Work Access is the native MDM enrollment method for Windows 10 devices. Enrolling through Work Access and using Windows Auto Discovery provides a quick and easy enrollment flow for end users.


Registering your domain in Workspace ONE UEM removes the need to enter the Group ID during enrollment.
Note: Consider using the Workspace ONE Intelligent Hub for Windows to enroll your Windows 10 devices instead of using native MDM enrollment. The native MDM enrollment flow does not enroll devices into MDM if you use Office 365 or Azure AD on the same domain.


  1. Navigate on the device to Settings > Accounts > Work Access and select Enroll in to device management.
  2. Enter the user name you provided to your end user into the Email text box, followed by the domain for the environment in the format (such as Select Continue.
  3. Enter the Group ID and select Next.
  4. Enter your username and password and select Next.
    These credentials may be your directory services credentials or dedicated credentials specific to your Workspace ONE UEM environment.
  5. (Optional) Review the End User License Agreement and select Accept to agree to the terms of use.
    This step is optional and only displays if enabled in the Workspace ONE UEM Console.
  6. (Optional) Select Yes to save sign-in info.
    The device then attempts to connect to Workspace ONE UEM. If it connects successfully, a briefcase icon displays with Workspace ONE UEM written next to it. This icon shows your successful connection to Workspace ONE UEM.