Provisioning Packages for Enrolling existing Windows devices

Windows 10 enrollment requires the users enrolling the devices to be administrators on the device. However for some users the enrollment steps using other techniques may be difficult like students or non-IT staff. In such cases you can generate a PPKG file and share it with them.

When to use this technique?

1. Use this method to generate provisioning packages when you have the devices already with the users who have admin accounts.
2. Use this method to generate provisioning packages when you have the devices already with the users who don't have admin accounts but the IT admins can access the machines to enroll devices.
3. Useful where the adoptions of other enrollment techniques prove to be difficult for target audience. Applying common policies and distribute applications.
4. Suitable for Device Profiles where the policy either blocks the applications or has no application policy as such.

Prerequisites

1. Scalefusion Account
2. Install Windows Configuration Designer
3. Test Windows 10 or above device

Step 1: Preparing the configuration data

Before we generate the provisioning package files we need some data that can be used with the Windows Configuration Designer. Follow the steps below to get started,

1. Create a Windows Device Profile and an Enrollment configuration.
2. Click on the enrollment configuration to expand and click on Windows tab. Copy the Bulk Enrollment URL & Enrollment code and keep it handy that will be used in Windows configuration designer.
   

Step 2: Generating Provisioning Package using Windows Configuration Designer

1. Launch Windows Configuration Designer and click on
2. Enter a name for the project and choose a folder where it will be saved. Click Finish to start the process.
3. Click Next to continue.
4. Click Finish to start the provisioning wizard.
5. Runtime Settings: Once in provisioning wizard click on Runtime settings to expand it.
6. Enrollment UPN Setting: Scroll down to Workplace group and expand it. Click on Enrollments. Enter a UPN and click ADD.
   Use the email that you use to sign in to Scalefusion should be used as the UPN

   
   
   
7. Discovery Service Full URL: Once you add the UPN, you can expand the UPN section on the right and click on Discovery Service Full URL. Enter the URL that you copied at Step 1: Preparing Configuration Data

   

8. Secret: Now click on Secret section and enter the Enrollment code that you obtained at Step 1: Preparing Configuration Data
9. Generate PPKG file:Now you are ready to generate the PPK file. To do so follow the steps below,
   1. Click on Export > Provisioning package
   2. From the Owner drop down select IT Admin and click Next

      

   3. Now you can select to encrypt the package and sign the package using a certificate. Select the options as required and click Next
   4. Choose where the generated package file should be saved and click Next
   5. Click Build to generate the PPKG file.
10. Share the PPKG file with users: You can share the generated PPKG file by any means to the end users, over an email, shared folder etc.

Step 3: Enrollment using PPKG on a Device

1. Once the end users received the PPKG file, they would have to download it to their PC and double click to start the enrollment and follow the on-screen instructions. Users would be shown a prompt as shown below and once the Click Yes, Add and the device will enroll to Scalefusion.
   Please note, the users need to have Admin access to enroll using the provisioning package.

   
   
2. The device will start appearing in Scalefusion Dashboard once the package file is installed.