The Workspace ONE UEM console displays a specific Enrollment Status and a specific Token Status on the Enrollment Status page to represent a Windows 10 device's enrollment progress.

Enrollment Type

If you look at enrollment settings on the Devices > Devices Settings > Devices & Users > General > Enrollment page, you see three general enrollment scenarios for Windows 10 devices.
  • Open Enrollment

    Allows anyone meeting other enrollment criteria (authentication mode, restrictions, and so on) to enroll.

  • Registered Devices Only

    Allows users to enroll using devices you or they have registered. Device registration is the process of adding corporate devices to the Workspace ONE UEM console before they are enrolled. This matrix applies to devices that register without a token.

  • Require Registration Token

    If you restrict enrollment to registered devices only, you also have the option of requiring a registration token to be used for enrollment. This increases security by confirming that a particular user is authorized to enroll.

Device Type

The type of device guides how the Workspace ONE UEM system tracks and displays the device's enrollment status.
  • Whitelisted devices - The Workspace ONE UEM admin adds a list of devices that are pre-approved to enroll.
  • Blacklisted devices - The Workspace ONE UEM admin adds a list of devices that are not allowed to enroll.
  • Registered devices (without attributes) - The Workspace ONE UEM admin registers devices by adding device information to the console. If the admin does not enter device attributes, the system uses device information, which includes user, platform, model, and ownership type.
  • Registered devices (with attributes) - The Workspace ONE UEM admin registers devices by adding device attributes to the console. Device attributes include UDID, IMEI, and serial number.

Enrollment Lifecycle

Device enrollment with Workspace ONE UEM has three general stages.
  1. (Optional) Admins register devices or users self-register their devices in Workspace ONE UEM.

    Registration helps restrict enrollment.

  2. Device users or admins enroll devices with Workspace ONE UEM.
  3. Device users or admins unenroll devices with Workspace ONE UEM.

Console Displays Set Statuses

The enrollment type, device type, and stage of enrollment dictate the Enrollment Status and Token Status displayed for Windows 10 devices on the Devices > Lifecycle > Enrollment Status page .
  • Table 1. Open Enrollment
    Type Registered devices - Enrollment Status Registered devices - Token Status Enrolled devices - Enrollment Status Enrolled devices - Token Status Unenrolled devices - Enrollment Status Unenrolled devices - Token Status
    Whitelisted device Registered Compliant Enrolled Compliant Unenrolled Compliant
    Blacklisted device Blacklisted Non-Compliant Not Applicable Not Applicable Not Applicable Not Applicable
    Registered device without attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Registration Active Registered Registration Active
    Registered device with attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Registration Active Registered Registration Active
  • Table 2. Registered Devices Only (No Token)
    Type Registered devices - Enrollment Status Registered devices - Token Status Enrolled devices - Enrollment Status Enrolled devices - Token Status Unenrolled devices - Enrollment Status Unenrolled devices - Token Status
    Whitelisted device Registered Compliant Enrolled Compliant Unenrolled Compliant
    Blacklisted device Blacklisted Non-Compliant Not Applicable Not Applicable Not Applicable Not Applicable
    Registered device without attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Registration Active Registered Registration Active
    Registered device with attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Expired Registered Registration Active
  • Table 3. Require Registration Token
    Type Registered devices - Enrollment Status Registered devices - Token Status Enrolled devices - Enrollment Status Enrolled devices - Token Status Unenrolled devices - Enrollment Status Unenrolled devices - Token Status
    Registered device without attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Not Applicable Unenrolled Registration Expired
    Registered device with attributes

    Attributes are Serial Number, IMEI, and UDID.

    Registered Registration Active Enrolled Not Applicable Unenrolled Registration Expired