Loaner laptop Scrub and Deploy

Issue/Question
  • A loaner laptop is returned by a user after being checked out.

 

Overview

This procedure should walk you through the process of taking a loaner laptop that was returned, wiping, then setting up to be ready on the shelf for the next users.

 

Environment

  • This will be for AutoPilot devices which are cloud only joined that are not joined to AD.

Resolution
  1.  When the device is returned, you’ll want to sign into Intune Admin Portal Dakota State University - Microsoft Intune admin center
  2.  Device blade > all devices > search the serial number of machine, then select. (Autopilot automatically names the machine in the format of (LOANER-XXXXXXX). 
  3. In the Device Overview page, you should see the option for Fresh Start.  While there is other options this should be what is always used unless told different.  When you select it, it will prompt asking you to check this box if user data is to be retained.  Do not select this.
  4. Once you select this, if the loaner machine is on a network, it should pick up this command.  You can try to expedite it by either restarting the machine or if able to log in, you can go to settings > accounts > work and school  > select the DSU tenant > info > and sync.  This process will manually have the machine check in.
  5. Once the machine checks in, it should reboot a time or two and take you to the out of box home screen.  Here you’ll want to proceed like you’d normally for a new setup.  You’ll connect it to a wifi or wired connection and follow the prompts.
  6. It will then start processing the setup as when it reaches out to our tenant, it will see that it’s an autopilot machine and start its setup process.  You’ll be prompted to sign in with a DSU account.  You’ll have to sign in with your personal account and make sure to add the @dsu.edu to your username as these machines are not AD joined.
  7. This should launch the DSU sign in page.  Enter your DSU profile password and then it should prompt you for MFA.  Follow the standard prompts to continue.
  8. MFA prompt
  9. Select “No, other people use this device”
  10. This will process for a bit as it goes through the Windows setup, it may restart once or twice depending on the app load to it.  In timing it on the current loaner setup, it’s about 20-30 mins as this is setting up Windows and installing the full version of Office.  It will eventually drop you in the Windows sign on screen.  Sign in using your full email address and verify MFA on the machine
  11. From this point, you are signing in on and creating a new standard account on the machine.  It will prompt you for Windows Hello which will require you setting a 6 digit passcode.  You’ll want to verify that you have full access to office.
  12. At this point you can now sign out, power down, and stick on the shelf.  When it’s ready to go out, you simply have to walk the user through the ends of step 10 and step 11.  Verify with the user that they’re able to get in and launch anything that they may need to use on the loaner before they leave.  This is our one opportunity to verify with the user that there shouldn’t be any issues.
  13. When device is returned, you can start back at step 1.

(see attached doc for steps with screenshots)