Windows Autopilot
Device enrollment

Windows Autopilot Motherboard Replacement | Microsoft Learn

In brief

The article was updated with refreshed wording, manufacturer terminology, metadata, and bullet formatting. Its guidance covers motherboard replacements and other servicing scenarios, including device deregistration.

What Intune admins need to know

Use the revised article when following Autopilot repair and deregistration guidance.

This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Windows Autopilot motherboard replacementMotherboard Replacement | Microsoft Learn

This documentarticle offers guidance for Windows Autopilot device repair scenarios that Microsoft partners can use in motherboard replacement situations, and other servicing scenarios.

Repairing Windows Autopilot enrolled devices is complex, asbecause it tries to balance OEMmanufacturer requirements with Windows Autopilot requirements. Specifically, OEMmanufacturer requirements include strict uniqueness across motherboards, MAC addresses, etc.and other factors. Windows Autopilot requires strict uniqueness at the hardware hash level for each device to enable successful registration. The hardware hash doesn't always accommodate all the OEM hardware component requirements. These requirements are sometimes at odds, which can cause issues with some repair scenarios. The hardware hash is also known as the hardware ID.ID.

If a motherboard is replaced on a Windows Autopilot registered device, thenwe recommend the following process is recommended:process:

  1. Deregister the Windows Autopilot device from the Windows Autopilot program.
  2. Replace the motherboard.

Before the device arrives at the repair facility, the entity that registered the device must deregister it.

  • If the IT Admin registered the device, they likely did so viaused Intune, Microsoft 365 admin center, or a legacy portal such as Microsoft Store for Business (MSfB). If so, they should deregister the device from Intune or the Microsoft 365 admin center because devices. Devices registered in Intune don't show up in Microsoft Partner Center (MPC).
  • If the OEM or CSP partner registered the device, they likely did so viaused the Microsoft Partner Center (MPC). In that case, they should deregister the device from MPC, which also removes it from the customer IT Admin's Intune account.

The belowfollowing steps describe what an IT Admin would gogoes through to deregister a device from Intune and the steps an OEM or CSP would gogoes through to deregister a device from MPC.

To avoid problems, an OEM or CSP should register Windows Autopilot devices whenever possible. If the customer registers the devices, OEMs or CSPs can't deregister them if, forthem. For example, a customer leasing a device goes out of business before deregistering it themselves.

If a customer grants an OEMa manufacturer permission to register devices on their behalf by using the automated consent process, an OEMthat manufacturer can use the API to deregister devices they didn't register themselves. This deregistration only removes those devices from the Windows Autopilot program. It doesn't unenroll them from Intune or disjoin them from Microsoft Entra ID. Only the customer can unenroll the device from Intune or disjoin the device from Microsoft Entra ID.

Deregister a device

Because the repair facility doesn't have the user's sign-in credentials, they have to reimage the device as part of the repair process. The customer should do three things before sending the device to the facility:

    • Copy all important data off the device.
    • Let the repair facility know which version of Windows they should reinstall after the repair.
    • If applicable, let the repair facility know which version of Office they should reinstall after the repair.

Replace the motherboard

Technicians replace the motherboard or other hardware on the broken device. A replacement Digital Product Key (DPK) is injected.

Repair and key replacement processes vary between facilities. Sometimes repair facilities receive motherboard spare parts from OEMsmanufacturers that have replacement DPKs already injected, but sometimes not.they don't. Sometimes repair facilities receive fully functional BIOS tools from OEMs, but sometimes not.they don't. The quality of the data in the BIOS after a motherboard replacement varies. To ensure the repaired device areis still Windows Autopilot capable following its repair, check to make sure the new post-repair BIOS can successfully gather and populate the following information at a minimum:

  • DiskSerialNumber.DiskSerialNumber
  • SmbiosSystemSerialNumber.SmbiosSystemSerialNumber
  • SmbiosSystemManufacturer.SmbiosSystemManufacturer
  • SmbiosSystemProductName.SmbiosSystemProductName
  • SmbiosUuid.SmbiosUuid
  • TPM EKPub.EKPub
  • MacAddress.MacAddress
  • ProductKeyID.ProductKeyID
  • OSType.OSType

For simplicity, and because processes vary between repair facilities, additional steps often used in a motherboard replacement are excluded, such as:

Note

OtherThere are other methods in addition tobesides Windows PowerShell are also available to capture the hardware hash. For more information, see Collect the hardware hash.

