Microsoft 365 Endpoint AdministratorDeploy Windows client (25-30%)Hard
A company requires all Windows 11 devices to be encrypted using BitLocker. During the Autopilot deployment process, they want to ensure that BitLocker is automatically enabled and the recovery key is securely backed up to Azure Active Directory (AAD) before the user even logs in for the first time. Which Autopilot deployment profile setting ensures this pre-provisioning behavior?
- ASelf-deploying mode
- BUser-driven mode
- CExisting device enrollment
- DPre-provisioning (White Glove)
Show answer & explanationAnswer & explanation
Correct answer: A. Self-deploying mode
Self-deploying mode in Windows Autopilot is designed for kiosk, digital signage, or shared devices, but it also ensures that the device enrolls into Intune, applies device-based policies (like BitLocker encryption and recovery key backup) BEFORE a user signs in. This meets the requirement of BitLocker being enabled and backed up prior to user login.
Why the other options are wrong
- B. User-driven mode applies policies after the user signs in, which would enable BitLocker post-login.
- C. Existing device enrollment is for re-purposing existing devices and doesn't inherently guarantee pre-login BitLocker behavior for new devices.
- D. Pre-provisioning (White Glove) involves IT pre-configuring the device, which also applies policies before user login, but Self-deploying is the mode that *automatically* does the device-based policy application without IT touch for this specific scenario.
Windows Autopilot Self-Deploying Mode
An Autopilot deployment mode that allows devices to enroll into Azure AD and Intune, apply device-based policies (like BitLocker), and install applications without any user interaction from the first boot.
- Ensures device-based policies are applied before user login.
- Ideal for kiosks, shared devices, or scenarios requiring pre-login encryption.
- Requires TPM 2.0 and active internet connection.
Memory trick: Self-deploying ensures encryption before anyone logs in.