VMware WorkspaceONE Auto Enrollment with MDT

Prep

• Grab the staging account credentials from Groups & Settings –> All Settings –> Devices & Users –> Windows –> Window Desktop –> Staging & Provisioning. Grab the “UPN” and “Secret”.
• Double-check that you don’t have SAML turned on for this Organization Group. You can check by going to System–> Enterprise Integration –> Directory Services. Scroll down to Advanced and check whether “Use SAML for authentication” is enabled. If so, you will need to create a sibling OG (i.e. one that is at the same level as this OG) and use the staging account from there. NOTE: In 1811, this SAML limitation is going away and it will not be required to create a separate OG if SAML is turned on.
  
• Sync your domain users into Workspace ONE Console using the ACC
• Domain join setup as part of your MDT Task Sequence
  ​

Setup MDT

1. Download the latest Workspace ONE Hub agent (AirwatchAgent.msi) from https://getwsone.com/
2. Place these in a temp folder somewhere on your deployment share (I usually use C:\Staging).
   
3. In the MDT workbench, create a new Application.
4. Select “Application with Source Files” and click Next.
5. Specify application details
6. 
7. Specify source directory (in my case c:\staging\workspaceONE)
8. Specify the name of the target directory that will be created (I usually leave default)
9. Command Line:  msiexec /i AirwatchAgent.msi /quiet ENROLL=Y SERVER=[servername] LGName=[OGname} USERNAME=[UPN of staging user] PASSWORD=[staging user secret]
   1. Server = Your enrollment server info found by going to Settings –> System –> Advanced –> Site URLs. Grab the Devices services url but truncate it so that it looks like this format:
      yourserver.awmdm.com
   2. LGName = The OG Group ID you want to enroll at. Mouse over the OG in the console to get the Group ID.
      
   3. Username/Password = the UPN and secret of your staging user
      
10. Click Next, Next, and then Finish.
11. Now go to your deployment Task Sequence. Browse down to the “State Restore” section and expand the Custom Tasks folder. Or you can simply create a new “Standard Client Task Sequence”. I like to move all tasks (such as deploying apps or scripts) into this folder.
12. Click Add –> General –> Install Application
    
13. Select “Install Single Application” radio button.
14. Browse for the VMware Workspace ONE 1810 Application you created earlier.
15. I like to copy/paste the Name of the Application into the “Name” field.
    
16. Click Apply.
17. Run through your Task Sequence and this application will install in the administrator account after the OS is deployed. I am assumed you have domain-join setup as part of this task sequence as well so then after the TS has completed, simply log in as your domain user and that user will be automatically enrolled.