Skip to content

Enroll Windows devices automatically through Autopilot

Lance Crandall Lance Crandall
Enroll Windows devices automatically through Autopilot

Setting up a new Windows device used to mean manual imaging and IT getting their hands on hardware, and many teams are still doing it this way. Windows Autopilot offers a better path: zero-touch deployment where devices ship direct from the vendor and enroll the moment the employee signs in for the first time. Iru connects directly to that flow, so the setup you configure once applies to every device.

Zero-touch Windows enrollment from a single Entra connection

Setting up Autopilot begins in Iru's Integration settings. Connect your Entra tenant and configure the app registration. Once configured, registered devices with Microsoft enroll automatically in Iru.

Blueprint Routing handles assignment automatically. Each new device is routed to the right Blueprint at enrollment based on the rules you configure, with no per-device work needed.

Following Blueprint assignment, enrollment handles itself. When the employee signs in with their Entra credentials on first boot, Iru enrolls the device and follows the Assignment Map logic to apply the right configurations and policies. Apps deploy and security settings start enforcing.

Admins configure the Intune Autopilot policy alongside this to control what employees see during the Windows out-of-the-box experience (OOBE), the first-boot setup wizard on Windows devices. The policy determines which setup screens appear, whether the user gets standard or admin rights, and whether the device Entra joins automatically. Configure it once and it applies to every device that goes through the Autopilot flow.

Every device enrolls the moment the employee signs in

Your team is expanding to a new office, and forty devices are shipping directly from the manufacturer to employees across engineering and operations. Engineering needs one set of apps and policies. Operations needs another. No one from IT is traveling to image devices before they go out. IT wants the onboarding process to be easier.

Configure Blueprint Routing in Iru's Autopilot settings once. From that point, every device that enrolls gets assigned to the right Blueprint automatically. Each employee opens the box, signs in with their Entra credentials on first boot, and enrollment completes on its own. The right apps and policies apply without any per-device setup before the device ships.

Every device ships, enrolls, and configures after a user signs in with Entra credentials.

Getting started

To get started with Windows Autopilot in Iru, check out the product documentation.

If you want to see how zero-touch enrollment works for your team, request a demo today.

Recent Articles

Featured image: A monitor with eyeballs, a cog, and a loading bar, representing endpoint visibility and control.
Iru Team 8 min read

What is endpoint visibility and control, and how does it work?

Endpoint visibility gives you a real-time view of your endpoints, including device inventory, patch status, configurations, running processes, and security posture. Your new list iEndpoint control lets you act on that data by deploying patches, enforcing policies, restricting software, and remediating threats.tem Endpoint visibility and control combines monitoring and remediation, helping you identify risks and fix them from a single platform. Visibility without control creates security gaps since detecting issues is only half the job. The ability to remediate them quickly is what reduces risk. Features like automated patching, policy enforcement, and continuous compliance help reduce manual work and keep your endpoints secure. Every endpoint tells a story. One laptop is missing critical patches. Another is running unauthorized software. A contractor's device hasn't checked in for weeks. You know exactly what's happening across your environment, but knowing isn't the same as fixing.

Featured image: How a single PostScript file leaks your Mac's memory
Csaba Fitzl 8 min read

How a single PostScript file leaks your Mac's memory

When I started my InfoSec journey, most of the offensive classes I took focused on memory corruption exploits. I learned a lot about buffer overflows, DEP and ASLR bypasses, and even got into kernel exploitation. However, since my job at that time was mostly hunting for bad guys in an insane amount of logs and telemetry data, I never really had the time to apply this knowledge.

Threat Intelligence
Featured image: Reliable Windows app patching with Iru system tray notifications
Lance Crandall 2 min read

Reliable Windows app patching with Iru system tray notifications

Notify Windows users when app updates are available. When your users are ready, they can allow Iru to close the app and update the application. Employees get more control over when updates land, and you spend less time chasing down unpatched devices.

Product News

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.