Enable Windows device management

This feature is available with G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium editions.

To manage Microsoft Windows 10 device settings through Google endpoint management, you need to turn on Windows device management, which is turned off by default. You need to turn on Windows device management when you use it in standalone mode or with Google Credential Provider for Windows (GCPW).

Enable Windows device management

Before you begin: To apply the setting for certain users, put their accounts in an organizational unit.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. On the left, click Settingsand thenWindows settings.
  5. Click Desktop security setup.
  6. Next to Windows device management, select Enabled.
  7. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Next steps

  • If you install GCPW on users' devices and leave automatic enrollment enabled, the devices are automatically enrolled in Windows device management and any settings you configured are applied during the next sync. Review the setup steps to confirm your setup is complete.
  • If you don't install GCPW on users' devices, you need to enroll devices. For details, see Enroll your Windows 10 devices.


Google, G Suite, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?