Facing an issue while preparing a Intune Autopilot Preprovisioning

The behavior indicates that the technician flow is not completing and the device is falling back into normal OOBE instead of reaching the Autopilot pre‑provisioning success screen with the Reseal button.

Check and correct these points in order:

1. Verify Autopilot pre‑provisioning requirements
   • Ensure the device meets all pre‑provisioning requirements, especially:
     • TPM 2.0 with device attestation supported and required URLs reachable.
     • A currently supported Windows edition (Pro/Enterprise/Education).
     • Network connectivity during OOBE (wired is recommended).
     • An Enrollment Status Page (ESP) profile targeted to the device. If ESP is disabled or not assigned, the technician flow can complete enrollment but exit early and not hold the device in provisioning, which prevents the proper success screen and Reseal option from appearing.
2. Confirm that the device is actually using an Autopilot pre‑provisioning profile
   • In Intune, make sure the device is in the Autopilot device group that is targeted by:
     • The Windows Autopilot profile configured for pre‑provisioning.
     • The ESP profile (device‑targeted).
   • If the device is not in the correct group or the profile is not assigned, the device will just run normal OOBE (country/language, “Why did my PC restart?”) and never show Reseal.
3. Ensure ESP is enabled and not bypassed
   • Technician flow inherits behavior from self‑deploying mode and relies on ESP to keep the device in a provisioning state until apps and policies are applied.
   • If ESP is disabled or misconfigured, the device can exit provisioning early. This can:
     • Prevent the full technician flow from running.
     • Prevent the success screen and Reseal button from appearing.
   • Configure and assign an ESP profile to the device, then retry the pre‑provisioning run.
4. Re‑run pre‑provisioning only after fixing assignments
   • After confirming:
     • Device is in the correct Autopilot group.
     • Autopilot pre‑provisioning profile is assigned.
     • ESP profile is assigned to the device.
   • Reset the device (or use Autopilot Reset from Intune if already enrolled) and start the technician flow again:
     • Connect to network (preferably wired).
     • Power on and let Autopilot start.
     • Wait for the technician flow to complete and show the success status screen with Autopilot profile, organization, user/QR code, and elapsed time.
     • At that screen, Reseal should be available to shut down the device for shipping.

If the device has already gone through one pre‑provisioning deployment and is being reused, also ensure the old device record is removed from Intune before attempting to re‑enroll via pre‑provisioning, as automatic re‑enrollment is not supported in that mode.

References:

• Windows Autopilot for pre-provisioned deployment
• Pre-provision Microsoft Entra join: Technician flow
• Pre-provision Microsoft Entra hybrid join: Technician flow
• Device action: Autopilot Reset
• Set up devices with Windows Autopilot and Intune for Education