deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 13:57:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'refs/remotes/origin/rs1' into jdrs

Browse Source
This commit is contained in:
jdeckerMS 2016-06-16 07:34:50 -07:00
commit 00b9eae92f
12 changed files with 107 additions and 81 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
devices/surface-hub/TOC.md
View File

@ -27,6 +27,7 @@
#### [Monitor your Surface Hub](monitor-surface-hub.md) #### [Monitor your Surface Hub](monitor-surface-hub.md)
#### [Save your BitLocker key](save-bitlocker-key-surface-hub.md) #### [Save your BitLocker key](save-bitlocker-key-surface-hub.md)
#### [Connect other devices and display with Surface Hub](connect-and-display-with-surface-hub.md) #### [Connect other devices and display with Surface Hub](connect-and-display-with-surface-hub.md)
#### [Use fully qualified domain name with Surface Hub](use-fully-qualified-domain-name-surface-hub.md)
#### [Using a room control system](use-room-control-system-with-surface-hub.md) #### [Using a room control system](use-room-control-system-with-surface-hub.md)
#### [Windows updates](manage-windows-updates-for-surface-hub.md) #### [Windows updates](manage-windows-updates-for-surface-hub.md)
#### [Wireless network management](wireless-network-management-for-surface-hub.md) #### [Wireless network management](wireless-network-management-for-surface-hub.md)

BIN
devices/surface-hub/images/system-settings-add-fqdn.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 39 KiB

4
devices/surface-hub/online-deployment-surface-hub-device-accounts.md
View File

@ -57,7 +57,7 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
```PowerShell ```PowerShell
Set-Mailbox $acctUpn -Type Regular Set-Mailbox $acctUpn -Type Regular
Set-CASMailbox $acctUpn -ActiveSyncMailboxPolicy $easPolicy Set-CASMailbox $acctUpn -ActiveSyncMailboxPolicy $easPolicy.Id
Set-Mailbox $acctUpn -Type Room Set-Mailbox $acctUpn -Type Room
Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true
``` ```
@ -66,7 +66,7 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
```PowerShell ```PowerShell
Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse "This is a <tla rid="surface_hub"/> room!" Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!"
``` ```
5. Connect to Azure AD. 5. Connect to Azure AD.

