1. Home
  2. How To Enroll Windows 10 Devices in Bulk Using a Provisioning Package?

How To Enroll Windows 10 Devices in Bulk Using a Provisioning Package?

KB ID: 42G2008115
Views: 975
Updated: June 2021

A provisioning package (.ppkg) is a container for a collection of configuration settings and can be created using the Windows Configuration Designer tool. Once a provisioning package has been created, you can use it to enroll Windows 10 devices in bulk to SureMDM.

To enroll Windows 10 devices in SureMDM, you must:

  • Create a provisioning package using Windows Configuration Designer app
  • Enroll devices using a provisioning package

Creating a provisioning package using Windows Configuration app

To create a provisioning package (.ppkg), follow these steps:

1. Launch the Windows Configuration Designer app.

Note: If the Windows Configuration Designer app is not installed on your system, download the app from Microsoft Store.

2. On the Windows Configuration Designer window, select Advanced Provisioning.

Advanced Provisioning

3. On the New Project dialog box, enter the project name, browse and choose a folder to save the project, enter the project description, and then click Next.

New Project dialog box

4. Select All Windows desktop editions and click Next.

 All Windows desktop editions

5. Click Finish.

Browse

The newly created project will be displayed on the Windows Configuration Designer screen, as shown in the screenshot below:

Windows Configuration Designer

6. Click Runtime settings > Workplace > Enrollments.

7. Enter UPN and click Add.

Note: To get the UPN value, navigate to the SureMDM Web Console > Settings > Account Settings > Device Enrollment Rules > Staging and Provisioning, and copy the value.

Windows config

The newly added UPN will reflect under Workplace > Enrollments.

Enrollments

8. Click the UPN and fill the following details:

AuthPolicy – Onpremise

DiscoveryServiceFullUrl

EnrollmentServiceFullUrl

PolicyServiceFullUrl

Secret – <Console Password>:<SureMDM Account ID>

UPN

Note: To get the values of DiscoveryServiceFullUrl, EnrollmentServiceFullUrl, and PolicyServiceFullUrl, navigate to the SureMDM Web Console > Settings > Account Settings > Device Enrollment Rules > Staging and Provisioning, and copy the values.

MRMDM64

9. Go to File and click Save to save the project.

10. Click Export > Provisioning package.

11. Select Encrypt Package and enter the desired Encryption password.

Encryption password

Note: You can skip this step if you don’t want to encrypt the package.

12. Browse and select the folder/removable media disk to save the package file and click Next > Build > Finish.

The provisioning package (.ppkg) file will be saved in the specified location.

Enroll devices using a provisioning package

To enroll devices in bulk using a provisioning package, follow these steps:

1. Navigate to device’s Settings > Accounts > Access work or school.

2. Click Add or remove a provisioning package > Add a package, select the package created from the removable media, and then click Add.

Encryption password

A password prompt will appear to enter the encryption password. Once the user enters the correct encryption password, the package gets decrypted.

Note: The prompt appears only when Encrypt Package is enabled and Encryption Password is set. Refer step no.11 under Create a Provisioning Package using Windows Configuration Designer App.

Once this is done, the device will get enrolled in EMM mode and added to the device grid.

To verify this, go to the device’s Settings > Accounts > Access work or school. Here  you can see the device enrolled in EMM mode:

Access work or school