Bulk enrollment - Windows 10

Read this section to understand the step-by-step procedure of Windows 10 bulk enrollment.

Prerequisites: Ensure the Windows 10 devices that you target for bulk enrollment have BigFix Agent installed.
About this task: The work flow of Windows 10 bulk enrollment is as follows:
  1. Designate Provisioning Package Generation Point: Admin designates a Windows 10 device to generate Windows provisioning package (.ppkg).
  2. Create Windows 10 PPKG artifact: Admin generates Windows provisioning package (.ppkg) and makes it available in the MDM Server to facilitate bulk enrollment.
  3. Bulk enroll: After triggering the action, the targeted Windows 10 devices are enrolled with MDM server automatically with the pre-configured .ppkg artifact without user intervention.

Designate Provisioning Package Generation Point

As an Admin, to designate a Windows 10 device as the Windows provisioning package generation point, do the following:

  1. Log in to BigFix WebUI as an Admin user.
  2. On the WebUI main page, click App > MDM
  3. On the MDM page, click Configure MDM.
  4. On the Configure MDM page, click Designate Provisioning Package Generation Point.
  5. On the Designate Provisioning Package Generation Point page, in the Target Device section, click Edit Devices.
    Bulk enroll - Target by device
  6. On the Target By Device page, select a Windows 10 device in which you want to generate the .ppkg file and click OK.
    Bulk enroll - Target by device
  7. Verify the information in the Target Device and the Review sections and click Deploy.

Result: The selected device becomes the provisioning package generation point where you can create .ppkg file.

Create Windows 10 Provisioning Package

As an admin, to create Windows provisioning package (.ppkg) and make it available for bulk enrollment in the MDM server, do the following:

  1. Click App > MDM
  2. On the MDM page, click Configure MDM.
  3. On the Configure MDM page, click Create Windows 10 Provisioning Package.
    Bulk enroll - Target by device
  4. The Target Device section displays the number of Windows 10 devices as designated in Designate Provisioning Package Generation Point). To make any changes, click Edit Devices.
    Note: Windows 10 device that you select here uses ArchiveNow to upload ppkg content on to the root MDM server. If you have a particular workflow around the selected Windows 10 endpoint and ArchiveNow, that is overwritten after this action.
  5. In the Target MDM Server section, click Edit Devices to select the MDM Server to which you want to transfer the generated .ppkg file and make it available for enrollment.
  6. In the Parameters section, enter the LDAP username, LDAP password.
  7. Verify the information in the Review section.
  8. Click Deploy.
Results: After this action is completed:
  • Windows 10 ppkg files are created in the targeted Windows 10 device at C://MCMPPKG.
  • The created ppkg files are transferred to the target MDM server at /var/opt/BESUEM/packages to facilitate enrollment.

Bulk enroll

To enroll Windows 10 devices through bulk enrollment using the .ppkg artifacts that is pre-configured with policies, do the following:
  1. Log in to BigFix WebUI.
  2. On the Devices page filter Windows 10 devices with native BigFix agent installed.
  3. From the resultant devices list select all or a subset of devices for bulk enrollment.
  4. Click Administration > MDM Enroll.
    Bulk enroll - Target by device
    The Windows 10 Enrollment page appears.
  5. In the Target Device section, the number of targeted devices is displayed. If you want to change the targeted devices, click Edit Devices.
    Note: Ensure that Windows provisioning package is not already present in the targeted device before bulk enrollment.
  6. Action settings: Select Stagger action times over and enter the number of minutes. Use this setting to prevent all the targeted endpoints attempting to enroll at the same time that can result in huge load on the server and the network. When this is set, each endpoint selects a random time within the specified time interval to enroll.
  7. For Select Your Provisioning Package, select the MDM server to which you want to enroll the selected devices.
  8. Verify the information in the Review section.
  9. Click Deploy. The Bulk Enroll Win 10 Device page is displayed with deployment status in the overview tab. At any point, to stop the deployment, click Stop Deployment.
    Bulk enroll - Status overview
Results: After running the action, all the targeted Windows 10 devices get enrolled to the selected MDM server. The enrolled devices report with MDM icon in The Device List.