Enrolling your Windows devices correctly ensures they are secure, compliant, and ready to use from the moment your team powers them on. Deel IT supports multiple preconfiguration methods to suit different organizational setups and regional requirements.
This article outlines the methods available for preconfiguring Windows devices for your organization's employees
In this article
- Why use Windows Autopilot?
- Windows Preconfiguration Methods
- Working with Windows Resellers for Autopilot
- Security and compliance considerations
We recommend checking out our article on Device pre-configuration before continuing to follow this article.
Why use Windows Autopilot?
Windows Autopilot is Microsoft’s modern deployment solution designed to simplify and secure the onboarding process for new devices. It automates enrollment into your organization’s Mobile Device Management (MDM) platform and ensures consistent security standards across all endpoints.
Benefits of Autopilot:
Zero-Touch Deployment: Devices automatically enroll into Microsoft Intune on first startup and connect to your organizational account.
Enhanced Security: Devices are linked to your company’s Microsoft tenant, preventing unauthorized use.
Scalability: Easily manage and deploy devices across multiple countries without manual setup.
Consistent Configuration: All enrolled devices receive the same policies, apps, and security baselines.
Learn more on the Microsoft Autopilot portal.
Prerequisites for Enrollment
To use the most efficient enrollment methods, ensure the following prerequisites are met:
Active MDM Solution: An active Mobile Device Management (MDM) solution is required. For automated enrollment, we recommend Microsoft Intune with Windows Autopilot configured. Deel can assist you in setting up an MDM or offer an in-platform solution powered by JumpCloud.
Microsoft Tenant Region: The Zero-Touch Autopilot method is available only for organizations whose Microsoft 365 tenant is based in the United States, United Kingdom, or European Union.
-
Device Destination: The available setup methods depend on where devices are shipped:
Core regions: US, UK, EU — Autopilot is supported.
All other countries: Devices are set up remotely with assistance from Deel IT.
Windows Preconfiguration Methods
The table below outlines each available enrollment method, including a description and applicable regional availability.
| Method | Description | Regional Availability & Use Case |
|---|---|---|
| Zero-Touch Autopilot | Devices are pre-registered to your organization’s Autopilot service and automatically enroll into Microsoft Intune upon first sign-in. Provides a fully automated, out-of-box experience. | Core Regions (US, UK, EU): Recommended method for organizations with Microsoft tenants in these regions. |
| Manual Device Hash (Autopilot) | Deel IT captures each device’s hardware hash and shares it securely with your IT team for upload into your Autopilot service. The device joins your MDM automatically after registration. |
|
| Manual Pre-Delivery Setup | Deel IT installs required applications and configurations before shipping the device, ensuring it’s ready to use upon arrival. | Core Regions (US, UK, EU): Used when Autopilot registration is unavailable or not preferred. |
| Remote Post-Delivery Setup | Deel IT assists the employee remotely after delivery. This includes device setup, Intune enrollment, and app installation. | Non-Core Regions (Rest of World): Used where Autopilot is not supported. Approximate setup duration: 3 hours per device |
Working with Windows Resellers for Autopilot
If your organization purchases devices through an authorized Microsoft reseller, Autopilot registration can be streamlined:
Without CSP (Cloud Solution Provider) status:
The reseller provides the device identifiers (serial number and hardware hash) to your IT team, who manually upload them to the Autopilot portal.With CSP status (recommended):
The reseller registers devices directly into your Autopilot service via the Microsoft Partner Center, minimizing manual setup and administrative work.
Integration with Other MDM Platforms
Deel IT can integrate with your existing MDM solution. Supported platforms include:
Microsoft Intune
JumpCloud
Jamf (for hybrid Apple and Windows environments)
If you use a different platform, contact Deel IT to confirm compatibility and integration options.
Security and Compliance Considerations
Deel IT ensures all enrollment methods meet strict security and compliance standards:
Devices are bound to your organization and cannot be used outside your management policies.
All credentials and configuration data are shared securely through approved methods.
Deel IT is SOC 2 and ISO 27001 certified.
Learn more on our Trust Center.
If you or your IT team have additional questions, please contact Deel IT Support. We can arrange a consultation call to determine the best enrollment method for your organization.