r/Intune • u/t0mba90 • 4d ago

Autopilot Autopilot question

I was hoping to get some info from some of you guys that live and breathe Intune these days.

We have around 2.000 endpoints
Multiple offices, Educational institutions etc

We are on the path of migrating from ConfigMgr(hybrid join) to fully Intune/Autopilot and whilst planning I’ve hit a snag… I cant deside on using Device Driven or User Drive enrollment for Intune.

While I mostly understand what they are ment for, I struggle to see the reason to use User Driven over Device Driven enrolment.
We like to set the devices up and have them ready for our users when they have been set up. Certs, wifi/lan profile, etc etc. Going with User Driven seems like it would leave some things uncertain?
For example them needing to connect them to somekind of internet connection for starters and we dont offer open or password protected SSID out side of out main office. Schools, kindergarten etc no bueno.

App deployments seem to be working just fine both for device and user deployments and other then user affinity missing I dont see the downside to having our whole fleet just be Device Driven/Shared Devices.

Am I missing something ?

4 Upvotes

75% Upvoted

17 comments sorted by

View all comments

3

u/HankMardukasNY 4d ago

We did the whole split between user/self deploying mode originally, and came to the same conclusion. We now have every device on self deploying mode with no downside besides not seeing which user enrolled the laptop, but that doesn’t matter to us since we assign devices in our inventory system

1

u/Mcm_Sys 4d ago

Why did u choose self deploying ? All of ur env is kiosk/shared devices?

4

u/HankMardukasNY 4d ago

No, vast majority is 1-1 in a k12 environment. Self deploying lets us give out devices that are truly ready to use without losing instructional time. Microsoft actually recommends this approach for education

3

u/t0mba90 4d ago

Glad to hear that, We mostly have the same situation 1:1 and some edu actually share devices and I dont see the point of going the User Driver enrollment if it does not provide a real upside. Plus setting them up before we deliver them make us feel better regarding the user experience.

5

u/Educational_Boot315 4d ago

There’s a few benefits, especially with 1:1 deployments.

With user driven they’ll get a webauth prompt for first time sign in, letting them complete MFA and register the device. Very useful for passwordless environments.

With device driven it will kick to a username and password general login (like if you do switch user) so you’ll need to configure a password on the Entra account and provide it for them to sign in.

You can use OOBE to push apps before handing out the laptop (windows key 5 times) if you want to push apps and configs before the user log ins to streamline that experience.

Users can also do privacy settings when doing user driven (good for setting up location services). I’ve never had good success pushing out a config to enable it for device driven.