Plaza 9, KD Tower Cotterells, Hemel Hempstead, HP1 1FWinfo@cloudable.biz

Intune Autopilot – Part 2 – Moving in the right direction!

Cont.

So if you've read part one, then you're looking for a way to set up an Intune managed Autopilot device to be shared among multiple users.

The chances are that you're already using autopilot for your single-user devices. Which means that you already have an Azure AD Dynamic Group, probably using a dynamic query such as:

(device.devicePhysicalIDs -any (_ -contains "[ZTDId]"))

The problem with this approach is that it's going to lump all of our autopilot devices into one AAD Dynamic group, which is no good if we need multiple deployment profiles (User Driven + Self-Deploying profiles). So we need a way to separate these devices. Enter the OrderID field...

The OrderID field, also referred to as GroupTag will allow us to create different groups of Autopilot devices, so that we can deploy Single User laptops, Shared PCs, and Kiosk devices all with different profiles and policy sets. However, if we are using the ZTDId tag, the chances are that none of our existing computers has the order IT field populated.

 

Therefore we need to populate the OrderID value for all existing devices and change our Dynamic AD groups to match the OrderID, not all autopilot devices.

Thankfully, Nicola Suter has come to the rescue here. He has written a PowerShell script that will connect to Graph API, and allow us to change the OrderID field in bulk. https://tech.nicolonsky.ch/bulk-update-windows-autopilot/ In this example. I'm going to use a group tag of "autopilot" to signify a standard user-driven deployed device, therefore we will use Nicola's scripts to change the group tag to "Autopilot" on all existing devices.

 

In conjunction, with this, we also need to change the Dynamic group query in Azure AD from targeting ZTDid to something like this:

(device.devicePhysicalIds -any _ -eq “[OrderID]:Value”)

Where "Value" is the value, you want to put in the OrderID field.

Once we have done this, we can start building a new policy and profile set for our other devices. In part 3, we will explore a multi-user desktop and kiosk mode deployment alongside traditional user-driven deployments.

17 Responses to “Intune Autopilot – Part 2 – Moving in the right direction!

  • Rather informative….look frontward to returning.

  • Wow, this post is fastidious, my younger sister is analyzing these things, so I am going to let know her.

  • You’re a really valuable site; couldn’t make it without ya!

  • Sustain the amazing work !! Lovin’ it!

  • I’m not that much of a online reader to be honest but your blogs really nice, keep it up!

    I’ll go ahead and bookmark your website to come back later.
    All the best

  • It’s very trouble-free to find out any topic on web as compared to
    books, as I found this post at this site.

  • We absolutely love your blog and find almost all of your post’s to
    be exactly I’m looking for. can you offer guest writers
    to write content available for you? I wouldn’t mind writing
    a post or elaborating on some of the subjects you write regarding here.

    Again, awesome weblog!

  • I love your blog.. very nice colors & theme.
    Did you make this website yourself or did you hire someone to do it for you?
    Plz reply as I’m looking to design my own blog and would like to find out where u got this from.

    cheers

  • This is very interesting, You’re an excessively skilled blogger.
    I’ve joined your rss feed and sit up for searching for more of
    your fantastic post. Also, I have shared your website in my social
    networks

  • I have been browsing online more than 3 hours today, yet I never found any interesting article like yours.
    It’s pretty worth enough for me. Personally, if all website
    owners and bloggers made good content as you did,
    the internet will be a lot more useful than ever before.

  • Inspiring story there. What occurred after? Good luck!

  • This info is priceless. How can I find out more?

  • Spot on with this write-up, I actually believe that this website needs far
    more attention. I’ll probably be returning to read through more, thanks for the
    info!

  • I take pleasure in, lead to I discovered just what I was taking a look for.

    You have ended my four day lengthy hunt! God Bless you man. Have a great day.

    Bye

  • Hi it’s me, I am also visiting this web page on a regular basis, this site is really good
    and the people are in fact sharing good thoughts.

  • Great article! We will be linking to this particularly great post on our site. Keep up the good writing.

Leave a Reply

Your email address will not be published. Required fields are marked *