Windows 10 Work Access Enrollment
Device enrollment establishes the initial communication with AirWatch to enable Enterprise Mobility Management (EMM). The enrollment methods for Windows Desktop focus on adding features and functionality depending on how devices are enrolled.
All Windows Desktop enrollments use the native enterprise management app to complete the enrollment process. Windows Auto-Discovery is an optional method of enrolling devices that only requires the end-user's email address to begin the enrollment process.
Enrollment can also require the enabling (console checkbox) of the AirWatch Protection Agent. This agent adds endpoint security to your Windows Desktop devices to ensure your data and devices remain secure wherever the device may go. The AirWatch Protection Agent for Windows Desktop co-opts the native Windows Desktop functionality such as BitLocker encryption, Windows Firewall, and Windows Automatic Updates to keep devices secure and up-to-date.
1. Work Access Enrollment
This section will guide you through how to enroll your Windows 10 device through work access enrollment.
1.1. Launch Windows 10 VM
From Main Console Desktop, launch RDP session for Windows 10 VM labeled Win10-01.rdp.
1.2. Launching Settings
On the Win 10 VM,
- Click on Start logo
- Click on Settings icon
1.3. Accessing Accounts
Click on the Accounts icon.
1.4. Access Work or School
- Click on Access work or school.
- Click on Enroll only in device management.
1.5. Connecting to Windows Auto Discovery Service
For the workshop we will be using a static email address. This is NOT your email address that you used to login to the lab environment. The reason for this is that there is a Windows Auto-Discovery Service (WADS) setup for this email domain which will point your device to the AirWatch Hands-On-Lab environment that was specifically created for this event. Normally, your user community would enter their corporate email address which would then point their device to your AirWatch environment. If you choose not to use a WADS server then the user would be forced to enter the enrollment URL manually.
- Enter the email address "[email protected]"
- Click on the Next button.
1.6. Find your Group ID from AirWatch Console
- To find the Group ID, hover your mouse over the Organization Group tab at the top of the screen. Look for the email address you used to log in to the lab portal.
- Your Group ID is displayed at the bottom of the Organization Group pop up.
NOTE - The Group ID is required when enrolling your device in the following steps.
1.7. Group ID
- Enter the Group ID from the beginning of this section in the Group ID field.
- Click Next.
1.8. Username and Password
- Enter the "testuser" in the Username field
- Enter the "VMware1!" in the Password field
- Click Next.
1.9. Remember Sign-In Info
Click Skip to not remember sign-in info.
1.10. Complete Enrollment
1.11. Close Settings
Close the Settings page by clicking on the X in the upper right corner.
1.12. Allowing Application to Make Changes
You may be prompted by User Account Control (UAC) to allow the app to make changes to your PC. If so, click Yes.
2. Confirm MDM Enrollment
Once your Windows 10 device is enrolled, the restriction profile you created earlier will be installed on the device. Continue to confirm enrollment was successful and that the profile installed correctly by verifying that the restrictions took place on your device.
2.1. Selecting Cortana
- Click on Start logo.
- Click on Cortana in the apps list.
2.2. Cortana Disabled
Notice now you are not greeted by Cortana, you only have basic search capabilities now that AirWatch has disabled Cortana.
2.3. Confirming Cortana is Disabled
For further confirmation, click on the Gear icon and you will see that all of the Cortana settings which were present before have now disappeared. You should only see settings regarding searching and indexing.
2.4. Open Explorer
Click Explorer from the bottom toolbar.
2.5. Open 7-Zip
- Click Local Disk (C:).
- Click Program Files.
- Click 7-Zip.
- Double-click 7zFM.exe to launch the 7-Zip File Manager.
NOTE - If you do not see the 7-Zip Folder, your application may still be downloading. Due to lab scalability and network resources, this may take several minutes to finish.