Enrollment endpoints outside the Windows domain require the manual configuration described in this section.

• Configuring the enrollment policy in non-domain endpoints
• Importing the root CA certificate into non-domain endpoints