Workspace ONE UEM supports several different methods to enroll your Windows 10 devices. Learn which enrollment workflow best services your needs based on your Workspace ONE UEM deployment, enterprise integrations, and device operating system.

Enrollment Basics

Before enrolling devices, ensure that you have the required enrollment information. See Windows Desktop Enrollment Requirements for more information.

Simplify your end-user enrollments by setting up the Windows Auto-Discovery Services (WADS) in your Workspace ONE UEM environment. WADS supports an on-premises solution and cloud-based WADS.

The enrollment methods use either the native MDM functionality of the Windows operating system, Workspace ONE Intelligent Hub for Windows, or Azure AD integration.

If you want to use Workspace ONE UEM to manage Windows devices managed by SCCM, you must download the VMware AirWatch SCCM Integration Client. Use this client to enroll SCCM-managed devices into Workspace ONE UEM.

Workspace ONE Intelligent Hub for Windows Enrollment

The simplest enrollment workflow uses Workspace ONE Intelligent Hub for Windows to enroll devices. End users simply download Workspace ONE Intelligent Hub from and follow the prompts to enroll.

Consider using Workspace ONE Intelligent Hub for the Windows Enrollment workflow. Workspace ONE UEM supports additional enrollment flows that meet specific use cases.

Azure AD Integration Enrollment

Through integration with Microsoft Azure Active Directory, Windows devices automatically enroll into Workspace ONE UEM with minimal end-user interaction. Azure AD integration enrollment simplifies enrollment for both end users and admins. Azure AD integration enrollment supports three different enrollment flows: Join Azure AD, Out of Box Experience enrollment, and Office 365 enrollment. All methods require configuring Azure AD integration with Workspace ONE UEM.

Before you can enroll your devices using Azure AD integration, you must configure Workspace ONE UEM and Azure AD.

Native MDM Enrollment

Workspace ONE UEM supports enrolling Windows Desktop devices using the native MDM enrollment workflow. The name of the native MDM solution varies based on the version of Windows. This enrollment flow changes based on the version of Windows and if you use WADS.

Only users with local admin permissions on the device can enroll a device into Workspace ONE UEM and enable MDM.

Device Staging

If you want to configure device management on a Windows 10 device before shipping it to your end user, consider using Windows Desktop device staging. This enrollment workflow allows you to enroll a device through Workspace ONE Intelligent Hub, install device-level profiles, and then ship the device to end users. The two methods of device staging are manual installation and command-line installation. Manual installation requires devices to be domain-joined to an Azure AD integration. Command-line installation works for all Windows 10 devices.

Windows Desktop Auto-Enrollment

Workspace ONE UEM supports the auto-enrollment of specific Windows Desktop devices purchased from Dell. Auto-enrollment simplifies the enrollment process by automatically enrolling registered devices following the Out-of-Box-Experience.

Windows 10 Provisioning Service by VMware AirWatch only applies to select Dell Enterprise devices with the correct Windows 10 image. The auto-enrollment functionality must be purchased as part of the purchase order from Dell.

Bulk Provisioning and Enrollment

Bulk provisioning creates a pre-configured package that stages Windows 10 devices and enrolls them into Workspace ONE UEM. Bulk provisioning requires downloading the Microsoft Assessment and Development Kit and installing the Imaging and Configuration Designer tool. This tool creates the provisioning packages used to image devices.

With the bulk provisioning workflow, you can include Workspace ONE UEM settings in the provisioning package so that provisioned devices automatically enroll during the initial Out of Box Experience.

Registered Mode - Enroll Without Device Management

To allow some Windows devices to enroll into Workspace ONE UEM without device management services, you can enable Registered Mode. Assign this mode to an entire organization group or with smart groups.