> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enrollment methods

> Compare the available methods for enrolling devices into Primo and choose the right approach for your organisation, based on your existing setup, platform mix, and whether you want the process to be admin-driven or employee-driven.

## By method

| Method                                                                     | When to use                                             | Compatibility                                                         | Driven by | Pros                                                                                                                                         | Cons                                                                                                                                |
| -------------------------------------------------------------------------- | ------------------------------------------------------- | --------------------------------------------------------------------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
| [Zero Touch](/mdm/zero-touch/zero-touch-macs)                              | Gold standard - move towards this little by little      | ✅ macOS<br />✅ Windows<br />✅ iOS/iPadOS<br />❌ Android (coming soon) | Admin     | <ul><li>Highest level of control</li><li>Devices cannot be activated without authentication — protection against theft</li></ul>             | <ul><li>Requires initial setup in ABM or Autopilot</li><li>Not compatible with devices not registered in ABM or Autopilot</li></ul> |
| [Employee enrollment](/mdm/rollout/invite-employees) (default)             | Default - always works!                                 | ✅ macOS<br />✅ Windows<br />✅ Linux<br />✅ iOS/iPadOS<br />✅ Android  | Employee  | <ul><li>Works on any supported platform</li><li>No prior infrastructure required</li></ul>                                                   | <ul><li>Relies on employee action</li><li>Requires employees to have admin access</li></ul>                                         |
| [Account-driven Device Enrollment](/mdm/rollout/account-driven-enrollment) | If you federate accounts in Apple Business              | ❌ macOS (coming soon)<br />✅ iOS/iPadOS                               | Employee  | <ul><li>Privacy-preserving</li><li>Separates work and personal data on the device</li></ul>                                                  | <ul><li>Requires federation in Apple Business</li></ul>                                                                             |
| [Silent agent deployment](/mdm/rollout/silent-agent-deployment)            | If you already can deploy packages (migration scenario) | ✅ macOS<br />✅ Windows<br />✅ Linux                                   | Admin     | <ul><li>Centralised and silent</li><li>No employee interaction needed</li></ul>                                                              | <ul><li>Mac: once the agent is installed, the MDM profile still needs to be accepted by the employee</li></ul>                      |
| [Migrating with Apple Business](/mdm/zero-touch/zero-touch-macs)           | For devices in Apple Business and on macOS Tahoe 26+    | ✅ macOS<br />✅ iOS/iPadOS                                             | Admin     | <ul><li>Reassigns devices already in Apple Business to Primo without wiping</li><li>Works on devices already deployed in the field</li></ul> | <ul><li>Requires an existing Apple Business account with devices already assigned</li><li>Only works with macOS Tahoe 26+</li></ul> |

## By platform

<Tabs>
  <Tab title="macOS">
    * [Zero Touch](/mdm/zero-touch/zero-touch-macs) — gold standard; use this for new devices purchased through Primo or an authorized reseller
    * [Migrating with Apple Business](/mdm/zero-touch/zero-touch-macs) — for devices already assigned in Apple Business running macOS Tahoe 26+
    * [Silent agent deployment](/mdm/rollout/silent-agent-deployment) — if you already have a package deployment tool and need to migrate silently
    * [Employee enrollment](/mdm/rollout/invite-employees) — always works as a fallback; relies on employee action
  </Tab>

  <Tab title="Windows">
    * [Zero Touch](/mdm/zero-touch/zero-touch-windows) — gold standard; use this for new devices enrolled via Windows Autopilot
    * [Silent agent deployment](/mdm/rollout/silent-agent-deployment) — if you already have a package deployment tool and need to migrate silently
    * [Employee enrollment](/mdm/rollout/invite-employees) — always works as a fallback; relies on employee action
  </Tab>

  <Tab title="Linux">
    * [Silent agent deployment](/mdm/rollout/silent-agent-deployment) — preferred if you have a package deployment tool
    * [Employee enrollment](/mdm/rollout/invite-employees) — always works; relies on employee action
  </Tab>

  <Tab title="iOS / iPadOS">
    * [Zero Touch](/mdm/zero-touch/zero-touch-macs) — gold standard; use this for devices purchased through Primo or an authorized reseller and assigned in Apple Business
    * [Migrating with Apple Business](/mdm/zero-touch/zero-touch-macs) — for devices already assigned in Apple Business
    * [Account-driven Device Enrollment](/mdm/rollout/account-driven-enrollment) — if you federate accounts in Apple Business and want to preserve privacy on personal devices
    * [Employee enrollment](/mdm/rollout/invite-employees) — always works as a fallback; relies on employee action
  </Tab>

  <Tab title="Android">
    * [Employee enrollment](/mdm/rollout/invite-employees) — the only available method; employees enroll their own devices
  </Tab>
</Tabs>