Device Enrollment

MDM - Device Enrollment

Enrolling Devices is the first stage in managing a mobile device, this document will explain you in detail about various steps involved in enrolling the device.

Follow the steps mentioned below to enroll the devices.

Enrolling Devices

  1. Click  MDM tab on the Mobile Device Manager Plus Console.

  2. Under Settings click on Enrollment

  3. Click  Enroll Device and fill in the appropriate information.

  4. Domain Name : Choose the Domain Name from the drop down, if you do not have any domain name, select  Default Workgroup

  5. User Name- Enter the user name of the device that needs to be enrolled.

  6. Email address :It is mandatory to  enter the email address of the user who will receive the enrollment request.

  7. Platform: Specify the platform from the drop down menu, as iOS or Android. You can also configure the email template which will be sent as the enrollment invitation.

  8. Owned By : Owner of the device either Corporate or Personal

  9. Click Enroll to enroll the device.

  1. Ensure that you configure your Proxy settings, and the mail server settings, so that you the user can receive the email with the authentication passcode.

After enrollment, Users will receive an e-mail with the  enrollment instructions and the link to enroll the devices. Based on the authentication policy defined for enrollment, users will be receiving the authentication passcode.  Users need to manually install the MDM profile by clicking on the enrollment request. All enrolled devices will be listed in the Devices Tab in the Mobile Device Manager Plus MDM console under Groups and Devices.

Enroll Additional devices for same user

You can enroll multiple devices for the same user. In case a user has more than one mobile device that needs to be managed,  you can enroll those devices by following the steps mentioned below;

  1. Click MDM Tab

  2. Under Settings choose Enrollment

  3. Under Enrollment tab choose the User Name to whom you wanted to enroll the additional device

  4. Under Actions click   button

  5. Specify the Platform as iOS or Android

  6. Specify the  Owned By type as Corporate or Personal and click Enroll

The mail to enroll additional device would be sent to the specified user.

 

Bulk Enrollment

This option facilitates you to enroll many devices at a same time. You can simply create a csv file with the User Name, Email, Platform and Owned by details and upload the same. Multiple entries should be in separate lines. Refer the below mentioned csv file for example,

Sample CSV Format :
     USER_NAME,EMAIL_ADDRESS,PLATFORM_TYPE,OWNED_BY,GROUP_NAME,UDID

     ANDREW,andrew@mobiledevicemanagerplus.com,iOS,Personal,IOS_Group,00f0ba8f7a6c41cca9cc5fd6b7ee666b
     ANDREW,andrew@mobiledevicemanagerplus.com,Android,,Android_Group,
     BEN,ben@mobiledevicemanagerplus.com,Android,Corporate,Android_Group,
     MIKE,mike@mobiledevicemanagerplus.com,Windows,Corporate,Windows_Group, 

Note : 
     1. The CSV file should contain the following fields: User Name, Email Address, Platform Type, Owned By, Group Name and UDID.
     2. UDID is applicable only for iOS devices
     3. The fields User Name, Email Address and Platform Type are mandatory. All the other fields are optional. If not provided, default values will be taken.

     4. The default values for various non-mandatory fields are: 
               Owned By -- Corporate
               Group Name -- Default Group for given Owned By & Platform Type.
     5. The first line of the CSV is the column header and the columns can be in any order.
     6. Blank column values should be comma separated.
     7. If the column value contains comma, it should be specified within quotes.

 

Follow the steps mentioned below, to enroll devices through Bulk Enrollment.

  1. Click  MDM tab on the Mobile Device Manager Plus Console

  2. Under Settings Click on Enrollment

  3. Click  Bulk Enrollment . A window opens, click Browse to upload the created CSV file and Import the same.

Enrollment mail will be sent to all the users listed in the csv file.

Enrollment Process on iOS devices

The users, upon receiving the enrollment requests, can enroll their device as below:

  1. Users should note down the Unique Passcode. Passcode is case sensitive.

  2. Clicking the link in the e-mail will open a window to accept the passcode.

  3. User should specify the passcode received in the e-mail and click Continue. It will validate the passcode and present a confirmation screen. Click Continue.

  4. Click Install to install the profile. 

  5. It will display a warning message. Read and click Install.

  6. The profile will be installed. 

  7. Click Done to view the enrollment status

The device have been enrollment process has been successfully completed and the device will be listed in Mobile Device Manager Plus.

Once the device enrollment is completed, the device will be scanned and the users will receive a App Catalog and MDM Profile . All the Apps that are distributed by Mobile Device Manager Plus will be listed in the App Catalog.  Users can choose the App and install them by clicking on it. Incase of App store App, by clicking on the App users will be prompted to enter their Apple ID and password and the App will be downloaded from the App store. MDM profile is the profile used by Mobile Device Manager Plus to manage the mobile device, if the user removes the MDM Profile, then all the Apps that has been installed  through Mobile Device Manager Plus and the policies applied will be reverted.

