Declared configuration enrollment

• Applies to:

  ✅ Windows 11, ✅ Windows 10

Windows declared configuration (WinDC) enrollment uses new DMClient CSP policies to facilitate dual enrollment for Windows devices. This process involves setting specific configuration service provider (CSP) policies and executing SyncML commands to manage the enrollment state.

The key CSP policies used for WinDC enrollment include:

• LinkedEnrollment/Enroll
• LinkedEnrollment/Unenroll
• LinkedEnrollment/EnrollStatus
• LinkedEnrollment/LastError
• LinkedEnrollment/DiscoveryEndpoint

The following SyncML example sets LinkedEnrolment/DiscoveryEndpoint and triggers LinkedEnrollment/Enroll:

<SyncML xmlns="SYNCML:SYNCML1.1">
    <SyncBody>
        <Replace>
           <CmdID>2</CmdID>
            <Item>
                <Target>
                    <LocURI>./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/DiscoveryEndpoint</LocURI>
                </Target>
         <Data>https://discovery.dm.microsoft.com/EnrollmentConfiguration?api-version=1.0</Data>
            </Item>
        </Replace>
        <Final/>
    </SyncBody>
</SyncML>

<SyncML xmlns="SYNCML:SYNCML1.1">
    <SyncBody>
        <Exec>
            <CmdID>2</CmdID>
            <Item>
                <Target>
                    <LocURI>./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/Enroll</LocURI>
                </Target>
           </Item>
        </Exec>
        <Final/>
    </SyncBody>
</SyncML>