Help Center Home > Devices > Enroll Windows MDM Using a Provisioning Package

Enroll Windows MDM Using a Provisioning Package

Overview

Bulk enrollment with Windows MDM improves the onboarding process for IT Admins by simplifying and expediting device enrollment of Windows 10/11 laptop and desktop devices. 

Users can download a XML archive containing configuration files, import the files in Windows Imaging and Configuration Designer (WCD), export the provisioning package to a USB flash drive, start the device, enroll in MDM, download the Agent, and access the device with a dynamically created account readily available on the Home screen.

Features

  • Create a pre-configured installation enrollment provisioning package file (.ppkg) and deploy to all Windows 10 and 11 endpoints. 
  • Highly scalable: bulk enroll devices with the same configuration files quickly and efficiently. 
  • Reduce the time it takes to deploy from hours to minutes.  
  • Reduce the calls to Support for manual deployments.

Prerequisites

  • Make sure your device is running Windows 10 or 11.
  • Install Windows Configuration Designer.
  • Admin must have “Administrator” or “Administrator with Billing” privileges to download the XML configuration from the JumpCloud Admin Portal. 
  • Internet access is required.
  • To streamline the provisioning process for you and your end-users, enable self-service account provisioning. For more information, see Provision New Users on Device Login.

Create a Provisioning Package

Download the JumpCloud configuration file and create a provisioning package in WCD.

  1. Log in to the JumpCloud Admin Portal.
  2. Go to DEVICE MANAGEMENT > Devices.
  3. Download the configuration file.
    1. Click the Devices tab. 
    2. Click the + icon to add a new device.
    3. Click the Windows tab. 
    4. In the Windows Install section, click the Install via Configuration File tab, then click Download Configuration File.

Note:

Make sure you save the configuration file in a recognizable folder so that you can easily add the ICD customization file to it later.

  1. Import the configuration file.
    1. Open Windows Imaging and Configuration Designer (WCD).
    2. Go to File > Open Project.
    3. Browse to the ICD project file in the location where you stored the XML configuration file.

Note:

Make sure you open the ICD project file from a directory where the customizations.xml file is colocated. The pre-configurations will only work if the admins load the ICD project file from a directory that also has the customizations.xml.

  1. Select jumpcloud.icdproj and click Open.

Note:

A new tab in WCD displays with the provisioning package project.

  1. Add customizations in WCD.
    1. Configure an Admin account with administrator privileges.
      • Expand Accounts, and select Users.
      • In the UserName field, enter the name of the local admin user you want on your device, and then click Add. A red exclamation mark appears next to Users. 
      • Expand Users and then select the UserName field. 
      • In the Password field, enter a password. 
      • In the UserGroup field, select Administrators in the drop down.
    2. (Optional) To configure settings for wireless connectivity, make sure you have internet access and see the Microsoft documentation.
    3. (Optional) If you are using a Windows Home device, make sure you enter a Windows product key to upgrade to an MDM-compatible OS version.
  2. Export the provisioning package to a USB drive. 
    1. On the newly created tab in WCD, click Export then select Provisioning package.
    2. (Optional) Configure additional policy settings in the ICD project before export in the Settings section.
    3. The Build wizard displays. Go through the Build wizard options.
    4. (Optional) Encrypt and sign the package with a certificate.
    5. On the Select where to save the provisioning package screen, save the file to a USB drive. 
    6. Finish the Build wizard and then click Build. 
    7. When the build is complete, click Finish.
    8. Click Output location to make sure everything looks correct.

Note:

For more information, see the Microsoft documentation.

Apply a Provisioning Package

Apply a provisioning package from a USB drive during initial device setup.

  1. Start the Windows device on the initial setup screen.
  2. Insert the USB drive and click Install provisioning package, then click Next.

Note:
  • If there is only one provisioning package on the USB drive, the provisioning package is automatically applied. 
  • If nothing happens when you insert the USB drive, press the Windows key five times.
  1. When the .ppkg file is installed, remove your USB drive and Windows will continue provisioning the device.

Note:

It may take up to 5 minutes for the provisioning package to finish installing.

Apply a Provisioning Package to Previously Setup Devices (Non-OOBE)

Apply a provisioning package to a device that has been previously set up.

  1. Go to Settings > Accounts > Access work or school > Add or remove a provisioning package, then click Add a package.
  2. In the Choose a method section, select Removable Media.
  3. Select the JumpCloud .ppkg file you want to apply, then click Add.
  4. Confirm you want to allow the file to make changes to your device, and that it is from a trusted source.

Note:

For more information, see the Microsoft documentation.

Back to Top

List IconIn this Article

Notebook IconLearn More

Get Started: Windows MDM

Provision New Users on Device Login

Admin Portal Roles

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case