Manage Windows devices

In Relution, devices with Windows 10/11 can be managed. Depending on the variant, different functions are available. The largest range of functions is available with Pro, Education or Enterprise licenses. In contrast to domain policies, Relution can perform actions and apply policies on Windows devices even if they are not in the local network. Here, an Internet connection is sufficient.

Enrollment #

Windows devices can be enrolled in four different ways: manual enrollment, bulk enrollment, Windows Autopilot and Entra Join. With Entra Join, the device is joined to Microsoft Entra ID via the Windows settings and then enrolled with the Microsoft user credentials.

Manual enrollment →
Bulk Enrollment →
Autopilot →
Entra Join →

Windows Autopilot requires a Microsoft Entra ID P1 or P2 license and a Microsoft Intune Plan 1 license. Windows Autopilot is currently only available with an on-premises Relution server.

Relution Companion #

Relution Companion is automatically installed on Windows devices during enrollment. Devices running Windows Home and devices whose edition Relution cannot detect are excluded. The Relution Companion allows running PowerShell scripts, which are managed centrally under Scripts → Scripts, and installing MSI, EXE and WinGet apps. The actions Reset password (Windows), Enable Bitlocker and Disable Bitlocker also run via the Companion.

Windows Companion →
Windows Home Limitations →

Manage apps #

Relution allows apps from the Windows Store, apps via the WinGet package manager and native apps from the Relution App Store to be installed on Windows devices. Native apps must be uploaded to Relution and configured, depending on the format. MSIX files must be self-created and signed with a certificate to allow installation. EXE files require installation and uninstallation parameters as well as the path to the uninstaller; for MSI files, the parameters are optional. Both formats require at least one detection rule. The parameters can be found either on the vendor’s website or on tech blogs.

Create MSIX files →
Windows App Installation →
WinGet →
SilentinstallHQ →

Figuring out the correct configuration parameters is often a time-consuming procedure. Relution support can only provide very limited support here.

Certificates #

Certificates can be loaded directly onto the Windows device via the corresponding policy configuration. Here, it is also possible to select the appropriate certificate store.

Certificates →

Restrictions #

On Windows devices, many restrictions can be activated with Relution. Here, it can be defined whether the MDM profile can be removed by the user or whether the computer can be reset.

Restrictions →
Protect MDM profile →

Other configurations #

There are other configurations available, for example Wi-Fi and VPN profiles, kiosk mode, Windows Shared PC, BitLocker encryption, Windows Update and Windows Firewall.

Wi-Fi →
VPN →
Windows kiosk mode →
Windows Shared PC →
Windows Bitlocker →
Windows Update →
Windows Firewall →