Aim: To understand the benefits of using an Enrolment Status Page (ESP) to control the user experience the first time a given user signs in to that Windows device.
When an Enrolment Status Page (ESP) is enabled for your tenant, it will appear as part of the Windows out-of-box experience (OOBE) when the first user signs in.
The ESP tracks a managed devices’ installation progress for assigned apps and profiles, security policies, certificates, and network connections targeted to the device.
You can configure the following ESP settings:
- Visibility of installation progress indicators
- Device access during provisioning (you may wish to configure the ESP to ensure the device cannot be used until all required policies and applications are installed)
- Installation time limits (default is 60 minutes, use a higher value if you think more time is needed to install apps on your devices before an error is shown)
- Various troubleshooting options
The ESP allows you to control the end-user experience when signing in to enrol a device for the first time by blocking access to the device until, for instance, targeted Microsoft Office apps have been installed. Once the targeted apps and settings have applied, the desktop appears and the device is usable.
Note the enrolment status page (ESP) can apply to all out-of-box experience (OOBE) Azure Active Directory (Azure AD) join and Windows Autopilot provisioning scenarios. It is, therefore, not specific to Windows Autopilot. However, it works well in conjunction with Autopilot profiles to ensure the end user cannot start using the device until it is ready.
If you only want the ESP to appear on Autopilot devices during initial device setup, select the Only Show page to devices provisioned by out-of-box experience (OOBE): No (which applies to all devices). Then create a new ESP profile, with the option to Only show page to devices provisioned by out-of-box experience (OOBE): Yes, and target that latter profile to an Autopilot device group.
Related: