Enrollment methods
There are several ways to enroll a Windows device to Snow Device Manager. Customers will choose enrollment strategies based on whether they allow corporately owned devices (CORP) only or a mix of corporately and privately owned devices (BYOD or Bring Your Own Device). The chosen strategy will also depend on if the customer has an Azure AD or not.
The chosen strategy has implications on if the enrollment is enforced and if the end user can remove Snow Device Manager from managing the device. With Snow Device Manager, the following enrollment methods are available.
Enrollment method | Azure AD present | BYOD or CORP | Enforced | Removable |
---|---|---|---|---|
Out of the Box Experience | Yes | CORP | Yes | No |
Post Azure AD join | Yes | CORP | Yes | Yes |
Privately owned devices | Yes | BYOD | No | Yes |
MDM Only enrollment | No | BYOD or CORP | No | Yes |
Out of the Box Experience
When using the Out of the Box Experience enrollment method, the corporately owned device must be enrolled before usage and the user cannot remove Snow Device Manager from managing the device.
No local account will be created and the end-user cannot remove Snow Device Manager from managing the device. The device is considered corporately owned and is managed on device level.
Post Azure AD Join
When a device is enrolled with the Post Azure AD Join enrollment method, the user signs in with a Work or school account using Azure AD credentials after installation and setup of the device.
The user may at a later time remove Snow Device Manager from managing the device. The device is considered corporately owned and is managed on device level.
Privately owned devices
A user with a personal device can get access to company resources by signing in with a Work or school account using Azure AD credentials.
The user may at a later time remove Snow Device Manager from managing the device. The device is considered privately owned and is managed on user level.
MDM Only enrollment
If no Azure AD is available, it is still possible to enroll to Snow Device Manager using the MDM Only enrollment method. The user may at a later time remove Snow Device Manager from managing the device. The device can be privately or corporately owned.