Enroll new Windows devices using Provisioning Packages

Prerequisites

1. Scalefusion Account
2. Install Windows Configuration Designer
3. USB Drive
4. Test Windows 10 or 11 device

Step 1: Preparing the configuration data

Before we generate the provisioning package files we need some data that can be used with the Windows Configuration Designer. Follow the steps below to get started,

1. Create a Windows Device Profile and an Enrollment configuration.
2. Click on the enrollment configuration to expand and click on Windows tab. Copy the Bulk Enrollment URL & Enrollment code and keep it handy that will be used in Windows configuration designer.
   

Step 2: Generating Provisioning Package using Windows Configuration Designer

1. Launch Windows configuration designer and click on Provision desktop devices.
2. Enter a name for the project and choose a folder. Click Finish to start the process.
3. Set up Device:The first section lets you configure basing set up information,
   1. Device name: Enter a name for the device or use placeholders like %SERIAL% or %RAND5% to generate name based on serial number or randomly.
   2. Enter Product Key: You can enter the product key for Windows activations.
   3. Configure devices for shared use: Keep this option disabled.
   4. Remove pre-installed software: If you want to remove the pre-installed software on the machine then enable this else leave it disabled.
   5. Click Next once done
4. Set up Network: Devices need to be connected to internet for enrollment. You can choose to configure a network that will be used during provisioning. If your are not sure if the device will have access to Wifi during provisioning then you can leave this blank and the device will use Ethernet. Click Next
   Please note that if there is no internet during provisioning a device then the device will not complete enrollment.

   
   
5. Account Management: Create a local admin account that will be the master account on the device. Click Next
   You can also choose to Enroll into Azure AD but we recommend using Windows Autopilot if you have Azure AD subscription.

   
   
6. Add applications: You can leave this section blank and click Next
7. Add certificates: You can leave this section blank and click Next
8. Switch to Advanced Editor: Once the basic setup is done, switch to advanced editor to complete the remaining steps.
9. Runtime Settings: Once in advanced editor click on Runtime settings to expand it.
10. Enrollment UPN Setting:Scroll down to Workplace group and expand it. Click on Enrollments. Enter a UPN and click ADD.
    Use the email that you use to sign in to Scalefusion should be used as the UPN

    
    

    

11. Discovery Service Full URL: Once you add the UPN, you can expand the UPN section on the right and click on Discovery Service Full URL. Enter the URL that you copied at Step 1: Preparing Configuration Data

    

12. Secret: Now click on Secret section and enter the Enrollment code that you obtained at Step 1: Preparing Configuration Data
13. Generate PPKG file:Now you are ready to generate the PPK file. To do so follow the steps below,
    1. Click on Export > Provisioning package
    2. From the Owner drop down select IT Admin and click Next

       

    3. Now you can select to encrypt the package using a certificate and sign the package as well. Select the options as required and click Next
    4. Choose where the generated package file should be saved and click Next
    5. Click Build to generate the PPKG file.
14. Prepare a USB Drive: Copy the generated provisioning package and the other files from the saved location to the the root of a USB Drive that would be used for enrolling devices.

Step 3: Enrolling a Windows device

1. Power on a new Windows device and wait for the first run setup screen to appear.
2. Insert the USB drive at this point, Windows will automatically recognise and start the setup.
   Depending on the OS version, you may be prompted to browse and select the PPKG file from the USB drive. Please refer to the following documentation from Microsoft.

   
   
3. Once the setup is complete, the device will boot normally and you can see the admin account as per the package file. The device will also enroll to Scalefusion Dashboard and other policies will be applied like creating a Kiosk or a user account and installing enterprise applications.

Frequently Asked Questions

Question: We see the following error when we insert the USB Drive. How do we recover from this?Answer: This error is shown if the device is not connected to any network or the Wifi configured in the package file is not reachable. Sometimes it is shown even if the network is there. If the Wifi configuration is correct and the device is connected to the internet, then click Try again and the process should start.