Windows Autopilot deployment for existing devices: Install required modules to obtain Windows Autopilot profiles from Intune

Windows Autopilot user-driven Microsoft Entra join steps:

• Step 1: Set up a Windows Autopilot profile

• Step 3: Create JSON file for Windows Autopilot profiles
• Step 4: Create and distribute package for JSON file in Configuration Manager
• Step 5: Create Windows Autopilot task sequence in Configuration Manager
• Step 6: Create collection in Configuration Manager
• Step 7: Deploy a Windows Autopilot task sequence to collection in Configuration Manager
• Step 8: Speed up the deployment process (optional)
• Step 9: Run Windows Autopilot task sequence on device
• Step 10: Register device for Windows Autopilot

For an overview of the Windows Autopilot deployment for existing devices workflow, see Windows Autopilot deployment for existing devices in Intune and Configuration Manager.

Install required modules to obtain Windows Autopilot profiles from Intune

After making sure there's a valid Windows Autopilot profile, the next step is to download the existing Windows Autopilot profiles from Intune as JSON files. The JSON files contain all of the information regarding the Intune tenant and the Windows Autopilot profile. After the JSON files are downloaded from Intune, Configuration Manager packages that contain the JSON files are created. The Configuration Manager packages are then used to install the JSON file on the device during the Windows Autopilot deployment for existing devices task sequence.

The JSON file is installed on the device to the offline Windows installation during the WinPE portion of the Configuration Manager task sequence. The JSON file makes the Windows Autopilot profile available to the Windows out-of-box experience (OOBE) so that it can run the Windows Autopilot deployment when Windows is started for the first time. The JSON file eliminates the need for Windows OOBE to have to first download the Windows Autopilot profile from Intune.

Before the Windows Autopilot profiles are downloaded from Intune as JSON files, certain modules need to be installed on the device where the Windows Autopilot profile will be downloaded. These modules are required to obtain the Windows Autopilot profile from Intune. For this tutorial and to simplify the process, installation of these modules is performed on the Configuration Manager site server. However, any device with access to Intune can be used.

To install the necessary modules to download the Windows Autopilot profiles as a JSON file, follow these steps:

1. Sign into the Configuration Manager site server or other device that can access Intune.

2. On the device, open a PowerShell window as an administrator by right-clicking on the Start menu and selecting Windows PowerShell (Admin)/Windows Terminal (Admin) and then selecting Yes at the User Account Control (UAC) prompt.

3. Copy the following commands by selecting Copy at the top right corner of the below PowerShell code block:

   Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
   Install-Module -Name WindowsAutopilotIntune -MinimumVersion 5.4.0 -Force
   Install-Module -Name Microsoft.Graph.Groups -Force
   Install-Module -Name Microsoft.Graph.Authentication -Force
   Install-Module Microsoft.Graph.Identity.DirectoryManagement -Force
   
   Import-Module -Name WindowsAutopilotIntune -MinimumVersion 5.4
   Import-Module -Name Microsoft.Graph.Groups
   Import-Module -Name Microsoft.Graph.Authentication
   Import-Module -Name Microsoft.Graph.Identity.DirectoryManagement
   

4. Paste the commands into the elevated PowerShell window and then select Enter on the keyboard to run the commands. Enter might need to be selected a second time to run the last command in the code block. Once all the commands run successfully, the required modules are installed.

Verify that Windows Autopilot profiles from Intune can be viewed

Once the required modules are installed, the following steps can be taken to verify that Windows Autopilot profiles from Intune can be viewed:

1. Copy the following command by selecting Copy at the top right corner of the below PowerShell code block:

   Connect-MgGraph -Scopes "Device.ReadWrite.All", "DeviceManagementManagedDevices.ReadWrite.All", "DeviceManagementServiceConfig.ReadWrite.All", "Domain.ReadWrite.All", "Group.ReadWrite.All", "GroupMember.ReadWrite.All", "User.Read"
   

2. Paste the command into the elevated PowerShell window and then select Enter on the keyboard to run the command.

3. A Sign in to your account window appears. Sign in with a Microsoft Entra account that has access to Intune and the Windows Autopilot profiles.

4. Copy the following command by selecting Copy at the top right corner of the below PowerShell code block:

   Get-AutopilotProfile | ConvertTo-AutopilotConfigurationJSON
   

5. Paste the command into the elevated PowerShell window and then select Enter on the keyboard to run the command.

6. All Windows Autopilot profiles available in Intune are displayed in the PowerShell window in JSON format. Each individual Windows Autopilot profile is encapsulated within braces ({}).

Next step: Create JSON file for Windows Autopilot profiles

Related content

For more information on installing the required modules to obtain Windows Autopilot profiles from Intune, see the following articles:

• Install required modules.