Category Filter

Pre-Approved Enrollment of devices

The Pre-Approved Enrollment feature lets you import devices into Hexnode UEM, even before the enrollment is completed from the user end. You don’t have to wait around for users to enroll their devices to get started with management. You can proactively group devices and assign policies with all the configurations, restrictions and apps. Upon enrollment, the policies automatically take effect on the devices.

Pre-Approved Enrollment involves bulk importing a list of devices. For added security, you can make pre-approved enrollment mandatory, allowing only the predefined list of devices to be enrolled.


  • Pre-approved enrollment via adding a CSV file with device details is only available in Ultimate and Ultra subscription plans.
  • Pre-approved enrollment does not work on Android 10+ and Windows devices.

  1. Navigate to Enroll > All Enrollments > Enterprise > Pre-approve.
  2. Select the type of users to be enrolled via Enrollment Request or Self Enrollment and click Continue.
  3. Select the domain.
  4. Download Sample CSV file by clicking on Download sample CSV file. Either create a new one like the sample or edit the sample file accordingly.
  5. Click on Choose file and upload the CSV file containing the mandatory information such as name, email, ownership, serial number and platform. All others, like mobile and device name are optional.
  6. Click Next.
  7. If there is a mistake in the uploaded CSV file, an error message will be shown. Correct the CSV file and re-upload it.
  8. Hexnode UEM will automatically map keys for you. If there is any mistake in mapping, you have to map the keys manually. Hexnode will automatically identify these keys: name, email, mobile, ownership, device name, Serial Number and platform.
  9. The data uploaded in the CSV file will be displayed. Click Next.
  10. Choose the option to Send enrollment request to users either via Email / SMS and click on Send.


Note: Fields in the CSV File

  • Name: The name of the device user
  • SAMAccountName: An Active Directory based login name for the user.
  • Email: The email id of the user.
  • Mobile: The mobile phone number of the user.
  • Ownership: This field can contain either of these two values – ‘personal’ or ‘corporate’.
  • Serial number: The device serial number of the corresponding user.
  • Device name: The name of the device for the corresponding user.
  • Platform: This field can contain ‘android’, ‘ios’, ‘macos‘ or ‘tvos’ as values.
  • Password: The password for the device to finish enrollment

All pre-approved devices will be displayed along with enrolled devices in the Management section of the product. If you click on a device’s name, you will be taken to the device information page with a top banner “Pre approved Device” if the device is pre-approved and the user has not yet enrolled the device.


You cannot fetch the location details or see the device details except the serial number before the user enrolls the device.

Restricting enrollment to pre-approved devices

You can limit the enrollment to only a list of approved devices by enabling this feature. To allow only pre-approved devices to enroll in Hexnode UEM,

preenrollment of devices with hexnode MDM

  1. Go to Enroll > Settings.
  2. Check the Pre-approved Devices Only option under Enrollment Restrictions.
  3. Save the settings.

Pre-approved DEP enrollment

DEP devices can also be added as pre-approved in the Hexnode MDM portal.

To pre-approve DEP devices, check the option Add as Pre-approved Device while adding a DEP account from Admin > Apple Business / School Manager > Apple DEP > Add DEP Account.

Pre-approve DEP devices


Pre-approved DEP enrollment is available in Pro, Enterprise, Ultimate and Ultra subscription plan.