# Windows Enrollment

> Enroll Windows endpoints by installing the CapaOne Agent, and choose the enrollment configuration that assigns their groups and tags.

Source: https://docs.capaone.com/capaone/enrollment/windows-enrollment/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Windows endpoints are enrolled by installing the **CapaOne Agent**
(see [requirements](/capaone/enrollment/windows-agent-requirements/)). An enrollment configuration
decides which groups, configurations, and tags a device receives once enrolled. Go to
**Windows → Enrollment**, select a configuration, and click **View**:

![Windows enrollment configurations](/attachments/capaone/windows-enrollment-overview.png)

The configuration marked with a corner ribbon is the **default** — it is used when a device
enrolls without specifying a configuration.

## Installation methods

The configuration drawer offers four ways to install the agent:

![Windows enrollment methods](/attachments/capaone/windows-enrollment-methods.png)

- **Simple** — download `COA_Installer.exe` and run it on the endpoint. The enrollment information
  is encoded in the installer's file name, so do not rename the file.
- **PowerShell** — copy the generated command and run it in PowerShell **with administrator
  rights**. It downloads the agent and installs it silently with your organization key and
  enrollment configuration.
- **Microsoft Intune** — download the generated `InstallCapaOneAgent.ps1` and assign it to a device
  group as a platform script. Optional compliance-check scripts are also provided. See
  [Windows Enrollment with Intune](/capaone/enrollment/windows-enrollment-with-intune/).
- **Microsoft SCCM** — download `COA SCCM.zip`, which contains install and uninstall scripts ready
  to import into SCCM. See
  [Windows Enrollment with SCCM](/capaone/enrollment/windows-enrollment-with-sccm/).

## After enrollment

The device appears under **Windows → Endpoints** with the groups, configurations, and tags from
the enrollment configuration applied. The **Settings** tab of the drawer shows exactly what will be
applied, including an optional
[Provisioning Template](/capaone/provision-manager/provisioning-templates/) used when provisioning
Windows devices.

:::tip
The **Keep relations** setting (PowerShell and Intune only) controls what happens when an already
enrolled device re-enrolls: enable it to keep the device's current groups, tags, and configurations
instead of replacing them with the ones from the enrollment configuration.
:::

Having trouble with the agent? See
[CapaOne Agent installation](/capaone/troubleshooting/capaone-agent-installation/).