Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsWindows Autopilot deployment starts with the device’s purpose: a one-user PC, a device prepared by IT before handoff, or a shared kiosk all call for different profiles and setup work. For a typical single-user, cloud-joined PC, use user-driven deployment: prepare enrollment and registration, assign the profile, then have the user complete Windows out-of-box setup (OOBE) online. Choose pre-provisioning or self-deploying only when their technician workflow or shared-device behavior fits your hardware and identity requirements.
Choose the right Windows Autopilot deployment scenario
Autopilot provisions Windows using the device’s OEM image and drivers, then applies organization configuration during setup. It does not mean every deployment starts from a freshly installed Windows image: existing-device deployment and Autopilot Reset serve different purposes. Microsoft documents Windows 10 and Windows 11 for the principal scenarios; verify current platform and service support for your environment in Microsoft’s scenario overview.
| Scenario | Best fit and who performs setup | Join and hardware considerations | Windows installation |
|---|---|---|---|
| User-driven | A device assigned to one user. The user completes OOBE; no technician, OEM, or reseller setup interaction is required. | Configure the intended join type. The user authenticates with organizational credentials. | Uses the device’s OEM Windows image. |
| Pre-provisioned | A user-driven device where IT, an OEM, or reseller should perform time-consuming setup before handoff; the user completes the remaining phase. | Supports Entra join and hybrid join in user-driven scenarios. TPM attestation is required; virtual machines are not supported. | Uses the device’s OEM Windows image. |
| Self-deploying | A kiosk or shared device without a device-assigned user, where setup should need little user interaction. | Microsoft Entra join only. Requires a physical TPM 2.0 device with supported TPM device attestation; a virtual TPM does not make a VM suitable. | Uses the device’s OEM Windows image. |
| Existing-device deployment | A current PC that needs Windows reinstalled before Autopilot deployment. Microsoft describes Configuration Manager as the means to install a fresh OS in this scenario. | Choose the subsequent Autopilot profile and join mode for the intended user or device. | Fresh OS installation is part of this preparation path. |
| Autopilot Reset | Returning an existing device to its factory-default Windows installation. | Uses the existing Windows installation to rebuild the device. | Rebuilds from the existing installation rather than following the existing-device fresh-install path. |
Microsoft recommends Microsoft Entra join for new devices and does not recommend new Microsoft Entra hybrid join deployments. Hybrid join may still be relevant to an existing environment, but it adds on-premises domain-controller connectivity and identity steps. See Microsoft’s pre-provisioning guidance before choosing it.
Prepare the tenant and device before deployment
Do this work before handing a device to a user or starting a technician-led flow. The exact portal labels and tenant settings can change, so use Microsoft’s current scenario walkthroughs alongside your organization’s enrollment procedures.
#1 Best Overall
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
- Configure automatic MDM enrollment. Set up Microsoft Entra automatic enrollment in Intune, or the equivalent enrollment configuration for your organization’s MDM service. Review Windows Autopilot requirements.
- Confirm join permissions. For user-driven deployment, ensure the users who will perform setup are allowed to join devices to Microsoft Entra ID. Check the join configuration and other prerequisites in Microsoft’s user-driven mode guidance.
- Register the device. Ask the OEM or partner to register it at purchase, or have an administrator register its hardware identity with Autopilot. Registration must be associated with the organization before the device can receive its assigned Autopilot profile.
- Create the appropriate profile. Select the deployment mode and configure the organization’s intended OOBE behavior and join configuration. For a single-user baseline, use user-driven mode. For a shared device, evaluate self-deploying mode and its TPM and join restrictions.
- Group and assign. Create or select the appropriate Microsoft Entra device group in Intune and assign the Autopilot profile to the devices. Complete assignment before deployment, especially for self-deploying devices.
- Configure Enrollment Status Page behavior where needed. Assign the page and configure which provisioning requirements must finish before Windows grants access to the desktop. Its exact behavior depends on the policies you set.
- Check connectivity. Internet access is needed during user setup. Hybrid-join paths also need suitable connectivity to an on-premises domain controller. For attestation-dependent deployment, make sure the required TPM attestation endpoints are reachable.
Deploy a single-user device with user-driven mode
This is the baseline flow for a new, single-user device configured for Microsoft Entra join. It assumes enrollment, join permissions, registration, profile creation, and assignment have already been handled.
