How To Remotely Autopilot Laptops via -Online switch

Question

I have existing remote laptops that I want to autopilot but how do I submit HWID using the -online which requires intune admin credentials? Is there a Just-in-time permission and/or single use password protected with MFA that can allow user to submit HWID on behalf of company?

My understanding was that "convert all targeted devices to Autopilot" meant the HWID would be submitted automatically for these existing devices. If this is not the case my only roadblock is not having physical access to laptop to enter my intune admin credentials.

I would run > sysprep application to trigger oobe

Answer 1

@ITST, Thanks for posting in Q&A.

From your description, I know you want to remotely autopilot existing device in Intune.

Based on my research, your understanding "convert all targeted devices to Autopilot meant the HWID would be submitted automatically for these existing devices is correct", you can just set convert all targeted devices to Autopilot Yes and all existing devices in Intune portal will automatically submit HWID and do Autopilot without uploading HWID manually.

Be aware the "Convert all targeted devices to Autopilot" only works for Azure AD joined and registered devices, not hybrid joined devices.

Also, please be sure your devices meet the requirements below using the setting of convert all targeted devices to Autopilot.

• Running a supported version of Windows
• Enrolled in a mobile device management (MDM) service such as Intune
• A corporate device that isn't already registered with Autopilot

https://learn.microsoft.com/en-us/autopilot/automatic-registration#requirements

Or you can submit HWID using online when trigger oobe using command.

https://intunestuff.com/2024/01/08/how-to-get-the-hardware-hash-imported-into-intune-without-going-through-the-full-oobe/

Non-official, just for reference.

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

After enabling converting all devices to autopilot, make sure you have that ZTD autopilot dynamic group which will map new device hashes to the autopilot profile. After that, you just remote wipe computers and they will enroll to autopilot via oobe phase.