The Premium Cloud Brief
Field-tested guidance on Microsoft 365 security, cloud cost, and Copilot — written by the engineers who run the engagements.
Autopilot ESP timeout 0x800705b4: TPM attestation and Device Preparation before you wipe again
0x800705B4 is a general timeout—not one root cause. Separate TPM attestation stalls, ESP policy-provider / required-apps timeouts, and hybrid join hangs, then diagnose with phase, tpmtool, and mdmdiagnosticstool before another wipe.
Read the article →
Autopilot pre-provision fails with Windows App 0x80244018: Store CDN vs required apps in the technician flow
When Autopilot technician pre-provision dies on a Microsoft Store (new) app—often Windows App—with 0x80244018 while Win32 on the same ESP succeeds, separate Store CDN / HTTP 403 intermittency from required-app design. Protocol mapping is not an Autopilot root-cause confirmation.
Read the article →
Autopilot pre-provision reseal failing after KB5089549: check ESP updates and BitLocker before you wipe the lab
When Autopilot technician pre-provision dies at Reseal after a cumulative update, the failure is usually ESP Install Windows updates racing BitLocker key backup—not a reason to wipe the image again. Separate community KB5089549 reports from Microsoft's CU notes and prove the seal path.
Read the article →
Autopilot ESP stuck at Apps (Identifying): find the Win32 that fails with 0x81036502
When Autopilot ESP sticks on Apps (Identifying), the blocker is usually one tracked Win32—wrong detection, a failed install returning 0x81036502, or apps racing ahead of their dependencies. Here is how to find that app and stop the permanent ESP ticket queue.
Read the article →
Autopilot device association: export the DeviceLink CSV, stamp UEFI, then enroll
Autopilot device association binds a physical Windows 11 device to your tenant before enrollment via a TPM-backed DeviceLink CSV and UEFI tenant affinity—not a classic hardware-hash upload. Here is the admin loop and what still breaks it.
Read the article →Get the Brief in your inbox
One field-tested post a week. Unsubscribe any time.