Overview

This article walks through setting up a new Windows device and connecting it to your organization's Microsoft account using Entra ID. The process involves creating a temporary local account to get past the Windows setup wizard, then joining the device through Settings before signing in as the intended user.

Step 1: Get through initial setup

Power on the device and click through the opening Windows setup screens. These cover language, region, and keyboard layout. Accept the defaults or adjust as needed, and keep clicking through until Windows asks you to connect to the internet.

Step 2: Bypass the internet requirement

When the internet connection screen appears, do the following instead of connecting:

1. Make sure Fn Lock is on on the keyboard.
2. Press Shift + F10 to open a Command Prompt window.
3. Click inside the Command Prompt window to focus it.
4. Type the following command and press Enter:

oobe\bypassnro

The device will restart on its own.

Step 3: Set up a temporary local account

After the restart, click through the same opening setup screens again. This time, when you reach the internet screen, a new option will appear: I don't have internet. Click it.

Follow the prompts to create a local account. The name and password can be anything you like — this account is only needed to finish the setup wizard and will not be used going forward.

Once the account is created, Windows will finish setup and bring you to the desktop.

Step 4: Join the device to Entra ID

Before continuing, make sure the device is connected to the internet. You can do this from the network icon in the taskbar in the bottom right corner.

1. Open the Settings app.
2. On the left, click Accounts.
3. Click Access work or school.
4. Click Add a work or school account.

A sign-in prompt will appear. Do not enter an email address yet. Look for the link that says Join this device to Azure Active Directory and click it.

Enter the intended user's work email address and password. A confirmation screen will appear asking if you want to join the device to the organization. Click Join.

Step 5: Sign in as the user

Lock the device with Windows key + L to return to the login screen.

In the bottom left corner, click Sign in with another account. Enter the intended user's work email address and password.

Step 6: Complete Windows Hello setup

After signing in, Windows will prompt you to set up Windows Hello. Approve the MFA request for the account, then set a PIN when prompted. Once the PIN is set, the device will finish loading into the user's desktop.

Setup is complete.

Notes

• The local account created in Step 3 will still exist on the device but does not need to be removed. It simply will not be the active profile.
• If the user forgets their PIN, they can reset it from the login screen using their Microsoft account credentials.
• If there are any issues joining via Entra ID, confirm the user's Microsoft 365 license is active and that their account is not blocked in the admin center.