30
devices/surface-hub/troubleshoot-surface-hub.md
View File

@ -445,7 +445,7 @@ Possible fixes for issues with Surface Hub first-run program.
## Exchange ActiveSync errors ## Exchange ActiveSync errors
This section liss status codes, mapping, user messages, and actions an admin can take to solve Exchange ActiveSync errors. This section lists status codes, mapping, user messages, and actions an admin can take to solve Exchange ActiveSync errors.
<table> <table>
<colgroup> <colgroup>
@ -453,12 +453,10 @@ This section liss status codes, mapping, user messages, and actions an admin can
<col width="20%" /> <col width="20%" />
<col width="20%" /> <col width="20%" />
<col width="20%" /> <col width="20%" />
<col width="20%" />
</colgroup> </colgroup>
<thead> <thead>
<tr class="header"> <tr class="header">
<th align="left">Status Code</th> <th align="left">Status Code</th>
<th align="left">Count of EventResult</th>
<th align="left">Mapping</th> <th align="left">Mapping</th>
<th align="left">User-Friendly Message</th> <th align="left">User-Friendly Message</th>
<th align="left">Action admin should take</th> <th align="left">Action admin should take</th>
@ -467,21 +465,18 @@ This section liss status codes, mapping, user messages, and actions an admin can
<tbody> <tbody>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063532030</p></td> <td align="left"><p>-2063532030</p></td>
<td align="left"><p>3849</p></td>
<td align="left"><p>E_HTTP_DENIED</p></td> <td align="left"><p>E_HTTP_DENIED</p></td>
<td align="left"><p>The password must be updated.</p></td> <td align="left"><p>The password must be updated.</p></td>
<td align="left"><p>Update the password.</p></td> <td align="left"><p>Update the password.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2147012867</p></td> <td align="left"><p>-2147012867</p></td>
<td align="left"><p>1234</p></td>
<td align="left"><p>WININET_E_CANNOT_CONNECT</p></td> <td align="left"><p>WININET_E_CANNOT_CONNECT</p></td>
<td align="left"><p>Can’t connect to the server right now. Wait a while and try again, or check the account settings.</p></td> <td align="left"><p>Can’t connect to the server right now. Wait a while and try again, or check the account settings.</p></td>
<td align="left"><p>Verify that the server name is correct and reachable. Verify that the device is connected to the network.</p></td> <td align="left"><p>Verify that the server name is correct and reachable. Verify that the device is connected to the network.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2046817239</p></td> <td align="left"><p>-2046817239</p></td>
<td align="left"><p>316</p></td>
<td align="left"><p>E_NEXUS_STATUS_DEVICE_NOTPROVISIONED (policies don’t match)</p></td> <td align="left"><p>E_NEXUS_STATUS_DEVICE_NOTPROVISIONED (policies don’t match)</p></td>
<td align="left"><p>The account is configured with policies not compatible with Surface Hub</p> <td align="left"><p>The account is configured with policies not compatible with Surface Hub</p>
.</td> .</td>
@ -490,105 +485,90 @@ This section liss status codes, mapping, user messages, and actions an admin can
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2046817204</p></td> <td align="left"><p>-2046817204</p></td>
<td align="left"><p>145</p></td>
<td align="left"><p>E_NEXUS_STATUS_MAXIMUMDEVICESREACHED</p></td> <td align="left"><p>E_NEXUS_STATUS_MAXIMUMDEVICESREACHED</p></td>
<td align="left"><p>The account has too many device partnerships.</p></td> <td align="left"><p>The account has too many device partnerships.</p></td>
<td align="left"><p>Delete one or more partnerships on the server.</p></td> <td align="left"><p>Delete one or more partnerships on the server.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2046817270</p></td> <td align="left"><p>-2046817270</p></td>
<td align="left"><p>93</p></td>
<td align="left"><p>E_NEXUS_STATUS_SERVERERROR_RETRYLATER</p></td> <td align="left"><p>E_NEXUS_STATUS_SERVERERROR_RETRYLATER</p></td>
<td align="left"><p>Can’t connect to the server right now.</p></td> <td align="left"><p>Can’t connect to the server right now.</p></td>
<td align="left"><p>Wait until the server comes back online. If the issue persists, re-provision the account.</p></td> <td align="left"><p>Wait until the server comes back online. If the issue persists, re-provision the account.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2063269885</p></td> <td align="left"><p>-2063269885</p></td>
<td align="left">28</td>
<td align="left"><p>E_CREDENTIALS_EXPIRED (Credentials have expired and need to be updated)</p></td> <td align="left"><p>E_CREDENTIALS_EXPIRED (Credentials have expired and need to be updated)</p></td>
<td align="left"><p>The password must be updated.</p></td> <td align="left"><p>The password must be updated.</p></td>
<td align="left"><p>Update the password.</p></td> <td align="left"><p>Update the password.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063269875</p></td> <td align="left"><p>-2063269875</p></td>
<td align="left">14</td>
<td align="left"><p>E_AIRSYNC_RESET_RETRY</p></td> <td align="left"><p>E_AIRSYNC_RESET_RETRY</p></td>
<td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td> <td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td>
<td align="left"><p>This is normally a transient error but if the issue persists check the number of devices associated with the account and delete some of them if the number is large.</p></td> <td align="left"><p>This is normally a transient error but if the issue persists check the number of devices associated with the account and delete some of them if the number is large.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2046817258</p></td> <td align="left"><p>-2046817258</p></td>
<td align="left">14</td>
<td align="left"><p>E_NEXUS_STATUS_USER_HASNOMAILBOX</p></td> <td align="left"><p>E_NEXUS_STATUS_USER_HASNOMAILBOX</p></td>
<td align="left"><p>The mailbox was migrated to a different server.</p></td> <td align="left"><p>The mailbox was migrated to a different server.</p></td>
