Will Users Enroll with Workspace ONE, Container, or AirWatch Agent?


Workspace ONE


AirWatch Agent


There are elements you need to consider before deciding.


VMware Workspace ONE ™ is a secure enterprise platform that delivers and manages any app on any device. It begins with self-service, single-sign on access to cloud, mobile, and Windows apps and includes powerfully integrated email, calendar, file, and collaboration tools.

With Workspace ONE, users do not need to enroll their personal devices to get access to services. The Workspace ONE app itself may be downloaded from the Apple App Store, Google Play, or Microsoft Store and installed. A user then logs in and gains access to applications based on the established policies. The Workspace ONE app configures an MDM management profile during its installation that enrolls the device automatically.


AirWatch Container enables you to provide specific resources to segments of BYOD users. For example, some users may only want access to corporate email, while others may only require access to a single enterprise app.

With AirWatch Container, your BYOD users can enroll in Workspace ONE UEM and securely access business applications and resources without receiving the same device profile corporate-owned devices receive.

AirWatch Container addresses privacy concerns users have about MDM by only giving administrators the ability to control managed enterprise apps instead of the entire device.


AirWatch Agent is the main enrollment option for Android, iOS, and Windows devices. The AirWatch Agent involves a URL, to which your device browser should be pointed, your email address and credentials, plus your group ID, which should be provided by your systems administrator. For more information, see Enroll a Device With AirWatch Agent.


Would you like to start the device enrollment decision tree over again? Visit Device Enrollment Overview.