Modern deployment with Surface Zero-touch deployment The old way
OFFICE AND APPS
DRIVERS POLICIES
SETTINGS
Build a custom image, Deploy image to a new Time means money, making gathering everything else computer, overwriting what this an expensive proposition that’s necessary to deploy was originally on it The new way
Un-box and turn on Transform with minimal Device is ready off-the-shelf Windows PC user interaction for productive use Surface-optimized Windows 10
+ Software
+ Settings
+ Updates
+ Features
+ User data
Ready for productive use Ready for Windows Autopilot
Go Pro Pro X Laptop Book Studio
The lightest, most The iconic Surface Connect nearly The perfect everyday Our most powerful The most immersive and affordable Surface 2-in- 2-in-1, now even faster anywhere, any time. laptop is now even faster. Surface yet in a laptop powerful Surface desktop, 1, with a 10.5” and more versatile, with Wherever the day takes Choose from two durable form factor, with 13.5” with a 28” fully adjustable touchscreen. Available USB-A and USB-C®. you, you’ll be a step keyboard finishes and or 15” detachable touchscreen. with LTE Advanced. ahead with Surface Pro X. 13.5” or 15” touchscreens. touchscreen.
Surface & Windows Autopilot One Microsoft at its best
Surface and Microsoft sales/support are engineered to support Autopilot deployment:
Surface ships with the Microsoft Signature image with pre-installed Office apps for seamless Autopilot deployment.
Microsoft’s CSP network may enroll Surface with on-box Product Keys and simplified CSV files in Partner Center
Devices returned to Microsoft through warranty are automatically removed and updated.
Surface is engineered to enroll in customer tenants quickly and supports managing firmware through DFCI. User-driven deployment with Azure AD
User-driven deployment with Hybrid Azure AD join
Self-deploying mode (kiosk mode)
Autopilot for existing devices
White glove deployment Windows Autopilot // User-Driven Azure AD
Windows image, Office, Apply apps, settings, and drivers and policies
Surface End User (minutes to hours)
Dependent on: Network speed User expectations / patience Windows Autopilot // White Glove Deployment
Device apps, settings, Windows image, Office and policies User settings and drivers and policies User apps
Surface Partner or IT End User (minutes to hours) (minutes)
Optimized for: Network speed (caching) Multitasking
White Glove deployment with Wi-Fi
Press Shift+F10 to open command prompt
Enter “start ms-availablenetworks:”
Using the network flyout, connect to a network
If a webpage is required to connect enter: “start https://msftconnecttest.com/” Value to Partners Value to Partners // Overview
Healthy Surface device business • Stronger, more competitive value prop • Supports faster device replacement • Enables expanded geographical reach
Increased software and service attach • Deployment offerings across the 5 scenarios • Device lifecycle management services • Microsoft 365 cross-sell / up-sell
Higher customer retention and lifetime value • Greater account control & insight • Services vs transaction-based relationships • Lower cost to support • DaaS model enabler Value to Partners // Registration opportunities
Partner Customer Recommended Not recommended
Serial number Store for Business Requires manual harvesting Partner Center PKID or Manufacturer name or of the HW Hash Model name Office Portal Manually harvesting the CSV is not scalable…
