Windows custom script action missing from enrollment automationSolved

Hi @im_jaymes. The custom script action for native enrollment-time automation is available only in the Ultra plan. If that action is not visible while configuring an automation, the current subscription may not include that feature.

As a workaround, you can deploy the script shortly after enrollment using a Script policy:

1. Create a Windows Script policy with the required custom script.
2. Create or use a Dynamic device group that targets Windows devices.
3. Associate the script policy with that Windows dynamic group.
4. When a new Windows device enrolls and becomes part of the dynamic group, the policy is applied on the next device check-in.

This does not run the script at the exact enrollment moment, but it automates script deployment soon after the device is enrolled and assigned to the group.

Best regards,
Isabel Lora
Hexnode UEM

That explains why I couldn’t find the option. If I use the dynamic group method, will it also apply to existing Windows devices in that group?

Yes. Once the script policy is associated with the Windows dynamic group, it can apply to devices that are already members of the group as well as newly enrolled devices that match the group criteria.

For newly enrolled devices, the script is triggered after enrollment when the device checks in and receives the assigned policy. If your workflow requires the script to run exactly during enrollment, the native enrollment-time automation feature would be required.

Best regards,
Isabel Lora
Hexnode UEM