Forum Discussion

CS_HelpDesk's avatar
CS_HelpDesk
GoTo Contributor
10 months ago

MDM on prem AD device enrolment workaround.

Hi all, 
This could be a possible solution to enroll Windows devices for those in an on-prem AD. Below you have the instruction to add one device as a test then to create a GPO task to run the Powershell script:
First:
  1. Create the provisioning package in Resolve MDM.
  2. Download the .icdproj file from the “Windows (Beta) enrollment section in Resolve MDM.
  3. Open this file in Windows configuration designer.
  4. Next, export the file, building it into a .ppkg package and giving it your preferred file name.

Second:

  1. The test was done using powershell to activate this package and enroll devices.
  2. The -install-provisioning package command was used as admin in powershell (info here: https://learn.microsoft.com/en-us/powershell/module/provisioning/install-provisioningpackage?view=windowsserver2022-ps)
  3. This test completed successfully, enrolling the device.
Next steps:
  1. Move the .ppkg file somewhere that is network accessible to your users, so that when they run the above powershell script, their machine is able to access the .ppkg file.
  2. The script will then have to be modified to point to wherever the team opts to store the file.
  3. Create a scheduled task via GPO to run the powershell script.
  4. It is vital that this task be run as an account that has admin permissions on the machine being enrolled.
  5. More info is available here. The “Run As” section is especially relevant to your team. (info here)
No RepliesBe the first to reply