The Autopilot Monitor agent is deployed to devices using a PowerShell bootstrapper script distributed as an Intune Platform Script. The script downloads, installs, and registers the agent automatically — no manual steps on the device are required.
Safe to assign broadly — already-enrolled devices are not affected
Before installing anything, the bootstrapper runs a series of pre-requisite checks. The agent is only installed when all checks pass. Devices that do not meet the criteria are skipped silently.
The agent is temporary by design: once the Autopilot enrollment completes, the agent uninstalls itself and removes the scheduled task. It only exists on the device for the duration of the enrollment process.
Test it yourself: Dry-run before deployment
Want to verify which devices would receive the agent? Run this read-only check in PowerShell on any machine — it evaluates all bootstrap guards and transparently reports the install decision. No changes are made, only read operations:
Download the bootstrapper script
Download the PowerShell script that installs and configures the Autopilot Monitor agent:
Create a Platform Script in Intune
In the Microsoft Intune admin center, navigate to Devices → Scripts and remediations → Platform scripts and click + Add → Windows 10 and later.
Recommended script settings:
Name: Install Autopilot Monitor
Script: Upload the downloaded .ps1 file
Run this script using logged on credentials: No
Enforce script signature check: No
Run script in 64-bit PowerShell: Yes
Assign to a device group
Assign the script to the device group that covers your Autopilot-enrolled devices. The two most common choices are:
The "All Autopilot devices" dynamic group is preferred if you want to limit telemetry to Autopilot-enrolled hardware only.
Done
Once the script runs on a device, the agent installs itself, creates a scheduled task under SYSTEM, and begins monitoring the Autopilot enrollment immediately. Sessions will appear in your dashboard within seconds of the agent starting.