Hexnode’s global user conference is set to raise the roof.

Register NowRight Icon

TRY 30 DAYS FREE

Free Trial

Category Filter

How to enroll Windows PCs & Tablets

Device management is integral in restricting, managing, and securing your Windows devices. Hexnode supports the management of PCs and tablets running Windows 10 or later. To manage a device using Hexnode, it must be enrolled in the MDM portal. Enrollment establishes a connection between the MDM and the device through which they communicate with each other.

On enrolling a Windows device, the Hexnode Notifications app will get automatically installed on the device. The broadcast messages send by the admin from the Hexnode portal are received through this app.

Windows PCs and tablets can be enrolled via different methods:

  1. Open Enrollment
  2. Authenticated Enrollment
  3. PPKG enrollment
  4. G Suite Enrollment for Windows.
Notes

  • Log in to your Windows 10 device as an admin user to enroll the device in Hexnode UEM.
  • Enrollment via Hexnode Installer app is supported on:
    • Windows 10 v1803 and later.
    • Windows 10 v1703 to 1709, if Visual C++ Redistributable and .NET framework version 4.7.1+ are installed on the devices.
  • If the VC redistributable or .NET framework dependencies are not installed on the devices that you are enrolling via the Hexnode Installer app, an error message asking you to install the missing dependencies will be shown during enrollment, click OK. This will take you to the Microsoft developer website from where you can download and install the package.
    An attempt to install a 64-bit dependency package on 32-bit machine always fails. So, choose a package that match the system architecture and edition of your OS for perfect compatibility.


Tips:

  • If you are using Windows 10 v1803 or later device, it is recommended to enroll the device via the Hexnode Installer app.
  • Use the native device enrollment method, if you cannot install the dependency packages on your device running Windows 10 v1703 till 1709.

Jump To

Open Enrollment

Configure Open Enrollment on the Hexnode Portal
  1. Go to Enroll → Platform Specific → Windows → Windows PCs & Tablets.
  2. Switch to Open Enrollment.
  3. Select a Default User and enter a Default Password.
  4. Change the Ownership based on the device to either Personal or Corporate.
  5. Click Next.


Note:


If you want to enable users to enroll the devices on their own, it is best to send them enrollment requests via Email or SMS. This enrollment request will contain the enrollment URL and instructions for enrolling devices in Hexnode. To send such a request to the user, go to Enroll > Settings > Request Modes and select Email or SMS. Then, go to Manage > Users > select the users, click on Actions > New Enrollment.



Enroll the device via Open Enrollment

To enroll a Windows device in Hexnode via open enrollment, you can use either of the following enrollment methods:

Method 1: Using Hexnode Installer App

  1. On your Windows 10 device, open the web browser.
  2. Enter the Hexnode enrollment URL. It should be in the format: https://yourportal.hexnodemdm.com/enroll/.
  3. Click on Download. This would initiate the Hexnode Installer app download on your device.
  4. Open the app on your device.
  5. Click Yes on the ‘Hexnode Installer Setup’ wizard to allow the Hexnode Installer app to make changes to your device.
  6. Click on Install to continue with the installation.
  7. Read the EULA agreement on the Hexnode Installer app and click on Agree and Enroll.
  8. The Hexnode Installer checks with the portal for the enrollment authentication settings and then processes the enrollment request. If the process succeeds, go to step 10.
  9. If the enrollment request processing fails,
    • Click on Enroll to enroll the device. This will redirect you to Settings > Accounts > Access Work or School > Enroll in Device Management on your device.
    • On the ‘Set up a work or school account’ pane, admin’s username, and the enrollment server address will be auto-filled, click on Next.
    • Read the instructions regarding the device set up and click Got it. Hexnode will now connect to the Workplace or School. It may take a few minutes to set up the connection. All the configurations and apps that your organization has set up for the user will soon be pushed to the device. If the user doesn’t have access to these after waiting for a few minutes, go to Settings > Accounts > Access Work or school > Info and click Sync.
  10. Now the Hexnode Agent app (HexnodeAgent) will get installed, and all the configurations will be applied to the device. Click on Done to exit the Hexnode Installer.
  11. Click on Finish to exit the Setup.

Method 2: Native Enrollment

  1. Go to Settings → Accounts → Access work or school.
  2. Select Enroll only in device management.
  3. Enter your work mail ID and click Next.
  4. Now, you will be asked to enter your Microsoft password, simply neglect this by closing the tab.
  5. Enter the server URL. It will be in the format: https://<yourportal>.hexnodemdm.com and click Next.
  6. Read the instructions regarding the device set up and click Got it. You have now successfully enrolled your laptop.

Hexnode will now connect to the Workplace or School. It may take a few minutes to set up the connection, all the configurations and apps that your organization has set up for the user will soon be pushed to the device. If the user doesn’t have access to these after waiting for a few minutes, go to Settings > Accounts > Access Work or school > Info and click on Sync.


Authenticated Enrollment

Configure Authenticated Enrollment on the Hexnode Portal

You can configure authenticated enrollment on the Hexnode MDM portal via Email/SMS enrollment or Self-Enrollment.

