Enrolling through enrollment URL - Windows

Read this section to understand how the users can enroll Windows 10 devices to MDM when the admin shares the enrollment URL.

Before you begin

  • You must know the MDM Server enrollment URL, which the BigFix administrator shares through email or chat. The MDM Server enrollment URL must be the fully qualified domain name of the MDM server (For example, https://enroll-mdm.bigfix.com).
  • To log in to the enrollment URL, you need an email ID and password associated with a valid Active Directory (AD) credentials.
  • To enroll a device successfully, the user doing the enrollment on the Windows 10 device must be an administrator of the Windows 10 device.

About this task

To enroll a Windows 10 device in MDM, complete the following steps:

Procedure

  1. On a Windows device which needs to be enrolled, launch a web browser and go to the MDM server URL.
    • If a ppkg package had been created on the MDM server and bulk enroll had been configured to be TRUE, the following screen appears.

      Enter an email address and Password that is associated with a valid AD set of credentials and click Enroll. A ppkg file gets downloaded and the enrollment process begins.
    • If the bulk enroll option is had been configured to be FALSE, the following screen appears.

      Enter an email address that is associated with a valid AD set of credentials and click Enroll. The enrollment process begins.
  2. A pop-up window appears requesting you to open the Microsoft account, click Open Microsoft account.


  3. On the next screen, enter an email address that is associated with a valid AD set of credentials. The MDM enrollment server URL should already be preconfigured and doesn’t need to be altered.


  4. Click Next.
  5. On the next screen, enter the following information:
    • User name or email ID – This field is optional and can be empty.
    • Password – This field is mandatory.
      Note: If the LDAP is turned off in MDM environment, enter any value for the device to enroll.


  6. Click Next.

Results

After successful authentication, the device gets enrolled. To verify MDM enrollment status, go to Settings > Access work or school. You can view that the device is connected to MDM.


In case of enrollment with ppkg file, you can view the name of the ppkg file in the enrolled device by navigating to Settings > Accounts > Access work or school > Add or remove a provisioning package.</b> You can view the configured provisional package here.

If ever this device needs to be bulk enrolled again in future, this provisioning package also needs to be deleted along with disconnecting the MDM profile under Settings > Accounts > Access work or school. Then the Windows 10 Enrollment action can be initiated from the WebUI.