4 thoughts on “How to Deploy Offline Domain Join with Workspace ONE”

  1. I’m looking for a sanity check on this whole process. I understand that after the enrollment process is complete and the tunnel app/tunnel profile is on the device, the ability for pre-login vpn allows for end-user to log-in off network with AD creds and finish the enrollment. However, does the initial process using the ppkg and unattend where it is enrolled using the staging account and bind to the domain actually have to be on a network with line of sight to the DC? Everything I have seen and tested says yes

    Reply
    • No, the initial application of the offline domain join blog does NOT require line of sight to the domain. The ACC talks to the DC and sends the blog back to WS1 which in turns send it to the device. The only time you need line of sight is for the first time user login. But if you configure tunnel correctly , it will fire off automatically, creating that tunnel and LOS and login will complete.

      Reply
    • The current factory provisioning process is “offline” meaning that everything happens in the dell factory without internet. The new “online” drop ship provisioning that is available to dell will support this as there will be an internet connect to facilitate enrollment and the offline domain join blob. I did a session at VMworld this year talking about a DIY version of this – where you can do a full bare metal deployment and complete the ODJ process. Once 20.11 drops, I’ll put out a blog on it.

      Reply

Leave a Comment