<td align="left"><p>You should never see this error. If the issue persists, re-provision the account.</p></td> <td align="left"><p>You should never see this error. If the issue persists, re-provision the account.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063532028</p></td> <td align="left"><p>-2063532028</p></td>
<td align="left">12</td>
<td align="left"><p>E_HTTP_FORBIDDEN</p></td> <td align="left"><p>E_HTTP_FORBIDDEN</p></td>
<td align="left"><p>Can’t connect to the server right now. Wait a while and try again, or check the account’s settings.</p></td> <td align="left"><p>Can’t connect to the server right now. Wait a while and try again, or check the account’s settings.</p></td>
<td align="left"><p>Verify the server name to make sure it is correct. If the account is using cert based authentication make sure the certificate is still valid and update it if not.</p></td> <td align="left"><p>Verify the server name to make sure it is correct. If the account is using cert based authentication make sure the certificate is still valid and update it if not.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2063400920</p></td> <td align="left"><p>-2063400920</p></td>
<td align="left">12</td>
<td align="left"><p>E_ACTIVESYNC_PASSWORD_OR_GETCERT</p></td> <td align="left"><p>E_ACTIVESYNC_PASSWORD_OR_GETCERT</p></td>
<td align="left"><p>The account’s password or client certificate are missing or invalid.</p></td> <td align="left"><p>The account’s password or client certificate are missing or invalid.</p></td>
<td align="left"><p>Update the password and/or deploy the client certificate.</p></td> <td align="left"><p>Update the password and/or deploy the client certificate.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2046817238</p></td> <td align="left"><p>-2046817238</p></td>
<td align="left">12</td>
<td align="left"><p>E_NEXUS_STATUS_DEVICE_POLICYREFRESH</p></td> <td align="left"><p>E_NEXUS_STATUS_DEVICE_POLICYREFRESH</p></td>
<td align="left"><p>The account is configured with policies not compatible with Surface Hub.</p></td> <td align="left"><p>The account is configured with policies not compatible with Surface Hub.</p></td>
<td align="left"><p>Disable the PasswordEnabled policy for this account.</p></td> <td align="left"><p>Disable the PasswordEnabled policy for this account.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2063269886</p></td> <td align="left"><p>-2063269886</p></td>
<td align="left">7</td>
<td align="left"><p>E_CREDENTIALS_UNAVAILABLE</p></td> <td align="left"><p>E_CREDENTIALS_UNAVAILABLE</p></td>
<td align="left"><p>The password must be updated.</p></td> <td align="left"><p>The password must be updated.</p></td>
<td align="left"><p>Update the password.</p></td> <td align="left"><p>Update the password.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2147012894</p></td> <td align="left"><p>-2147012894</p></td>
<td align="left">6</td>
<td align="left"><p>WININET_E_TIMEOUT</p></td> <td align="left"><p>WININET_E_TIMEOUT</p></td>
<td align="left"><p>The network doesn’t support the minimum idle timeout required to receive server notification, or the server is offline.</p></td> <td align="left"><p>The network doesn’t support the minimum idle timeout required to receive server notification, or the server is offline.</p></td>
<td align="left"><p>Verify that the server is running. Verify the NAT settings.</p></td> <td align="left"><p>Verify that the server is running. Verify the NAT settings.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2063589372</p></td> <td align="left"><p>-2063589372</p></td>
<td align="left">6</td>
<td align="left"><p>E_FAIL_ABORT</p></td> <td align="left"><p>E_FAIL_ABORT</p></td>
<td align="left"><p>This error is used to interrupt the hanging sync, and will not be exposed to users. It will be shown in the telemetry if you force an interactive sync, delete the account, or update its settings.</p></td> <td align="left"><p>This error is used to interrupt the hanging sync, and will not be exposed to users. It will be shown in the telemetry if you force an interactive sync, delete the account, or update its settings.</p></td>
<td align="left"><p>Nothing.</p></td> <td align="left"><p>Nothing.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063532009</p></td> <td align="left"><p>-2063532009</p></td>
<td align="left">5</td>
<td align="left"><p>E_HTTP_SERVICE_UNAVAIL</p></td> <td align="left"><p>E_HTTP_SERVICE_UNAVAIL</p></td>
<td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td> <td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td>
<td align="left"><p>Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.</p></td> <td align="left"><p>Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2046817267</p></td> <td align="left"><p>-2046817267</p></td>
<td align="left">4</td>
<td align="left"><p>E_NEXUS_STATUS_MAILBOX_SERVEROFFLINE</p></td> <td align="left"><p>E_NEXUS_STATUS_MAILBOX_SERVEROFFLINE</p></td>
<td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td> <td align="left"><p>Can’t connect to the server right now. Wait a while or check the account’s settings.</p></td>
<td align="left"><p>Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.</p></td> <td align="left"><p>Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063400921</p></td> <td align="left"><p>-2063400921</p></td>
<td align="left">3</td>
<td align="left"><p>E_ACTIVESYNC_GETCERT</p></td> <td align="left"><p>E_ACTIVESYNC_GETCERT</p></td>
<td align="left"><p>The Exchange server requires a certificate.</p></td> <td align="left"><p>The Exchange server requires a certificate.</p></td>
<td align="left"><p>Import the appropriate EAS certificate on the Surface Hub.</p></td> <td align="left"><p>Import the appropriate EAS certificate on the Surface Hub.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2046817237</p></td> <td align="left"><p>-2046817237</p></td>
<td align="left">2</td>
<td align="left"><p>E_NEXUS_STATUS_INVALID_POLICYKEY</p></td> <td align="left"><p>E_NEXUS_STATUS_INVALID_POLICYKEY</p></td>
