When enrolling and setting up a large number of Windows 10/11 devices, a manual enrollment process quickly creates a not inconsiderable amount of work. Windows Bulk Enrollment is an efficient way to set up a large number of Windows 10/11 devices without having to manually complete enrollment on the devices each time through the system settings.
Mass device registration is available from Windows 10/11 for the Professional, Enterprise and Education versions. The Windows Configuration Designer (WCD) tool is required, which can be downloaded from the Microsoft Store. Alternatively, the WCD tool can be downloaded via the Windows Assessment and Deployment Kit (ADK) and is then also available in other languages.
The WCD tool can be used to create provisioning packages, which are needed to run bulk registration. The file format of provisioning packages is a ppkg file. This is a container for a collection of configuration settings.
Since bulk enrollment is not done with an Azure AD account or autopilot these are not needed. Enrollment is ultimately done using a carrier media, such as a USB drive or SD card, that has the generated provisioning package from the WCD tool stored in the root directory. The carrier medium is connected to the corresponding Windows 10/11 devices with which the bulk registration is to be performed.
The provisioning packages facilitate the configuration of end-user devices without having to create an image. This enables quick and efficient configuration of a device, and the desired settings for enrolling devices in Relution can be easily specified. Using this workflow, target devices can be configured and enrolled in Relution within minutes.
For bulk enrollment of Windows 10/11 devices, a manual enrollment must be created in Relution.
The validity of this enrollment can be freely selected and should be extended into the future as required. It is important that the multiple enrollment is activated in this step in order to be able to use the generated enrollment for several devices.
The subsequently generated enrollment code is required in the further process when creating the provisioning package via the WCD tool.
The following steps are performed after downloading and installing the WCD tool to create a provisioning package:
Note: The provisioning profile should be protected (encrypted and/or signed) to provide additional protection for e.g. schools in case a USB stick or SD card is lost. Encryption prevents a potential attacker from accessing the ppkg file.
Note: The provisioning package must be placed in the root directory of the USB stick or SD card. Otherwise, the ppkg file will not be found and will not be displayed here.
Note: If an error occurs during the installation of the provisioning package, this is indicated below the respective provisioning package and corresponding details can be viewed, e.g. if an incorrect or expired enrollment code was used by Relution.
Subsequently, all steps that need to be performed manually in case of a manual enrollment are performed automatically with the information from the provisioning package and no further details need to be entered. After successful enrollment, the device is connected to the Relution server, shows up in the inventory list of the corresponding Relution organization and can be managed there.
Under “Settings” -> “Access work or school account”, the registration with the Relution MDM server is listed.