Fix Autopilot Profile Status Shows Not Assigned

In this blog post, we will explore troubleshooting steps to fix the issue where the Autopilot Deployment profile status shows as “Not assigned” for a device. This happens after you upload its hardware hash in Intune for autopilot registration.

After you create an Autopilot deployment profile, it’s assigned to the Entra security group. This group should contain the devices that you have registered with Autopilot. To ensure that the Autopilot deployment profile is assigned to the device, follow the below steps:

  1. Create an Autopilot Entra Dynamic security group – It is recommended to create a dynamic Endpoint Security group that automatically adds devices with attributes classifying them as Autopilot devices when their hardware hash is uploaded in Intune. Use the dynamic Query: (device.devicePhysicalIDs -any (_ -startsWith “[ZTDid]”))
  1. Create an Autopilot Deployment Profile – The next step is to create an Autopilot deployment profile and assign this profile to the dynamic Entra security group we created in the previous step.
  1. Upload Device Hardware Hash in Intune – You can use the CSV file or the MS Graph API to upload the device hardware hash in Intune for Autopilot registration. The device will be added to the dynamic group automatically, and the Autopilot deployment profile will be assigned.
Autopilot Deployment Profile Assignment Steps
Autopilot Deployment Profile Assignment Steps

Please note that after you upload the Hardware hash of the device in Intune, It may take around 15 minutes to Import. You can click the Refresh button to check if the device has been successfully imported.

If the device has been added to the dynamic group, and the Autopilot deployment profile targets this dynamic group, the profile status column should reflect and show “Assigned.” However, in a few cases, this process gets stuck, and the profile status column shows as Not Assigned.

Autopilot deployment profile "Not assigned" status
Autopilot deployment profile “Not assigned” status

Usually, if everything is configured correctly, the status should change to “Assigned” automatically. However, if after waiting a few hours, you find that the profile status column shows “Not Assigned,” then we need to investigate and check different solutions. Let’s explore what can be examined to resolve this issue.

Fix Autopilot Profile Status Shows Not Assigned

I have provided a few troubleshooting options that could help you resolve this issue. Let’s check them out one by one below:

Fix 1 – Ensure the Device is part of Entra Security Group

As explained in the previous section of this blog post, the Autopilot Deployment profile is assigned to the Entra Security group; check the group membership and ensure the device is part of this group. If it’s a dynamic group, wait a few minutes and check the group membership.

Ensure the Device is part of Autopilot Entra Security Group
Ensure the Device is part of Autopilot Entra Security Group

Fix 2 – Remove the Device from Autopilot and re-import

If the device is part of the group where the Autopilot deployment profile is assigned and still the profile status column shows as “Not Assigned“. You can try deleting the device from Autopilot and re-import its hardware hash.

You can delete the device by following below steps:

  • Sign in to the Intune admin center.
  • Navigate to Devices > Windows > Windows enrollment.
  • Click on Devices.
Remove the Device from Autopilot and re-import
Remove the Device from Autopilot and re-import
  • Select the Device having Issues and then click the Delete button at the top to delete it.
Remove the Device from Autopilot and re-import
Remove the Device from Autopilot and re-import
  • Select Yes to delete the device from Autopilot.

If you click on Yes to delete the device, it will only be deleted from Windows Autopilot. Any other device registeration in Intune or Entra ID is not affected. You can re-import the device hardware hash when you want to manage the device by Autopilot again.

Note
Remove the Device from Autopilot and re-import
Remove the Device from Autopilot and re-import

It may take up to 15 minutes for the device to be deleted from Autopilot. Once removed, you can import it again by clicking the “Import” option in the Menu bar. Refer to my other step-by-step autopilot guide, specifically Steps 8 and 9, which explain how to capture and import the hardware hash in Autopilot.

Once you import the device, you can add it to the Autopilot Entra Security group to which the Autopilot deployment profile has been assigned. Wait for another 15-20 minutes, and the Profile status column should show as Assigned.

Fix 3 – Force Autopilot Deployment Profile Assignment from Microsoft 365 admin center

If previous solutions have not worked for you, you can try to force assign the Autopilot deployment profile using the Microsoft 365 admin center.

  • Go to https://admin.microsoft.com/#/PrepareWindows
  • Select the device and, using the drop-down for “Assigned profile,” click on the Autopilot deployment profile you want to assign to the device.
  • Click on Save to complete this change.

After clicking the Save button, it will take some time to assign this profile, and it will eventually show under the “Profile assigned” column on the M365 admin center.

Force Autopilot Deployment Profile Assignment from Microsoft 365 admin center
Force Autopilot Deployment Profile Assignment from Microsoft 365 admin center

Fix 4 – Check for Autopilot Policy Conflicts

Multiple policies are created and can be targeted to a single device on the Intune admin center, which could cause conflicts in policies. If you have confirmed that the device is part of the Autopilot Dynamic Endpoint Security group, you must check for policy conflicts.

To resolve all the policy conflicts, you can follow the guidelines, which are available on the Microsoft Docs link: Windows Autopilot – Policy Conflicts. Once the conflicts are resolved, you can re-check the Autopilot Deployment profile assignment status of the device to confirm if it has been assigned now.

Leave a Comment