Configure Workspace ONE Drop Ship Provisioning (Online) to provision your Windows 10 devices with apps and configurations before they leave the factory.

To configure Workspace ONE Drop Ship Provisioning (Online), you set configurations in the Workspace ONE UEM console and with your device manufacturer.

Procedure

Prerequisites

You must meet the following requirements before you can use Workspace ONE Drop Ship Provisioning (Online).
  • Requirements for the admin include the listed components and configurations.
    • Use the Workspace ONE Intelligent Hub for Windows 20.10 or later. Configure it to update automatically. Enable the setting Intelligent Hub Automatic Updates in the Workspace ONE UEM console in Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Intelligent Hub Application.
    • Configure Software Distribution in the organization group where your Workspace ONE Drop Ship Provisioning (Online) settings reside. For details about this system, access Software Distribution of Win32 Applications.
    • Use the Workspace ONE UEM 2010 or later.
    • Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.
  • Requirements for the device include the listed processes and packages. If you are unsure about these processes or packages, ask your VMware representative for more information.
    • Register all devices with the Workspace ONE OEM Provisioing Service.
    • Stage all devices with a generic PPKG file, an answer file (unattend.xml), and a Sysprep (System Preparation).

Configure Workspace ONE Drop Ship Provisioning (Online) in the Workspace ONE UEM console.

  1. Select the organization group you want to configure Workspace ONE Drop Ship Provisioning (Online).
  2. Go to Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Staging & Provisioning.
  3. Go to the Workspace ONE Drop Ship Provisioning section and select Enabled.
  4. Copy the pre-configured values in this area and give it to your manufacturer.
    • UPN
    • Username
    • Password
    • Organization Group UUID
  5. If you are going to use domain join for your users, you can select Enable and enter the Computer Name and Organization Unit Distinguished Name.
  6. Save the settings.

Create a tag in the Workspace ONE UEM console.

The Workspace ONE Drop Ship Provisioning (Online) system uses this tag to match your Workspace ONE UEM configurations with your registered devices.
  1. Select the applicable organization group.
  2. Go to Groups & Settings > All Settings > Devices & Users > Advanced > Tags and select Create Tag.
  3. Enter a name for the tag. You can use any name you want. Consider using a name that identifies the business unit that uses these provisioned devices. For example, enter the name RnD for the research and development unit.
  4. Save your tag.

Create a smart group in the Workspace ONE UEM console and assign the tag to it.

Workspace ONE UEM uses the tag to match your configurations to the devices in the smart group.
  1. Ensure you are in the right organization group.
  2. Go to Groups & Settings > Groups > Assignment Groups and select Add Smart Group.
  3. Enter a name for the smart group and use the Criteria type.
  4. Select the Tag section and enter the tag you previously created.
  5. Save your smart group.

Configure the log in experience in the Workspace ONE UEM console with a local administrator account or using offline domain join.

If you want to let users use their corporate accounts to access Windows 10 devices, configure offline domain join. See Enable Offline Domain Join for details.

If you want to create local accounts for access, create an administrator account using a Custom Settings profile and using Microsoft's Accounts CSP. For access to the SyncML for this profile, see VMware Policy Builder.

Assign profiles and apps to the drop ship smart group in the Workspace ONE UEM console.

Configure or edit profiles and assign them to the provisioning smart group you previously created. Also, publish apps to this smart group. Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.

Register devices with the manufacturer.

Work with your device manufacturer to order your devices. The manufacturer registers your devices using the Workspace ONE UEM tag. They also ask you for the pre-configured information you copied from the Workspace ONE Drop Ship Provisioning section.

Sync devices in the Workspace ONE UEM console, either manually or wait for the scheduler.

You can wait for the scheduler job to sync your registered devices from the manufacturer or you can initiate a sync.
  1. Ensure you are in the correct organization group.
  2. Go to Devices > Lifecycle > Enrollment Status.
  3. Select Sync Devices > Windows.
Your registered devices display on the Enrollment Status page.