The Ghost of “Day One” Past

Think back to your first day at a new job five or ten years ago.

You sat at a new desk. An IT person came by with a heavy, clunky laptop, a sticky note with a temporary password, and a multi-page printout of instructions. You spent the next four hours watching progress bars, mapping network drives, calling the helpdesk to get access to your email, and waiting for the VPN to connect.

It was a rite of passage. It was also a terrible introduction to a company.

When a new hire spends their first day fighting with technology, the subconscious message we send them is: We are slow, we are outdated, and everything here is going to be a struggle.

In the Modern Workplace, that legacy “Day One” is unacceptable. The benchmark is no longer other enterprise companies; the benchmark is the consumer experience. When your employee buys a new smartphone on a Sunday, they turn it on, sign in, and their life is synced in minutes.

They expect the exact same magic when they open their corporate laptop on Monday morning.

Enter “Zero Touch” Provisioning

This is where the “Cloud Magic” we love so much actually touches the human experience.

In 2026, the gold standard for device deployment is Zero Touch Provisioning-powered by tools like Windows Autopilot and Microsoft Intune (or Automated Device Enrollment via Apple Business Manager for Mac users). Microsoft is also rolling out the next generation of this capability-Windows Autopilot Device Preparation (sometimes called Autopilot v2)-which streamlines the flow further and is worth watching as it matures into mainstream adoption.

Here is how it should look:

  • The hardware vendor ships the laptop directly to the employee’s house. IT never touches the physical box.
  • The employee connects to their home Wi-Fi and types in their company email address.
  • The cloud recognises the device, applies the Zero Trust security baseline, and silently delivers the apps they need.

There are no imaging servers. There are no USB boot drives. There is just identity, hardware, and the cloud.

The Technical Trap: The Dreaded ESP

But here is where many IT teams ruin the magic. They take the new cloud tools and apply the old “imaging” mindset to them.

During the Autopilot process, users see an Enrollment Status Page (ESP). It blocks the user from getting to their desktop until certain policies and apps are installed.

Too many engineers use this page to install every single application the company owns. They force a 10GB AutoCAD installation, three different web browsers, and a dozen legacy security agents down the pipe over a home Wi-Fi connection. The result? The “Zero Touch” magic turns into a two-hour waiting game, and the setup inevitably times out and fails.

We took a beautiful, human-centric process and broke it with technical greed.

A smarter alternative, if your team has the capacity, is pre-provisioned deployment (also called White Glove or Technician Flow), where IT or your OEM does a partial setup pass before the device ships. This front-loads the heavy lifting so the user’s OOBE is already nearly complete when they turn it on. But this only works if you have the logistics to support it. For most SMBs and remote-first teams, a well-optimised user-driven flow with a lean ESP is still the better bet.

The Lean Day One Strategy

To make technology feel invisible, we have to rethink our payload. The goal of Day One is not to build a fully loaded workstation. The goal is to get the user to a secure, productive desktop as fast as humanly possible.

Here is the modern strategy for the Enrollment Status Page:

The Core Minimum Only block the desktop for the absolute essentials. A web browser, your Zero Trust network access agent (so they are secure), and Microsoft 365. That is it.

The Background Magic Let the user get to the desktop within 15–20 minutes. One caveat worth knowing: as of early 2026, Windows devices now install the latest monthly security patch automatically during the OOBE process-a welcome security improvement that can add up to 20 minutes to provisioning on a fresh device. Factor this into your target, and communicate it to new hires in advance so the wait doesn’t feel like a failure. Once they are in, reading their welcome emails and chatting on Teams, Intune can silently stream the heavier applications (like Adobe or AutoCAD) in the background.

Self-Service Empowerment Put the rest of the apps in the Company Portal. Let the user choose what they need, when they need it. It builds trust and reduces helpdesk tickets.

The Human Impact

Why do we care so much about device deployment? Because technology is the digital equivalent of the office building.

If you invite a new hire to a physical office, you don’t make them build their own chair and wire their own desk before they can work. You welcome them in, offer them a coffee, and give them a clean, ready space.

When we nail the Autopilot experience, we are doing the digital equivalent. We are telling the employee: We respect your time, we trust you, and we have given you the best tools to do your job.

This Week’s Challenge: Audit Your Payload

Here is your actionable step for the week. Look at your Autopilot Enrollment Status Page (ESP) configuration in Intune.

Count the number of “Required” apps blocking the user from the desktop. If that number is higher than five, you are adding unnecessary friction. Pick three heavy applications and move them to background deployment.

Give your users their time back. Let the cloud do the heavy lifting.

Thanks for reading. See you next week.