Skip to content

Enroll Windows devices automatically through Autopilot

Lance Crandall Lance Crandall
Enroll Windows devices automatically through Autopilot

Setting up a new Windows device used to mean manual imaging and IT getting their hands on hardware, and many teams are still doing it this way. Windows Autopilot offers a better path: zero-touch deployment where devices ship direct from the vendor and enroll the moment the employee signs in for the first time. Iru connects directly to that flow, so the setup you configure once applies to every device.

Zero-touch Windows enrollment from a single Entra connection

Setting up Autopilot begins in Iru's Integration settings. Connect your Entra tenant and configure the app registration. Once configured, registered devices with Microsoft enroll automatically in Iru.

Blueprint Routing handles assignment automatically. Each new device is routed to the right Blueprint at enrollment based on the rules you configure, with no per-device work needed.

Following Blueprint assignment, enrollment handles itself. When the employee signs in with their Entra credentials on first boot, Iru enrolls the device and follows the Assignment Map logic to apply the right configurations and policies. Apps deploy and security settings start enforcing.

Admins configure the Intune Autopilot policy alongside this to control what employees see during the Windows out-of-the-box experience (OOBE), the first-boot setup wizard on Windows devices. The policy determines which setup screens appear, whether the user gets standard or admin rights, and whether the device Entra joins automatically. Configure it once and it applies to every device that goes through the Autopilot flow.

Every device enrolls the moment the employee signs in

Your team is expanding to a new office, and forty devices are shipping directly from the manufacturer to employees across engineering and operations. Engineering needs one set of apps and policies. Operations needs another. No one from IT is traveling to image devices before they go out. IT wants the onboarding process to be easier.

Configure Blueprint Routing in Iru's Autopilot settings once. From that point, every device that enrolls gets assigned to the right Blueprint automatically. Each employee opens the box, signs in with their Entra credentials on first boot, and enrollment completes on its own. The right apps and policies apply without any per-device setup before the device ships.

Every device ships, enrolls, and configures after a user signs in with Entra credentials.

Getting started

To get started with Windows Autopilot in Iru, check out the product documentation.

If you want to see how zero-touch enrollment works for your team, request a demo today.

Recent Articles

Featured image: Intune pricing: What your bundled MDM is actually costing you
Nathan Sparks • 3 min read

Intune pricing: What your bundled MDM is actually costing you

You didn't specifically choose Intune. It came bundled with your E3 or E5 agreement. It was a free line item sitting next to the productivity suite your org/company actually signed up for. So you started using it, because that's what "free" does: becomes the default before anyone really evaluates it.

Thought Leadership
Featured image: PamStealer comes to Intel Macs: Analyzing the x86_64 build of a Rust macOS stealer
Cristian Molina • 17 min read

PamStealer comes to Intel Macs: Analyzing the x86_64 build of a Rust macOS stealer

In late August 2026, automated telemetry identified an in-the-wild sample of PamStealer , an emerging Rust-based macOS information stealer first documented by Jamf Threat Labs . Prior public analysis observed PamStealer operating exclusively as an Apple Silicon (arm64) payload delivered via trojanized disk images impersonating the Maccy clipboard utility. This analyzed artifact is the Intel (x86_64) architecture slice of a multi-architecture fat binary, confirming that the threat actors have expanded their build pipeline to ensure uniform execution across legacy and modern Apple hardware.

Threat Intelligence
Featured image: Inside MSP Billing: What actually happens to your margin, day by day
Gregory Rogers • 5 min read

Inside MSP Billing: What actually happens to your margin, day by day

There's one number that decides whether your MSP business makes money: the spread. What you pay for your technology and what you charge your clients. The gap between the two is your entire business.

Product News

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.