What's New

Set up a list of group tags for your organisation (e.g. Admin, Student, Teacher) and the operator picks one per device during deployment - a single task sequence now covers every role. An optional name prefix (ADM- → Admin) pre-selects the right tag from the computer name, and MSPs can share a tag list across all their customers. Optional - until you add tags, deployments behave exactly as before.

A deployment's detail page now shows the Autopilot group tag the device was registered with, and whether the operator chose it or a name prefix did - so a device landing on the wrong Autopilot profile is diagnosable without opening Intune.

ISOs downloaded for a newly-created customer carried an internal server address, so the device couldn't call home. Newly generated ISOs are correct - regenerate any ISO downloaded before 10 September.

Repeated login and 2FA attempts from the same source are now throttled - defence-in-depth on top of the existing 2FA lockout.

Each Site Server now exposes a /healthz readiness view and an on-box log file, so you can confirm at a glance that it's ready and troubleshoot network boot or caching without guesswork.

If a Site Server's LAN address changes, it now reports the new one automatically within a few minutes - no manual restart or re-enrolment.

Run a local cache server at each of your sites (ideal for a Trust with multiple schools). Every device automatically pulls large content - Windows images, drivers, apps - from its own local server at LAN speed, cutting internet use at every location. No extra setup per device.

Sign-ins are now protected with an authenticator-app code on top of your password. A 7-day grace window makes rollout easy for existing users.

A new Reports view for live projects: filter by date and site, see and triage failed devices and failure reasons, and export to CSV.

Apps can be uploaded as a single ZIP and given a longer install time limit - so big suites like Adobe Creative Cloud deploy cleanly.

The computer name you set at deployment is written straight to the device's Windows Autopilot record in Intune.

Image devices over the network straight into CloudImage - no USB stick required - by booting from a local Site Server. Works with Secure Boot on or off.

Switch into any of your customers and manage their content, devices, and deployments in their own context.

Share task sequences and content down from your MSP to selected customers - build once, deploy everywhere.

Read-only "All customers" views of content and Site Servers for at-a-glance oversight.

Add a caching server on a customer LAN so the first device pulls each file from the cloud and every device after it gets it at local-network speed.

Download ready-to-use WinPE boot media per customer - no manual build required.

An optional first-boot step to apply Windows quality and driver updates automatically.