Windows Autopilot Enrollment Flow

Interactive diagram showing the device enrollment process through Windows Autopilot and Intune.

MICROSOFT INTUNE · WINDOWS AUTOPILOT

Device Enrollment Flow

Click any step → view technical detail · ⚠ = common misconfiguration

01 — Pre-Enrollment
⬡
Hardware Hash Registration
Device identity established in tenant
▶
▤
Autopilot Profile Assignment
Deployment profile bound to device
▶
02 — OOBE
◈
Device First Boot
Autopilot profile detected
▶
◎
Network Connectivity Check
Service endpoints verified
⚠▶
◫
OOBE Customization Applied
Branded sign-in experience presented
▶
03 — Identity & Authentication
◉
User Sign-In
Corporate UPN entered
▶
◐
Entra ID Authentication
Identity verified against tenant
▶
◑
Conditional Access Evaluation
MFA challenge & policy gate
⚠▶
04 — MDM Enrollment
◭
Entra Device Registration
Device object created in tenant
▶
◬
MDM Enrollment
OMA-DM channel established
▶
◪
Certificate Enrollment
SCEP / PKCS certs provisioned
▶
05 — Enrollment Status Page
▣
ESP — Device Setup Phase
Device policies, certs, and apps
⚠▶
▦
ESP — Account Setup Phase
User apps, policies, and WHfB
▶
06 — Managed & Compliant
▩
Desktop Reached
Device fully provisioned
▶
↻
Ongoing Management
Continuous compliance & policy sync
▶
Autopilot v1 · v2 · Entra Join · Hybrid Join · Windows 10/11
◎

SELECT
A STEP