Bulk Enrollment

Introduction #

When registering and setting up a large number of Windows 10/11 devices, a manual enrollment process creates a not inconsiderable amount of work. The Windows Bulk Enrollment, also called mass enrollment, provides an efficient way to enroll many Windows 10/11 devices quickly without having to complete the enrollment through the system settings on each individual device. Mass enrollment of Windows 10/11 devices is available for Professional, Enterprise and Education versions.

Windows Configuration Designer (WCD) #

To perform Windows Bulk Enrollment, the Windows Configuration Designer (WCD) tool is required and can be downloaded from the Microsoft Store →. Alternatively, the WCD tool can be downloaded from the Windows Assessment and Deployment Kit (ADK) → and is then also available in other languages.

The WCD tool can be used to create deployment packages, called Provisioning Packages, which are required to run bulk enrollments. The file format of provisioning packages is an ppkg file. This is a container for a collection of configuration settings.

Bulk enrollment is no performed using an Azure AD account or Windows Autopilot. Enrollment is performed using a carrier medium, e.g. a USB drive or SD card, on which the generated deployment package from the WCD tool is stored in the root directory. The carrier medium is connected to the corresponding Windows 10/11 devices with which the bulk enrollment is to be performed.

The deployment packages facilitate the configuration of end-user devices without the need to create an image. This enables quick and efficient configuration of a Windows 10/11 device, and the desired settings for enrolling devices in Relution can be easily specified. Using this workflow, target devices can be configured and enrolled in Relution within minutes.

Preparing for enrollment in Relution #

For bulk enrollment of Windows 10/11 devices, a manual enrollment must be created in Relution.

The validity of this enrollment can be freely chosen. It is important to activate Multiple enrollment in this step to be able to use the created enrollment for multiple Windows 10/11 devices.

The subsequently generated enrollment code is needed in the further process when creating the deployment package via the WCD tool.

Creating deployment packages with Windows Configuration Designer (WDC) #

The following steps are performed after downloading and installing the WCD tool to create a deployment package:

1. in the home screen, select the Use Advanced Deployment tile

2. specify a project name and click Next

3. select All Windows Desktop Editions and click Next

4. skip Import a deployment package (optional) and confirm with Complete

5. expand the menu item Runtime Settings and then Workplace in the left navigation area and click Enrollments

6. add the email address of a user from the corresponding Relution organization who has the role Device Manager

7. expand the UPN menu item in the left navigation pane and enter the following information for the remaining settings:

• AuthPolicy - Select OnPremise
• DiscoveryServiceFullUrl - specify the corresponding domain of the used Relution Server
• EnrollmentServiceFullUrl - Optional
• PolicyServiceFullUrl - Optional
• Secret Enter the enrollment code from Relution

8. after entering all settings, click on Save in the main menu under File

9. after that, in the main menu under Export, click on Deployment package

10. in the following dialog specify the values for the package, select the location for the package output and click Create

Applying Deployment Packages to Windows 10/11 Devices #

1. connect the appropriate Windows 10/11 devices to the USB drive containing the deployment package

2. then add the appropriate deployment package in the system settings under Business or School Account > Add or Remove Deployment Package

3. click add package

Subsequently, all steps that need to be performed manually during a manual enrollment will be performed automatically using the information from the provisioning package. No further information needs to be provided. After successful enrollment, the Windows 10/11 devices are connected to the Relution server, show up in the inventory list of the corresponding Relution organization, and can be managed.

Checking the deployment package on enrolled Windows 10/11 devices #

Under System Settings under Access Business or School Account you will see the connection to the Relution MDM server.