Enrolling Windows 10 and 11 devices in bulk using a provisioning package

Miradore offers ways to enroll multiple Windows 10 or 11 devices at once, using the Full management type.

Bulk enrollment is done using a provisioning package, which is created using the Windows Configuration Designer application. After the provisioning package is created and distributed to the devices, the enrollment process is automatic upon opening the provisioning package file.

You can initiate bulk enrollment from the Windows enrollment wizard or the Infrastructure diagram page in Miradore.

Requirements and general information

Before enrolling devices in Miradore in bulk, the Miradore site administrator and the devices themselves must meet certain requirements.

The following requirements must be met by the Miradore site administrator:

• You must have an Admin role on your Miradore site.
• You must download and install the Windows Configuration Designer application.

The following requirements must be met by the device users and devices to be enrolled:

• The device users must have administrator privileges on their devices.
• The devices must run a 64-bit version of Windows 10 or 11 Pro.

During the enrollment, Miradore first adds an MDM work account to the device. After that, the Miradore client application gets automatically installed on the device.

When using bulk enrollment, no user is assigned to the device in Miradore by default.

About Windows provisioning packages

Provisioning packages are generally used to automate the deployment of Windows 10 and 11 devices, and to apply desired configurations and customizations to the devices. These packages are created using the Windows Configuration Designer application and have the file extension .ppkg.

With Miradore, you can use provisioning packages to automate device enrollment. Miradore site-specific mass enrollment credentials are included in the provisioning package to ensure that the enrollment experience is as smooth for device users as possible.

Initiate bulk enrollment from the Windows enrollment wizard

The recommended way to initiate the enrollment of multiple Windows devices simultaneously is by using the Multi-device enrollment feature of the Windows enrollment wizard.

1. In Miradore, navigate to Enrollment > Enroll device and select Windows.
2. Select Create new provisioning package on the Multi-device enrollment tile.
   Important: When you select Create new provisioning package while you have active configuration files, the current configuration files become inactive.

Results: The configuration files are automatically downloaded and their Status changes to Active. If the download does not start automatically, click the link in the dialog box.

If you already have active configuration files and want to reuse them, you can download them by selecting the download symbol.

Initiate bulk enrollment from the Infrastructure diagram

You can initiate the enrollment of multiple Windows devices at once from the Infrastructure diagram.

1. In Miradore, navigate to System > Infrastructure diagram.
2. Hover over Windows devices and select Download configuration files.
   Important: If you already have configuration files in Active status, selecting Download configuration files will deactivate them and you will not be able to use the same configuration files and the provisioning package created from them to enroll new devices. This action downloads a new set of configuration files, which need to be added to a new provisioning package.

Results: The configuration files are automatically downloaded.

Enroll devices using the provisioning package

Once the configuration files are downloaded, the provisioning package must be created using the Windows Configuration Designer application.

1. Extract the configuration files to desired folder.
2. Launch the Windows Configuration Designer application.
3. In Windows Configuration Designer, open the file with the extension .icdproj.xml from the folder where you extracted the configuration files.
4. Select Export > Provisioning package and follow the instructions to finalize the creation of the Windows provisioning package (.ppkg file).
   Result: The provisioning package file is saved to your computer with your Miradore site name as the file name, for example, My Site.ppkg.
5. Distribute the provisioning package file to the devices to be enrolled.
   Note: You can use any distribution method, such as using a USB stick, a network drive, or providing the file via email.

Once the file is distributed to the devices, users can run the provisioning package file by opening it. They can also run it in Windows PowerShell using the following command, where <sitename> is the name of the Miradore site in which the device is to be enrolled:

Install-ProvisioningPackage -PackagePath <sitename>.ppkg -QuietInstall
After the provisioning package was run, the device is automatically enrolled in Miradore without an assigned user. To learn how to assign users to their devices, read our dedicated article.

Deactivating configuration files

After enrollment, configuration files can be deactivated to prevent further enrollment using the provisioning package that contains the specific configuration files. When the configuration files are deactivated, devices that were already enrolled using the provisioning package stay managed, but new devices cannot be enrolled with the same package.

Configuration files can be deactivated both in the Windows enrollment wizard and through the Infrastructure diagram.

Deactivate configuration files through the Windows enrollment wizard

To deactivate configuration files and thus prevent further use of a provisioning package through the Windows enrollment wizard, follow these steps:

1. In Miradore, navigate to Enrollment > Enroll device, then select Windows.
2. On the Multi-device enrollment tile, select Deactivate.
   

Deactivate configuration files through the Infrastructure diagram

To deactivate configuration files and thus prevent further use of a provisioning package through the Infrastructure diagram, follow these steps:

1. In Miradore, navigate to System > Infrastructure diagram.
2. Hover over Windows devices and select Deactivate.
   

If you want to create a new provisioning package with a new set of configuration files, select Download configuration files. The new configuration files immediately become active and a new provisioning package can be created from them.

Monitoring the enrollment status

You can track the enrollment progress of the devices by navigating to Enrollment > Enrollment log in Miradore.