Windows Autopilot: new laptops that set themselves up

How laptop setup usually goes

In many small offices a new laptop arrives, someone unboxes it, removes the manufacturer's trial software, creates a local account, installs Office, the PDF reader, the printer driver and the business apps, connects OneDrive, sets up email and then hands it over. It takes half a day if things go well, and each machine ends up slightly different depending on who set it up and how rushed they were.

That approach also struggles with remote staff. Shipping a laptop to someone working from Tauranga or Christchurch means either setting it up in Auckland first and couriering it on, or talking them through the setup over a video call. Neither is quick, and both make it easy to skip security steps that should have been applied.

What Autopilot changes

Autopilot registers each laptop's hardware identity with your Microsoft 365 tenant. When the laptop is first switched on and connected to the internet, Windows recognises it as belonging to your business, shows your company branding and asks for a work account. After sign-in, it joins Entra ID, enrols in Intune and pulls down every policy and app assigned to that person.

The result is consistent: encryption on, updates configured, Defender settings applied, OneDrive connected and the standard app set installed, every time. The laptop can go straight from the supplier to the staff member's desk or home, still in its box. They sign in, wait while it configures itself, then start work.

Getting laptops registered

The laptop's hardware identity has to be added to your tenant before it reaches the user. When buying new, ask your hardware supplier or reseller whether they can register devices to your tenant at the time of purchase, which most business channels can do with the right authorisation. Existing laptops can be registered by collecting their hardware hash with a small script and uploading it.

Buying business-grade laptops through a business channel makes this easier than buying consumer models from a retail store, which often cannot be registered by the seller and may come with home editions of Windows. Windows Pro or higher is needed for business management features, so check the edition before ordering.

What needs to be in place first

Autopilot depends on Intune being set up properly, because Intune holds the policies and apps that the laptop installs. That means having configuration profiles for security settings, an app list ready to deploy, compliance policies, update rings and, ideally, a test device to try everything on before the first real rollout.

You also need suitable licences, typically Business Premium or a plan that includes Intune and Entra ID P1, and staff accounts that are ready with multi-factor registration. Line-of-business software that cannot install silently may still need a manual step, so identify those apps early and decide how they will be handled. A short written note of the manual steps for each such app saves the next person from rediscovering them.

Resetting and reusing laptops

When someone leaves, Autopilot makes it simple to prepare their laptop for the next person. A remote reset from Intune wipes the user's data and settings, then the laptop goes through the same automatic setup when the new person signs in. No reimaging, no hunting for installation media and no forgotten security settings.

The same reset helps when a laptop becomes unreliable or is suspected of infection. Rather than spending hours troubleshooting, a reset returns it to the standard build, and because files are stored in OneDrive and SharePoint, very little is lost. It is a practical way to keep a small fleet consistent and healthy.

Is it worth it for a small office?

For an office that buys only one or two laptops a year, the setup effort may outweigh the time saved, although the consistency and security benefits still count. For businesses with ten or more staff, regular hiring, remote workers or multiple sites, Autopilot quickly pays for the time spent configuring it, and every new laptop arrives secure from the first sign-in.

The bigger win is that a well-run Autopilot setup forces you to define what a standard laptop looks like, which most small businesses have never written down. That definition makes support easier, audits simpler and new starters productive faster, even on the days when nothing goes wrong. Write the standard build down, keep it with your IT documentation and update it whenever a new app becomes part of everyday work.