Category filter

Pre-Approved Enrollment of devices

The Pre-Approved enrollment feature lets you import devices into Hexnode UEM, even before the enrollment is completed from the user end. You don’t have to wait around for users to enroll their devices to get started with management. You can proactively group devices and assign policies with all the configurations, restrictions and apps. Upon enrollment, the policies automatically take effect on the devices.

Pre-Approved enrollment involves bulk importing a list of devices. For added security, you can make pre-approved enrollment mandatory, allowing only the predefined list of devices to be enrolled.


  1. Navigate to Enroll > All Enrollments > Enterprise > Pre-approve.
  2. Select the Domain.
  3. Click on Choose file to upload the CSV file containing the mandatory information such as name, email, ownership, serial number and platform. All other fields, like mobile and device name, are optional. You can alternatively download a sample CSV file by clicking on Download sample CSV file and then edit the file with your entries accordingly.
  4. Click Next.
  5. If there is a mistake in the uploaded CSV file, an error message will be shown. Correct the CSV file and re-upload it.
  6. Hexnode UEM will automatically map keys for you. If there is any mistake in mapping, you have to map the keys manually. Hexnode will automatically identify these keys: Display Name, Email, Mobile, Ownership, Device Name, Serial Number and Platform.
  7. The data uploaded in the CSV file will be displayed. If you want to prevent sending enrollment requests to specific users from the displayed list, you may uncheck those users from the list. Click Next to select how enrollment requests need to be sent. If any selected users exist already on the portal, you can choose to either replace the existing users or skip adding them.
  8. Choose the option to Send enrollment request to the users either via Email/SMS and click on Send.


Note: All the below fields in the CSV file are case-sensitive

  • Name: The name of the device user.
  • SAMAccountName: An Active Directory-based login name for the user.
  • Email: The email id of the user.
  • Mobile: The mobile phone number of the user.
  • Ownership: This field can contain either of these two values – ‘personal’ or ‘corporate’.
  • Serial number: The device serial number of the corresponding user. Note that serial numbers are case-sensitive, and any mismatched information will fail to enroll the device in the portal.
  • Device name: The name of the device for the corresponding user.
  • Platform: This field can contain ‘android’, ‘ios’, ‘macos‘ or ‘tvos’ as values.
  • Password: The password for the device to finish the enrollment process.

All pre-approved devices will be displayed along with enrolled devices in the Manage tab of the product. If you click on a device’s name, you will be taken to the device information page with a top banner “Pre-approved Device” if the device is pre-approved and the user has not yet enrolled the device.


  • You cannot fetch the location details or see the device details except the serial number before the user enrolls the device.
  • If more than one entry in the CSV file has the same email address and a user exists with the same email, the last entry corresponding to the email address in the CSV file will be updated as the user details. If such a user is not yet created in the MDM console, the user is automatically created, and the last entry corresponding to the email address in the CSV file will be updated as the user details.

    In both these cases, enrollment requests are sent for each of the entries for the same user. If you have 100 entries with the same email, 100 enrollment requests will be sent to the same email.

Restricting enrollment to pre-approved devices

You can limit the enrollment to only a list of approved devices by enabling this feature. To allow only pre-approved devices to enroll in Hexnode UEM,

preenrollment of devices with hexnode MDM

  1. Go to Enroll > Settings.
  2. Check the Pre-approved Devices Only option under Enrollment Restrictions.
  3. Save the settings.

Pre-approved DEP enrollment

DEP devices can also be added as pre-approved in the Hexnode MDM portal.

To pre-approve DEP devices, check the option Add as Pre-approved Device while adding a DEP account from Admin > Apple Business / School Manager > Apple DEP > Add DEP Account.

Pre-approve DEP devices


Pre-approved DEP enrollment is available in the Pro, Enterprise, Ultimate and Ultra subscription plan.

  • Enrolling Devices