trio.so
Windows MDM

Windows device management for laptops and desktops

Enroll Windows 10 and 11 PCs with Autopilot, Entra join or a simple link, enforce BitLocker, Defender and firewall settings, keep Windows Update on schedule, and fix problems with remote desktop and PowerShell. Next to your Macs and phones, in one console.

Start free trialBook a demo
  • Regional Leader, EMEA, Spring 2025
  • Easiest To Do Business With, Mid-Market, Spring 2025
  • Momentum Leader, Spring 2025
  • High Performer, Middle East, Spring 2025
  • Best Support, Mid-Market, Spring 2025

Rated 4.8 on G2

trio.soHarbor & PineEndpoint Management ›Devices ›FIN-WIN-07

Devices

Windows PCs enrolled through Windows Autopilot or Entra join

PlatformWindowsWindows6
FIN-WIN-07Surface Laptop 6Windows AutopilotWindowsWindows AutopilotCompliant3 min ago

FIN-WIN-07

WindowsSurface Laptop 6 · Windows 11 24H2 · Online

Company ownedMDM and trio.so agent
Owner
Ana Silva
Enrolled through
Windows Autopilot
Actions
Restart: queued
Compliance · 5 of 5 pass
BitLockerOn
Defender real-time protectionOn
Windows UpdateUp to date
FirewallOn
Secure BootOn
1 request queued for the device

Windows management shouldn't need three tools

  • GPOs for some, nothing for others

    Group Policy stops at the domain; remote and off-network laptops drift out of reach.

  • Separate tools per job

    Patching, remote support and configuration each live in a different console.

  • Mixed fleets

    Macs and phones need a second tool when the Windows tool can't manage them.

How it works

How Windows management works in trio.so

  1. EnrollUse Windows Autopilot, Entra join with automatic enrollment, a provisioning package, or an enrollment link in Edge.
  2. Apply policiesChoose from 41 Windows policy types, from BitLocker to Windows Hello and USB storage.
  3. Keep Windows updatedAuto Patch sets Windows Update for the whole organization.
  4. Support remotelyOpen remote desktop, a PowerShell terminal or task manager from the device record.

Enrollment

Autopilot, Entra join or a single link

Ship new laptops straight to employees with Windows Autopilot, join them to Microsoft Entra ID with automatic enrollment, or enroll many at once with a provisioning package. Existing PCs enroll from a link opened in Edge.

  • Windows AutopilotNew PCs set themselves up for the user.
  • Entra joinAutomatic enrollment when users sign in with work accounts.
  • Bulk enrollmentA provisioning package for many PCs at once.
  • Your own toolsInstall the trio.so agent with a script from a GPO or your RMM, or deploy it as an app through Microsoft Intune.
  • Older PCs and serversA minimal agent for Windows 7 SP1, 8 and 8.1, and Windows Server through IT Operations.

Configuration

41 Windows policy types with a result per device

Turn on BitLocker, Microsoft Defender Antivirus and the firewall, set Windows Hello and screen lock, block USB storage, and push Wi-Fi, VPN and certificates. Each PC reports whether a policy applied, is pending or failed.

  • SecurityBitLocker, Defender Antivirus, firewall, Windows Hello, Credential Guard, SmartScreen.
  • ControlUSB storage block, AppLocker and application control, camera and screen capture restrictions.
  • NetworkWi-Fi with WPA2 or WPA3, VPN, PKCS#12, SCEP and root certificates.
  • Recovery keysBitLocker recovery passwords are stored in the console, so a locked-out user gets back in.

Updates and patching

Windows Update and third-party patching

Auto Patch sets Windows Update for the whole organization, including metered connections and optional content. Third-party apps get CVE findings, ranked by risk, and fixes through remediation plans.

Remote support

Remote desktop and PowerShell in the browser

Take control of a Windows screen, open an interactive PowerShell, end a stuck process or restart a service, without a separate remote access tool. Every session is logged on the device.

Apps

Apps from the catalog, Microsoft Store or MSI

Deploy common apps from the trio.so catalog, install Microsoft Store apps through winget, or upload your own MSI. Each PC lists its installed apps.

Windows management at a glance

Start free trialBook a demo
41
Windows policy types
3
ways to enroll at scale
PowerShell
and remote desktop built in
From $5
per device, in every plan

Related

Related device management

Windows device management FAQ

Managing Windows PCs through Microsoft's MDM protocol instead of Group Policy alone: enrolling them, applying settings, installing apps and keeping them updated, whether they're on the office network or not.

Yes. Enroll with Windows Autopilot, Entra join with automatic enrollment, or a provisioning package for bulk enrollment.

Yes. trio.so manages Windows, macOS, Linux, iOS/iPadOS and Android in one console.

Yes, on company-owned PCs you can wipe or restart remotely. Windows has no remote lock command, so trio.so doesn't offer one.

Windows 10 and 11 get full MDM. Windows 7 SP1, 8 and 8.1 run a minimal agent, and Windows Server is managed through IT Operations.

Yes. Run the trio.so install script from a GPO computer startup script or your RMM tool, or deploy the agent as an app through Microsoft Intune.

Yes. Upload an MSI, install Microsoft Store apps through winget, or use the trio.so catalog.

Plans start at $5 per device, and device management is in every plan. Patch and vulnerability management is in the Secure plan and above. See pricing.