Silent enrollment requires command-line entries or a BAT file to control how the Workspace ONE Intelligent Hub downloads and installs onto Windows 10 devices.

Note: Do not use this product to install Workspace ONE Intelligent Hub for Windows silently on BYOD devices. If you silently install to BYOD devices, you are solely responsible for providing any necessary notices to your device end users regarding your use of silent installation and the data collected from the silently installed apps. You are responsible for obtaining any legally required consents from your device end users, and otherwise complying with all applicable laws.

The following tables list the enrollment parameters you can enter into a command line or into a BAT file, and the respective values for each parameter. If you are Enrolling on Behalf of Others (EOBO), ensure you use the EOBO parameters.

Table 1. General Parameters
Enrollment Parameters Values to Add to Parameter
All MSI parameters
These parameters control the app installation behavior. This list includes some examples.
  • /quiet - Completely silent.
  • /q - Controls the UI levels for installation.
  • /passive - Minimal controls for the user to guide the application.
  • /L - Log levels and log paths.

For more information, see https://docs.microsoft.com/en-us/windows/win32/msi/command-line-options.

ASSIGNTOLOGGEDINUSER

Select Y to assign the device to the domain user that is logged in.

Enter this parameter as the last argument in the command line.

DEVICEOWNERSHIPTYPE*

Select CD for Corporate Dedicated.

Select CS for Corporate Shared.

Select EO for Employee Owned.

Select N for None.

DOWNLOADSBUNDLE This parameter controls the download of the Workspace ONE application during enrollment.

Select TRUE, to download the Workspace ONE app installer during the installation of Workspace ONE Intelligent Hub. If you enroll a device using Workspace ONE Intelligent Hub, installing Workspace ONE is not optional.

If you do not set DOWNLOADSBUNDLE to TRUE, the Workspace ONE app installer does not download regardless of the UI-level used.

ENROLL

Select Y to enroll.

Select N for image only.

The agent tries to enroll in silent mode only if this parameter is set to Y.

IMAGE

This flag takes priority over everything, if this flag is set to Y, the agent is put into image mode.

Select Y for image.

Select N for enrollment.

INSTALLDIR*

Enter the directory path if you want to change the installation path.

Note: If this parameter is not present, the Workspace ONE Intelligent Hub uses the default path: C:\Program Files (x86)\AirWatch.
LGName Enter the organization group name.
PASSWORD

Enter the password for the user you are enrolling or the staging user password if staging the device on the behalf of a user.

SERVER Enter the enrollment URL.
USERNAME Enter the user name for the user you are enrolling or the staging user name if staging the device on the behalf of a user.
Items denoted with an asterisk (*) are optional.
Table 2. EOBO Parameters
Enrollment Parameters Values to Add to Parameter
SECURITYTYPE

EOBO Workflow Only: Use this parameter if a user account is added to the Workspace ONE UEM console during the enrollment process.

  • Select D for Directory.
  • Select B for Basic User.
STAGEEMAIL* EOBO Workflow Only: Enter the email address for the user you are enrolling.
STAGEEMAILUSRNAME* EOBO Workflow Only: Enter the email user name for the user you are enrolling.
STAGEPASSWORD EOBO Workflow Only: Enter the password for the user you are enrolling.
STAGEUSERNAME EOBO Workflow Only: Enter user name for the enrolling user.
Items denoted with an asterisk (*) are optional.
Table 3. Carbon Black Parameters
Enrollment Parameters Values to Add to Parameter
CBSENSORCONFIGURL*

Use this parameter to instruct the Workspace ONE Intelligent Hub for Windows to retrieve the Carbon Black configuration file URL.

Enter the URL for the sensor configuration file that you generated in Carbon Black.

CBSENSORURL*

Use this parameter to instruct the Workspace ONE Intelligent Hub for Windows to retrieve the applicable Carbon Black sensor kit URL.

Enter the URL for the sensor kit that you generated in Carbon Black.

Items denoted with an asterisk (*) are optional.

Examples of Silent Enrollment

View examples of various use cases using enrollment parameters and the values that you can enter into a command line or use to create a BAT file. Initiating any one of these examples silently enrolls the Windows 10 device without prompting the user to select any of the acknowledgment buttons.

Agent Install for Image Only Without Enrollment

The following is an example of installing the Workspace ONE Intelligent Hub for image only without enrollment using minimum parameters required for image only.

AirwatchAgent.msi /quiet ENROLL=N IMAGE=Y

Basic User Enrollment

The following is an example of using minimum parameters required for basic enrollment only:

AirwatchAgent.msi /quiet ENROLL=YIMAGE=n SERVER=companyURL.com LGName=locationgroupid USERNAME=TestUsr PASSWORD=test

Workspace ONE Intelligent Hub Installed Elsewhere

The following is an example of the AirwatchAgent.msi located in a different location:

C:\AirwatchAgent.msi /quiet ENROLL=Y IMAGE=n SERVER=companyURL.com LGName=locationgroupid USERNAME=TestUsr PASSWORD=test

Installation Directory and Workspace ONE Intelligent Hub on Network Drive

The following is an example of the installation directory parameter with the Workspace ONE Intelligent Hub on a network drive.

Important: Add extra quotes for the INSTALLDIR parameter when there is space within the parameter.
Q:\AirwatchAgent.msi /quiet INSTALLDIR=\"E:\Install Win32\" ENROLL=Y IMAGE=n SERVER=companyURL.com LGName=locationgroupid USERNAME=TestUsr PASSWORD=test

Available Parameters and Values

The following snippet is an example of the syntax using most of the available parameters and values.

msiexec.exe /I “<Path>\AirwatchAgent.msi” /quiet ENROLL=<Y/N>IMAGE=<Y/N>SERVER=<CompanyURL>LGNAME=<Location Group ID>USERNAME=<Staging Username>PASSWORD=<Staging Username Password>STAGEUSERNAME=<Enrolling Username>SECURITYTYPE=<D/B>STAGEEMAILUSRNAME=<User Enrolling>STAGEPASSWORD=<Password for User Enrolling>STAGEEMAIL=<Email Address for User Enrolling>DEVICEOWNERSHIPTYPE<CD/CS/EO/N>ASSIGNTOLOGGEDINUSER=<Y/N>