<td align="left"><p>The account is configured with policies not compatible with Surface Hub.</p></td> <td align="left"><p>The account is configured with policies not compatible with Surface Hub.</p></td>
<td align="left"><p>Disable the PasswordEnabled policy for this account.</p> <td align="left"><p>Disable the PasswordEnabled policy for this account.</p>
@ -596,14 +576,12 @@ This section liss status codes, mapping, user messages, and actions an admin can
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>-2063532027</p></td> <td align="left"><p>-2063532027</p></td>
<td align="left">1</td>
<td align="left"><p>E_HTTP_NOT_FOUND</p></td> <td align="left"><p>E_HTTP_NOT_FOUND</p></td>
<td align="left"><p>The server name is invalid.</p></td> <td align="left"><p>The server name is invalid.</p></td>
<td align="left"><p>Verify the server name to make sure it is correct. If the issue persists, re-provision the account.</p></td> <td align="left"><p>Verify the server name to make sure it is correct. If the issue persists, re-provision the account.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>-2063532012</p></td> <td align="left"><p>-2063532012</p></td>
<td align="left">1</td>
<td align="left"><p>E_HTTP_SERVER_ERROR</p></td> <td align="left"><p>E_HTTP_SERVER_ERROR</p></td>
<td align="left"><p>Can’t connect to the server.</p></td> <td align="left"><p>Can’t connect to the server.</p></td>
<td align="left"><p>Verify the server name to make sure it is correct. Trigger a sync and, if the issue persists, re-provision the account.</p></td> <td align="left"><p>Verify the server name to make sure it is correct. Trigger a sync and, if the issue persists, re-provision the account.</p></td>
@ -611,34 +589,29 @@ This section liss status codes, mapping, user messages, and actions an admin can
<tr class="odd"> <tr class="odd">
<td align="left"><p>0x80072ee7</p></td> <td align="left"><p>0x80072ee7</p></td>
<td align="left"></td> <td align="left"></td>
<td align="left"></td>
<td align="left"><p>The server name or address could not be resolved.</p></td> <td align="left"><p>The server name or address could not be resolved.</p></td>
<td align="left"><p>Make sure the server name is entered correctly.</p></td> <td align="left"><p>Make sure the server name is entered correctly.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>0x8007052f</p></td> <td align="left"><p>0x8007052f</p></td>
<td align="left"></td> <td align="left"></td>
<td align="left"></td>
<td align="left"><p>While auto-discovering the Exchange server, a policy is applied that prevents the logged-in user from logging in to the server.</p></td> <td align="left"><p>While auto-discovering the Exchange server, a policy is applied that prevents the logged-in user from logging in to the server.</p></td>
<td align="left"><p>This is a timing issue. Re-verify the account's credentials. Try to re-provision when they're correct.</p></td> <td align="left"><p>This is a timing issue. Re-verify the account's credentials. Try to re-provision when they're correct.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>0x800c0019</p></td> <td align="left"><p>0x800c0019</p></td>
<td align="left"></td> <td align="left"></td>
<td align="left"></td>
<td align="left"><p>Security certificate required to access this resource is invalid.</p></td> <td align="left"><p>Security certificate required to access this resource is invalid.</p></td>
<td align="left"><p>Install the correct ActiveSync certificate needed for the provided device account.</p></td> <td align="left"><p>Install the correct ActiveSync certificate needed for the provided device account.</p></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>0x80072f0d</p></td> <td align="left"><p>0x80072f0d</p></td>
<td align="left"></td> <td align="left"></td>
<td align="left"></td>
<td align="left"><p>The certificate authority is invalid or is incorrect. Could not auto-discover the Exchange server because a certificate is missing.</p></td> <td align="left"><p>The certificate authority is invalid or is incorrect. Could not auto-discover the Exchange server because a certificate is missing.</p></td>
<td align="left"><p>Install the correct ActiveSync certificate needed for the provided device account.</p></td> <td align="left"><p>Install the correct ActiveSync certificate needed for the provided device account.</p></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>0x80004005</p></td> <td align="left"><p>0x80004005</p></td>
<td align="left"></td>
<td align="left"><p>E_FAIL</p></td> <td align="left"><p>E_FAIL</p></td>
<td align="left"><p>The domain provided couldn't be found. The Exchange server could not be auto-discovered and was not provided in the settings.</p></td> <td align="left"><p>The domain provided couldn't be found. The Exchange server could not be auto-discovered and was not provided in the settings.</p></td>
<td align="left"><p>Make sure that the domain entered is the FQDN, and that there is an Exchange server entered in the Exchange server text box.</p></td> <td align="left"><p>Make sure that the domain entered is the FQDN, and that there is an Exchange server entered in the Exchange server text box.</p></td>
@ -646,7 +619,6 @@ This section liss status codes, mapping, user messages, and actions an admin can
<tr class="even"> <tr class="even">
<td align="left"><p>0x80072efd</p></td> <td align="left"><p>0x80072efd</p></td>
<td align="left"></td> <td align="left"></td>
<td align="left"></td>
<td align="left"><p>Fail to connect to Exchange server as a result of a networking issue. It's possible the server was misspelled or it just couldn't be found.</p></td> <td align="left"><p>Fail to connect to Exchange server as a result of a networking issue. It's possible the server was misspelled or it just couldn't be found.</p></td>
<td align="left"><p>Make sure that the Exchange server ID is entered correctly, and that the device is connected to the right network.</p></td> <td align="left"><p>Make sure that the Exchange server ID is entered correctly, and that the device is connected to the right network.</p></td>
</tr> </tr>

