[GH-ISSUE #3882] [Bug]: Autopilot settings incorrect in CIPP standard #1730

Closed
opened 2026-03-02 13:46:35 +03:00 by kerem · 7 comments
Owner

Originally created by @mruiterHU on GitHub (Mar 27, 2025).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/3882

Originally assigned to: @rvdwegen on GitHub.

Required confirmations before submitting

  • I can reproduce this issue on the latest released versions of both CIPP and CIPP-API.
  • I have searched existing issues (both open and closed) to avoid duplicates.
  • I am not requesting general support; this is an actual bug report.

Issue Description

When creating an Autopilot profile via a freshly created CIPP standard, the resulting profile in Intune differs from one created manually using the Autopilot profile form in Intune > Autopilot. The inconsistency matches the behavior described in issue #3745. Although this was marked as fixed, the issue still persists in version 7.4.1.

Also on the manual form, when having "Assign to all devices" enabled, the profile created inside intune is not assigned to anything.

Reproduction Steps

  1. Create a new standard in CIPP.
  2. Use the standard to deploy an Autopilot profile.
  3. Compare the created profile in Intune to one created manually via Intune > Autopilot.
  4. Observe differences in configuration or assignment.

Expected Behavior
The Autopilot profile created via a CIPP standard should be functionally and structurally identical to a profile created manually via the form in Intune > autopilot.

Actual Behavior
The profiles created via CIPP standard differ from those created manually.

Settings inside CIPP:

Image

Created profiles in Intune:

Image

sponsering via: https://github.com/hypecipp

Environment Type

Sponsored (paying) user

Front End Version

7.4.1

Back End Version

7.4.1

Relevant Logs / Stack Trace


Originally created by @mruiterHU on GitHub (Mar 27, 2025). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/3882 Originally assigned to: @rvdwegen on GitHub. ### Required confirmations before submitting - [x] **I can reproduce this issue on the latest released versions** of both CIPP and CIPP-API. - [x] **I have searched existing issues** (both open and closed) to avoid duplicates. - [x] I am **not** requesting general support; this is an actual bug report. ### Issue Description When creating an Autopilot profile via a freshly created CIPP standard, the resulting profile in Intune differs from one created manually using the Autopilot profile form in _Intune > Autopilot_. The inconsistency matches the behavior described in issue #3745. Although this was marked as fixed, the issue still persists in version 7.4.1. Also on the manual form, when having "Assign to all devices" enabled, the profile created inside intune is not assigned to anything. **Reproduction Steps** 1. Create a new standard in CIPP. 2. Use the standard to deploy an Autopilot profile. 3. Compare the created profile in Intune to one created manually via Intune > Autopilot. 4. Observe differences in configuration or assignment. **Expected Behavior** The Autopilot profile created via a CIPP standard should be functionally and structurally identical to a profile created manually via the form in _Intune > autopilot_. **Actual Behavior** The profiles created via CIPP standard differ from those created manually. Settings inside CIPP: ![Image](https://github.com/user-attachments/assets/73e5c587-5f87-46d8-aa63-fc4463b0e30e) Created profiles in Intune: ![Image](https://github.com/user-attachments/assets/9db1aa2b-01d0-48d3-bb69-2aa7cb0d2196) sponsering via: https://github.com/hypecipp ### Environment Type Sponsored (paying) user ### Front End Version 7.4.1 ### Back End Version 7.4.1 ### Relevant Logs / Stack Trace ```plaintext ```
kerem 2026-03-02 13:46:35 +03:00
Author
Owner

@github-actions[bot] commented on GitHub (Mar 27, 2025):

Thank you for reporting a potential bug. If you would like to work on this bug, please comment:

I would like to work on this please!

Thank you for helping us maintain the project!

<!-- gh-comment-id:2757478136 --> @github-actions[bot] commented on GitHub (Mar 27, 2025): Thank you for reporting a potential bug. If you would like to work on this bug, please comment: > I would like to work on this please! Thank you for helping us maintain the project!
Author
Owner

@github-actions[bot] commented on GitHub (Apr 6, 2025):

This issue is stale because it has been open 10 days with no activity. We will close this issue soon. If you want this feature implemented you can contribute it. See: https://docs.cipp.app/dev-documentation/contributing-to-the-code . Please notify the team if you are working on this yourself.

<!-- gh-comment-id:2781178476 --> @github-actions[bot] commented on GitHub (Apr 6, 2025): This issue is stale because it has been open 10 days with no activity. We will close this issue soon. If you want this feature implemented you can contribute it. See: https://docs.cipp.app/dev-documentation/contributing-to-the-code . Please notify the team if you are working on this yourself.
Author
Owner

@HappyEarthDay commented on GitHub (Apr 6, 2025):

Thank you for submitting this. I also experienced this bug this evening and can confirm it is a real bug. It creates the policy, but does not assign to All Devices like it used to.

