Intune - Autopilot and how to get the Hardware Hash
Microsoft Autopilot allows Microsoft Windows devices to be automatically enrolled into Intune. This process is similar to Apple's Automated Device Enrollment (ADE / formerly DEP). Intune does not have an applicable manual enrollment option so devices must go through the OOBE. To use Autopilot a device hash must be uploaded first.
Hash creation process
- You will need to run two scripts from a USB drive, which you can retrieve from euc-help@mit.edu if you need a copy.
- Get AutoPilot.CMD
- Get WindowsAutoPilotInfo.ps1
- Download both of the scripts to a USB flash drive.
- Insert the USB flash drive into the computer that you want to capture the Autopilot Hardware Hash from.
- If the device already has a user you can simply run the script from the user's desktop (be sure to right click and run as administrator). Otherwise you can run this during the OOBE process.
- Start up the computer and when the out-of-box-experience starts, press Shift-F10 (you may also need to hold the FN key on some laptops) to bring up a command prompt.
- Change the drive letter to that of your USB drive. Typically if you have no secondary drives (e.g. optical drive or second storage disk), the drive letter of the USB drive would typically be D:
- Run the GetAutoPilot.CMD from the USB drive
- You will be prompted to select your DLC tag from a list that appears. Selecting this tag will put the computer into the correct Intune computer group.
- This will create a compHash-serial.csv file at the root of the USB drive
- Remove the USB drive and insert it into your computer that you will using to upload the hash to Intune
- If your computer has network access the script will automatically launch Microsoft Edge and bring you to the Intune Portal page for hash upload.
Hash upload process
- Log into https:\\intune.microsoft.com and click Devices->Windows->Enrollment->Devices (under Windows Autopilot)
- Click the Import button and the select the compHash.csv file that has been created. Please wait 5 minutes for the Autopilot hash to synchronize to the Intune environment.
- You can click refresh to verify that the computer is now enrolled in Autopilot. Once it appears in the list, you can continue running through the OOBE.