How to enroll Android devices with MDM?

Mobile Device Manager Plus allows organizations to manage commericial and rugged devices. The first step to Android device management is to register the Android device with MDM. Mobile Device Manager Plus provides multiple device enrollment methods to meet the varying needs of organizations. Use any of the mentioned methods to enroll device into MDM.

Profile Owner and Device Owner

With the advent of Android Enterprise, Android devices support additional configurations and features. Corporate-owned devices can be provisioned as Device Owner, using multiple methods as listed here.

Enrollment using Invitation

This is the fastest way of enrolling mobile devices. As an administrator, you can send emails, with the Enrollment URL. Users will be able to enroll their mobile devices, only if they receive this email. Enrollment invitations can be sent to users manually or in bulk. When you use to manually select a user and send invite, then the enrollment URL is valid only to enroll one Android device with MDM. You can also choose to send enrollment invitations to multiple users as bulk enrollment.

Confused about the correct enrollment technique to be used for enrolling devices in your organization? Click here to know what is the most optimal enrollment technique, for your scenario.

Enroll Android Device Individually

The Enrollment URL on the email is specific for a particular user and good only to Enroll one Android device. If the user wants to enroll more than one device, then you will have to create multiple enrollment requests to register Android device. Learn more about the steps to enroll Android device with MDM here

Android Device Enrollment in Bulk

This option facilitates you to enroll multiple devices at a same time. You can simply create a csv file with the User Name, Domain Name, Email, Platform and Owned by details and upload the same. Multiple entries should be in separate lines. Learn more about Bulk Enrollment here

Most Suited for:

Most suitable for BYOD

When you want to limit the users to whom the enrollment invite should be sent

It works good when the users will be knowledgeable to complete the enrollment process by following the instructions which will be sent via email

If you wanted to use OTP or Two Factor Authentication for Enrollment

Points to be Noted:

Users will have to accept the invitation and initiate the enrollment process within 7 days

You will have to follow up with the users to complete the enrollment process

Enrollment without Invitation - Self Enrollment

Users do not require an invite from you. All you need to do, is share/publish the self enrollment URL. Using the self enrollment URL, users can enroll their devices, using their Active Directory/Azure credentials. The specified url needs to be accessed from the mobile device, which needs to be enrolled. Users do not have any restriction to enroll more than one device, as long as you have purchased sufficient license count to manage devices. Click here to know more about the Self Enrollment

Most Suited for:

If you wanted to use only Active Directory/Azure authentication for enrollment

A single user can enroll multiple devices

User does not require any invitation or approval for initiating enrollment

Points to be Noted:

This will not work for a workgroup set up

You will not have a track on the devices/users if the enrollment has failed

Enrollment by Administrator - Using NFC

You can enroll devices using NFC with the ManageEngine NFC Enrollment app. You will have to ensure that the devices support NFC and Wi-Fi is turned on the target device. You should manually configure a admin device and make it as a terminal. You can bump this device with the target devices to initiate the enrollment process. Learn know more about enrolling devices using NFC here

Most Suited for:

If you wanted to enroll corporate devices

You do not want user intervention

Points to be Noted:

This will not work if the device does not support NFC

You should have the device physically for bumping the device

Enroll Androi Devices with MDM

Follow the steps mentioned below to enroll the devices.

Ensure that you configure your Proxy settings, and the mail server settings, so that you the user can receive the email with the authentication passcode.

End users will receive an email with the enrollment instructions and the link to enroll the devices. Based on the authentication policy defined for enrollment, users will be receiving the authentication passcode. Users need to manually install the MDM profile by clicking on the enrollment request. ME MDM App (android agent) will be installed on the device. All enrolled devices will be listed in the Devices Tab in the Mobile Device Manager Plus console under Groups and Devices.

Enroll Additional devices for same user

You can enroll multiple devices for the same user. In case a user has more than one mobile device that needs to be managed, you can enroll those devices by following the steps mentioned below;

The mail to enroll additional device would be sent to the specified user.

Bulk Enrollment

This option facilitates you to enroll multiple devices at a same time. You can simply create a csv file with the User Name, Domain Name, Email, Platform and Owned by details and upload the same. Multiple entries should be in separate lines. Refer the below mentioned csv file for example,

Sample CSV Format

     USER_NAME,DOMAIN_NAME,EMAIL_ADDRESS,PLATFORM_TYPE,OWNED_BY,GROUP_NAME
     ANDREW,andrew@mobiledevicemanagerplus.com,Android,,Android_Group,      BEN,ZOHOCORP,ben@mobiledevicemanagerplus.com,Android,Corporate,Android_Group,   Note :       1. The CSV file should contain the following fields: User Name, Domain Name, Email Address, Platform Type, Owned By, Group Name      2. The fields User Name, Email Address and Platform Type are mandatory. All the other fields are optional. If not provided, default values will be taken

     3. The default values for various non-mandatory fields are:                 Domain Name -- MDM                Owned By -- Corporate
               Group Name -- Default Group for given Owned By & Platform Type.
     4. The first line of the CSV is the column header and the columns can be in any order.
     5. Blank column values should be comma separated.
     6. If the column value contains comma, it should be specified within quotes.

Follow the steps mentioned below, to enroll devices through Bulk Enrollment.

  1. On the web console, navigate to Enrollment

  2. Click  Bulk Enrollment. A window opens, click Browse to upload the created CSV file and Import the same.

    Enrollment mail will be sent to all the users listed in the csv file.

Enrollment Process on Android devices

The users, upon receiving the enrollment requests, can enroll their device as mentioned below:

User needs to copy the Server Name, Port Number and passcode given in the email. The following steps will explain you the enrollment process on the android device. If the user's device is a normal android device, ME MDM App for android devices will be downloaded. If the user's device is a SAFE device, then an ME MDM App that has been exclusively designed for SAFE devices will be downloaded. ME MDM App for SAFE devices has advanced management capabilities unlike normal android devices.

Apps that are distributed by ME MDM will be listed in App Catalog. Profiles that are associated to the devices will be listed under Policies and Restrictions. Device Details will provide the complete information about the device.

Removing an Enrolled Device

Removing the device will remove all the profiles and apps associated with the device. However, ME MDM App in the device will not be removed. Users must manually remove the app if required.

Click here to know about the ports to be opened for managing mobile devices.

See Also: Device Authentication,Enroll iOS Devices, Enroll KNOX Devices, Enroll Windows Devices, Self Enrollment,Customize ME MDM App
Copyright © 2020, ZOHO Corp. All Rights Reserved.
ManageEngine