Skip to main content
Matrix42 Self-Service Help Center

Windows 10/11 Bulk Enrollments via Provisioning Packages

  1. Last updated
  2. Save as PDF

Enrollment via Provisioning Package

A provisioning package (*.ppkg) is a file for a collection of configuration settings. For Windows 10/11 Devices, Administrator can create provisioning packages that let you quickly configure a device without the need of installing images. Additionally, provisioning packages can be used to enroll devices into a Mobile Device Management like Silverback. With the bulk provisioning method via provisioning packages it is very easy to enroll and configure multiple devices with a standard user account quickly. To use bulk provisioning, download the Windows Configuration Designer tool from the Microsoft Store. This tool creates provisioning packages used to image devices. As part of these provisioning packages, you can include Silverback configuration settings so that provisioned devices will be automatically enrolled into Silverback. Please note that admin permissions are required to run the provisioning package. The step by step guide will use for the migration or staging scenario a user called migration. 

It is also possible to create individual Provisioning Packages and send them to users e.g., via E-Mail or as a OneDrive link. Use for this the Provision User option instead of Bulk Provision Users later in this guide and create a new pending enrollment for the user without enabling the Bulk Staging Mode. Afterwards enter the enrollment information into the Provisioning Package.

Create your Migration User

If Silverback is connected to LDAP, there is no need to create the new migration user in the Silverback Management Console. Just simply create or use a Service Account in or from your Directory and skip this section and proceed with Enable Bulk Staging Mode

  • Login as an Administrator into Silverback
  • Navigate to Users
  • Click New Device User
  • Enter as Username e.g. migration@imagoverum.com
  • Add the following information
    • First Name
    • Last Name
    • Email Address
    • Password
    • Confirm Password
  • Click Save

Enable Bulk Staging Mode

  • Navigate to Admin > Self Service > One Time Passwords
  • Enable Allow Multiple Pending Enrollments
  • Enable Activate Bulk Staging Mode
  • Set OTP Expiration Date to unlimited
  • Add your Migration User, e.g migration@imagoverum.com

Create a new Bulk Enrollment

  • Navigate to Devices
  • Click Pending
  • Select Bulk Provision Users
  • Click Create New Bulk Provision User
  • Enable Define OTP
  • Enter a OTP, e.g. 4444

Create and upload a *.csv file 

  • Create the *.csv file
    • Open any Text Editor, e.g. Notepad++
    • Enter in the first line your created username, e.g. migration@imagoverum.com
    • Copy the username and paste it as often a you want in the lines below
    • Save the file as *.csv

Each Created Pending Enrollment will bind one license, so do not exceed your remaining Silverback licenses.

  • Upload the *.csv file
    • Navigate back to Silverback
    • Select Choose File and upload your created *.csv file
    • Provide LDAP or Local User Credentials to authorize this action
    • Click Submit
    • Depending on the amount of lines in the *.csv, the process may take a while, so proceed with next steps

Download Windows Configuration Designer 

  • Open on a Windows 10/11 device the Microsoft Store
  • Search for Windows Configuration Designer
  • Download and Install Windows Configuration Designer
  • Click Launch

Create Provisioning Package

  • Select Advanced provisioning
  • Enter a Name and Description (optional) and click finish
  • Select All Windows desktop editions and click next
  • Click Finish
  • Expand Runtime settings in the left pane
  • Left click Workplace
  • Click Add in the middle pane
  • Enter as UPN your created user, e.g. migration@imagoverum.com
  • Click Add
  • Double Click on the newly generated Enrollment
  • Configure the Enrollment as following:
    • Change Auth Policy to OnPremise
    • Enter as DiscoveryServiceFullUrl: e.g. https://silverback.imagoverum.com/En.../Discovery.svc
    • You find your Discovery URL under Settings Admin > Windows Phone > Enrollment URL. You need to add Discovery.svc at the end 
    • Enter as Secret your defined OTP, e.g. 4444
  • Click File and Save your project
  • Click Export and select Provisioning Package
  • Provide a name, e.g. Matrix42 UEM Migration and click Next
  • Click Next (3x)
  • Click Build
  • Open your Output Location and click Finish

Run the provisioning package

  • Copy the created *.ppkg file to your Windows 10/11 Device
  • Execute the *.ppkg file on the device and follow the instructions
  • Navigate to Settings > Accounts > Access work or school
  • After a successful run the device should be enrolled into Silverback