Create a provisioning package for Windows 10 devices to use with Workspace ONE Drop Ship Provisioning (Offline) or as an encrypted PPKG to install on devices yourself. This package contains the configuration file and the applications for your Windows 10 devices.

Prerequisites

Meet the Workspace ONE Drop Ship Provisioning (Offline) Requirements. See Workspace ONE Drop Ship Provisioning (Offline) Requirements.

Procedure

  1. Navigate to Devices > Lifecycle > Staging > Windows and select New
  2. Enter the general settings including the Provisioning Package Name, Description, and the smart group the package is Managed By.
  3. Select Next.
  4. Select the Onboarding Method. To create a PPKG for Workspace ONE Drop Ship Provisioning (Offline), select Factory Provisioning. To create an encrypted PPKG for your own use, select Encrypted PPKG. Select Next.
  5. Set the Configurations settings. The settings that display depend on the Active Directory Type selected. Consider the following information when configuring the settings:
    Settings Description
    Domain Username Enter the username that has Domain Join privileges. This setting displays when you set the Active Directory Type to On-Prem AD Join.
    Note: This information is saved in plain text in the XML file. Ensure that this file is always secured and not sent over insecure connections.
    Domain Password Enter the password for the Domain Join user. This setting displays when you set the Active Directory type to On-Prem AD Join.
    Note: This information saved in plain text in the XML file. Ensure that this file is always secured and not sent over insecure connections.
    AD Organization Unit (OU) Enter the organization unit for the AD.

    The OU must follow the correct formatting:

    OU=,OU=,DC=Company,DC=com

    This setting displays when you set the Active Directory Type to On-Prem AD Join.

    Workgroup Enter the name of the workgroup you want the client to join.

    The workgroup name must be 15 characters or fewer.

    This setting displays when you set the Active Directory Type to Workgroup.

    Product Key Enter the Windows 10 product key.

    You must follow the correct format:

    12345-54CDE-XYZ78-ONM98-456TY
    Make Administrator? You must make the local user account an administrator to start Workspace ONE enrollment automatically.

    During OOBE, the device prompts the user to enter their enrollment credentials.

    This setting displays when you set the Active Directory Type to Workgroup or Azure AD.

    Computer Name The computer name is randomly generated by default so that every system coming from the factory is unique.

    To create a naming convention, use the Registered Owner and Registered Organization settings. The computer name takes the first 7 characters from Registered Organization or Registered Owner as the prefix and then randomizes the rest of the characters up to the 15 character maximum.

    Remove Windows 10 Consumer Apps Select Yes to prevent consumer apps from appearing in Windows 10.

    This setting is only supported for Windows 10 Enterprise or Education. You must enter a Windows 10 Enterprise or Education key.

    Additional Synchronous Commands Add commands that automatically run at the end of the Windows setup process but before any user logs in.
    First Logon Commands Add commands that automatically run the first time a user logs in.

    This setting requires the user have local admin privileges.

    Enrollment Server Enter your Workspace ONE UEM enrollment server URL.

    Find the enrollment URL by navigating in the Workspace ONE UEM console to Groups & Settings > All Settings > System > Advanced > Site URLS.

    This setting displays when you set the Active Directory Type to On-Prem AD Join or Workgroup.

    Staging Account Enter the username for the staging account.

    Find this username by navigating in the Workspace ONE UEM console to Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Staging & Provisioning.

    This setting displays when you set the Active Directory Type to On-Prem AD Join or Workgroup.

    Device Services URL Enter your device services URL.

    Find the device services URL by navigating in the Workspace ONE UEM console to Groups & Settings > All Settings > System > Advanced > Site URLS.

    This setting only displays when you set the Active Directory Type to Azure AD - No Premium.

  6. Select Next.
  7. Select the apps to include in the provisioning package. The apps that display are those apps available to the smart group set during the General settings step.
    This screen only displays Win32 apps recognized through Software Distribution.

    User context apps behave differently than device context apps. A provisioning package installs any device context apps in the factory, but user context apps install when a user signs in for the first time. These apps install using Software Distribution.

  8. If the app requires transforms and patches (MST and MSP files), select the Arrow icon An image displaying the Arrow icon to add the necessary transforms and patches. You must add these transforms from the Edit Application modal before creating a provisioning package.
  9. Select Next.
  10. Review the summary and either export the provisioning package or save it as a template.
    1. To export the provisioning package, select Save and Export.
    2. To save the package as a template, select Save. Templates do not create a PPKG file but save the settings for later creation and exporting. A template displays in the Windows list view with the Draft status.
    You can only have one provisioning package PPKG stored at a time.

Results

Workspace ONE UEM exports the package or saves the template.

If you want to change any settings in a provisioning package after creating one, you must either edit the existing package or export a template. Repeat the creation process and send the package to your OEM again. Exporting a new PPKG template overwrites any PPKGs currently available for download.