Abstract: Systems and methods are included for managing persistent enrollment of a user device. The persistent enrollment can be controlled by an administrator at an administrator console. The administrator can enable or disable persistent enrollment for the user device at the admin console. A deployment agent can be provided to the user device. During the boot process, the deployment agent can verify the persistent enrollment status of the user device. The deployment agent can retrieve and install a software package for a management agent. The management agent can enroll the user device with an enterprise under a staging user profile. The management agent can install a provisioning package associated with the staging user profile. The management agent can receive user input login credentials. The management agent can change the ownership of the user device with the enterprise. The management agent can configure the user device for the user profile.

Abstract: Disclosed are various examples for managing endpoints or client devices. A client device can be managed using unified endpoint management (UEM) protocols or using an endpoint management framework. A management console can allow an administrator to perform UEM management actions as well as out-of-band management actions on managed endpoints.

Abstract: Systems and methods are included for managing persistent enrollment of a user device. The persistent enrollment can be controlled by an administrator at an administrator console. The administrator can enable or disable persistent enrollment for the user device at the admin console. A deployment agent can be provided to the user device. During the boot process, the deployment agent can verify the persistent enrollment status of the user device. The deployment agent can retrieve and install a software package for a management agent. The management agent can enroll the user device with an enterprise under a staging user profile. The management agent can install a provisioning package associated with the staging user profile. The management agent can receive user input login credentials. The management agent can change the ownership of the user device with the enterprise. The management agent can configure the user device for the user profile.

Abstract: Disclosed are various embodiments for workflow error handling for device driven management. A workflow can be received from a management service by a management agent. The workflow can define a sequence of actions to be implemented by the management agent on a client device and a set of error conditions associated with individual actions in the sequence of actions. The management agent can then process the individual actions in the sequence of actions defined by the workflow. Subsequently, the management agent can monitor the individual actions to determine whether the individual actions trigger an error condition in the set of error conditions. Finally, in response to a determination that the individual actions triggered the error condition in the set of error conditions, the management agent can perform an error response specified by the workflow.

Abstract: Disclosed are various approaches for preauthorizing the joining of a client device to a domain managed by a cloud-based directory service. An authorization token can be generated prior to a client device joining the domain. The authorization token can be subsequently installed on a client device at an OEM facility. When a user first logs into the client device, the client device can send the authorization token to the cloud-based directory service in lieu of administrative credentials to prove that the client device has been previously authorized to join the domain.

Abstract: Systems and methods are included for managing persistent enrollment of a user device. The persistent enrollment can be controlled by an administrator at an administrator console. The administrator can enable or disable persistent enrollment for the user device at the admin console. A deployment agent can be provided to the user device. During the boot process, the deployment agent can verify the persistent enrollment status of the user device. The deployment agent can retrieve and install a software package for a management agent. The management agent can enroll the user device with an enterprise under a staging user profile. The management agent can install a provisioning package associated with the staging user profile. The management agent can receive user input login credentials. The management agent can change the ownership of the user device with the enterprise. The management agent can configure the user device for the user profile.

Abstract: Disclosed are various embodiments for workflow error handling for device driven management. A workflow can be received from a management service by a management agent. The workflow can define a sequence of actions to be implemented by the management agent on a client device and a set of error conditions associated with individual actions in the sequence of actions. The management agent can then process the individual actions in the sequence of actions defined by the workflow. Subsequently, the management agent can monitor the individual actions to determine whether the individual actions trigger an error condition in the set of error conditions. Finally, in response to a determination that the individual actions triggered the error condition in the set of error conditions, the management agent can perform an error response specified by the workflow.

Abstract: Systems and methods are included for managing persistent enrollment of a user device. The persistent enrollment can be controlled by an administrator at an administrator console. The administrator can enable or disable persistent enrollment for the user device at the admin console. A deployment agent can be provided to the user device. During the boot process, the deployment agent can verify the persistent enrollment status of the user device. The deployment agent can retrieve and install a software package for a management agent. The management agent can enroll the user device with an enterprise under a staging user profile. The management agent can install a provisioning package associated with the staging user profile. The management agent can receive user input login credentials. The management agent can change the ownership of the user device with the enterprise. The management agent can configure the user device for the user profile.

Abstract: Disclosed are various approaches for preauthorizing the joining of a client device to a domain managed by a cloud-based directory service. An authorization token can be generated prior to a client device joining the domain. The authorization token can be subsequently installed on a client device at an OEM facility. When a user first logs into the client device, the client device can send the authorization token to the cloud-based directory service in lieu of administrative credentials to prove that the client device has been previously authorized to join the domain.