Enroll a device in Windows device management

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; Cloud Identity Premium. Compare your edition

To apply settings and manage your organization's Microsoft Windows devices through Google endpoint management, the devices must be enrolled in Windows device management.

Do you need to manually enroll devices?

How you enroll devices depends on whether you install Google Credential Provider for Windows (GCPW):

• If you install GCPW on a device, you don't need to manually enroll the device and can skip the following instructions. GCPW automatically enrolls the device in Windows device management when the user first signs in with their Google Account unless you disable automatic enrollment.
• If you don't install GCPW, follow these instructions to enroll the device.

Requirements

Before you can enroll devices:

• Enable Windows device management.
• You must have administrator privileges on the Windows 10 device. See Set account permissions on Windows 10 devices.
• The device must have Windows 10 or 11 (Pro, Pro for Workstations, Enterprise, or Education).
• The user account you use to enroll the device must have a Google Workspace or Cloud Identity license that supports Windows device management (listed at the top of this article). To review which license a user has, open their user details in the Admin console.

Enroll a Windows device

1. Sign in to the Windows 10 device.
2. Open https://deviceenrollmentforwindows.googleapis.com/v1/deeplink in a Chrome or Edge browser.
3. Confirm that you want to switch apps.
4. Enter the Google email address you want to enroll the device with.
5. Click Next to start device enrollment.
6. Sign in to your managed Google Account.

If you get an error during enrollment, review the requirements.

Verify enrollment of a Windows device

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Go to Menu  DevicesOverview.
3. Click Endpoints.
4. Click Add a filterManagement TypeEnhanced desktop securityApply to show only devices enrolled in Windows device management.