Device enrollment establishes the initial communication between Workspace ONE UEM and Mobile Device Management (MDM). Windows Desktop devices enroll using MDM-functionality built into the Windows OS.

Enrollment Basics

The enrollment methods for Windows Desktop devices vary based on your Workspace ONE UEM deployment, enterprise integrations, and device operating system. The Windows Desktop platform supports various OS versions and SKUs for Windows devices. For more information, see Supported Windows Desktop Devices.

Before enrolling devices, ensure that you have the required enrollment information. See Windows Desktop Enrollment Requirements for more information.

Simplify end-user enrollment by setting up the Windows Auto-Discovery Services (WADS) in your Workspace ONE UEM environment. WADS supports an on-premises solution and cloud-based WADS. For more information on setting up WADS, see Introduction to the Windows Auto-Discovery Service.

The enrollment methods use either the native MDM functionality of the Windows operating system, the AirWatch Unified Agent for Windows, or Azure AD integration.

If you want to use Workspace ONE UEM to manage Windows devices managed by SCCM, you must download the VMware AirWatch SCCM Integration Client. Use this client to enroll SCCM-managed devices into Workspace ONE UEM. For more information, see the Knowledge Base article VMware AirWatch SCCM Integration Client:

AirWatch Unified Agent for Windows Enrollment

The simplest enrollment workflow uses the AirWatch Unified Agent for Windows to enroll devices. End users simply download the AirWatch Unified Agent from and follow the prompts to enroll. For more information on Agent-based enrollment, see AirWatch Unified Agent for Windows Enrollment.

Additional Enrollment Methods

Consider using the AirWatch Unified Agent for the Windows Enrollment workflow. Workspace ONE UEM supports additional enrollment flows that meet specific use cases.

Azure AD Integration Enrollment

Through integration with Microsoft Azure Active Directory, Windows devices automatically enroll into Workspace ONE UEM with minimal end-user interaction. Azure AD integration enrollment simplifies enrollment for both end users and admins. Azure AD integration enrollment supports three different enrollment flows: Join Azure AD, Out of Box Experience enrollment, and Office 365 enrollment. All methods require configuring Azure AD integration with Workspace ONE UEM.

Before you can enroll your devices using Azure AD integration, you must configure Workspace ONE UEM and Azure AD. For more information, see Configure Azure AD Identity Services Integration.

To enroll through Azure AD integration workflows, see Enrollment Through Azure AD Integration.

Native MDM Enrollment

Workspace ONE UEM supports enrolling Windows Desktop devices using the native MDM enrollment workflow. The name of the native MDM solution varies based on the version of Windows. This enrollment flow changes based on the version of Windows and if you use WADS.

For more information, see Native MDM Enrollment for Windows Desktop.

Device Staging

If you want to configure device management on a Windows 10 device before shipping a device to your end user, consider using Windows Desktop device staging. This enrollment workflow allows you to enroll a device through the AirWatch Unified Agent, install device-level profiles, and then ship the device to end users. The two methods of device staging are manual installation and command-line installation. Manual installation requires devices to be domain-joined to an Azure AD integration. Command-line installation works for all Windows 10 devices. See Device Staging Enrollment for more information.

Windows Desktop Auto-Enrollment

Workspace ONE UEM supports the auto-enrollment of specific Windows Desktop devices purchased from Dell. Auto-enrollment simplifies the enrollment process by automatically enrolling registered devices following the Out-of-Box-Experience.

Windows 10 Provisioning Service by VMware AirWatch only applies to select Dell Enterprise devices with the correct Windows 10 image. The auto-enrollment functionality must be purchased as part of the purchase order from Dell.

For more information, see Windows 10 Provisioning Service by VMware AirWatch .

Bulk Provisioning and Enrollment

Bulk provisioning creates a pre-configured package that stages Windows 10 devices and enrolls them into Workspace ONE UEM. Bulk provisioning requires downloading the Microsoft Assessment and Development Kit and installing the Imaging and Configuration Designer tool. This tool creates the provisioning packages used to image devices.

With the bulk provisioning workflow, you can include Workspace ONE UEM settings in the provisioning package so that provisioned devices automatically enroll during the initial Out of Box Experience. For more information, see Bulk Provisioning and Enrollment.