Enable Windows device management

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; Cloud Identity Premium. Compare your edition

To manage Microsoft Windows 10 or 11 device settings through Google endpoint management, you need to turn on Windows device management, which is turned off by default. You need to turn on Windows device management whether you use it in standalone mode or with Google Credential Provider for Windows (GCPW).

Step 1: Review Windows settings

When you enable Windows device management, the Windows settings in the Google Admin console are applied to Windows 10 or 11 devices in your organization. We recommend that you review and edit those settings first. For details, go to Apply settings for Windows 10 or 11 devices.

Step 2: Enable Windows device management

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile and endpointsSettingsWindows.
3. Click Windows management setup.
4. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
5. Next to Windows device management, select Enabled.
6. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit. 

Next steps

• If you install GCPW on users' devices and leave automatic enrollment enabled, the devices are automatically enrolled in Windows device management and any settings you configured are applied during the next sync. Review the setup steps to confirm your setup is complete.
• If you don't install GCPW on users' devices, you need to enroll devices. For details, see Enroll a device in Windows  device management.