This guide will explain how to enrol an existing Windows device with MS Intune ready for it to use Autopilot. This guide is for new out-of-the-box devices or old devices with Windows 11 just installed from a memory stick. 


  • Download the Powershell script from MS Teams to a memory stick (Click Here)
  • Boot the device to Windows OOBE first time boot. 
  • At the select language screen press Shift-F10 (On some laptops you may have to press the FN key as well)
  • When the command prompt loads please type Powershell and press enter.
  • Then plug in the memory stick and type the command to access it (Most will be given the D drive as the letter assigned) D:\
  • Now type the following command set-executionpolicy bypass
  • Once this has run type Autopilot and press tab, this will complete the command and you just need to press enter. 
  • You will be asked twice if you wish to run the commands in the script, just press Y
  • Once the script has finished successfully you can unplug the memory stick and plug it into your computer. 
  • Now on your computer log on to the Endpoint management site. Then click Devices and then Windows
  • Then click on Windows Enrollment then Devises
  • Now click on the Import button on the menu bar and select the CSV file from your memory stick in the HWID folder. 
  • Once the device is imported, Click on the serial number to load the Properties tab and copy the serial number. 
  • Next, click on Groups from the left-hand menu and search for the WST-Laptops group 
  • Once the group is loaded click on Members and click Add Members, then paste the serial number in the Search box and add the device you just enrolled. 
  • Now go back to groups and also add your device to just one of the following groups.
    • WST-Laptops-Office
    • WST-Laptops-Office-Visio
    • WST-Laptops-Office-Visio-Project

You should now be ready to plug your laptop into the network and do a first-time boot. (Make sure the port is on VLAN 143)