"Step-by-Step Guide: Extracting Hardware Hash from Windows Device and Importing to Intune"

Enrolling hardware hashes in Microsoft Intune is a process that allows you to manage devices that are not capable of traditional enrolment methods, such as devices running Windows 7 or other scenarios where device enrolment is not straightforward. To do this, you need to use the Device Enrolment Program (DEP) or the Windows Autopilot for non-Microsoft devices. Here's how you can enrol hardware hashes in Intune:

1. Prepare Your Environment:
   

   1. Ensure that you have an active Microsoft Intune subscription.

   2. Set up your Azure AD tenant.

2. Get the Hardware Hash:

a. On the target device, you'll need to extract the hardware hash.

b. Run PowerShell as an administrator and enter the following command:

➢ Set-ExecutionPolicy Unrestricted

➢ Install-Script -Name Get-WindowsAutoPilotInfo

➢ Get-WindowsAutoPilotInfo.ps1 -OutputFile c:\AutoPilotHWID.csv

c. The above commands will generate a .CSV file with the hardware hash information.

3. Assign the Profile:

a. Open the .CSV file in notepad++ (better option to edit the csv file).

b. Once you open the file, at the end of the first-row type “,Group Tag” & at the end of

the second-row type profile name from the below list.

1. “,AzureS” – Azure Standard Profile – Device will be setup with non-admin rights.

2. “, Azure” – Azure Admin Profile - Device will be setup with admin rights.

3. “,HybridS” – Hybrid Standard Profile - Device will be setup with non-admin rights.

4. “,Hybrid” – Hybrid Admin Profile - Device will be setup with admin rights.

4. Import the Hardware Hash:

a. Log in to Intune portal (https://intune.microsoft.com).

b. Go to "Devices" > "Windows" > "Windows enrollment" > "Device enrollment

program."

c. Click on "Add devices" and upload the CSV file generated in step 2.

d. The hardware hashes will be registered with Intune.

5. Deploy the Profile:

The profile you assigned in step 3 will be deployed to the device. This might require the

device to be reset or reinstall depending on the profile settings.

6. Verify Enrolment:

Once the device is reset or reinstalled, it will go through the Autopilot setup and enrol

with Intune.

7. Manage the Device:

After successful enrolment, you can manage the device through Intune just like any other

enrolled device.

Note: Keep in mind that the specific steps and options in the Intune portal may change over time, so it's a good practice to refer to the official Microsoft Intune documentation or

the Intune portal itself for the most up-to-date instructions and options for enrolling

hardware hashes.