Method 1: Email or SMS Enrollment

Use email/SMS enrollment, to send enrollment request to users. The request includes the enrollment instructions, and the server URL for enrolling the devices.

  1. Go to Enroll → Platform Specific → Windows → Windows PCs and Tablets.
  2. Click on Switch to Authenticated Enrollment → Authenticated Enrollment.
  3. Select the types of users (AD/ Azure AD/ Local/ Google/ Okta) to be enrolled via Enrollment Request.
  4. Change the Ownership to Personal, Corporate, or let the user choose.
  5. Click Next.
  6. A message “Enrollment settings successfully updated” will be displayed on the portal.
  7. Check the box corresponding to Email or SMS based on how you want to send the enrollment request.
  8. Change the Domain and select the User.
  9. Click on Send.

Method 2: Self-Enrollment

  1. Go to Enroll → Platform Specific → Windows → Windows PCs and Tablets.
  2. Click on Switch to Authenticated Enrollment → Authenticated Enrollment.
  3. Select the types of users (AD/ Azure AD/ Local/ Google/ Okta) to be enrolled via Self Enrollment.
  4. Change the Ownership to Personal, Corporate, or let the user choose.
  5. Click Next.

Note:


Configure AD, Azure AD, Google, or Okta directory in the Hexnode portal to enroll the device via directory authentication.



Enroll the device via Authenticated Enrollment

To enroll a Windows device in Hexnode via authenticated enrollment, you can use either of the following enrollment methods:

Method 1: Using Hexnode Installer App

To enroll a device using the Hexnode Installer app, follow the procedure:

  1. On your Windows 10 device, open the web browser.
  2. Enter the Hexnode enrollment URL. It should be in the format: https://yourportal.hexnodemdm.com/enroll/.
  3. Click on Download. This would initiate the Hexnode Installer app download on your device.
  4. Open the app on your device.
  5. Click Yes on the ‘Hexnode Installer Setup’ wizard to allow the Hexnode Installer app to make changes to your device.
  6. Click on Install to continue with the installation.
  7. Read the EULA agreement on the Hexnode Installer app and click on Agree and Enroll.
  8. The Hexnode Installer then checks with the portal for the enrollment authentication settings.
  9. If you are a local or AD user, enter your email ID/SAMAccount Name and click on Authenticate. If you are a Microsoft/Googe/Okta user, you can authenticate by signing in with the corresponding directory credentials.
  10. If the authentication fails, an error message “Authentication failed! Try Again!” will be displayed. Click on Enroll to re-authenticate.
  11. Now the device will process the enrollment request. If the enrollment request processing fails,
    • Click on Enroll to enroll the device. This will redirect you to Settings > Accounts > Access Work or School > Enroll in Device Management on your device.
    • On the ‘Set up a work or school account’ pane, admin’s username, and the enrollment server address will be auto-filled, click on Next.
    • Read the instructions regarding the device set up and click Got it. Hexnode will now connect to the Workplace or School. It may take a few minutes to set up the connection, all the configurations and apps that your organization has set up for the user will soon be pushed to the device. If the user doesn’t have access to these after waiting for a few minutes, go to Settings > Accounts > Access Work or school > Info > Sync.
  12. The Hexnode Agent app (HexnodeAgent) will get installed, and all the configurations will be applied to the device. Click on Done to exit the Hexnode Installer.
  13. Click on Finish to exit the Setup.

Method 2: Native Enrollment

  1. Go to Settings → Accounts →Access work or school.
  2. Select Enroll only in device management.
  3. Enter your work email, and click Next.
  4. Now you will be asked to enter your Microsoft password, simply neglect this by closing the tab.
  5. Enter the server URL. It will be in the format: https://<yourportal>.hexnodemdm.com and click Next.
  6. If you are enrolling the device via AD or local authentication, select the domain from the dropdown, enter the Email/SAM Account Name and password and click Authenticate.

    Or, click on Sign in with Microsoft/Google/Okta to authenticate with the directory credentials.

  7. Read the instructions regarding the device set up and click Got it. You have now successfully enrolled your PC in the Hexnode portal.

Hexnode will now connect to the Workplace or School. It may take a few minutes to set up the connection, all the configurations and apps that your organization has set up for the user will soon be pushed to the device. If the user doesn’t have access to these after waiting for a few minutes, go to Settings > Accounts > Access Work or school > Info and click on Sync.




Notes:

  • If you have set a password for the local user in the portal and have sent enrollment request to the same user, use the credentials in the enrollment request to authenticate.
  • HexnodeAgent (the Hexnode Agent app) for each Hexnode portal is different. If a different HexnodeAgent was already installed on the device, the app would be cleared during the enrollment. Before clearing the app, its data and logs will be backed up and stored as zip files on your Windows machine’s primary partition.
  • Custom Script, Remote view and MSI app installation are supported only on devices enrolled via the Hexnode installer as they require the latest versions of the Hexnode Agent app to be installed on the device.

Troubleshooting Tips

Need more help?
Raise a Ticket
Ask Community
Chat With Us