Introduction to Windows 10 Management with Workspace ONE #2

In this article, as a continuation of the previous article, I’m going to try to show you how to configure and deploy restriction profiles and applications to your enrolled device.

Configuring a Device Profile for Windows 10

Profiles allow you to modify how the enrolled devices behave. In this section we configure and deploy a restrictions profile that we can verify has applied to the device later in the section.

In the upper-right corner of Workspace ONE UEM Console:

  1. Select Add and Select Profile.

2. Select the Windows icon.

3. Select Windows Desktop.

4. Select Device Profile.

5. Enter a profile name in Name field and click in the Smart Groups field. Select the All Devices.

6. Select the Restrictions tab then click the Configure button to set restrictions.

7. Set restrictions and click Save & Publish.

8. Click Publish.

9. We navigate to Profiles List View. Select Devices -> Profiles & Resources -> Profiles. We should now see our Restriction Profile within the List View of the Device Profiles window.

NOTE: To edit the profile, click the profile name, then select Add Version. Update the profile and click Save & Publish to push the new settings to the assigned devices.

Delivering Apps on Windows 10

Applications can be distributed to Windows 10 devices, allowing for a seamless user experience. Now we will create and distribute an application to Windows 10 device.

In the upper-right corner of Workspace ONE UEM Console, Select Add -> Select Internal Application.

I seem to hear you say what the internal application is. So, let’s talk briefly about the types of applications.

  • Internal Applications: These applications are being developed internally. Applications can be installed in the Workspace ONE UEM console or imported from an external application pool. These applications are also known as “Enterprise Applications”.
  • Public Applications: These applications are available in the platforms’ own stores (App Store, Play Store, Windows Store, etc.).
  • Purchased Applications: These applications are categorized as VPP (Volume Purchased Program) and Custom B2B applications. VPP allows businesses and educational institutions to purchase publicly available iOS applications. B2B applications are third-party iOS applications developed specifically for distribution to corporate devices.
  • Web Applications: Web applications allows end users to access a specific URL directly through an icon in the menu of their device.

Okay, let’s continue creating our app. When we select the Internal Applications, a pop-up screen will open. With “Upload” we will upload the exe file of our application.

When upload process finished, click Continue.

In Details tab, enter the Application Name and select the Supported Processor Architecture.

Select the Files tab. Scroll down to find the App Uninstall Process section and enter the following for Uninstall Command:7z1604-x64.exe /Uninstall

Select Deployment Options. Scroll down until you see the option for Install Command. Enter Install Command as: “7z1604-x64.exe /S”

Scroll down to find the When To Call Install Complete section. Select Defining Criteria for Identity Application By. Click Add.

Select File Exists for the Criteria Type. Enter your exe file path for the Path. Click Add.

After all settings are completed, click Save and Assign. Then select Assignment Groups and App Delivery Method (Auto or on Demand). Click Save and Publish.

When Windows 10 device is enrolled, the restriction profile and application created earlier will be installed on the device.

When we go to Local Disk -> Program Files, we can see the application was installed.

Unenrolling Windows 10 Device

Until here we enrolled and configured the Windows 10 device. Then we pushed the app into it. After we have done all these things if we want to delete this machine from our environment how we do this? Of course by unenrolling the device. Let’s look at how we do this.

To delete the device enrollment, we will delete the enrollment from the console. This also removes all applications and profiles pushed from the Workspace ONE UEM console.

From the Workspace ONE UEM Console,

  1. Click on Devices
  2. Click on List View
  3. Select the check box next to your device friendly name.
  4. Click on More Actions
  5. Click on Delete Device

6. Enter reason and click Delete.

When the deletion is finished, the device will be removed successfully and no devices will appear in List View.

In addition to managing mobile devices, Workspace ONE UEM can also manage your Windows 10 applications as well.

I hope this article about Windows 10 management gives you a clear picture of how you can manage your Windows 10 devices by configuring restrictions and profiles and deploying applications.

Solution Engineer @VMware