26
devices/surface-hub/use-fully-qualified-domain-name-surface-hub.md Normal file
View File

@ -0,0 +1,26 @@
---
title: Use fully qualified doman name with Surface Hub
description: Troubleshoot common problems, including setup issues, Exchange ActiveSync errors.
ms.assetid: CF58F74D-8077-48C3-981E-FCFDCA34B34A
keywords: ["Troubleshoot common problems", "setup issues", "Exchange ActiveSync errors"]
author: TrudyHa
---
# When to use a fully qualified domain name with Surface Hub
A fully qualified domain name (FQDN) is a domain name that explicitly states the location in the Domain Name System (DNS) hierarchy. All levels of a domain are specified. In the case of Skype for Business on the Surface Hub, there are a few scenarios where you need to use a FQDN.
- **Multiple DNS suffixes** - When your Skype for Business infrastructure has disjointed namespaces such that one or more servers have a DNS suffix that doesn't match the suffix of the sign-in address (SIP) for Skype for Business.
- **Skype for Business and Exchange suffixes are different** - When the suffix of the sign-in address for Skype for Business differs from the suffix of the Exchange address used for the device account.
- **Working with certificates** - Large organizations with on-premise Skype for Business servers commonly use certificates with their own root certificate authority (CA). It is common for the CA domain to be different than the domain of the Skype for Business server which causes the certificate to not be trusted, and sign-in fails. The Skype app needs to know the FQDN of the certificate in order to set up a trust relationship. Enterprises typically use Group Policy to push this out to Skype desktop, but Group Policy is not supported on Surface Hub.
## Add FQDN to Surface Hub
You use the Settings app on Surface Hub to add FQDN information. You can add multiple entries, if needed.
**To add Skype for Business Server FQDN**</br>
1. On Surface Hub open the **Settings** app.
2. Navigate to **System**, **Microsoft Surface Hub**.
3. Under **Skype for Business**, click **Add FQDN**.
4. Type the FQDN for the Skype for Business certificate. You can type multiple FQDNs separated by a comma. For example: lync.com, outlook.com, lync.glbdns.microsoft.com.
![Add Skype for Business FQDN to Settings](images/system-settings-add-fqdn.png)

