Configure Windows Autopilot Deployment Profile for Automatic Enrollment
You are implementing Windows Autopilot for a new fleet of devices. You need to ensure that during the out-of-box experience (OOBE), the device automatically joins Microsoft Entra ID and is enrolled in Intune. Which configuration is required?
Quick Answer
The correct configuration is to create an Autopilot deployment profile assigned to the devices. This profile defines the out-of-box experience (OOBE) settings and is the essential component that instructs the device to automatically join Microsoft Entra ID and enroll in Intune during setup. Without an assigned deployment profile, the device will not enforce these behaviors, leaving the OOBE to default manual steps. On the MD-102 exam, this concept tests your understanding of the Autopilot workflow: a deployment profile is the policy that bridges hardware identity with tenant enrollment settings. A common trap is confusing the deployment profile with an Autopilot device group or a device enrollment restriction—while groups organize devices, only the profile dictates the OOBE flow. Remember the mnemonic "Profile Powers the Path": the profile is the single configuration that powers the automatic enrollment path during OOBE.
⚠ Common exam trap
Watch out — candidates often confuse the prerequisite step of registering the device (uploading corporate identifiers) with the configuration step that actually defines the OOBE behavior (the deployment profile), leading them to select Option A instead of C.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an Autopilot deployment profile assigned to the devices.
An Autopilot deployment profile specifies the out-of-box experience (OOBE) settings, including the option to automatically join the device to Microsoft Entra ID and enroll it in Intune. Without a deployment profile assigned to the device, Autopilot will not enforce these behaviors during OOBE.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Upload corporate identifiers for each device.
Why it's wrong here
Corporate identifiers are used for pre-enrollment but do not set OOBE behavior.
- ✗
Configure the Enrollment Status Page in Intune.
Why it's wrong here
ESP shows progress but does not configure join/enrollment.
- ✓
Create an Autopilot deployment profile assigned to the devices.
Why this is correct
The profile defines the OOBE experience, including Entra ID join and Intune enrollment.
- ✗
Create a dynamic device group in Microsoft Entra ID.
Why it's wrong here
Dynamic groups are for targeting policies, not for Autopilot OOBE.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Windows Autopilot
Windows Autopilot is a cloud-based deployment technology that automates the setup and configuration of new Windows devices, reducing the need for IT staff to manually image or touch each machine.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE prerequisites are required to enable Windows Autopilot for existing devices?
hard- A.The device must be domain-joined to an on-premises Active Directory
- ✓ B.The device must be running Windows 10 or Windows 11 Pro, Enterprise, or Education edition
- C.The device must have a TPM 2.0 chip
- ✓ D.The device must have internet connectivity during the out-of-box experience
- ✓ E.The device must be registered in Intune using its hardware hash
Why B: Windows Autopilot requires a supported edition of Windows 10 or Windows 11 (Pro, Enterprise, or Education) to access the necessary cloud-based provisioning and enrollment features. Home editions lack the required MDM enrollment capabilities and policy support, making them incompatible with Autopilot deployment.
Variation 2. You are implementing Windows Autopilot for your organization. You need to ensure that during the first boot, the device automatically enrolls in Microsoft Intune and joins Microsoft Entra ID. What is the minimum requirement for the device?
medium- A.The device must have a local administrator account.
- B.The device must be joined to an on-premises Active Directory domain.
- C.The device must have a TPM 2.0 chip.
- ✓ D.The device must be registered in Autopilot with a valid profile.
Why D: Windows Autopilot requires the device to be registered in the Autopilot service with a valid profile assigned. This profile contains the settings that dictate the out-of-box experience (OOBE), including automatic enrollment into Microsoft Intune and joining Microsoft Entra ID (formerly Azure AD). Without a registered Autopilot profile, the device will not trigger the automated enrollment and join process during first boot.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.