Bulk Enrollment

When registering and setting up a large number of Windows 10/11 devices, a manual enrollment process creates a not inconsiderable amount of work. The Windows Bulk Enrollment, also called mass enrollment, provides an efficient way to enroll many Windows 10/11 devices quickly without having to complete the enrollment through the system settings on each individual device. Mass enrollment of Windows 10/11 devices is available for Professional, Enterprise and Education versions. The enrollment of individual devices is described under Manual enrollment →.

Windows Configuration Designer (WCD) #

Windows Bulk Enrollment requires the Windows Configuration Designer (WCD) tool, which can be downloaded from the Microsoft Store →. Alternatively, the WCD tool can be downloaded via the Windows Assessment and Deployment Kit (ADK) → and is then also available in other languages.

The WCD tool can be used to generate provisioning packages that are required to execute mass enrollments. The file format of provisioning packages is a ppkg file. This is a container for a collection of configuration settings. Bulk enrollment is not done with an Azure AD account or Windows Autopilot. Registration is done via a ppkg file, which can be executed with an administrator account after the device has been put into operation. Alternatively, the ppkg can be incorporated into a Windows image; the procedure is described in the following guide (German). Windows Bulk ppkg Image →

Preparing for enrollment in Relution #

For bulk enrollment of Windows 10/11 devices, a manual enrollment must be created in Relution. It is created under Devices → Enrollments via Add. In the Hardware section, Windows is selected under Platform. Enrollment codes of other platforms are rejected during Windows enrollment.

The settings of the enrollment apply to all devices enrolled with the provisioning package. If a user is selected under Assignment, all devices are assigned to this user; without a user, the devices are not assigned to any user.

In the Enrollment options area, the Multi-use enrollment option is enabled in the Expiration section. Only then can the created enrollment be used for multiple Windows 10/11 devices. The option cannot be changed after the enrollment has been created. An expiration date can optionally be set via Valid until.

After saving, the Enrollment code is displayed in the Enrollment information area of the enrollment together with a copy button; in the enrollment list, it is shown in the Enrollment code column. It is needed in the further process when creating the provisioning package via the WCD tool.

The enrollment code is embedded in the provisioning package. Once the date under Valid until has passed, enrollments with this package fail until the enrollment is extended in the enrollment list via Extend Enrollment(s). If the enrollment is deleted, the provisioning package can no longer be used; it then has to be created again with the enrollment code of a new enrollment.

The Bulk Enrollment action in the context menu of the enrollment list, on the other hand, creates several individual enrollments for selected users and is not required for this procedure.

Creating provisioning packages with Windows Configuration Designer (WCD) #

The following steps are performed after downloading and installing the WCD tool to create a provisioning package:

1. In the start screen, the Advanced provisioning tile is selected.

   

2. A project name is specified, followed by a click on Next.

   

3. All Windows Desktop Editions is selected, followed by a click on Next.

   

4. Import a provisioning package (optional) is skipped and confirmed with Finish.

   

5. In the left navigation area, the Runtime Settings menu item and then Workplace are expanded, followed by a click on Enrollments.

6. Under Enrollments, a UPN in the format of an email address is entered and added. Relution does not evaluate this value during enrollment. The organization and user assignment result from the enrollment in Relution whose enrollment code is entered as Secret below.

   

7. The newly created entry with the UPN is expanded in the left navigation pane, and the following information is entered for the remaining settings:

   • AuthPolicy – select OnPremise.
   • DiscoveryServiceFullUrl – the corresponding domain of the Relution server used.
   • EnrollmentServiceFullUrl – optional.
   • PolicyServiceFullUrl – optional.
   • Secret – the enrollment code from Relution.

   

8. After all settings have been entered, File → Save is selected in the main menu.

9. After that, Export → Provisioning package is selected in the main menu.

   

10. In the following dialog, the values for the package must be specified and the location for the package output must be chosen. Then Create must be clicked.

Applying provisioning packages to Windows 10/11 devices #

It is sufficient to open the .ppkg file on the device by double-clicking it and to confirm the dialogs. The device is then enrolled automatically. Here too, the user needs administrative permissions to perform the enrollment.

Checking the provisioning package on enrolled Windows 10/11 devices #

In the Windows settings under Access work or school, the connection to the Relution MDM server is displayed.