2
education/windows/set-up-school-pcs-technical.md
View File

@ -243,6 +243,8 @@ The **Set up School PCs** app produces a specialized provisioning package that m
</tr> </tr>
<tr> <td colspan="2"> <p> <strong>Windows Settings</strong> > <strong>Security Settings</strong> > <strong>Local Policies</strong> > <strong>Security Options</strong></p> </td> <tr> <td colspan="2"> <p> <strong>Windows Settings</strong> > <strong>Security Settings</strong> > <strong>Local Policies</strong> > <strong>Security Options</strong></p> </td>
</tr> </tr>
<tr><td><p>Accounts: Block Microsoft accounts</p></td><td><p>Enabled</p></td></tr>
<tr> <td> <p> Interactive logon: Do not display last user name </p> </td> <td> <p> Enabled</p> </td> <tr> <td> <p> Interactive logon: Do not display last user name </p> </td> <td> <p> Enabled</p> </td>
</tr> </tr>
<tr> <td> <p> Interactive logon: Sign-in last interactive user automatically after a system-initiated restart</p> </td> <td> <p> Disabled</p> </td> <tr> <td> <p> Interactive logon: Sign-in last interactive user automatically after a system-initiated restart</p> </td> <td> <p> Disabled</p> </td>

22
education/windows/teacher-get-minecraft.md
View File

@ -102,11 +102,11 @@ Download for others allows teachers or IT admins to download a packages that the
- You want to install this app on each of your student's Windows 10 (at least version 1511) PCs. - You want to install this app on each of your student's Windows 10 (at least version 1511) PCs.
- Your students share Windows 10 computers, but sign in with their own Windows account. - Your students share Windows 10 computers, but sign in with their own Windows account.
**Requirements** #### Requirements
- Administrative permissions are required on the PC. If you don't have the correct permissions, you won't be able to install the app. - Administrative permissions are required on the PC. If you don't have the correct permissions, you won't be able to install the app.
- Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition. - Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition.
**Check for updates**</br> #### Check for updates
Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Windows Store apps. Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Windows Store apps.
**To check for app updates** **To check for app updates**
@ -121,7 +121,7 @@ Minecraft: Education Edition will not install if there are updates pending for o
4. Restart the computer before installing Minecraft: Education Edition. 4. Restart the computer before installing Minecraft: Education Edition.
**To download for others**</br> #### To download for others
You'll download a .zip file, extract the files, and then use one of the files to install Minecraft: Education Edition on each PC. You'll download a .zip file, extract the files, and then use one of the files to install Minecraft: Education Edition on each PC.
1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**. 1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**.
@ -135,8 +135,20 @@ You'll download a .zip file, extract the files, and then use one of the files to
5. **Quick check**. The install program checks the PC to make sure it can run Minecraft: Education Edition. If your PC passes this test, the app will automatically install. 5. **Quick check**. The install program checks the PC to make sure it can run Minecraft: Education Edition. If your PC passes this test, the app will automatically install.
6. **Restart**. Once installation is complete, restart each PC. Minecraft: Education Edition app is now ready for any student to use. 6. **Restart**. Once installation is complete, restart each PC. Minecraft: Education Edition app is now ready for any student to use.
**Note**:</br> #### Troubleshoot
If Minecraft: Education Edition does not install, you may need to update other Windows Store apps on your computer before you can install Minecraft: Education Edition. To do this, open the Windows Store for Business and select the Account button in the top right corner of your screen (next to Search.) Select Check for updates and install all available updates. Now Minecraft should install.
If you ran **InstallMinecraftEducationEdition.bat** and Minecraft: Education Edition isn't available, there are a few things that might have happened.
| Problem | Possible cause | Solution |
|---------|----------------|----------|
| Script ran, but it doesn't look like the app installed. | There might be pending app updates. | Check for app updates (see steps earlier in this topic). </br> Install updates. </br> Restart PC. </br> Run **InstallMinecraftEducationEdition.bat** again. |
| App won't install. | AppLocker is configured and preventing app installs. | Contact IT Admin. |
| App won't install. | Policy prevents users from installing apps on the PC. | Contact IT Admin. |
| Script starts, but stops quickly. | Policy prevents scripts from running on the PC. | Contact IT Admin. |
| App isn't available for other users. | No restart after install. If you don't restart the PC, and just switch users the app will not be available.| Restart PC. </br> Run **InstallMinecraftEducationEdition.bat** again. </br> If a restart doesn't work, contact your IT Admin. |
If you are still having trouble installing the app, you can get more help on our [Support page](http://go.microsoft.com/fwlink/?LinkID=799757).
## Related topics ## Related topics

