Controlling Windows 11 deployment in enterprise environment through MS account?

Discussion in 'Windows 11' started by OpenSourceGhost, Nov 13, 2022.

  1. OpenSourceGhost

    OpenSourceGhost MDL Member

    Feb 14, 2022
    139
    22
    10
    In the past, when working as tech support for businesses, I pre-customized Windows OS images via SysPrep. When preparing a desktop/laptop for each new employee (or repairing a machine), stock OS images pre-configured by desktop/laptop maker (Dell, Lenovo, HP, ASUS, etc.) were wiped clean, including recovery partitions. Only original drivers were preserved and stored in a local network repository for whichever desktop/laptop model. Almost everything went through a controlled standardized processes decided either by me or by my team or by company policies. All administrator and user accounts were local, not tied to any Microsoft accounts. Each machine was tested before deployment. To speed things up, customized images already included the latest updates, most needed applications, and settings for those applications. Images themselves were updated monthly. Overall approach seemed planned, risk-averse, careful, cautious, controlled, track-able, professional.

    My current employer runs a small company that is expanding very very fast. The company doesn't specify (or have) any processes for OS or software deployment. It simply buys desktops, laptops with Windows 11 Home from local stores and utilizes OS images (pre-configured by Dell, Lenovo, HP, ASUS, etc.) that come with purchased machines. Microsoft Business/Work account is created for each new employee and during initial setup, machine is logged into 2 MS accounts - company's Microsoft Work/Business Administrator account (for minor post-setup adjustment of settings) and whichever User account. Machine configuration is mostly default with super-heavy reliance on Microsoft services (Office, Outlook, OneDrive, Edge, Teams) for just about everything. The process is very fast, very user-friendly, but I don't quite understand how to control such deployments. I don't have any insight into what OS settings Microsoft Business account preserves and what capabilities it has for customizing OS or deployment of other (non-Microsoft) software packages or whether it actually can do any of that...