What is Windows Autopilot?
Windows Autopilot is Microsoft's service for setting up business PCs without touching them. A new or reset Windows laptop that is registered to your company shows your sign-in screen at first start, joins Entra ID, enrolls in Intune and installs its apps and security settings while the employee waits, wherever they are.
Windows Autopilot is a Microsoft deployment service that turns a brand-new or freshly reset Windows computer into a fully configured business device the first time the user signs in. Instead of an IT technician imaging each machine by hand, the device is registered to the company in advance, and when it connects to the internet it joins Entra ID and enrolls in Intune, then receives its settings and applications automatically.
The process starts with registration. A hardware identifier for each device is uploaded to the company's tenant, either by the reseller at the time of purchase or by IT. An Autopilot profile attached to that device controls what the user sees during setup: which setup pages are skipped and whether the user gets local administrator rights. When the employee unboxes the laptop and connects to Wi-Fi, Windows recognizes the registration, shows the company's sign-in page, and hands the rest to Intune. Applications install and security policies apply while the user waits. A pre-provisioning mode lets IT or a vendor complete the heavy installs before shipping, and the same registration means a returned device can be reset and reassigned without being touched.
For a small or mid-sized business Autopilot removes the bottleneck of having every new computer pass through one person's desk. Laptops can ship from the supplier directly to a remote employee's home. Standards are enforced by design, so every machine gets encryption and the same baseline whether it was set up in the office or in another state. The requirements are modest: Microsoft 365 licensing that includes Intune and devices registered before they reach the user.
NetSys sets up Autopilot as part of its Intune management service and coordinates registration with hardware suppliers through its hardware lifecycle management service, so devices arrive already assigned to the client's tenant. New-hire setups are handled through the Autopilot profile rather than by hand, and the same process is used to wipe and redeploy machines when staff change roles or leave.
Why it matters for a small business
Every hire and every replacement laptop costs someone a day of setup unless the process is automated. Autopilot is that automation, and for most businesses on Microsoft 365 it is already licensed. The practical gains are speed and consistency: a new employee in another city is productive on day one, and you no longer depend on one technician remembering every setting. It also fixes the security gap that manual setups create, where a machine goes out with encryption off or an old antivirus because the checklist was skipped. The setup work happens once; the benefit repeats with every device.
Want Autopilot set up rather than explained?
NetSys registers the devices, builds the deployment profile and the application set, and runs every new hire and departure through it as part of Intune management.
A four-laptop deployment, start to finish
A 12-person firm on Microsoft 365 Business Premium hires four people who will work from home. Here is what Autopilot changes about getting their laptops to them.
Order and register
The laptops are ordered from a reseller that uploads each device's hardware hash to the firm's Microsoft 365 tenant at purchase. A machine bought elsewhere is registered by IT, who collect the hash with Microsoft's PowerShell script and upload it through Intune.
Build the deployment profile
In Intune, an Autopilot profile is assigned to the registered devices: user-driven mode, join Entra ID, skip the consumer setup pages, and sign the employee in as a standard user rather than a local administrator.
Assign what a finished machine needs
Microsoft 365 Apps, the remote-access client, Defender onboarding, BitLocker encryption and the compliance policy are assigned to the same device group. An enrollment status page holds the desktop back until the required applications have installed.
Ship sealed
The boxes go from the reseller straight to the four home addresses. Nobody at the firm opens them.
First sign-in
The new hire connects to Wi-Fi, sees the company sign-in page instead of the Windows welcome screens, signs in with MFA, and waits while policies apply and applications install. The machine is encrypted and reporting to Intune before they see the desktop.
Reuse when someone leaves
When one of the four moves on, IT triggers a wipe from Intune. The device stays registered, so the next hire's first sign-in runs the same profile, and the laptop never has to come back to the office in between.
The one-time work is steps 2 and 3. Every device after that is steps 1, 4 and 5, none of which involve a technician touching the machine.
Windows Autopilot: FAQs
What is Windows Autopilot and how does it work?
Windows Autopilot is a Microsoft service that automatically configures new Windows PCs for a business. The device's hardware identity is registered to the company's Microsoft 365 tenant before it reaches the user. When the user turns it on and connects to the internet, Windows recognizes the registration, presents the company sign-in screen, joins the device to Entra ID, and enrolls it in Intune, which then applies settings and installs applications. No IT technician needs to handle the machine.
What is Microsoft Autopilot?
Microsoft Autopilot is a common shorthand for Windows Autopilot, which Microsoft's documentation describes as a collection of technologies used to set up and pre-configure new devices for productive use. Microsoft also offers a newer variant, Windows Autopilot device preparation, for Windows 11 devices joined to Microsoft Entra ID, which adds each device to a security group during enrollment and reports deployment status in near real time.
Do I need Intune to use Windows Autopilot?
Yes, in practice. Autopilot handles the initial identity and enrollment step, but the actual configuration and application installation come from Intune or another supported management service. Without an MDM behind it, Autopilot would join the device to the company directory and stop there. Microsoft 365 Business Premium includes both Intune and the Entra ID features Autopilot requires, which is why it is the common starting point for small businesses.
Can Windows Autopilot be used on existing computers?
Yes. An existing device can be registered by collecting its hardware hash with a PowerShell script or through Intune, and then reset so that it goes through the Autopilot setup on the next boot. This is the usual way to bring older machines under management or to reassign a laptop from a departing employee to a new one. The reset wipes local data, so files should be backed up or synced to OneDrive before the device is redeployed.
Is Windows Autopilot free?
There is no separate charge for Autopilot, but it needs licensing that includes Entra ID P1 and Intune or another MDM service. Microsoft 365 Business Premium, E3 and E5 all qualify. The PCs must run Windows 11 Pro, Enterprise or Education; Home is not supported. Registration through your reseller saves setup time.
What does it mean when a laptop is Autopilot-registered?
It means the laptop's hardware hash has been uploaded to your company's Microsoft tenant, usually by the reseller at purchase. The first time it connects to the internet, Windows shows your company's sign-in page instead of the consumer setup screens and hands the device to Intune. A laptop bought elsewhere can be registered by IT.
More terms
Have the next batch arrive already set up.
Tell us how many devices are coming, where the people are, and what a finished machine needs on it. NetSys sets up registration with your supplier and the Autopilot profile, then runs every hire and departure through it. Month to month, no long-term contract.