1
windows/keep-secure/change-history-for-keep-windows-10-secure.md
View File

@ -29,6 +29,7 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md
| [Microsoft Passport guide](microsoft-passport-guide.md) | Updated Roadmap section content | | [Microsoft Passport guide](microsoft-passport-guide.md) | Updated Roadmap section content |
|[Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md) |Updated info based on changes to the features and functionality.| |[Protect your enterprise data using enterprise data protection (EDP)](protect-enterprise-data-using-edp.md) |Updated info based on changes to the features and functionality.|
| [User Account Control Group Policy and registry key settings](user-account-control-group-policy-and-registry-key-settings.md) | Updated for Windows 10 and Windows Server 2016 Technical Preview | | [User Account Control Group Policy and registry key settings](user-account-control-group-policy-and-registry-key-settings.md) | Updated for Windows 10 and Windows Server 2016 Technical Preview |
|[Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) (mutiple topics) | New |
## April 2016 ## April 2016

6
windows/manage/change-history-for-manage-and-update-windows-10.md
View File

@ -12,6 +12,12 @@ author: jdeckerMS
This topic lists new and updated topics in the [Manage and update Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md). This topic lists new and updated topics in the [Manage and update Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
## June 2016
| New or changed topic | Description |
| ---|---|
| [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) | Updated the sample script for Shell Launcher. |
## May 2016 ## May 2016
| New or changed topic | Description | | New or changed topic | Description |

6
windows/manage/device-guard-signing-portal.md
View File

@ -54,9 +54,8 @@ Device Guard is a feature set that consists of both hardware and software system
When you're uploading files for Device Guard signing, there are a few limits for files and file size: When you're uploading files for Device Guard signing, there are a few limits for files and file size:
| | |
|-------------------------------------------------------|----------|
| Description | Limit | | Description | Limit |
|-------------------------------------------------------|----------|
| Maximum size for a policy or catalog file | 3.5 MB | | Maximum size for a policy or catalog file | 3.5 MB |
| Maximum size for multiple files (uploaded in a group) | 4 MB | | Maximum size for multiple files (uploaded in a group) | 4 MB |
| Maximum number of files per upload | 15 files | | Maximum number of files per upload | 15 files |
@ -68,9 +67,8 @@ When you're uploading files for Device Guard signing, there are a few limits for
Catalog and policy files have required files types. Catalog and policy files have required files types.
| | |
|---------------|--------------------|
| File | Required file type | | File | Required file type |
|---------------|--------------------|
| catalog files | .cat | | catalog files | .cat |
| policy files | .bin | | policy files | .bin |

4
windows/manage/distribute-apps-with-management-tool.md
View File

@ -21,7 +21,7 @@ You can configure a mobile device management (MDM) tool to synchronize your Stor
Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Windows Store for Business. Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Windows Store for Business.
In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Store for Business. This allows the MDM tool to call Store for Business management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Store for Business. This allows the MDM tool to call Store for Business management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) and [Manage apps you purchased from the Windows Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune).
Store for Business services provide: Store for Business services provide:
@ -62,7 +62,7 @@ This diagram shows how you can use a management tool to distribute an online-lic
[Configure MDM Provider](../manage/configure-mdm-provider-windows-store-for-business.md) [Configure MDM Provider](../manage/configure-mdm-provider-windows-store-for-business.md)
[Manage apps you purchased from the Windows Store for Business with Micosoft InTune](https://technet.microsoft.com/library/mt676514.aspx) [Manage apps you purchased from the Windows Store for Business with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx)
   

78
windows/manage/set-up-a-kiosk-for-windows-10-for-desktop-editions.md
View File