To use the WindowsAutopilotInfo PowerShell script, follow these steps:

Note

If the repair facility can't run the OA3 tool or PowerShell script to capture the new 4K HH, then the OEM or CSP partners must do it for them. Without some entity capturing the new 4K HH, there's no way to reregister this device as a Windows Autopilot device.

Reregister the repaired device using the new device ID

If an OEM can't reregister the device, there are twoconsider these options:

  • The repair facility or CSP can reregister the device by using MPC.
  • The customer IT Admin shouldadmin can reregister the device viaby using Intune (or MSfB).or MSfB.

BothThe following sections show both ways of reregisteringto reregister a device are shown in the following sections.device.

Reregister from Intune

To reregister a Windows Autopilot device from Intune, an IT Admin would:admin needs to:

  1. Sign in to the Microsoft Intune admin center.
  2. NavigateGo to Devices > Device onboarding | Enrollment > Windows Autopilot | Devices.
  3. SelectIn the toolbar, select Import option in the toolbar at the top to upload a CSV file containingthat contains the device ID of the device to be reregistered.reregister. The device ID wasis the 4K HH captured by the PowerShell script or OA3 tool described in the section Capture a new Windows Autopilot device ID (4K HH) from the device.

Reregister from the Microsoft Partner Center (MPC)

To reregister a Windows Autopilot device from the Microsoft Partner Center MPC,(MPC), an OEM or CSP would:

  1. Sign in to the Microsoft Partner Center (MPC).
  2. NavigateGo to the Customer > Devices page.
  3. Select Add devices to upload the CSV file.

When a repaired device is reregistering through MPC, the uploaded CSV file must contain the 4K HH for the device, and not just the PKID or Tuple (SerialNumber + OEMName + ModelName). If only the PKID or Tuple was used, the Windows Autopilot service would be unable to find a match in the Windows Autopilot database. No match would be found because no 4K HH info was previously submitted for this essentially "new" device and the upload fails, likely returning a ZtdDeviceNotFound error. For this reason, only upload the 4K HH. Don't upload the Tuple or PKID.

When includingyou include the 4K HH in the CSV file, you don't need to include the PKID or Tuple don't also need to be included. ThoseTuple. You can leave those columns might be left blank, as shown in the following example:

Screenshot of a CSV file in Excel with a hash value in the Hardware Hash column.

Reset the device

The repair facility must reset the image back to a pre-OOBE state before returning itthe device to the customer. This reset is needednecessary because the device was requiredneeds to be in Full OS or Audit Mode to capture the 4K HH. One way toYou can reset the image is by using the built-in reset feature in Windows.

To use the reset feature in Windows on a device:

Return the repaired device to the customer

TheYou can now return the repaired device can now be returned to the customer. The device is auto-enrolledautomatically enrolls into the Windows Autopilot program on first boot-up during OOBE.

Important

If the repair facility didndoesn't reimage the device, they could be sendingmight send it back in a potentially broken state. For example, thereyou can's no wayt sign in to log into the device because it's dissociated from the only known user account.

AYou can register a device can be registered for Windows Autopilot before being powered-powering it on. However, theThe device isn't actually deployed to Windows Autopilot until it goes through OOBE. Therefore, resetting the device back to a pre-OOBE state is a required step.

Fix pending and Attention required

If the profilesprofile status of a device shows Fix pending, Windows Autopilot is in the process of attempting to register the device. If the profile status of a device shows Fix pending for an extended period of time and doesn't switch to Assigned, or if the profile status of the device switches to Attention required, then::

  1. Manually deregister the device by using the steps in the Deregister a device section.device.
  2. Reregister the device.

For more information, see Why is the Windows Autopilot profile not applied after a hardware change occurred on a device?.

  • The scenarios were tested using Intune only. No other MDMs were tested.
  • In most test scenarios, the repaired and reregistered device needed to go through OOBE again for Windows Autopilot to be enabled.
  • Motherboard replacement scenarios often result in lost data. Repair centers or customers should be reminded to back up data before repair.
  • When a repair facility can't write device infoinformation into the BIOS of the repaired device, new processes need to be created to successfully enable Windows Autopilot.
  • Repaired device should have the Product Key (DPK) pre-injected in the BIOS before capturing the new 4K HH (device ID).

