A few weeks ago, we discussed how Dropship to Home Provisioning was on its way. Workspace ONE 2102 has started to rollout and now we can finally talk about how to complete the setup and test Dropship to Home Provisioning. We will take some time and cover how to import a device, configuring the cloud connector, granting permissions, and building the domain join profile. We will close it out with a nice demo showcasing the excitement.

Importing a Test Device to Autopilot

As we said previously, we want to first bring a test device into Autopilot. We collect that data with a simple little script that Microsoft provides:

New-Item -Type Directory -Path "C:\HWID"
Set-Location -Path "C:\HWID"
Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted
Install-Script -Name Get-WindowsAutoPilotInfo
Get-WindowsAutoPilotInfo.ps1 -OutputFile AutoPilotHWID.csv

The video below will walk you through the whole process, which is:

• Gather the Device ID/CSV for Import
• Import the Device
• Add the Device to the Autopilot Device Group which will automatically sync the Autopilot Policy

Enjoy the short demo!

Configuring Cloud Connector for Dropship to Home Provisioning

Now, we’re on to re-configuring the Cloud Connector to get ready for Dropship to Home Provisioning. Check out the short video below on the standard way to set things up:

If you’re interested in simplifying things, you can install Powershell 7.1 which introduces an update to the Powershell module for Set-Service so you can update it with credentials, which is pretty cool. The code to do so is here:

$credential = Get-Credential
Set-Service -Name Schedule -Credential $credential

You could essentially combine that with some PowerShell to give your service account write access to the ACC folder like this:

$NewAcl = Get-Acl -Path "C:\VMware\AirWatch\CloudConnector"
# Set properties
$identity = "SYNTEREX\dropship"
$fileSystemRights = "Write"
$type = "Allow"
# Create new rule
$fileSystemAccessRuleArgumentList = $identity, $fileSystemRights, $type
$fileSystemAccessRule = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $fileSystemAccessRuleArgumentList
# Apply new rule
$NewAcl.SetAccessRule($fileSystemAccessRule)
Set-Acl -Path "C:\VMware\AirWatch\CloudConnector" -AclObject $NewAcl

Building the Domain Join Profile

The domain join build part in Workspace ONE is pretty simple. You can see below, how we make it all work:

Dropship to Home Provisioning Demo

I will be putting in a demo of the user experience VERY soon. For now, this is a Microsoft Demo on the user experience for Autopilot, which is the force that powers Dropship to Home Provisioning.

Final Thoughts

Hopefully the videos and information will help you get started on this exciting new technology which brings the Microsoft and VMware stacks closer to together once again. It’s very clear it’s a work-in-progress, but I think that as we advance and build this solution to tailor our needs that we will be in very good shape. Welcome to the hottest new idea in 2021, Dropship Provisioning to Home!