Page Comparison

This page will go through the steps of enrolling a device into Endpoint Manager and Autopilot.

...

Adding a Device record to Group Membership in Azure Active Directory

To access Azure Active Directory you can chose the Admin Tile within Office 365 or follow this LINK. After clicking on the link you will need to select Azure Active Directory.

1. To get to the main options for Azure AD click the Azure Active Directory on the left panel

   

2. First, let’s make sure that the device is in Azure AD after being bound to the on prem AD domain

3. Under the Manage selections chose “Devices”

   

4. Search for the computer name of the device we want to enroll

   

5. Click on “Azure Active Directory” on the left to go back to the original set of options

   

6. Select “Groups” from the panel to the right.

7. Search for the ManualAutoPilot group

   

8. Click on the ManualAutoPilot group to open up the options for that group

   

9. We want to add the device that is enrolling to this group so you will select “Members”

10. After selecting “Members” you should click the “+ Add Members”

11. Search for the computer name or Azure ID of the device you want to add to the group

12. Click on the device and then click on the blue “Select” button

    

13. You are ready to reset the device.

...

1. Clicking the start button you can search Reset this PC.

2. Under Reset this PC, click Get started.

3. Follow the instructions on the screen.

   1. You will want to “Remove Everything”

   2. Chose Local Reinstall when applicable

Enrollment - First Login To Assigned User

1. After the device resets you will be at an Out Of Box Experience (OOBE). Select the following options:

   1. Yes - United Stations (Region)

   2. Yes - US (Keyboard Layout)

   3. Skip - Skips the setup for a second keyboard layout

   4. Accept - Accepts the Win 10 license

2. You should see one of the following screens:
   

   Image AddedImage Added

3. For the first picture you will select “Set up for an organization”.

4. The Assigned User will login with their @co.ssd.k12.mo.ususer account.

5. When you select "Next" it should go to the SSD Organizational sign in page

6. The Assigned User will put in their SSD Password.

   The next screen should look like this:

   Image Added

7. Device Setup will begin. The page with the three stages is called the "Enrollment Status Page" 

   1. Device Preparation - Hardware Checks, Network Check, Registering with Endpoint Manager, Joining Azure AD

   2. Device Setup - Computer/Computer Group based security, certificate and application installs/setup 

      1. A restart of the device may take place after this step

   3. There's a Privacy Setting screen that may appear next. Select "Accept"

   4. In some cases the system will present a generic Win 10 login screen

      1. The Assigned User will need to sign in with their @co.ssd.k12.mo.us account again

   5. User Setup - User/User Group based security, certificate and application installs/setup

   6. You should see a "Continue anyway" button at the bottom right of the screen. The User may select this to go into Windows 10.

      1. If this is selected there's still setup taking place that may cause the system to restart.

   7. The device will log into Windows 10 after completion if you did not chose the "Continue Anyway" button.

   8. There are some cases where a User may need to "Sign Out" and "Sign Back In" this is a normal operation linked to Credential Manager adding user authentication information.