For the Supported column in the following table: | Disk replacement from a non-Windows Autopilot device to a Windows Autopilot device | Yes | 1. Don't deregister damaged device before repair. 2. Replace HDD on damaged device. 3. Reimage or reset image back to OOBE. 4. Go through Windows Autopilot OOBE (customer). 5. Windows Autopilot successfully enabled (repaired device recognized as its previous self). | | Disk replacement from one Windows Autopilot device to another Windows Autopilot device | Maybe | If the device from which the HDD is taken was itself previously deregistered from Windows Autopilot, then that HDD can be used in a repair device. The newly repaired device won't have the proper Windows Autopilot experience if the HDD wasn't previously deregistered from Windows Autopilot before being used in the repaired device. Assuming the used HDD was previously deregistered (before being used in this repair): 1. Deregister damaged device. 2. Replace HDD on damaged device using an HDD from another deregistered Windows Autopilot device. 3. Reimage or rest the repaired device back to a pre-OOBE state. 4. Go through Windows Autopilot OOBE (customer). 5. Windows Autopilot successfully enabled. | | Non-OEM add-in network card replacement | No | Any scenario where a network card is used other than the OEM on-board NIC breaks the Windows Autopilot experience. These scenarios include the following scenarios: • From a non-Windows Autopilot device to a Windows Autopilot device. • From one Windows Autopilot device to another Windows Autopilot device. • From a Windows Autopilot device to a non-Windows Autopilot device. These scenarios aren't recommended. | | Memory replacement | Yes | Replacing the memory on a damaged device doesn't negatively affect the Windows Autopilot experience on the device. No deregistration/deregistration or reregistration is needed. The repair technician simply needs to replace the memory. | | GPU replacement | Yes | Replacing one or more GPUs on a damaged device doesn't negatively affect the Windows Autopilot experience on that device. No deregistration/deregistration or reregistration is needed. The repair technician simply needs to replace the GPU. |

Important

The following parts can be replaced without compromising Windows Autopilot enablement or requiring special additional repair steps:

  • Memory (RAM or ROM).
  • Power Supply.Supply
  • Video Card.Card
  • Card Reader.Reader
  • Sound card.card
  • Expansion card.card
  • Microphone.Microphone
  • Webcam.Webcam
  • Fan.Fan
  • Heat sink.sink
  • CMOS battery.battery

Other repair scenarios not yetthat aren't tested and verified include:

  • Daughterboard replacement.replacement
  • CPU replacement.replacement
  • Wifi replacement.replacement
  • Ethernet replacement.replacement

FAQ

| What to do if another customer's welcome page is displayed? | If another customer's welcome page is displayed on a replacement device or refurbished motherboard, a case needs to be raised to Microsoft to fix the device ownership. A case can be opened through the Microsoft Intune admin center by selecting the Help and Support option outlined here. If there isn't access to Microsoft Intune, a case can be submitted through Microsoft Store for Business by selecting Manage > Support and selecting Technical Support. A case can also be submitted through the Microsoft Volume Licensing Center agreement. Instructions on how to submit a case are outlined at Microsoft Software Assurance - Support Incident Submission. Title all cases Windows Autopilot Deregistration Request to streamline requests. | | We have a tool that programs product information into the BIOS after the motherboard replacement. Do we still need to submit a CBR report for the device to be Windows Autopilot-capable? | No. Not if the in-house tool writes the minimum necessary information into the BIOS that the Windows Autopilot program looks for to identify the device, as described earlier in this document. | | What if only some components are replaced rather than the full motherboard? | It's true that some limited repairs don't prevent the Windows Autopilot algorithm from successfully matching the post-repair device with the pre-repair device. However, Microsoft recommends to always go through the motherboard replacement steps described in the previous sections to ensure success. | \ No newline at end of file | How does a repair technician gainget access to a broken device if they don't have the customer's sign-in credentials? | The technician hasneeds to reimage the device and use their own credentials during the repair process. | \ No newline at end of file \ No newline at end of file

Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Loading the secure signup form…