Product Documentation

Windows Devices

Mar 07, 2016

XenMobile supports the enrollment of devices running the following Windows operating systems:

  • Windows
  • Windows Phone

Windows and Windows Phone users enroll directly through their devices.

You must configure autodiscovery for user enrollment to enable the management of Windows and Windows Phone devices.

注意

In order for Windows devices to enroll, the SSL listener certificate must be a public certificate. Enrollment fails if you've uploaded a self-signed SSL certificate

To enroll Windows 8.1 devices with autodiscovery

Users can enroll devices running Windows RT 8.1, and both 32-bit and 64-bit versions of Windows 8.1 Pro and Windows 8.1 Enterprise. To enable management of Windows 8.1 devices, Citrix recommends you configure autodiscovery. For details, see To enable autodiscovery in XenMobile for user enrollment.

  1. On the device, check for and install all available Windows Updates. This step is particularly important when upgrading from Windows 8 to Windows 8.1, because users may not be automatically notified of all available updates.
  2. In the charms menu, tap Settings and then tap PC Settings > Network > Workplace.
  3. Enter your corporate email address and then tap Turn on. To enroll as a local user, enter a non-existent email address with the correct domain name (for example, foo@mydomain.com). This permits you to bypass a known Microsoft limitation; in the Connecting to a service dialog box, enter the user name and password associated with the local user. The device automatically discovers a XenMobile server and starts the enrollment process.
  4. Enter your password. Use the password associated with an account that is part of a user group in XenMobile.
  5. In the Allow apps and services from IT admin dialog box, indicate that you agree to have your device managed and then tap Turn on.

To enroll Windows 8.1 devices without autodiscovery

It is possible to enroll Windows 8.1 devices without autodiscovery. Citrix, however, recommends that you configure autodiscovery. Because enrollment without autodiscovery results in a call to port 80 before connecting to the desired URL, it is not considered best practice for production deployment. Citrix recommends that you use this process only in test environments and proof of concept deployment.

  1. On the device, check for and install all available Windows Updates. This step is particularly important when upgrading from Windows 8 to Windows 8.1, because users may not be automatically notified of all available updates.
  2. In the charms menu, tap Settings and then tap PC Settings > Network > Workplace.
  3. Enter your corporate email address.
  4. If Automatically detect server address in on, tap to turn it off.
  5. In the Enter server address field, type the server address in the following format: https://serverfqdn:8443/serverInstance/Discovery.svc If a port other than 8443 is used for unauthenticated SSL connections, use that port number in place of 8443 in this address.
  6. Enter your password.
  7. In the Allow apps and services from IT admin dialog box, indicate that you agree to have your device managed and then tap Turn on.

To enroll Windows Phone 8.1 devices

To enroll Windows Phone 8.1 devices in XenMobile, users need their Active Directory or internal network email address, and password. If autodiscovery is not set up, users also need the server web address for the XenMobile server. Then, they follow this procedure on their devices to enroll.

Note: If you plan to deploy apps through the Windows Phone company store, before your users enroll, make sure that you have configured an Enterprise Hub policy (with a signed Citrix Worx Home, Windows Phone 8.x app).
  1. On the main screen of the Window 8.1 phone, tap the Settings icon.
  2. Tap workplace.
  3. On the workplace screen, tap add account.
  4. On the next screen, enter an email address and password and then tap sign in. If autodiscovery is configured for your domain, the information requested in the next several steps is automatically populated. Proceed to Step 8. If autodiscovery is not configured for your domain, continue with the next step. To enroll as a local user, enter a non-existent email address with the correct domain name (for example, foo@mydomain.com). This permits you to bypass a known Microsoft limitation; in the Connecting to a service dialog box, enter the user name and password associated with the local user.
  5. On the next screen, type the web address of the XenMobile server, such as: https://<xenmobile_server>:<portnumber>/<instancename>/wpe. For example, https://mycompany.mdm.com:8443/zdm/wpe. Note: The port number has to be adapted to your implementation, but should be the same port that you used for an iOS enrollment.
  6. Enter the user name and domain if authentication is validated through a user name and domain and then tap sign in.
  7. If a screen appears noting a problem with the certificate, the error is due to the use of a self-signed certificate. If the server is trusted, tap continue. Otherwise, tap Cancel.
  8. When the account is added, you have the option of selecting Install company app. If your administrator has configured a Company App store, select this option and then tap done. If you clear this option, in order to receive the Company app store, you will need to reenroll.
  9. On the Account Added screen, tap done.
  10. To force a connection to the server, tap the refresh icon. If the device does not manually connect to the server, XenMobile attempts to reconnect. XenMobile connects to the device every 3 minutes 5 successive times, then every 2 hours afterwards. You can alter this connection rate in the Windows WNS Heartbeat Interval located inServer properties . Once enrollment is complete. Worx Home enrolls in the background. No indicator appears when the installation is complete. Open Worx Home from the All Apps screen.