, hardware hash, Windows installation state, and whether the graphics card or entire system came from a repair or refurbished supply chain.
Autopilot enrollment is not normally tied to a graphics card alone. The device registration uses a hardware hash built from multiple system properties, and the serial number is an important identifier, but changing or removing one component should not be a reliable way to bypass enrollment. The first thing to obtain is the machine’s serial number and hardware hash, then compare those with the devices registered in your tenant.
A motherboard replacement or a second-hand system that was never removed from another organization’s tenant would be a much more typical explanation. The manufacturer or Microsoft may need to get involved if the device is registered to someone else.