Because the enrolment policy can only be assigned to users, the DEP enrolment process always prompts the user to authenticate to the zone. Whilst this is useful for identifying which user the device is owned by etc, it slows down bulk deployment of (eg. non-personal) devices.
Other MDM products (eg. JAMF) have an option to skip this step which makes bulk DEP deployment rather more streamlined.


  • This could be achieved by allowing the enrolment policy to be assigned to "Discovered devices"...

  • This would be important for situations where devices are handed out to students for field trips, examinations, surveys, etc.. where we frequently need to quickly reset large numbers of devices to a known state.