Modern Windows management made simple | Workspace ONE

For years, migrating to modern Windows management felt like a high-stakes gamble. The traditional "rip-and-replace" approach forced a hard cutover that risked failed enrollments, device downtime, and lost end-user productivity. Next-generation Windows management in Workspace ONE UEM (announced earlier this year) helps remove that risk with co-management, letting IT balance workloads between legacy tools and Workspace ONE UEM.

Now, with automated step-up enrollment from Intelligent Hub Managed Mode to Fully Managed Mode (Full MDM) generally available, IT teams can finish the journey to modern management without the disruption that once held them back.

Why step-up enrollment matters

Organizations managing Windows at scale face a common challenge when considering modernization. Migrating from a legacy management tool to Workspace ONE UEM means moving every workload at once and accepting the risk that comes with it.

Intelligent Hub Managed Mode removed that limitation for the migration itself, letting IT move workloads over one at a time while co-managing desktops. The challenge, however, was that completing the migration still meant removing legacy management and re-enrolling each device.

With the latest release of Workspace ONE UEM, step-up enrollment allows IT to automate the change from Intelligent Hub Managed Mode to Full MDM, activating Open Mobile Alliance Device Management (OMA-DM) features and leaving legacy tools behind. It transforms the final step of migration from co-management to completion and turns the move to modern management from a tedious IT project into a background action the employee never notices.

What step-up enrollment means for you

Workspace ONE admins can easily promote devices from Intelligent Hub Managed Mode to Full MDM directly in the UEM console, where everything else is already managed.

There is no device wipe, no re-enrollment prompt, and no interruption to the end-user experience. OMA-DM capabilities switch on automatically in the background, and full management is active immediately. For IT, that means the migration can finish on your schedule, not on a schedule dictated by the fear of disruption.

The best way to begin your journey is to test with a pilot group of devices, confirm everything behaves as expected, and then expand to the rest of your fleet when you are ready. This is what "migrate at your own pace" was always supposed to mean.

That same control extends to staging desktops that don't yet have an assigned user. IT can enroll these endpoints in Intelligent Hub Managed Mode to apply device-level settings without a user profile, adding security and visibility for unused desktops.

With the new auto step-up setting, admins can configure Intelligent Hub managed devices to automatically promote devices to Full MDM the moment a user signs in, without any administrative intervention. When a new employee signs in for the first time, the device steps up to Full MDM management.

Full MDM unlocks many capabilities

Intelligent Hub Managed Mode already covers the bulk of day-to-day device management. A few capabilities are built on OMA-DM and only become available once a device steps up to Full MDM:

• Full device wipe and enterprise reset for lost, stolen, or decommissioned devices

• Microsoft Cloud Solution Provider (CSP)-based profiles for configuration and policy

• Entra Conditional Access for identity-based access policies

If your environment depends on any of these, step-up enrollment is now the fastest and least disruptive way to get there.

Built for the full migration, not just the first step

This release advances the vision we set when we introduced next-gen Windows management earlier this year: Modernizing Windows management shouldn't force a choice between staying comfortable and moving forward.

Intelligent Hub Managed Mode gets you real management, running alongside what you already have. And now, step-up enrollment gets you all the way to full management without the effort and risk that used to come with getting there.

This is next-gen Windows management, rearchitected from the ground up, built for how migrations should work, designed to help you complete your modern management journey.

Get started

Step-up enrollment from Intelligent Hub Managed Mode to Full MDM is available now in Workspace ONE UEM.

Learn more:

• Next-gen Windows management announcement
• Tech Zone: Windows management mode options
• Omnissa Community

Contact your Omnissa representative to see how next-gen Windows management fits into your migration strategy.