The enrollment URL flow

Everything Windows lives at Settings → Windows, on three tabs: Code Base Enrollment (URLs and installers — where you'll spend most time), Tagging (device tag management), and Azure AD (directory integration). Before any of it works, the Windows platform must be enabled under Settings → Platform and Windows default policies created under Device Provisioning — same pattern you know from Android and Apple.

Requirements that decide deals

Two constraints to state early in any scoping conversation:

• Windows 10 or later, in Pro, Enterprise, Business, or Education editions. Windows Home doesn't carry the MDM enrollment stack.
• URL-based enrollment needs Microsoft Edge (or IE11) on the device — the flow hands off to Windows' own enrollment wizard, and other browsers won't trigger it.

Enroll one device

The Code Base Enrollment tab auto-generates your tenant's enrollment URL on load:

1. Copy the URL from the console.
2. On the target machine, open it in Edge. Windows offers to open the enrollment flow — click Open.
3. The Work or School account wizard runs; click through and wait for the confirmation.
4. The device appears in Devices (filter by Windows) within a few minutes.

If the URL misbehaves, hit Generate Enrollment URL for a fresh one — they can expire.

This path is right for onboarding a handful of machines, remote staff enrolling themselves, or demos. For anything bigger, the installers in the next lesson do the same job without the browser ceremony.