Added in Windows 10 1709 is Windows Automatic ReDeployment, this feature is current only working on AzureAD joined Windows devices.
A use case for this is to allow a user to reinstall there Windows device without having to contact the IT Department, and the End-User can do this from any where, they don’t have to be on the corporate network.
Another use case when a device will be reused for a new End-User – the IT Department can just use the quick Windows Automatic ReDeployment instead of reimage the device.
Windows Automatic ReDeployment is a way of quickly remove End-Users personal files, applications and settings, by resetting Windows 10 devices from the login screen. Windows Automatic ReDeployment will retain the AzureAD join and MDM enrollment.
If you are using Windows AutoPilot the ReDeployment will completely bypass the AutoPilot profile question so it is silent for the End-User.
For the new Intune Enrollment status page there is a different when using ReDeployment – Continue anyway is always shown no matter what the settings are saying. Read more on Intune Enrollment status page. Intune Enrollment status page is only showed on Windows 10 1803.
How to set Windows Automatic Redeployment:
Start the Microsoft 365 device management portal : https://devicemanagement.portal.azure.com
- Click on Device Configuration
- Click Profiles
- Click Create profile
- Give the profile a name
- Select Windows 10 and later
- Select Device Restrictions
- Select Configure
- Select General
- Select Automatic Redeployment – Allow
The End-user experience:
On Windows Lock screen press CTRL + + R and you will be able to login with a AzureAD account that have local admin rights on the device
Then Windows will start Redeployning Windows with out any image solutions
If there is any updates on the devices it will be installed before the redeploying is starting
Then Windows will show Resetting this PC until it is finish – and I will reboot automatic in the process
When is it done Windows will show “Success! Windows is set up and ready to go.” on the lockscreen
You can login and Windows will start the user profile creation
Troubleshooting Windows Automatic Redeployment:
Take a look in the MDM dianogstic log to see the CredentialProviders -DisableAutomaticReDeploymentCredentials settings has changed from 1 to 0
The following list shows the supported values:
0 – Enable the visibility of the credentials for Windows 10 Automatic ReDeployment
1 – Disable visibility of the credentials for Windows 10 Automatic ReDeployment
To see the setting in Windows registry:
- Run Regedit on the Windows 10
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{01A30791-40AE-4653-AB2E-FD210019AE88}
- The key Disabled is changed from 1 to 0
Happy testing
Read more at:
CredentialProviders/DisableAutomaticReDeploymentCredentials
Hi Per Larsen – thanks for the instructions. Do I need to assign the profile to the devices before I test the End-user experience?
Yes – or to the end-user. I assign as much as possible to users
I disabled the option for users because we already had one user who was stupid and didn’t read what the screens were saying.