Trond B. Krokli b8e8934dc2
minor grammar: compound noun "thumbprint"
- "thumb print" > thumbprint

Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
2021-04-25 12:00:29 +02:00

74 lines
2.6 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
title: Provisioning CSP
description: The Provisioning configuration service provider is used for bulk user enrollment to an MDM service.
ms.assetid: 5D6C17BE-727A-4AFA-9F30-B34C1EA1D2AE
ms.reviewer:
manager: dansimp
ms.author: dansimp
ms.topic: article
ms.prod: w10
ms.technology: windows
author: manikadhiman
ms.date: 06/26/2017
---
# Provisioning CSP
The Provisioning configuration service provider is used for bulk user enrollment to an MDM service.
> [!NOTE]
> Bulk enrollment does not work when two-factor authentication is enabled.
For bulk enrollment step-by-step guide, see [Bulk enrollment](bulk-enrollment-using-windows-provisioning-tool.md).
The following shows the Provisioning configuration service provider in tree format.
```
./Vendor/MSFT/ProvisioningCommands
ProvisioningCommands
----DeviceContext
--------CommandSet
------------Default
----------------CommandLine
----PrimaryContext
--------CommandSet
------------CommandName
----------------CommandLine
----------------ReturnCodeSuccess
----------------ReturnCodeRestart
----------------RestartRequired
----------------ContinueInstall
```
<a href="" id="--vendor-msft"></a>**./Vendor/MSFT/ProvisioningCommands**
Root node for Provisioning CSP.
<a href="" id="provisioning-enrollments"></a>**Provisioning/Enrollments**
Node for defining bulk enrollment of users into an MDM service.
<a href="" id="provisioning-enrollments-upn"></a>**Provisioning/Enrollments/_UPN_**
Unique identifier for the enrollment. For bulk enrollment, this must be a service account that is allowed to enroll multiple users. For example, "generic-device@contoso.com".
<a href="" id="provisioning-enrollments-upn-discoveryservicefullurl"></a>**Provisioning/Enrollments/*UPN*/DiscoveryServiceFullURL**
The full URL for the discovery service.
<a href="" id="provisioning-enrollments-upn-secret"></a>**Provisioning/Enrollments/*UPN*/Secret**
This information is dependent on the AuthPolicy being used. Possible values:
- Password string for on-premises authentication enrollment
- Federated security token for federated enrollment
- Certificate thumbprint for certificated based enrollment
<a href="" id="provisioning-enrollments-upn-authpolicy"></a>**Provisioning/Enrollments/*UPN*/AuthPolicy**
Specifies the authentication policy used by the MDM service. Valid values:
- OnPremise
- Certificate
<a href="" id="provisioning-enrollments-upn-policyservicefullurl"></a>**Provisioning/Enrollments/*UPN*/PolicyServiceFullURL**
Specifies the policy service URL.
<a href="" id="provisioning-enrollments-upn-enrollmentservicefullurl"></a>**Provisioning/Enrollments/*UPN*/EnrollmentServiceFullURL**
Specifies the enrollment service URL.