Before enrolling your Windows Desktop (Windows 10) devices with Workspace ONE UEM, your end users must meet the listed requirements and configurations or enrollment does not work.
- Active Environment – Your active Workspace ONE UEM environment and your access to the Workspace ONE UEM console.
- App Center API URLs – These URLs are required to allow Workspace ONE Intelligent Hub for Windows to provide crash information to the Microsoft Store. Trust the listed URLs in your firewall policies.
- Appropriate Admin Permissions – A type of permission that allows you to create profiles, determine policies, and manage devices within the Workspace ONE UEM console.
- PowerShell Execution - Workspace ONE UEM management of Windows Desktops devices uses PowerShell for installation and operational changes through the Workspace ONE Intelligent Hub.
- Enrollment URL – This URL is unique to your enrollment environment and takes you directly to the enrollment screen. For example, mdm.example.com.
- Group ID – This Group ID associates your device with your corporate role and is defined in the Workspace ONE UEM console.
- Device Root Certificate - You must configure the Device Root Certificate in the System settings before enrolling devices. To configure the certificate, navigate to .
Important: If your enrollment server is behind a proxy, you must configure the Windows service WINHTTP to be proxy-aware when configuring your network settings.