Source: https://tendernation.io/opportunities/01a13d20-35fc-7135-8967-788edebb70bc/sia-929-autopilot-and-configuration-service

awarded GB restricted procedure

# SIA 929 - Autopilot and Configuration Service

[Security Industry Authority](https://tendernation.io/buyers/security-industry-authority)

Estimated value

£16,500

Published

30 Apr 2026

Deadline

Closed

30 Sept 2025

## Who can bid

- Small contract value

    Valued under £135,018 including VAT, the lowest Procurement Act threshold for goods and services.

## About this tender

We require professional services to deliver a Microsoft Autopilot user driven implementation within our tenancy to an agreed specification which has been outlined within the following section

### Autopilot Implementation Customer Requirements

The solution must utilise Windows Autopilot for Microsoft Entra joined devices for provisioning and enrolment of new Windows devices to Microsoft Intune.

The solution must align Windows 11 device security to the National Cyber Security Center (NCSC) Device Security framework where applicable.

The solution must use Win32 application deployment for EXE and MSI installs. Existing line-of-business application deployment must be reviewed and aligned with recommendations for application deployment, managing a list of applications centrally using the Microsoft Company Portal app.

The solution must support Windows Autopilot devices connecting to the existing Azure User Tunnel.

The solution must centrally manage Windows Defender Antivirus and Firewall settings.

The solution must automatically assign a primary user to devices when enrolling to Microsoft Intune.

The solution must use Compliance policies to evaluate device health for key security settings such as device encryption, operating system version, and antivirus protection.

The solution should remove reliance on PowerShell scripts for security settings and application management.

The solution must allow access to on-premises network shares and network printers Microsoft Entra joined devices when connect to the Azure VPN.

The solution should provide a means to deploy printer drivers and print queues to Microsoft Entra joined devices.

The existing BitLocker Encryption policies should be reviewed and migrated to Endpoint security-backed policies.

### Autopilot Implementation Technical Requirements

The solution must configure Windows Autopilot profiles to use User-Driven mode for Microsoft Entra joined devices.

The solution must enable and configure Windows LAPS in Microsoft Entra ID to support managing and rotating local administrator passwords on devices.

The solution must use BitLocker settings in Microsoft Intune to silently encrypt Windows Autopilot devices and escrow keys to Microsoft Entra ID.

The solution must configure Compliance policies and actions for non-compliance rules based upon agreed configuration and requirements for access.

The solution must enable Windows Hello for Business (WHfB) for Windows Autopilot devices to replace username and passwords with Biometrics or a PIN.

The solution must introduce Cloud Kerberos trust to support WHfB credentials being used to access on-premises services e.g., file shares.

The solution must provide users with the ability to select a wireless network at the login screen.

The solution must deploy a set of core applications via Microsoft Intune prior to users being able to access the desktop.

Windows devices could receive CIS benchmark configuration, for areas not covered by NCSC Device Security.

Read full description

## CPV classification

Software package and information systems

Source

Contracts Finder (UK)

[View official notice](https://www.contractsfinder.service.gov.uk/notice/a9c10c17-5ac3-4bb9-b6b7-a994746892cb)

Never miss a tender like this again

Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start.

[Track tenders free](https://tendernation.io/register)

[Buyer profile Security Industry Authority: past awards and live tenders](https://tendernation.io/buyers/security-industry-authority) [Sector More Software packages & information systems tenders](https://tendernation.io/sectors/software-information-systems)

## More tenders like this

[Preliminary Market Engagement - Corporate Enterprise Resource Planning (ERP) · North East Lincolnshire Borough Council · 21 days left · 9 Nov 2026](https://tendernation.io/opportunities/01a15410-bf5e-72d1-8225-fbabeaba595f/preliminary-market-engagement-corporate-enterprise-resource-planning-erp) [Servers – Dostawa serwerów do klastra wirtualizacyjnego · Politechnika Rzeszowska · 2 days left · 21 Oct 2026](https://tendernation.io/opportunities/01a15183-2e23-7066-ba48-4fc2a9243b50/poland-servers-dostawa-serwerow-do-klastra-wirtualizacyjnego) [License management software package – Dostawa licencji bezpieczeństwa do Systemu DNS · Poczta Polska S.A. · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-20fa-7396-87e7-40ce84cb0f4d/poland-license-management-software-package-dostawa-licencji-bezpieczenstwa-d) [Security software package – Pořízení a implementace integrovaného řešení EDR/XDR a SIEM · Fakultní nemocnice Plzeň · 30 days left · 18 Nov 2026](https://tendernation.io/opportunities/01a15183-1e5d-73ea-989e-b9c221c4c490/czechia-security-software-package-porizeni-a-implementace-integrovaneho-rese) [Computer servers – „Dostawa serwerów komputerowych wraz z dedykowanymi kartami graficznymi dla Copernicus PL Sp. z o.o.” · Copernicus Podmiot Leczniczy Spółka Z Ograniczoną Odpowiedzialnością · 3 days left · 22 Oct 2026](https://tendernation.io/opportunities/01a15183-08e5-7339-9a05-be1adf5996b5/poland-computer-servers-dostawa-serwerow-komputerowych-wraz-z-dedykowanymi) [Software package and information systems – Datenerfassungssystem · Dataport AöR · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-43c5-7007-89f5-0ea2d1525f27/germany-software-package-and-information-systems-datenerfassungssystem)
