Branding settings for Windows devices

Information about customizing enrollment settings for Windows devices in your organization.

Branding settings for Windows Home MDM devices

Before an administrator can send out device enrollment requests to users, the administrator must configure the Windows Home Setup page using branding settings. These settings allow users to enroll their device in the MaaS360® Portal. The administrator only needs to configure these settings one time, unless the administrator needs to modify this configuration later.

Configuring branding settings
  1. Make sure that the Windows Laptop and Desktop Management service is enabled in the MaaS360 Portal at Setup > Services. The branding settings are only available if the Windows service is enabled.
  2. From Setup > Settings > Device Enrollment Settings > Basic, the following message is displayed for the default enrollment settings:
    • For the Authenticate against Corporate Active Directory setting:
      Your users can add a new device from the URL: https://m.dm/<Account Id>
Configuring Windows Home parameters under Branding > Unified Enrollment Configuration is required for Windows Home enrollment. Learn more
    • For the Two-factor Authentication setting:
      Users will have to provide corporate credentials and enter a one-time passcode which will be generated automatically and sent to the user on email and SMS.
Your users can add a new device from the URL: https:https://m.dm/<Account Id>
Configuring Windows Home parameters under Branding > Unified Enrollment Configuration is required for Windows Home enrollment. Learn more
    • For the Authenticate using SAML setting:
      Click here to configure SAML server settings
Your users can add a new device from the URL: https://m.dm/<Account Id>
Users will need to be first imported into MaaS360 user directory before they can enroll or activate devices.
Configuring Windows Home parameters under Branding > Unified Enrollment Configuration is required for Windows Home enrollment. Learn more
  3. To use the Add Device workflow (Devices > Enrollments > Add Device) or the Add User workflow (User > Directory > Add User) to enroll devices, you must also configure the following branding settings.
    Add Device workflow: Add User workflow:
    • Device Addition Mode
    • Username
    • Domain
    • Email
    • Phone Number
    • Notify User
    • Copy Email
    • Managed Apple ID
    • User Groups
    • Phone Number
    • Location
    • Add New Device
    • Notify User
    • Copy Email
  4. Click Branding (Setup > Branding or Enrollments > Add device or Users > Directory > Add user). The Brand My Portal page is displayed.
  5. Go to the Unified Enrollment Configuration section. The following two options customize enrollment settings for Windows Home MDM devices:
    Branding setting Description
    Windows Home setup link The secure link to the Windows Home setup page where the user enrolls their device.
    Additional instructions on Windows Home edition device enrollment page The secure location where the SelfExtractingOA.exe file is stored.

    Follow the procedure in Configuring the Windows Bulk Provisioning Tool configuration wizard to create a bulk provisioning tool executable to generate the SelfExtractingOA.exe file.

    Types of Windows Home setup pages
    • If you leave information in the Windows Home setup link and the Additional instructions on Windows Home device enrollment page sections blank, Windows Home setup is disabled and the following message is displayed to the user when they try to enroll their device: 
      Setup file missing. Contact your IT administrator for further assistance.
    • If you provide a secure link in the Windows Home setup link section only, Windows Home setup is enabled when the user try to enroll their device:
    • If you provide additional information in the Additional instructions on Windows Home device enrollment page section only, Windows Home setup is disabled and the following message is displayed to the user when they try to enroll their device: 
      Please provide valid path to download the SelfExtractingOA.exe file in Windows Home setup link textbox section.
    • If you provide both a secure link and additional information in the Windows Home setup link and Additional instructions on Windows Home device enrollment page sections, Windows Home setup is enabled and the following message is displayed to the user when they try to enroll their device.
      Please provide valid path to download the SelfExtractingOA.exe file in Windows Home setup link textbox section.