MDM MSP supports a multitude of enrollment methods catering to the needs of every enterprise. Right from enrolling devices already in use to enrolling devices stocked in the inventory, MDM MSP supports several enrollment methods across platforms. While a few methods are common for all platforms, certain methods are specific to a platform such as Apple Device Enrollment Program(DEP) etc., The following table explains all the enrollment methods available in MDM MSP:
ENROLLMENT METHOD | DESCRIPTION | SCENARIO | SUPPORTED PLATFORM(S) | USER ASSIGNMENT TYPE |
Enrollment invites(E-mail/QR Code) |
The IT administrator can create enrollment invites using MDM, which then send to the device users who can then enroll the devices. |
The number of devices to be enrolled are relatively less and the devices are already with the employees. |
All platforms |
User assignment is done by the IT administrators when the enrollment invites are created. |
Apple Device Enrollment Program(DEP) |
The IT administrator integrates the DEP portal with the MDM server and adds the devices that are in the company stock/inventory to the DEP portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Apple DEP as the devices are considered as Supervised devices. Know more about Apple DEP |
A large organization which hands over corporate-owned iOS devices to the employees for their work and thus, wants additional management capabilities |
Apple |
User assignment can be done either by the Admin after the enrollment or by the user during device activation. Enrollment is complete only after user assignment and device activation |
Apple Configurator |
The IT administrator uses the application present in Mac machines, to which the iOS devices to be managed are connected and subsequently get enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Apple Configurator as the devices become Supervised. Know more about Apple Configurator |
If you have devices which cannot be enrolled with DEP but want Supervision, you can use Apple Configurator. |
Apple |
User assignment is done by the Admin after the enrollment, on the MDM server. |
Zero Touch Enrollment |
The IT administrator integrates the Zero Touch portal with the MDM server and adds the devices that are in the company stock/inventory to the Zero touch portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Zero Touch, as the devices are provisioned as Device Owner. Know more about Zero touch Enrollment. |
A large organization which hands over corporate-owned Android devices to the employees for their work and thus, wants additional management capabilities. |
Android |
User assignment is done by the Admin after the enrollment, on the MDM server. |
EMM Token Enrollment |
The IT administrator or the user needs to provide the DPC identifier as the Google account and then scan a specific QR code to enroll the device with MDM. Know more about EMM token Enrollment |
If you have devices which cannot be enrolled via Zero Touch enrollment but want to provision devices as Device Owner, you can use EMM token enrollment. |
Android |
User assignment is done by the Admin after the enrollment, on the MDM server. |
NFC Enrollment |
The IT administrator needs to have an Admin with MDM Admin app installed, using which other devices can be enrolled using an NFC tap. Know more about NFC Enrollment |
If you have devices which cannot be enrolled via Zero Touch enrollment/EMM token enrollment but want to provision devices as Device Owner, you can use NFC enrollment. |
Android |
User assignment is done by the Admin after the enrollment, on the MDM server. |
Android Debug Bridge(ADB) |
The IT administrator needs to connect the devices to be managed to a Windows machine and enroll the devices. Know more about ADB |
If you have devices which cannot be enrolled via Zero Touch enrollment/EMM token enrollment/NFC but want to provision devices as Device Owner, you can use ADB. |
Android |
User assignment is done by the Admin after the enrollment, on the MDM server. |
Knox Enrollment |
The IT administrator integrates the Samsung Knox portal with the MDM server and adds the devices that are in the company stock/inventory to the Knox portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Knox. Know more about Samsung Knox enrollment. Know more about Knox Enrollment |
If you have Samsung devices which are Knox-capable and are to be enrolled in bulk, you can use Knox enrollment. |
Android |
User assignment is done by the Admin after the enrollment, on the MDM server. |
ICD Enrollment |
The IT administrator needs to connect the Windows devices to be managed to a Windows machine and enroll the devices. Know more about ICD Enrollment |
A large organization which hands over corporate-owned Windows devices to the employees for their work and thus, wants additional management capabilities. |
Windows |
User assignment is done by the Admin after the enrollment, on the MDM server. |
Laptop Enrollment |
The IT administrator needs to install a batch file on the machine to be enrolled and then initiate enrollment.Know more about Laptop Enrollment |
A large organization which hands over corporate-owned Windows laptops/desktops to the employees for their work and thus, wants additional management capabilities. |
Windows |
User assignment is done by the Admin after the enrollment, on the MDM server. |
Windows AutoPilot |
The IT administrator needs to configure the AutoPilot settings to initiate bulk enrollment of Windows devices. Know more about AutoPilot |
A large organization which is already using Azure. |
Windows |
User assignment is done by the Admin after the enrollment, on the MDM server. |