StarLabs Glossary / IT Procurement Terms
Zero-Touch Deployment
New laptops go straight to staff and set themselves up with company settings when switched on.
Zero-touch deployment is a way of setting up new company devices without IT handling each one. The device is registered to your organisation before it arrives. When the staff member switches it on and connects to the internet, it recognises it belongs to your business, enrols in your device management and installs your apps and security settings.
How it works
The idea is the same on Windows and Apple. Each device’s identity is linked to your organisation in a vendor-run service. That service points the device to your mobile device management (MDM) tool, which delivers the setup. The key step is registration, and it usually happens at the point of purchase.
Windows Autopilot
Microsoft’s service relies on a hardware hash, a unique fingerprint of the device that includes the maker, model and serial number. Registration means uploading that hash to the Autopilot service and linking it to your organisation’s Microsoft tenant. Microsoft says this is ideally done by the manufacturer, reseller or distributor you bought from. A Microsoft partner can also add devices, or your IT team can collect the hash from existing machines and upload it manually. Registered devices are treated as corporate-owned, and the setup is managed through Microsoft Entra ID and usually Microsoft Intune.
One detail worth knowing: Microsoft notes that minor changes such as a new drive still match the hash, but a motherboard replacement needs a new hash uploaded. If a laptop has had a board-level repair, check its Autopilot record.
Apple Business Manager and Automated Device Enrolment
Apple’s version is Automated Device Enrolment (ADE), run through Apple Business Manager, whose features Apple now offers under the name Apple Business. Devices bought directly from Apple are linked using your verified Apple Customer Number. Devices bought from a reseller or carrier that takes part are linked using that seller’s Reseller Number, which you add to your approved suppliers list. Apple says eligibility depends on the seller’s sales history, so ask before you order.
Once a device is assigned to your MDM, it enrols during first setup and the profile can be locked so staff cannot remove it. Devices bought elsewhere can still be added by hand with Apple Configurator, but Apple gives the user a 30-day provisional period in which they can release the device.
What it means for your business
Where you buy matters. A laptop bought from a retail shelf or an online marketplace may not be registered to your organisation, so it cannot set itself up and is easier for someone to wipe and walk away with. When you place a bulk order, ask the seller whether they can register the devices to your Autopilot tenant or Apple Business account, and get the serial numbers for your asset register. For a few devices a year, manual registration is fine. Once you hire regularly or have remote staff, zero-touch saves real setup time.
Common questions
Can I use Windows Autopilot on laptops I already own?
Yes. Your IT team can collect the hardware hash from each existing device and upload it to Autopilot. After a reset, the device then goes through the same automatic setup as a new one.
Do I have to buy from Apple to use Automated Device Enrolment?
Not only from Apple. Devices from a participating reseller or carrier can be linked automatically. Devices from other sources can be added manually with Apple Configurator, with a 30-day period in which the user can still remove them.
Do I still need an MDM for zero-touch?
Yes. Autopilot and Apple Business only register the device and hand it over. The MDM, such as Intune or Jamf, is what installs the apps and applies the settings.
Onboarding new staff every month?
We help SMEs plan device purchases so setup takes minutes, not days.
Sources: Microsoft Learn: Windows Autopilot registration overview, Apple Support: adding devices to Apple Business, Apple Support: add devices with Apple Configurator, Apple Support: Use Automated Device Enrollment
Reviewed by the StarLabs technical team · Last checked 18 October 2026
