MDM Enrollment Methods 

MDM MSP supports a multitude of enrollment methods catering to the needs of every enterprise. Right from enrolling devices already in use to enrolling devices stocked in the inventory, MDM MSP supports several enrollment methods across platforms. While a few methods are common for all platforms, certain methods are specific to a platform such as Apple Device Enrollment Program(DEP) etc., The following table explains all the enrollment methods available in MDM MSP:

 

ENROLLMENT METHOD DESCRIPTION SCENARIO SUPPORTED PLATFORM(S) USER ASSIGNMENT TYPE
Enrollment invites(E-mail/QR Code)

The IT administrator can create enrollment invites using MDM, which then send to the device users who can then enroll the devices.

The number of devices to be enrolled are relatively less and the devices are already with the employees.

All platforms

User assignment is done by the IT administrators when the enrollment invites are created.

Apple Device Enrollment Program(DEP)

The IT administrator integrates the DEP portal with the MDM server and adds the devices that are in the company stock/inventory to the DEP portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Apple DEP as the devices are considered as Supervised devices. Know more about Apple DEP

A large organization which hands over corporate-owned iOS devices to the employees for their work and thus, wants additional management capabilities

Apple

User assignment can be done either by the Admin after the enrollment or by the user during device activation. Enrollment is complete only after user assignment and device activation

Apple Configurator

The IT administrator uses the application present in Mac machines, to which the iOS devices to be managed are connected and subsequently get enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Apple Configurator as the devices become Supervised. Know more about Apple Configurator

If you have devices which cannot be enrolled with DEP but want Supervision, you can use Apple Configurator.

Apple

User assignment is done by the Admin after the enrollment, on the MDM server.

Zero Touch Enrollment

The IT administrator integrates the Zero Touch portal with the MDM server and adds the devices that are in the company stock/inventory to the Zero touch portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Zero Touch, as the devices are provisioned as Device Owner. Know more about Zero touch Enrollment.

A large organization which hands over corporate-owned Android devices to the employees for their work and thus, wants additional management capabilities.

Android

User assignment is done by the Admin after the enrollment, on the MDM server.

EMM Token Enrollment

The IT administrator or the user needs to provide the DPC identifier as the Google account and then scan a specific QR code to enroll the device with MDM. Know more about EMM token Enrollment

If you have devices which cannot be enrolled via Zero Touch enrollment but want to provision devices as Device Owner, you can use EMM token enrollment.

Android

User assignment is done by the Admin after the enrollment, on the MDM server.

NFC Enrollment

The IT administrator needs to have an Admin with MDM Admin app installed, using which other devices can be enrolled using an NFC tap. Know more about NFC Enrollment

If you have devices which cannot be enrolled via Zero Touch enrollment/EMM token enrollment but want to provision devices as Device Owner, you can use NFC enrollment.

Android

User assignment is done by the Admin after the enrollment, on the MDM server.

Android Debug Bridge(ADB)

The IT administrator needs to connect the devices to be managed to a Windows machine and enroll the devices. Know more about ADB

If you have devices which cannot be enrolled via Zero Touch enrollment/EMM token enrollment/NFC but want to provision devices as Device Owner, you can use ADB.

Android

User assignment is done by the Admin after the enrollment, on the MDM server.

Knox Enrollment

The IT administrator integrates the Samsung Knox portal with the MDM server and adds the devices that are in the company stock/inventory to the Knox portal, which in turn gets enrolled with MDM. The IT administrator gets additional management capabilities when enrolled via Knox. Know more about Samsung Knox enrollment. Know more about Knox Enrollment

If you have Samsung devices which are Knox-capable and are to be enrolled in bulk, you can use Knox enrollment.

Android

User assignment is done by the Admin after the enrollment, on the MDM server.

ICD Enrollment

The IT administrator needs to connect the Windows devices to be managed to a Windows machine and enroll the devices. Know more about ICD Enrollment

A large organization which hands over corporate-owned Windows devices to the employees for their work and thus, wants additional management capabilities.

Windows

User assignment is done by the Admin after the enrollment, on the MDM server.

Laptop Enrollment

The IT administrator needs to install a batch file on the machine to be enrolled and then initiate enrollment.Know more about Laptop Enrollment

A large organization which hands over corporate-owned Windows laptops/desktops to the employees for their work and thus, wants additional management capabilities.

Windows

User assignment is done by the Admin after the enrollment, on the MDM server.

Windows AutoPilot

The IT administrator needs to configure the AutoPilot settings to initiate bulk enrollment of Windows devices. Know more about AutoPilot

A large organization which is already using Azure.

Windows

User assignment is done by the Admin after the enrollment, on the MDM server.