All steps must be completed in the order below
1.Image the Device
- Insert the ASU imaged flash drive into the PC to be imaged.
- Power on device, and boot from the ASU imaged flash drive inserted in step 1.a.
- Select Intune Image from the Menu
- Select “Yes” to create the hash
- Select the correct Intune group the device needs to be in:
- Campus vs Remote see this article.
- Checkout is for ASU only.
- Select “Yes” on wipe this machine. Be aware once you select yes, this will wipe all partition and format the drive!
2.Pre-Provisioning
- Devices in the Remote or Checkout groups start to pre-provisioning automatically. Proceed to step 4, Rename Device
- Devices in the Campus group - Once the device is done imaging and, on the screen – “Let’s set things up for your work or school” screen, press the Windows key repeatedly till the Autopilot page pops up.
- Select the second option: Pre-provision with Windows Autopilot and click next.
- When the screen with the QR code pops up, verify the correct provision is assigned and click next.
- When the device is done running through the Pre-Provisioning process click the Reseal button. This will power down the device.
- Power on the device and sign in using the intdem-ima@uwyo.edu DEM account. This will enroll the device in Intune.
3.Remove Primary User
* For Campus group only
- Sign into the imaging center computer with your -A account. (Not the computer you’re Imaging.)
- Log into https://intune.microsoft.com
- On the left locate devices, then locate Windows, then locate Enrollment, then locate Windows Autopilot and select Devices.
- Locate Associated Intune device and click on the device under that.
- Under Overview expand the Manage drop down and select Properties. Remove primary user and save.
4.Rename Device
- (For Campus devices only, this does not apply if device is a Remote provision.) On the device sign out of the intdem-ima@uwyo.edu account and sign in using your –DA.
- Once signed in with your DA account open the start menu and select settings.
- In System locate rename.
- Verify if device name changed on PC.
5.GLBA Device
*For GLBA users/devices only
a.Campus GLBA Device
- For a Campus devices, we add these Devices into our local AD group “InTune-GLBA-PC-Disk-Encryption”.
- Locate the AD icon on the task bar and select.

- In Active Directory Users and Computers Select Action > Find, and search for the “InTune-GLBA-PC-Disk-Encryption” group.

- Open the group and select Add in the Members tab
- Under Enter the object name paste the device name in there and select check name.

- Select ok.

- Select Apply and the device has been added to the group. (Note the button will not be grayed out, this is an example.)

b.Remote GLBA Device
- Remote devices are Entra joined devices only they go into the “AZ-InTune-GLBA-PC-Disk-Encryption” group. Go to step 26. (For Campus devices skip to step 33.)
- In Microsoft Intune Admin Center home page locate Groups on the left-hand side of the screen and select.

- Locate All Groups and select.

- In the search box search for the “AZ-InTune-GLBA-PC-Disk-Encryption” group. It will appear as the first option select it.
- On the left-hand side of the screen locate Members and select.

- At the top you will see +Add members icon select that.

- In the Add members popup enter the device name in the search bar

- Check the box next to the device name and click Select at the bottom. The Device is now in that group.