# Pre-Approved Enrollment of devices **Pre-Approved Enrollment** allows IT administrators to import devices into the Hexnode UEM portal before they are physically enrolled by the user. By bulk importing device identifiers (like Serial Numbers), admins can proactively group devices and assign policies, configurations, and apps. Once the user enrolls the device, these policies take effect immediately. For enhanced security, organizations can enforce a “**Pre-approved devices only**” restriction, ensuring that no unauthorized hardware can join the corporate network. Core Benefits of Pre-enrollment -------------------------------- - **Instant Management**: Policies and apps are ready for the device the moment it is powered on and enrolled. - **Security & Restrictions**: Admins can restrict enrollment to **only** pre-approved devices, preventing unauthorized or personal devices from entering the corporate portal. - **Bulk Readiness**: Hundreds of devices can be imported and organized into **Device Groups** simultaneously via CSV upload. - **Zero-Touch Potential**: It serves as the foundation for automated deployment programs like Apple ADE. OS Support & Limitations ----------------------------- Before proceeding, note that Pre-Approved Enrollment is **not supported** for the following Android configurations: - **Android 10+ devices** enrolling via generic methods ([Email or SMS](https://www.hexnode.com/mobile-device-management/help/enroll-android-mobile-devices-hexnode-mdm/#enroll-android-mobile-devices-with-authentication), [Self enrollment](https://www.hexnode.com/mobile-device-management/help/enroll-android-mobile-devices-hexnode-mdm/#self-enrollment:~:text=devices%20with%20authentication-,Self%20enrollment,-QR%20Code%20Enrollment) or [QR code enrollment](https://www.hexnode.com/mobile-device-management/help/enroll-android-mobile-devices-hexnode-mdm/#qr-code-enrollment:~:text=Self%20enrollment-,QR%20Code%20Enrollment,-Open%20Enrollment)). - **Android 12+ devices** enrolling in [Android Enterprise Profile Owner mode](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-in-android-in-the-enterprise-as-profile-owner-using-hexnode-mdm/#make-hexnode-for-work-app-a-profile-owner). How to Import Pre-Approved Devices ----------------------------------- ### Step 1: Upload the Device List 1. Navigate to **Enroll > All Enrollments > Enterprise > Pre-approve**. 2. Select the **Domain**. 3. Click **Choose file** and upload your CSV file containing the device details. 1. **Tip**: *Click **Download sample CSV file** to get the correct template.* 4. Click **Next**. ### Step 2: Map and Validate Data 1. Hexnode will attempt to automatically map the CSV columns to system fields. Verify that fields like **Display Name**, **Email**, **Serial Number**, **Manufacturer Name**, **Model Name**, and **Platform** are mapped correctly. 2. If errors exist in the CSV, the system will prompt you to correct and re-upload the file. ### Step 3: Send Enrollment Requests 1. Review the list of imported users/devices. You can uncheck specific users if you do not wish to send them an invite immediately. 2. **Duplicate Handling**: If a user already exists in the portal, you will be asked to either **Replace** the existing details or **Skip** adding them. 3. Choose the invitation method (**Email** or **SMS**) and click **Send**. CSV File Requirements ---------------------- To avoid upload errors, ensure your CSV file adheres to these specifications. Note: All fields are case-sensitive. NameDescriptionName Name of the device user. Email User’s email address. Ownership Device ownership type. Values: personal or corporate. Serial Number The unique device serial number. This field is mandatory for all platforms. **Critical**: *Must match the device exactly (case-sensitive)*. Manufacturer Name Name of the device manufacturer (e.g., *Dell Inc.*, *HP*, *Lenovo*). This field is mandatory for Windows devices. Model NameThe specific hardware model name of the device (e.g., *Latitude 5420*, *ThinkPad X1*). This field is mandatory for Windows devices. Platform OS Platform. Values: android, ios, macos, linux, tvos, windows. SAMAccountName Active Directory login name. Mobile User’s phone number. Device name Custom name for the device in the portal. Password One-time password for enrollment. Securing Enrollment: Restrict to Pre-Approved Only --------------------------------------------------- To ensure only the devices you imported can enroll: [![Restricting enrollment to pre-approved devices only.](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Enrollment-settings-for-pre-approved-devices-1024x663.jpg)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Enrollment-settings-for-pre-approved-devices.jpg) 1. Go to **Enroll > Settings**. 2. Scroll to **Enrollment Restrictions**. 3. Check the box **Pre-approved Devices Only**. 4. Click **Save**. Managing Pre-Approved Devices ------------------------------ - **Viewing Devices**: Pre-approved devices do not appear in the main list by default. Go to **Manage > Devices**, click **Filter by**, select **Enrollment Status**, and choose **Pre-approved**. [![Pre-approved devices filter in Manage tab of Hexnode UEM console.](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Pre-approved-devices-filter-in-Manage-tab.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Pre-approved-devices-filter-in-Manage-tab.png "Pre-approved devices filter in Manage tab") - **Device Details**: Clicking on a pre-approved device will show a banner labeled “*Pre-approved Device*“. - **Note**: *Location and detailed hardware info are not available until the device actually enrolls*. Apple ADE Pre-Approval ----------------------- Devices from Apple Business Manager (ABM/ADE) can also be marked as pre-approved automatically. - Go to **Admin > Apple Business/School Manager > Apple ADE**. - When adding a new ADE account, check the option **Add as Pre-approved Device**. ![Pre-approve DEP devices](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2020/04/DEP-pre-approve.png)