This script is for importing your device (laptop, pc) hash/serial into Intune Autopilot during Windows Installation. Useful for new hardware or reinstallation of older devices. It relies on active internet connection.

I rescripted the Get-WindowsAutoPilotInfo script (https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo) so it does not need Nuget and MsGraph modules. It works with Invoke-Webrequests instead. This ensures the script works prior to booting into OOBE and makes it work as a truly unattended installation.

Prerequisites:

1. An AzureAD App Registration
2. Windows USB installation.
3. Exported Wifi profile (optional)

Steps:

Create Windows USB installation.

Optional; export wifi profile.

Create an App Registration in Azure.

Add the following API permissions:

Microsoft Graph -> Application Permissions ->

DeviceManagementConfiguration.ReadWrite.All
DeviceManagementManagedDevices.ReadWrite.All 
DeviceManagementServiceConfig.ReadWrite.All

Grant admin consent for permissions

Create a client secret (copy this).

Copy the client ID and Tenant ID and Secret values, and paste to "Settings.ps1" under corresponding variables

Copy contents to root of Windows Installer USB drive.

Create SCCM/MDT task sequence and run script during Specialize pass in the autounattend.xml (see example fo the specialize secetion below or the autunattend.xml in this repo, can also use https://schneegans.de/windows/unattend-generator to generate one)

<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <RunSynchronous>
      <RunSynchronousCommand wcm:action="add">
        <Order>1</Order>
        <Path>cmd /q /c "FOR %i IN (C D E F G H I J K L N M O P Q R S T U V W X Y Z) DO IF EXIST %i:\WindowsAutoPilotInfo.ps1 powershell -ExecutionPolicy Bypass -File %i:\WindowsAutoPilotInfo.ps1 -Settings %i:Settings.ps1"</Path>
        <Description>Run AutoPilot script</Description>
      </RunSynchronousCommand>
    </RunSynchronous>
</component>

Boot installer. Windows should install and run the script to upload the device to AutoPilot.

If device is already registered into Intune with a grouptag, the script will prompt you and you can choose a different one. (you can edit this section in the powershell script;

IntuneAutoPilot/WindowsAutoPilotInfo.ps1

Line 498 in b9a1c48

##################### Edit this section to your GroupTags. ##################################################

)

You will be presented with the AutoPilot enrollment screen when finished.