How do you provide a new user that is starting remotely a password to login to a device, where you have shipped a device (ie laptop)? Essentially, we do not want the password to ever be exposed and we use auto-pilot for building laptops.

Remote Onboarding Process: Best Practices

1. Bring Your Own Device (BYOD) Policy
- Ensure the organization's BYOD policy is clear and communicated effectively.
- Provide necessary security guidelines and tools (e.g., antivirus software, VPN access) for the user's personal device.

2. Automated Account Creation
- Automate the user account creation process to send login credentials (e.g., username and password) to the user's personal email immediately upon onboarding.
- Include clear instructions in the email for securely setting up and accessing organizational systems.

3. Comprehensive Onboarding Email
- The email should act as a single, user-friendly guide, covering all essential onboarding steps.
- Include links or attachments for:
- Organization policies (e.g., security protocols, acceptable use policies).
- Setup guides for required software and tools.
- Contact details for IT support.

4. Security Measures
- Enforce initial password resets to ensure the security of the account.
- Provide multi-factor authentication (MFA) instructions for securing access to organizational systems.

5. Orientation and Support
- Schedule a remote orientation session for new users to familiarize them with the organization's tools, culture, and processes.
- Establish a dedicated helpdesk or team for resolving onboarding-related queries.

6. Periodic Follow-Up
- Conduct follow-ups with new users to address any challenges they may face and gather feedback for improving the onboarding process.

By adhering to these steps, organizations can enhance the remote onboarding experience, ensure security, and set up new users for success from day one. Let me know if you'd like me to elaborate further!

When provisioning computer with Microsoft Autopilot technology the new user can logon to the device with the organization credentials as long as the device is connected to the internet. 

End user experience while the computer is being setup after unboxing depends on how it is configured and if you assign a user to the device it will present them with a screen displaying their user info and will need to enter their password. In the configuration there is no need to have someone logon to the device with the EUs id/pwd prior to shipping. 

Hope this helps.

The password is provided to the line manager who provides the password to the new start via  telephone call. The password must be changed on first login.

We ship the laptop to the employee and then on the day the employee starts we provide the hiring manager their One-time use password. The manager shares that with the employee via a morning onboarding call. The employee then uses the One-Time use password and immediately changes their password at that time.