1. Right-click on the Windows Start button and click Windows PowerShell (admin).
2. At the prompt type: Set-ExecutionPolicy Unrestricted followed by Enter.
3. Answer Y to any questions.
4. At the prompt type: Install-Script -Name Get-WindowsAutopilotInfo followed by Enter.
5. Answer Y to any questions.
6. At the prompt type (including quote marks): cd "C:\Program Files\WindowsPowerShell\Scripts" followed by Enter.
7. At the prompt type: .\Get-WindowsAutopilotInfo.ps1 -OutputFile C:\MyComputer.csv followed by Enter.
8. Answer Y to any questions.
9. At the prompt type: cd c:\ followed by Enter.
10. At the prompt type: dir followed by Enter.
11. Confirm that the MyComputer.csv is listed.
12. Right click MyComputer.csv and select Edit. The file will open in Notepad for viewing. Value to Partners // Licensing opportunities
Required licensing
Windows Autopilot requires Azure Active Directory Premium P1 Azure and a Mobile Device Management solution Active MDM Directory Mobile device manager Value to Partners // Licensing opportunities
Enterprise Mobility and Security
Azure Existing Office 365 license Active Microsoft + Directory Intune
Enterprise Mobility and Security includes Azure AD and Intune, which meets the requirements for Windows Autopilot Value to Partners // Licensing opportunities
Microsoft 365
Enterprise Mobility and Security
Azure Active Microsoft + Directory Intune Office 365 Windows 10 Enterprise
All Microsoft 365 non-consumer licenses include everything required for Windows Autopilot Using Partner Center Check your rights
Admin rights are not assigned Admin rights are assigned you do not see the Customers tab you see your customers and can request reseller relationship Become an Admin Agent
Assign “Admin Agent” rights to users who should be able to register devices
Assign “Admin Agent” rights Requesting a reseller relationship Adding a new customer in Partner Center
First step: Request a relationship. Invite your customer Reseller relationship options Cloud Reseller vs. Delegated Admin rights
The standard right should be “Cloud Reseller” “Delegated Admin rights” gives the partner full access to the customers’ cloud resources This is the minimum you need as a partner to register devices to the customers’ tenant Please discuss with the customer upfront if this right is needed at all Autopilot provisioning
Where IT configures Windows Autopilot
Azure Active Directory Microsoft Endpoint Manager (Intune) Understanding CSV requirements Autopilot // Registration methods
Customer
Device serial number Windows product ID Hardware hash Manufacturer name Device model
Required
Partner
Option Device serial number Windows product ID Hardware hash Manufacturer name Device model
Preferred Recommended Required
Secondary Required Required Required
Last resort Required CSV file headings Partner Center CSV Preferred Option: Serial Number + PKID
We recommend adding the serial number in order to easily identify the devices in Partner Center and Intune Common CSV issues and how to address them
Device is not found after The device is already Incorrect CSV formatting uploading CSV registered for the portal type
The CSV is correctly formatted, but After uploading a correctly Partner Center doesn’t accept the Partner Center doesn’t recognize formatted CSV, the system says the CSV file as uploaded despite it the device for Autopilot. device has already been registered. being correctly formatted.
Devices manufactured before 2018 The device has already been CSV files generated via PowerShell can only be enrolled into Autopilot uploaded to an organization are meant for upload to Intune through Intune using the Hardware and must be removed in order and are different than the format Hash method. to re-enroll. required for Partner Center. This can be automated with a If the company is unknown, ConfigMgr task sequence. contact Microsoft 365 support. Common deployment issues and how to address them
Policies and apps are not Autopilot devices do not Microsoft Store apps are “Something went wrong.” deploying to the devices appear in Intune not deploying to devices Despite policies and apps After completing Microsoft Store apps appear The phrase “Something went being configured in Intune deployment, the device in Intune and are assigned wrong” is displayed on the they are not pushing to the appears in Azure AD but not but they do not install with Enrollment Status page and Autopilot device during Intune and no configurations the Autopilot deployment. the deployment fails. deployment. have deployed to the device.
Device configuration profiles Intune must be selected as Store apps added through The device you’re working and App deployments must the MDM authority in Intune can only be assigned with fails to meet network be assigned to a group of Microsoft 365. as “Available,” not “Required.” requirements. users in Intune. This step is not automatically Store apps must be acquired This can occur in Ensure each profile or app is enabled for Microsoft 365 in the Microsoft Store for environments with restrictive assigned and the devices are customers, despite it being Business and then synced firewalls that block access to in the correct group. included. with Intune. Microsoft systems, check the network. Coming soon Coming soon // More work to do…
Improve Windows 10 Improve device Improve device configuration migration lifecycle operations Not just policies, also preferences Enable migration of apps to a new Disposed / recycled / returned device automatically devices need to be de-registered PowerShell is a workaround, (e.g. apps installed via the Company Portal using not the solution self service) Break/fix activities should get devices re-registered Installing features, language packs Enable migration of critical settings to a new device automatically Removing in-box apps Coming soon // More work to do…
Improve user Improve IT experience Improve SCCM experience Reporting, monitoring integration Enrollment status page should Guided scenarios to help with initial Quickly run a task sequence during present more useful information setup and configuration the Windows Autopilot process, blocking during ESP Make the process faster Environment and network validation tools Automatically configure UDA based Fewer “Something went wrong” on assigned user in Windows screens with random hex codes or Autopilot page names Coming soon // Deployment report
New Windows Autopilot deployment report showing results, duration (CY20) Our Surface Hub The revolutionary all-in-one digital whiteboard, meetings family platform, and collaborative computing device.
Go Pro Pro X Laptop Book Studio
The lightest, most The iconic Surface Connect nearly The perfect everyday Our most powerful The most immersive and affordable Surface 2-in- 2-in-1, now even faster anywhere, any time. laptop is now even faster. Surface yet in a laptop powerful Surface desktop, 1, with a 10.5” and more versatile, with Wherever the day takes Choose from two durable form factor, with 13.5” with a 28” fully adjustable touchscreen. Available USB-A and USB-C®. you, you’ll be a step keyboard finishes and or 15” detachable touchscreen. with LTE Advanced. ahead with Surface Pro X. 13.5” or 15” touchscreens. touchscreen.