Windows AutoPilot Deployment

[Arthur]

This looks interesting...

 

Source: Microsoft

 

Delivering the Modern IT promise with Windows 10

Our goal with Windows 10 has always been to modernize the way IT interacts with Windows devices, adopting simpler and easier approaches that leverage cloud-based services and help employees be more productive with Windows 10, Office 365 ProPlus and Microsoft Enterprise Mobility + Security (EMS).

 

Today, I am happy to announce the latest innovation that helps enable this vision – Windows AutoPilot, a suite of capabilities powered by cloud-based services, designed to simplify deployment and management of new Windows 10 PC’s along with enhancements to Mobile Device Management and new Device Health features in Windows Analytics.

 

Self-Service Deployment with Windows AutoPilot

Getting a new PC at work should be a magical experience for an employee. It shows the company cares about making sure employees are productive and successful. Microsoft wants that experience to truly feel rewarding at the same time as we optimize results and cost for the whole company.

 

Imagine being able to take a new device out of the box and with just a few clicks fully configuring it for productive use – no more images to create and maintain, no infrastructure to manage, and a simple process. Now imagine that any member of the organization can easily setup a new device without needing any IT assistance. For most organizations, this represents a significant departure from how Windows 10 devices are deployed and managed today, but brings with it significant benefits, both from a process perspective and an economic one. We are announcing today Windows AutoPilot Deployment, a new cloud service that enables IT to customize the Windows 10 out of box setup experience using a cloud configuration, delivering a self-service deployment experience with new Windows 10 devices.

 

Windows AutoPilot Deployment works seamlessly with existing Azure Active Directory and Intune mobile device management (MDM) services, enabling a new PC to be easily transformed into a business-ready device: joined to Azure Active Directory, enrolled in Intune, transformed to Windows 10 Enterprise, settings applied, Office 365 apps and line-of-business apps installed. Ready to go!

 

Of course, there is no better way to understand how this process works than to see it in action.

 

https://www.youtube.com/watch?v=JrEU84KK2lQ

[sted]

the main issue is that youd end up with pcs filled with lenovo/hp/whoevers crudware at least with imaging you kill all that AND get education edition rather than probably home/pro

[jnfarmer]

Windows does Chromebook deployment?

[Arthur]

the main issue is that youd end up with pcs filled with lenovo/hp/whoevers crudware

I guess if you buy Microsoft Surface or "Signature Edition" devices you won't have any pre-installed junk.

 

Windows does Chromebook deployment?

Except not as quick or easy as a Chromebook!

Edited June 29, 2017 by Arthur

[NB9457]

It says it can push Apps, no mention of programs, so does for it to work, I'm assuming it'll somewhat rely on the windows store?

[TwistedHelixis]

Needs services that are chargeable - cant see small schools being able to use this

 

Windows does Chromebook deployment?

except Google charge a 1 time fee of about £15 and all the backend is totally free (for schools)

[CHiLL]

Honestly, I don't know what I should be using to deploy Windows 10 at the moment. We have SCCM to deploy OS's, updates, applications and endpoint protection. However, there's MDT, Setup Schools PC app, InTune (standalone), InTune (SCCM), Windows 10 Provisioning and now AutoPilot.

 

I just want to deploy Windows 10 Education 1703 using PXE boot for 80% of our devices. The other 20% are not able to PXE boot, therefore have the Task Sequence as a USB boot image.

 

What deployment method(s) should I be using for best practice, results and ease?!

[gshaw]

I've been using MDT to push out a few extra apps then at the end I re-run sysprep to give the out-of-box experience.

[ADMaster]

Honestly, I don't know what I should be using to deploy Windows 10 at the moment. We have SCCM to deploy OS's, updates, applications and endpoint protection. However, there's MDT, Setup Schools PC app, InTune (standalone), InTune (SCCM), Windows 10 Provisioning and now AutoPilot.

 

I just want to deploy Windows 10 Education 1703 using PXE boot for 80% of our devices. The other 20% are not able to PXE boot, therefore have the Task Sequence as a USB boot image.

 

What deployment method(s) should I be using for best practice, results and ease?!

 

Since you already have an SCCM deployment I'd stick with it for now. MDT is free but only does OSD

SCCM does the apps, endpoint protection and configuration.

intune and autopilot will cost extra and I don't think the setup school app will be as flexible as a SCCM or MDT image.

 

For your 20% even the other 80% just push the task to them and let windows reboot into the OSD.

I send a TS to a room collection go around turn them all on and next day they are done.

 

SCCM is a beast to get going right but once done its well worth it, and it sounds like you have a working system.

[sparkeh]

Am I missing something?

 

As it stands, when a staff member gets a new device I hand over a fully configured device that they can log on to and get working without any extra steps.

 

With Autopilot they have to start the setup process and wait while everything is configured, downloaded and installed (assuming that it can manage to push out full software programs). "Please wait while Adobe Creative Suite is installed"

 

As far as I can see this degrades the end user experience and makes life tougher for IT departments

[mrbios]

Am I missing something?

 

As it stands, when a staff member gets a new device I hand over a fully configured device that they can log on to and get working without any extra steps.

 

With Autopilot they have to start the setup process and wait while everything is configured, downloaded and installed (assuming that it can manage to push out full software programs). "Please wait while Adobe Creative Suite is installed"

 

As far as I can see this degrades the end user experience and makes life tougher for IT departments

 

Think about this from a Windows 10S device scenario. If you deployed 1000 of those to students, you hand the device to the students, they enroll and the settings apply from MDM.

 

It's their answer to ipads and chromebooks.

[sparkeh]

Think about this from a Windows 10S device scenario. If you deployed 1000 of those to students, you hand the device to the students, they enroll and the settings apply from MDM.

 

It's their answer to ipads and chromebooks.

Mmm makes sense from that perspective, but people are saying things like "its the death of sccm" which doesn't seem remotely sensible.

[Arthur]

Principal PM Manager for Windows Enterprise and Security, Sidd Mantri, offers an overview of Windows Autopilot, a new cloud service from Microsoft that provides you with a zero-touch experience for deploying new Windows 10 devices to your organization. Sidd illustrates how you and hardware vendor can use Windows AutoPilot, to enable your users to easily setup new Windows 10 devices, and demonstrates the user’s set-up experience. Learn more at: aka.ms/WindowsAutoPilot.

 

 

Today, Azure AD supported. With the Windows 10 Fall Creators Update, we will extend this to Active Directory-joined devices working with the Windows AutoPilot Deployment service, Azure Active Directory, and Microsoft Intune.

[sted]

Mmm makes sense from that perspective, but people are saying things like "its the death of sccm" which doesn't seem remotely sensible.

i think that depends on how you see it evolving. the current path is less corporate domained pcs and more "byod" for want of a better word so in theory you either buy a load in bulk and dish out but dont control as fully as with a domained pc or people buy whatever they want and you supply a usb so they can get access to your resources. in those scenarios sccm is less useful because you arnt dealing with domain joined devices they are just loosely controlled devices where users can do what they want but you can influence their settings

[gshaw]

Cynically it's also a way to make money from old rope selling you InTune licenses to get these devices managed

 

The idea of BYOD that the business \ school controls is more interesting. In a workplace it's usually a way to get users to self-support the hardware and needs locked down for data security, which is understandable but for education where parents \ students are being asked to pay for the privilege of owning the device how do they react to a third-party controlling what they can and can't do?

Edited July 4, 2017 by gshaw

[sted]

Cynically it's also a way to make money from old rope selling you InTune licenses to get these devices managed

 

and ignoring education instead of buying office 2016 once you cough up yearly/monthly for office 365