 

Enrollment Process on Android devices

The users, upon receiving the enrollment requests, can enroll their device as below:

  1. User needs to copy the Server Name, Port Number and passcode given in the e-mail.

  2. Users can download the MDM Android App in the device.

  3. Once the download has been successful, Users will be prompted to Click "Install" to start installation.

  4. After the installation gets completed, Users will be prompted to enter the below requested information which were already sent through e-mail.

  5. User needs to provide the One Time password.

  6. User needs to Accept the Terms and Conditions to complete the installation.

  7. Users need to enable Device Administrator in their mobile device.

  8. By Clicking "Activate" the enrollment process would succeed.

  9. MDM App icon will be listed in the mobile device.

  10. By clicking the MDM App icon, MDM App opens and the end user can see the distributed Apps and associated profiles listed here.

 

Apps that are distributed by Mobile Device Manager Plus will be listed in App Catalog. Profiles that are associated to the devices will be listed under Policies and Restrictions. Device Details will provide the complete information about the device.  

Enrollment Process on Windows devices

This section will explain you on the following:

Enrolling Windows 8 phones

Using OTP

The users, upon receiving the enrollment invitation, can enroll their device by following the below mentioned steps on their mobile device:

  1. On the mobile device that needs to be enrolled, go to Settings

  2. Touch Company Apps

  3. Touch Add Account

  4. Enter the corporate Email address, on which has enrollment invitation has been received. Enter the OTP which has been received in the email and touch Sign In.

  5. Do not enter the Active Directory User Name or Domain. Enter the serve name as provided in the mail and touch Sign In

  6. You can see that the account has been added. Touch Done.

Your windows device has been successfully enrolled.

Using Active Directory Credentials

The users, upon receiving the enrollment invitation, can enroll their device by following the below mentioned steps on their mobile device:

  1. On the mobile device that needs to be enrolled, go to Settings

  2. Touch Company Apps

  3. Touch Add Account

  4. Enter the corporate Email address, on which has enrollment invitation has been received. Enter the Active Directory Password and touch Sign In

  5. Enter the Active Directory User Name, Domain Name and the Server url, which has been received in the email, touch Sign In

  6. You can see that the account has been added. Touch Done.

  7. You can see that you have successfully enrolled the windows device.



As soon as the devices are enrolled successfully, the device will be scanned automatically and the device details will be updated in the Mobile Device Manager Plus server. You can see the hardware details and details of the Apps that are installed on the device. ME MDM App will be distributed to the managed mobile device.

Enrolling Windows 8.1 phones and later versions

Using OTP

The users, upon receiving the enrollment invitation, can enroll their device by using their Active Directory credentials as explained below:

  1. Go to Settings, touch Workspace and click add account

  2. Specify your email address

  3. Specify the Server Name and touch sign in

  4. Enter your One Time Password and sign in

Your windows device has been successfully enrolled.

Using Active Directory Credentials

The users, upon receiving the enrollment invitation, can enroll their device by using their Active Directory credentials as explained below:

  1. Go to Settings, touch Workspace and click Add Account

  2. Specify your e-mail address.

  3. Specify the Server Name and touch Sign in

  4. Enter your Active Directory credentials and sign in.

Your windows device has been successfully enrolled.


Once the device enrollment is completed, the device will be scanned and the users will receive a App Catalog and MDM Profile . All the Apps that are distributed by Mobile Device Manager Plus will be listed in the App Catalog.  Users can choose the App and install them by clicking on it. MDM profile is the profile used by Mobile Device Manager Plus to manage the mobile device, if the user removes the MDM Profile, then all the Apps that has been installed  through Mobile Device Manager Plus and the policies applied will be reverted.

MDM Audit

After the Devices are enrolled, you can also view the list of devices, enrolled as per the enrollment time and date. To audit the devices managed by Mobile Device Manager Plus, follow the steps mentioned below:

  1. Click MDM Tab

  2. Select Enrollment under Settings

  3. Click  Audit.

You can audit the managed mobile devices, by their associated Groups, enrollment time, date, device name, OS version,model name, product name etc.

 

Troubleshooting Tips

1. Users did not receive the Enrollment Request via Email

  1. Check whether you have configured the Mail Server settings

2. Users are unable to access the URL sent via Email

  1. Mobile Device Manager Plus server is not running or not accessible by the users.

  2. Check if the firewall running in Mobile Device Manager Plus Server is blocking the communication (at port 9020/9383)

  3. If the users are outside LAN, they should be able to reach the Mobile Device Manager Plus Server via public IP. Check whether the NAT Settings is configured in Mobile Device Manager Plus (MDM --> NAT Settings)

3. Users have installed the profile, but their devices are not listed in the Mobile Device Manager Plus

  1. The device is not able to reach APNs/GCM. Check whether your WiFi allows communication at port 5223

  2. If WiFi is disabled on the device, it should have access to Cellular Data network

 

  1.  

     

     

     

Copyright © 2005-2015, ZOHO Corp. All Rights Reserved.
ManageEngine