- Power on the PC and begin OOBE. Connect it to the internet over Ethernet or Wi-Fi. The user may be asked to select language, region, or keyboard settings.
- Sign in with organizational credentials. Windows retrieves the assigned Autopilot profile and applies its OOBE and join configuration.
- Allow enrollment and provisioning to complete. The device joins the configured directory and enrolls in Intune or the selected MDM service. Required policies and apps are applied as configured.
- Use the Enrollment Status Page to monitor progress. If configured to do so, it can track provisioning and prevent desktop access until required setup finishes. Once the configured work is complete, the user reaches the Windows desktop.
For the user-driven setup details and current guidance, see Microsoft’s user-driven deployment page.
Rank #2
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Run pre-provisioned deployment when IT should do setup first
Pre-provisioning divides a user-driven deployment between a technician, OEM, or reseller and the end user. The technician handles a portion of device provisioning before handoff; the user completes the remaining settings, policies, and user-specific work during OOBE. It is useful when reducing the setup burden at handoff matters, but it does not remove the user’s sign-in and completion steps.
- First validate the ordinary user-driven deployment. Confirm that the tenant’s enrollment, profile, policies, and user experience work as intended before introducing the technician phase.
- Register the device and assign its profile. Ensure the relevant Intune profile and policies are in place for the device before the technician starts.
- Run the technician flow on supported physical hardware. Pre-provisioning depends on TPM attestation; virtual machines, including those with virtual TPM, are not supported for this attestation-dependent path.
- Hand the device to its assigned user. The user completes the remaining OOBE and user-specific provisioning.
Pre-provisioned user-driven deployments support Entra join and hybrid join. If using hybrid join, validate domain-controller line of sight for the technician or OEM environment and account for additional authentication and reboot behavior described in Microsoft’s pre-provisioning documentation. For the documented Entra-join technician workflow, see Microsoft’s step-by-step Intune tutorial.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
Deploy a shared device with self-deploying mode
Self-deploying mode is designed for devices such as kiosks and digital signage that do not have a user assigned to them. It joins Microsoft Entra ID, enrolls in Intune or another MDM service, and provisions assigned apps and policies with little user interaction. It does not support hybrid join.
- Prepare automatic MDM enrollment and register the device. Ensure the Autopilot device record is available to the tenant.
- Create or select a device group. Use it to target the device’s profile and deployment policies.
- Configure and assign the Enrollment Status Page. Set the provisioning behavior required for the shared-device use case.
- Create and assign a self-deploying profile. Confirm the assignment is complete before powering on the device.
- Verify hardware and network prerequisites. Use a physical device with TPM 2.0 and supported device attestation, and ensure attestation endpoints are reachable.
- Boot the device while connected to a network. A Wi-Fi-connected setup may require locale and keyboard selection and a network connection. Ethernet may remove some prompts when permitted by the profile. Wait for provisioning to finish.
See Microsoft’s self-deploying mode documentation for current requirements. A device deployed once in this mode cannot automatically re-enroll through Autopilot until its Intune device record is deleted.
Rank #4
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
Troubleshoot common deployment blockers
- The device does not receive the expected profile: Confirm hardware registration, group membership, and profile assignment before restarting setup. Profile assignment should be complete before deployment, particularly for self-deploying mode.
- User-driven setup cannot join the organization: Verify that the user is permitted to join Microsoft Entra devices and that automatic MDM enrollment is configured for the tenant.
- Self-deploying verification times out: An unsupported TPM, failed TPM attestation, or a virtual machine can cause an
0x800705B4timeout during verification. Check that the device is physical, has TPM 2.0 with supported attestation, and can reach the attestation endpoints. - Hybrid join stalls or requires repeated sign-in: Validate the required line of sight to an on-premises domain controller in the relevant technician or OEM environment, along with the identity steps and any expected reboot behavior. Internet access alone does not satisfy the domain-controller requirement.
- The user still has significant setup to complete after pre-provisioning: That workflow shifts part of provisioning to the technician; it does not eliminate the end-user phase or user-specific setup.
Plan details that must be checked for your tenant
Licensing and SKU eligibility, exact network URL allowlists, throughput targets, and portal screenshots are not specified here and can depend on tenant and service configuration. Confirm them in the current Microsoft Learn requirements and the walkthrough for the scenario you are deploying. Also verify platform support before rolling out across Windows versions or device types.
Quick Recap
Best Value
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
