Deploying SureMDM Agent for Dual Enrollment


Devices enrolling in Autopilot via SureMDM by default enroll as EMM enrolled devices. To leverage complete functionality of SureMDM for managing Windows devices, Dual Enrollment is recommended.
Below are steps to deploy SureMDM agent to EMM enrolled devices seamlessly
1. Login to SureMDM Web Console.

2. Go to Settings > Account Settings > Customize Settings > Customize SureMDM Agent/SureLock > Windows.

3. Click Edit Settings.

4. Paste the below basic xml in the App Settings text box:

<NixSettings>
<EnableNix>true</EnableNix>
<ServerPath>Enter ServerPath here</ServerPath>
<Password />
<DeviceEntityStatus>PREAPPROVED</DeviceEntityStatus>
<DeviceID />
<CustomerID>Enter AccountID here</CustomerID>
    <NewIDType />
    <NameType>MachineName</NameType>
    <IDType>SYSTEMID</IDType>
<EnableMailbox>true</EnableMailbox>
    <IsApproved>true</IsApproved>
</NixSettings>

Note: Please reach out to 42Gears support for any additional available key pairs.

5. Click Done. 

6. Click Generate and then download the .exe of SureMDM Agent.

7. After downloading the .exe file in Step 6, convert it to the .msi format using any suitable tool before proceeding to the next step.

Note: A .msi file can only be deployed on a devices enrolled in an EMM. When generating the .msi file, make sure to use the install switch /verysilent to ensure a silent installation process.

8. Upload the .msi file to SureMDM console.

  • SureMDM console > App Store > Windows > Add New App > Select MSI File.
  • Provide the URL where .msi file of SureMDM Agent is hosted > Click on Add.
  • Update App Title, Category and Description > Click save.

9. Browse to SureMDM console > Profiles > Windows > Application Policy > Add > Windows App Store > Choose SureMDM Agent uploaded in previous step > Add.

10. Enter the Profile Name and click Save. Deploy these to group of EMM enrolled devices.

11. Once the process is completed, EMM-enrolled devices will be Dual Enrolled seamlessly without requiring any user intervention. As a result, the device will now fully support all the capabilities of SureMDM.