Agent Based Enrollment using Admin account

Scalefusion's Windows MDM agent provides IT Admins with a quick alternative to browser-based enrollments. In this option, the IT Admins can install the Windows MDM agent and enroll either in Company Owned or BYO mode. This option is useful in cases,

1. Where the IT Admin or the end-user has access to an admin account on the device.
2. Want to manage Windows 8.1 or Windows 7 devices in addition to Windows 10 and above devices.
3. Please make sure that the Scalefusion MDM Agent version is 10.0.14 on Windows Home (10 & 11)devices.
   Wherever possible, we recommend enrolling Windows 10 Pro and above devices is via browser based enrollment methods as they offer more options for user authentication during enrollment and also post enrollment the Scalefusion MDM agent is automatically installed and configured.

   
   

Before You Begin

1. Make sure to have a valid Scalefusion Dashboard account.
2. Create a Windows Device Profile
   1. Enable the Auto Enroll to Modern Management option to automatically attempt the modern management enrollment as well.
3. Create an enrollment configuration for Company Owned or BYO Devices
4. Supported OS and architectures: Windows OS 7, 8.1, 10, 11, and Windows Home (10 & 11) 32-bit and 64-bit Operating Systems.

Methods of enrollment

There are two ways devices can be enrolled with MDM agent:

1. Manual: User downloads the agent, installs and launches it, enters required details to enroll the device.
2. Automatic: User downloads the agent, runs few commands and device is automatically enrolled.

Both the methods are described below.

Manual Enrollment

Overview of the Enrollment Flow

• Step 1: Admin sends the invite to User or to Self
• Step 2: User downloads the MDM agent from a URL
• Step 3: User installs the Scalefusion agent application
• Step 4: User launches Scalefusion MDM agent and enrolls the device

Steps to enroll device

Step 1: Download Scalefusion MDM Agent application file

1. From the invite, copy the URLto download windows agent, paste it on your browser and run it.

   

2. You will get the page to download Scalefusion MDM agent.
   1. For Windows 7 & 8.1, download and install dependencies first.

      

   2. For Windows 10 & 11, directly go to download Scalefusion Agent.

      

3. The MDM agent application (.msi file) will start downloading on your machine.

   

Step 2: Install Scalefusion MDM Agent application

1. When download is complete, double-click on the .msifile to install. It should be there in downloads folder.
   If you get a Windows Protected your PC warning message, click on Run anyway to proceed.
2. You will get MDM agent setup wizard. Click on Installbutton to begin installation.

   

3. Follow the instructions to install Scalefusion MDM agenton your device.

   

4. Click on Finishto complete the installation.

   

5. Once installed, Scalefusion MDM agent will appear on your desktop.

   

Step 3: Enroll Device

1. Double-click on Scalefusion MDM agentapplication on desktop. This will open a new window.

   

2. Select the enrollment methodand enter details accordingly. There are three ways to enroll:
   1. Enroll using URL and Code: Enter the enrollment URL and code as given in invite email. It is also available in Enrollment Configurations.
   2. Enroll using Email and ORG-ID: Enter your email id and Org-ID (available in Organization Info on Dashboard).
   3. Enroll using Serial Number: If you choose this option, your device's serial number is automatically picked up. The device serial number should be existing in the CSV which is uploaded in IMEI serial no. enrollment section.
3. Click Enroll
4. If you have enabled the flags for Device Configuration while creating Enrollment Configurations, the following screen will be displayed to enter Device Name and Group Enrollment Code:
   
5. The details will be verified and you will get the following confirmation window which reflects status of enrollment and other necessary details.
6. The device is enrolled through Scalefusion MDM agent. You can now apply Scalefusion MDM agent based policies on devices to get a shell view.

Automatic enrollment

The IT Admins can also auto-enroll the devices silently wherein they don't need to manually install the MDM agent, launch it and enter the details to enroll. The agent can be installed silently and devices get automatically enrolled. This kind of enrollment is applicable for:

• Serial No. based enrollment
• URL & Code based enrollment

Overview of the Enrollment Flow

• Step 1: Admin sends the invite to User or to Self
• Step 2: User downloads the MDM agent from a URL
• Step 3: User runs the commands for automatic serial no. or URL & code based enrollment

Steps to enroll device

Step 1: Download Scalefusion MDM Agent application file

1. From the invite, copy the URLto download windows agent, paste it on your browser and run it.

   

2. You will get the page to download Scalefusion MDM agent.
   1. For Windows 7 & 8.1, download and install dependencies first.

      

   2. For Windows 10 & 11, directly go to download Scalefusion Agent.

      

3. The MDM agent application (.msi file) will start downloading on your machine.

   

Step 2: Run commands on Command prompt

For silent Agent installation and automatic enrollment, open command prompt on the device and run the following commands:

1. Serial No. based Enrollment
   
   Note that the device serial number should be existing in the CSV which is uploaded in IMEI serial no. enrollment section.

   
   

   
   

   msiexec /i "Scalefusion MDM Agent.msi" AUTOENROLL="y" /qn

   

2. URL and Code based Enrollment

   msiexec /i "Scalefusion MDM Agent.msi" ENROLLMENT_URL="https://app.scalefusion.com/enroll" ENROLLMENT_CODE="ExxxxR" /qn

   The enrollment code is sample value. It should be entered as per Enrollment Configurations

   

The device will get enrolled through Scalefusion MDM agent.

Frequently Asked Questions

Question: How do we install the Scalefusion Windows MDM agent if the users don't have admin account access and the devices already in the field?

Answer: There are a couple of deployment options in such use-cases,

1. If you already are using another MDM then you can push the Scalefusion MDM agent to the devices and have the users launch the agent and enroll their devices.
2. You can use the Scalefusion Deployer and generate an installer that can be installed using a non-admin account. Please refer to this link to generate a non-admin based MDM agent installer.