As far as I know, there are currently only two ways to enrol a Windows Modern device - the one you show in your screenshot or using a certificate.

Could you elaborate in what way the first method is not viable in your case?     

Hello Raymond!!

The first method isn't viable because this devices are in differents locations and I can't go to this locations for enroll this devices.

I want enroll this Windows Modern Devices remotely and if possible in a second plane without action for the final user. Maybe the best metod in this case is enroll using a certificate? Correct me if I'm wrong.

I'm very interested in your opinion, Raymond.

Thank you so much!!

The certificate-based bulk enrollment method also requires someone on the Windows Modern device to click and install a .ppkg package specially prepared for such enrollment, such like the first method that reiqres someone to click an icon on the "Access Work or School" page in Settings.  In this respect, certificate-based enrollment seems also not viable for you. 

Actually, the main diference between the two approach is that a company FQDN domain needs to be associated with your MobiControl server when configuring WNS officially with Microsoft's portal in the first method, while the second method allows a self-signed certficate to be used to create the .ppkg file  without involving Microsoft, which saves lots of time and trouble dealling with an external party.    Maybe someone from Soti can clarify or comment on my statement.

So, if you really need to enrol a Windows Unified device REMOTELY, it seems that you have to ask the end-user to do something for you, at least for now, until Microsoft introduce additional enrollment method(s) in the future.