enable to enroll devices via Windows Server