Disable Reboot for "Device Restrictions" Profile Deployment
During an autopilot setup, if there is a "Device Restrictions" profile assigned, it will reboot the device to the login screen and the user must login again in order to complete the User ESP. Please make the reboot happen after the User ESP or preferably don't make the reboot happen at all. That way the user only has to sign in once.
Also, this happens for "Endpoijt Protection" payloads as well.