Enroll a device in Windows device management

Supported editions for this feature: Enterprise; Enterprise for Education; Cloud Identity Premium.  Compare your edition

To apply settings and manage your organization's Microsoft Windows devices through Google endpoint management, the devices must be enrolled in Windows device management.

Do you need to manually enroll devices?

How you enroll devices depends on whether you install Google Credential Provider for Windows (GCPW):

  • If you install GCPW on a device, you don't need to manually enroll the device and can skip the following instructions. GCPW automatically enrolls the device in Windows device management when the user first signs in with their Google Account unless you disable automatic enrollment.
  • If you don't install GCPW, follow these instructions to enroll the device.

Before you begin

Enroll a Windows device

  1. Sign in to the Windows 10 device.
  2. Open https://deviceenrollmentforwindows.googleapis.com/v1/deeplink in a Chrome or Edge browser.
  3. In the message that asks whether you meant to switch apps, click Yes.
  4. Enter the Google email address you would like to use for this feature.
  5. Click Next to start device enrollment.
  6. Sign in to your managed Google Account.

Verify enrollment of a Windows device

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. Click Endpoints.
  4. Check the list of Windows devices to verify that the device enrolled. Tip: Click Add a filterand thenManagement Type and select Enhanced desktop security to show only devices enrolled in Windows device management.


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue