Confirm the device identity
Verify the hardware hash, serial number, assigned profile, and tenant registration first. A device that is not correctly identified cannot receive a reliable profile, regardless of later policy changes.
Trace the enrollment sequence
Separate profile assignment, device preparation, account setup, application installation, and policy processing. The Enrollment Status Page can appear stuck while the underlying cause is a failed dependency or an unreachable management endpoint.
Get-AutopilotDiagnostics.ps1 -OutputFile C:\Temp\Autopilot.zip
# Review event channels and ESP diagnostic logs togetherReduce policy collisions
Use a pilot profile with a small, intentional application set. Once the sequence is stable, add required applications one at a time and measure the change. Avoid troubleshooting a moving target.
Operational checklist
- Validate hardware identity and profile assignment.
- Record the exact ESP phase that stalls.
- Check dependencies and application return codes.
- Reproduce with a minimal pilot profile.