@ -293,76 +293,84 @@ Alternatively, you can turn on Shell Launcher using the Deployment Image Servici
Modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device. Modify the following PowerShell script as appropriate. The comments in the sample script explain the purpose of each section and tell you where you will want to change the script for your purposes. Save your script with the extension .ps1, open Windows PowerShell as administrator, and run the script on the kiosk device.
``` ```
$COMPUTER = “localhost” $COMPUTER = "localhost"
$NAMESPACE = “root\standardcimv2\embedded” $NAMESPACE = "root\standardcimv2\embedded"
# Create a handle to the class instance so we can call the static methods. # Create a handle to the class instance so we can call the static methods.
$ShellLauncherClass = [wmiclass]”\\$COMPUTER\${NAMESPACE}:WESL_UserSetting” $ShellLauncherClass = [wmiclass]"\\$COMPUTER\${NAMESPACE}:WESL_UserSetting"
# This well-known security identifier (SID) corresponds to the BUILTIN\Administrators group. # This well-known security identifier (SID) corresponds to the BUILTIN\Administrators group.
$Admins_SID = “S-1-5-32-544” $Admins_SID = "S-1-5-32-544"
# Create a function to retrieve the SID for a user account on a machine. # Create a function to retrieve the SID for a user account on a machine.
function Get-UsernameSID($AccountName) { function Get-UsernameSID($AccountName) {
$NTUserObject = New-Object System.Security.Principal.NTAccount($AccountName) $NTUserObject = New-Object System.Security.Principal.NTAccount($AccountName)
$NTUserSID = $NTUserObject.Translate([System.Security.Principal.SecurityIdentifier]) $NTUserSID = $NTUserObject.Translate([System.Security.Principal.SecurityIdentifier])
return $NTUserSID.Value return $NTUserSID.Value
} }
# Get the SID for a user account named “Cashier”. Rename “Cashier” to an existing account on your system to test this script. # Get the SID for a user account named "Cashier". Rename "Cashier" to an existing account on your system to test this script.
$Cashier_SID = Get-UsernameSID(“Cashier”) $Cashier_SID = Get-UsernameSID("Cashier")
# Define actions to take when the shell program exits. # Define actions to take when the shell program exits.
$restart_shell = 0 $restart_shell = 0
$restart_device = 1 $restart_device = 1
$shutdown_device = 2 $shutdown_device = 2
# Examples. You can change these examples to use the program that you want to use as the shell. # Examples. You can change these examples to use the program that you want to use as the shell.
# This example sets the command prompt as the default shell, and restarts the device if the command prompt is closed. # This example sets the command prompt as the default shell, and restarts the device if the command prompt is closed.
$ShellLauncherClass.SetDefaultShell(“cmd.exe”, $restart_device) $ShellLauncherClass.SetDefaultShell("cmd.exe", $restart_device)
# Display the default shell to verify that it was added correctly. # Display the default shell to verify that it was added correctly.
$DefaultShellObject = $ShellLauncherClass.GetDefaultShell() $DefaultShellObject = $ShellLauncherClass.GetDefaultShell()
“`nDefault Shell is set to “ + $DefaultShellObject.Shell + “ and the default action is set to “ + $DefaultShellObject.defaultaction "`nDefault Shell is set to " + $DefaultShellObject.Shell + " and the default action is set to " + $DefaultShellObject.defaultaction
# Set Internet Explorer as the shell for “Cashier”, and restart the machine if Internet Explorer is closed. # Set Internet Explorer as the shell for "Cashier", and restart the machine if Internet Explorer is closed.
$ShellLauncherClass.SetCustomShell($Cashier_SID, “c:\program files\internet explorer\iexplore.exe www.microsoft.com”, ($null), ($null), $restart_shell) $ShellLauncherClass.SetCustomShell($Cashier_SID, "c:\program files\internet explorer\iexplore.exe www.microsoft.com", ($null), ($null), $restart_shell)
# Set Explorer as the shell for administrators. # Set Explorer as the shell for administrators.
$ShellLauncherClass.SetCustomShell($Admins_SID, “explorer.exe”) $ShellLauncherClass.SetCustomShell($Admins_SID, "explorer.exe")
# View all the custom shells defined. # View all the custom shells defined.
“`nCurrent settings for custom shells:” "`nCurrent settings for custom shells:"
Get-WmiObject -namespace $NAMESPACE -computer $COMPUTER -class WESL_UserSetting | Select Sid, Shell, DefaultAction Get-WmiObject -namespace $NAMESPACE -computer $COMPUTER -class WESL_UserSetting | Select Sid, Shell, DefaultAction
# Enable Shell Launcher # Enable Shell Launcher
$ShellLauncherClass.SetEnabled($TRUE) $ShellLauncherClass.SetEnabled($TRUE)
$IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled() $IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled()
“`nEnabled is set to “ + $IsShellLauncherEnabled.Enabled "`nEnabled is set to " + $IsShellLauncherEnabled.Enabled
# Remove the new custom shells. # Remove the new custom shells.
$ShellLauncherClass.RemoveCustomShell($Admins_SID) $ShellLauncherClass.RemoveCustomShell($Admins_SID)
$ShellLauncherClass.RemoveCustomShell($Cashier_SID) $ShellLauncherClass.RemoveCustomShell($Cashier_SID)
# Disable Shell Launcher
$ShellLauncherClass.SetEnabled($FALSE)
$IsShellLauncherEnabled = $ShellLauncherClass.IsEnabled()
"`nEnabled is set to " + $IsShellLauncherEnabled.Enabled
``` ```
## Related topics ## Related topics