Enrolling Company Owned Windows 10 Devices

The first step to start managing your Windows 10 devices is to enroll them to Scalefusion Dashboard. In this guide we will look at the steps to prepare for enrollment and look at the various enrollment methods.

Before You Begin

  1. Make sure to have a valid Scalefusion Dashboard account.
  2. Create a Windows Device Profile
  3. Create a Enrollment Configuration for Company Owned Devices
  4. Have access to one Windows 10 laptop, or desktop or surface device for enrolling.

Enrolling your Windows 10 Device

Assuming hat you have created a configuration and have got an enrollment URL via email, you can start enrolling Windows devices. You can enroll your Windows device using Microsoft Edge OR using the Connect to Work or School App that comes pre-loaded on Windows 10 devices. Here we discuss both the approaches.

Enrolling Windows 10 Device using Microsoft Edge

Enrolling using Microsoft Edge is most hassle free way of on-boarding your Windows devices and we recommend using this method whenever possible.

  1. Power on your Windows device and sign in to the machine. Launch Microsoft Edge from the Start Menu
  2. Copy/Paste the enrollment URL that was generated in Step 2 and hit the Enter key.
  3. If the URL is valid, then post validation, a dialog will be shown asking for permission to open Microsoft Account. Click Yes
  4. Clicking on Yes in the above step will open the Connect to Work or School app. The email id of the ScaleFusion Dashboard admin will be pre-filled along with the enrollment URL. Click Next.
    If you are enrolling an employee's device, or want to enroll it using a different email, you can change the email id. This will be the email id associated with that device in ScaleFusion Dashboard.
  5. At this point the enrollment of the device will start and you will see some progress screens as shown below.
  6. On a stable internet connection, it should take around a couple of minutes to complete registration. Click Got It when you see this screen.
  7. This completes the enrolling. At this point the device will start communicating with ScaleFusion Dashboard and will take about another couple of minutes for the policies to be applied.

Enrolling Windows 10 Device using Connect to work or school App

Windows 10 devices come pre-loaded with the default application Connect to work or school App, that lets you enroll your device to an MDM. There might be some cases where you want to use this application to enroll your device instead of using Microsoft Edge. In such cases please follow the steps below,

  1. Power on your Windows device and sign in to the machine.
  2. From the Start Menu, search for Connect to work or school and launch the application.
  3. You would see a screen as shown below. In most Windows 10 devices you would see the two options,
    1. Enroll only in Device Management: This is the preferred approach for enrollment. Select this option.
    2. Connect: If for some reason Enroll only in Device Management is not available then select this option.
  4. This will start the enrollment process and show you the first screen.
  5. If you had started enrollment using Enroll only in Device Management then you can use your enterprise e-mail address, however if you started the flow using Connect then you would have to use a dummy email address as Microsoft tries to validate the domain and tries to onboard using that domain. Click NEXT
  6. The application will try to validate the entered e-mail and show a screen below. In this screen Copy/Paste the enrollment URL that was generated in Step 2 and click NEXT.
  7. At this point the enrollment of the device will start and you will see some progress screens as shown below.
  8. On a stable internet connection, it should take around a couple of minutes to complete registration. Click Got It when you see this screen.
  9. This completes the enrolling. At this point the device will start communicating with ScaleFusion Dashboard and will take about another couple of minutes for the policies to be applied.

Validating the Enrollment

  1. Once the device is successfully enrolled it will start appearing on ScaleFusion Dashboard under Devices section as a Managed device.
  2. On the enrolled Windows 10 device if you open the Connect to work or school application, it will now display the device management state.
  3. Clicking on Info button in the above screen will show you that the device is managed by Scalefusion Pro (or Managed by MobiLock Pro) and show you the Device sync status.

If you see that the device is not sync'ing the latest policies, you can use Sync button in above screen to initiate a manual sync with Scalefusion Dashboard.

Frequently Asked Questions

Question: We can see a Disconnect button when we open the Connect to work or school app, does that mean end-users can un-enroll the device?

Answer: No. Clicking on Disconnect will show an error to the end user. The ONLY way to un-enroll the device is to delete the device from Scalefusion Dashboard.

Question: When we open the URL in Microsoft Edge or Connect to work or school app, we see an error?

Answer: Most probably the URL is invalid. Please try to copy/paste the URL again. If it still does not work, please contact our support.

Question: We have multiple local user-accounts on our Windows device. Does enrollment from user account, enforce the policies when logged in with other user-accounts?

Answer: No. Enrollment is specific to a user-account. If there are multiple user-accounts, we suggest disabling other accounts and having one administrator account and one user-account. We suggest keeping the credentials to administrator account private and enroll while signed into the user-account.

Question: We use an Active Directory and our users login using a domain joined account. Can we auto-enroll the devices when users login to their AD account?

Answer: Yes*. That should be possible with the help of your AD/IT admin. If the enrollment URL is configured on a per user basis then enrollment could be automated. However AD configuration varies quite a lot and things might not work always.


How did we do?


Powered by HelpDocs