In addition to the Autopilot profile not being assigned to all devices, I found the following two fields should have input validation:
Image
These two fields don't accept any special characters in the Intune portal, so when I had any special characters in either feild, deployment would fail, and the message in the logbook was as follows: Failed to create Autopilot profile: Failed to add profile for REDACTEDDOMAIN.org: { "_version": 3, "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: fdfc4b2-REDACTED-9eac813f - Url: https://fef.msua08.manage.microsoft.com/DeviceEnrollmentFE/StatelessDeviceEnrollmentFEService/deviceManagement/windowsAutopilotDeploymentProfiles?api-version=5024-09-28", "CustomApiErrorPhrase": "", "RetryAfter": null, "ErrorSourceService": "", "HttpHeaders": "{}" }

<!-- gh-comment-id:2781197707 --> @HappyEarthDay commented on GitHub (Apr 6, 2025): Thank you for submitting this. I also experienced this bug this evening and can confirm it is a real bug. It creates the policy, but does not assign to _All Devices_ like it used to. In addition to the Autopilot profile not being assigned to all devices, I found the following two fields should have input validation: ![Image](https://github.com/user-attachments/assets/525619ba-9062-4684-9c1e-ebfe70d3eb04) These two fields don't accept _any_ special characters in the Intune portal, so when I had any special characters in either feild, deployment would fail, and the message in the logbook was as follows:``` Failed to create Autopilot profile: Failed to add profile for REDACTEDDOMAIN.org: { "_version": 3, "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: fdfc4b2-REDACTED-9eac813f - Url: https://fef.msua08.manage.microsoft.com/DeviceEnrollmentFE/StatelessDeviceEnrollmentFEService/deviceManagement/windowsAutopilotDeploymentProfiles?api-version=5024-09-28", "CustomApiErrorPhrase": "", "RetryAfter": null, "ErrorSourceService": "", "HttpHeaders": "{}" }```
Author
Owner

@rvdwegen commented on GitHub (Apr 10, 2025):

Fixed in dev. There were a few casing issues and Microsoft has started using a new container property for a few of the settings so I updated that too.

I will also have a look at the issue @HappyEarthDay mentioned but that will likely not be in the next release.

<!-- gh-comment-id:2794264306 --> @rvdwegen commented on GitHub (Apr 10, 2025): Fixed in dev. There were a few casing issues and Microsoft has started using a new container property for a few of the settings so I updated that too. I will also have a look at the issue @HappyEarthDay mentioned but that will likely not be in the next release.
Author
Owner

@MarkFinGarde commented on GitHub (Apr 14, 2025):

As a test, I deployed an Autopilot profile directly from CIPP (not using a standard). Then, I applied the exact same settings to the same tenant using a standard.

The only difference I’m seeing so far is under the Out-of-box Experience (OOBE):

Using Standard: Deployment mode = User-Driven

From CIPP (not using a standard): Deployment mode = Self-Deploying

I’m still working through a few additional tests.

Front/Backend are on 7.5.0

<!-- gh-comment-id:2801597621 --> @MarkFinGarde commented on GitHub (Apr 14, 2025): As a test, I deployed an Autopilot profile directly from CIPP (not using a standard). Then, I applied the exact same settings to the same tenant using a standard. The only difference I’m seeing so far is under the Out-of-box Experience (OOBE): Using Standard: Deployment mode = User-Driven From CIPP (not using a standard): Deployment mode = Self-Deploying I’m still working through a few additional tests. Front/Backend are on 7.5.0
Author
Owner

@mruiterHU commented on GitHub (Apr 23, 2025):

@rvdwegen Just tested the standard Autopilot profile, it's almost working as expected. All settings are applied correctly, except for the Deployment mode. It remains set to User-Driven regardless of how the toggle is configured, just as @MarkFinGarde described.

Is this still on the roadmap to be fixed, or should I create a new bug report?

<!-- gh-comment-id:2823774583 --> @mruiterHU commented on GitHub (Apr 23, 2025): @rvdwegen Just tested the standard Autopilot profile, it's almost working as expected. All settings are applied correctly, except for the Deployment mode. It remains set to User-Driven regardless of how the toggle is configured, just as @MarkFinGarde described. Is this still on the roadmap to be fixed, or should I create a new bug report?
Author
Owner

@mruiterHU commented on GitHub (Apr 23, 2025):

Did some digging, could this have something to do with it?

When i look at the standard in the API should $settings.DeploymentMode not be $settings.SelfDeployingMode? See the response from "listStandardTemplates", because if i read it correctly DeploymentMode will always be false at the moment so User-Driven.

Image

Image

https://github.com/KelvinTegelaar/CIPP-API/blob/master/Modules/CIPPCore/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1

<!-- gh-comment-id:2823924978 --> @mruiterHU commented on GitHub (Apr 23, 2025): Did some digging, could this have something to do with it? When i look at the standard in the API should $settings.DeploymentMode not be $settings.SelfDeployingMode? See the response from "listStandardTemplates", because if i read it correctly DeploymentMode will always be false at the moment so User-Driven. ![Image](https://github.com/user-attachments/assets/c9ce1252-7289-4a38-980c-c6fc498fd1f1) ![Image](https://github.com/user-attachments/assets/264120d2-4b63-447e-aa7f-3dd8d363e148) https://github.com/KelvinTegelaar/CIPP-API/blob/master/Modules/CIPPCore/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#1730
No description provided.