Windows Enrollment

Enroll Windows 10/11 devices via native MDM (OMA-DM) or the NOCKO agent package.

🔗 MDM Server Endpoints

MDM Enrollment URL

Entra ID → Mobility → MDM User Scope → Discovery Service URL

🏢 Azure Entra ID Setup

In Entra ID → Mobility (MDM and WIP), add NOCKO MDM as an app. Set MDM User Scope to All or a specific group.

Set MDM Discovery URL to: https://mdm.nocko.com/mdm/microsoft/enrollment

On the Windows device: Settings → Accounts → Access work or school → Connect. Sign in with Entra ID credentials — the device auto-enrolls.

The device appears in Enrollment → Devices with status Enrolled.

💻 PowerShell Manual Enroll

Run as Administrator

# Enroll device to NOCKO MDM via OMA-DM
$ServerURL   = "https://mdm.nocko.com/mdm/microsoft/enrollment"
$EnrollToken = "YOUR-ENROLLMENT-TOKEN"

$body = @{ token = $EnrollToken; server = $ServerURL } | ConvertTo-Json
Invoke-RestMethod -Method Post \
  -Uri "$ServerURL/enroll" \
  -Body $body -ContentType "application/json"
Write-Host "Enrollment complete."

Which method to use?

Windows Autopilot ← you are here

·Native OMA-DM (built into Windows)

·Requires Azure Entra ID tenant

·Zero-touch for domain-joined orgs

Deployment Package →

·Standalone NOCKO agent (no Azure needed)

·Works on any Windows 10/11 (domain or workgroup)

·Single EXE/ZIP with token embedded

For MSP deployments without Azure, use the Deployment Package approach.