|
Prepared by: |
Paresh Parmar |
|
Version: |
1.0 |
|
Effective Date: |
September 5, 2023 |
This procedure is for reset Windows 10/11 devices and opt for the device management.
Steps to be performed by device user (who must possess a valid PATEAM account)
Ø Before reset, please email to techsupport@pateam.co and confirm same.
Ø Make sure the device is running in Windows 10/11 Professional or Enterprise editions
Ø RESET THE DEVICE TO FACTORY SETTING AND ONBOARD MICROSOFT INTUNE
Ø Determine a reinstall strategy to onboard Microsoft Intune
Ø
Install Windows 10/11 Enterprise
and enroll the device using PATEAM account of the device user (May take about 15-30 min)
To enroll Microsoft Intune, Windows device must of Professional and Enterprise edition. To check your device Windows version, under "Setting", "System", "About", you can verify Windows Edition at "Windows Specifications" section.
If the Windows version is not Professional or Enterprise, you may:
For those existing devices that has already joined to on-premises domain, you
can keep using the device without onboarding Microsoft Intune. Should there be
upgrade or replace of such devices, PATEAM recommend onboarding them to Microsoft
Intune.
This procedure will delete everything on the device, make it as new
Windows 10/11 Enterprise installation.
Open “Settings” click on System and note hostname PAT-AP-. Once reset successfully done.
Please rename Hostname as same.
Open "Settings", "Update and Security", "Recovery" and click "Get started" button under
"Reset this PC" section.
Open "Settings", "System", "Recovery",
Click "Reset PC"
Select "Cloud download". This will give you the latest
version of Windows 10/11 Enterprise.
Finally, click "Reset" to reset the computer and make
it as freshly installed Windows 10/11 Enterprise.
Now, wait for the system to reset your device. This process may take around 30-45 min. When finished,
the device will reboot into new installation interface. Please proceed to
"Install Windows 10/11 Enterprise and Enroll the device using PATEAM account of the device user"
for next step.Wait until the installation completed and follow the setup instructions.
Upon installation completion and machine boot up,
you'll be given option to configure Windows Hello. Windows Hello is a new way of signing into your device using PIN or
Biometric.
Now, just follow the on-screen instruction to sign on your PATEAM network account again. If you have not yet set up the Azure MFA, you'll be asked to setup at this step before the Windows Hello PIN. This is required as it is used to reset the Windows Hello PIN or biometric if needed. We recommend to setup Microsoft Authenticator App as your preferred Azure MFA method, and you can enable Password less authentication for browser-based applications later.
Follow the steps and you'll finally reach "All
Set".
Now, your new desktop device installation has completed. You may login your PATEAM account on this device using PIN in future.
At this stage, the device will have arbitrary computer name like "DESKTOP-ABCDEFG" or "PAT-AP-BCDEFG". PATEAM imposes no restriction on computer name for new Windows 10/11 devices enrolling to Intune. However, we strongly recommend changing your device name at this stage after reset. By changing device name now will give you ease to manage devices. Also, it'll help to locate the device should there be security alerts raised in future. PATEAM would like to suggest using the following naming conventions:
To do so, in "Settings", "System", "About", click "Rename this PC".