Enrol a Windows device

Time needed: about 10 minutes. You need: the laptop, internet, an account on the laptop with administrator rights, and an enrolment token from the console.

Unlike Android, Windows enrolment does not erase the machine. Files and installed programs stay where they are.

Step 1 — Create the token

1. In the console, go to Devices → Enrol new device.
2. Choose Windows · Enrolment URL.
3. Type the group name into Enrol into group.
4. Set Expires in and Max uses — one use per laptop is the safe default.
5. Select Generate token.
6. Reveal and copy the token, and note the enrolment URL shown underneath. The token is shown once.

Send them to whoever is setting up the laptop, or keep them on screen if it is you.

Step 2 — Connect on the laptop

1. Open Settings → Accounts → Access work or school.
2. Select Connect.
3. Choose Enrol only in device management (the small link under the sign-in box).
4. Enter the enrolment URL when asked for a server address, and the token when asked to authenticate.
5. Wait while Windows connects. You will see a confirmation when it is done.

Step 3 — Confirm in the console

1. Go to Devices and find the laptop's serial number.
2. Check the group is right and the last check-in is recent.
3. Select Sync now and watch it complete on the device's command timeline.

Windows devices check in every few minutes, so policy and app changes land quickly.

If it goes wrong

Removing a Windows device from management

Use Selective wipe from the console. It unenrols the laptop and removes the organisation's data and settings, but leaves the machine working and personal files alone. Do not use full Wipe unless you genuinely want to erase the whole machine.