There are two common ways to bring a Windows PC under Intune management, and which one you use depends on whether the device is brand new or already in use.

Option 1: Windows Autopilot (New Devices)

Autopilot lets a brand-new PC enroll itself the first time it's turned on and connected to the internet — the user just signs in with their work account, and the device configures itself automatically.

1. Register the device's hardware ID with Autopilot — usually done automatically by your PC vendor/reseller at purchase, or manually by IT by exporting the hardware hash from the device.
2. In the Intune admin center, go to Devices > Enrollment > Windows > Windows Autopilot deployment profiles and create/assign a deployment profile.
3. Ship or hand the device to the user as-is. On first boot, they sign in with their work account and the device enrolls and configures itself automatically.

Option 2: Manual Enrollment (Existing Devices)

1. On the Windows device, go to Settings > Accounts > Access work or school.
2. Click Connect, then sign in with the work account.
3. Follow the prompts to complete enrollment — the device will then appear in the Intune admin center under Devices > All devices.

Common Questions

Which option should we use?

Autopilot for new device purchases going forward — it's the "zero-touch" experience and means IT never has to physically image a machine. Manual enrollment for devices you already have in the field.

How do I confirm a device enrolled successfully?

Check Devices > All devices in the Intune admin center — the device should appear with a recent "Last check-in" time and a compliance status.