You’ll need to create three workflows: PREP, RETURN, and CHECKOUT.
PREP: Here you will do the basic provisioning of the device. You should include the following actions, at a minimum:
- Perform MDM command – This will delete the device which ensures that the enrollment is treated as “new”. – Pre- Enrollment Action > Delete from MDM.
- Add WiFi
- Set Name
- DEP Enrollment
Your MDM should install the “GroundControl Locker” app on enrollment for these devices.
RETURN: This workflow will lock down devices when connected. Include the following actions:
- Check In Device — this will launch and lock the GC Locker app, set the status to “Checked In” and clear the Device User attribute.
- Set Wallpaper — a black wallpaper is a visual clue that devices are locked. You may wish to use this intimidating wallpaper.
- On Failure — In the unlikely event check-in fails, we recommend adding an On Failure action to your workflow to ensure your device is locked and checked in. Under advanced, add an On Failure action. Select Retry this workflow option only and select the number of attempts you would like, 2 should be fine.
Ignore the warning, you do not need to include WiFi in this workflow. Your device will already have a WiFi profile from the PREP workflow.
CHECKOUT: This workflow will unlock the device after a successful badge tap. When the workflow is run, the attribute “[Device User]” will have the username of the person checking out the device.
Include the following actions:
- Check Out Device — this action will unlock the GC Locker app and set the device status to “Checked Out”. If you have Smart Hub services enabled, it will also rapidly flash the white LED next to the device.
- Set Wallpaper — if you used the black wallpaper above, then on check out you will want to add your friendly wallpaper with your organization’s logo. We also recommend embedding text onto the Lock Screen saying “Checked Out to [Device User]” or something similar.
- On Failure — We only consider a checkout complete when the device being checked out is unplugged. In order to account for a device not being removed after a check out was initiated, we recommend adding an On Failure action to your workflow to check the device back in.
Under Advanced, add an On Failure action. Select the “If still failing, run another workflow” option only and select your RETURN workflow. This On Failure action will return the device to the checked in state if this final step is not completed after 60 seconds.