From 202430294be5841d5a9a93452553ba5480cbda13 Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Fri, 4 Feb 2022 11:25:04 +0530 Subject: [PATCH 1/8] Create windowsautopilot-csp.md --- .../mdm/windowsautopilot-csp.md | 481 ++++++++++++++++++ 1 file changed, 481 insertions(+) create mode 100644 windows/client-management/mdm/windowsautopilot-csp.md diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md new file mode 100644 index 0000000000..58c79ec8dc --- /dev/null +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -0,0 +1,481 @@ +--- +title: WindowsAutoPilot CSP +description: Learn how the WindowsLicensing configuration service provider (CSP) is designed for licensing related management scenarios. +ms.assetid: E6BC6B0D-1F16-48A5-9AC4-76D69A7EDDA6 +ms.reviewer: +manager: dansimp +ms.author: dansimp +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: dansimp +ms.date: 08/15/2018 +--- + +# WindowsAutoPilot CSP + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +The WindowsLicensing configuration service provider is designed for licensing related management scenarios. Currently the scope is limited to edition upgrades of Windows 10 client devices, such as Windows 10 Pro to Windows 10 Enterprise. In addition, this CSP provides the capability to activate or change the product key of Windows 10 client devices. + +The following shows the WindowsLicensing configuration service provider in tree format. + +```console +./Vendor/MSFT +WindowsLicensing +----UpgradeEditionWithProductKey +----ChangeProductKey +----Edition +----Status +----LicenseKeyType +----CheckApplicability +----ChangeProductKey (Added in Windows 10, version 1703) +----Subscriptions (Added in Windows 10, version 1607) +--------SubscriptionId (Added in Windows 10, version 1607) +------------Status (Added in Windows 10, version 1607) +------------Name (Added in Windows 10, version 1607) +----SMode (Added in Windows 10, version 1809) +--------SwitchingPolicy (Added in Windows 10, version 1809) +--------SwitchFromSMode (Added in Windows 10, version 1809) +--------Status (Added in Windows 10, version 1809) +``` +**./Device/Vendor/MSFT/WindowsLicensing** +This is the root node for the WindowsLicensing configuration service provider. + +The supported operation is Get. + +**UpgradeEditionWithProductKey** +Enters a product key for an edition upgrade of Windows 10 desktop devices. + +> [!NOTE] +> This upgrade process requires a system restart. + + + +The date type is a chr. + +The supported operation is Exec. + +When a product key is pushed from an MDM server to a user's device, **changepk.exe** runs using the product key. After it completes, a notification is shown to the user that a new edition of Windows 10 is available. The user can then restart their system manually or, after two hours, the device will restart automatically to complete the upgrade. The user will receive a reminder notification 10 minutes before the automatic restart. + +After the device restarts, the edition upgrade process completes. The user will receive a notification of the successful upgrade. + +> [!IMPORTANT] +> If another policy requires a system reboot that occurs when **changepk.exe** is running, the edition upgrade will fail. + + + +If a product key is entered in a provisioning package and the user begins installation of the package, a notification is shown to the user that their system will restart to complete the package installation. Upon explicit consent from the user to proceed, the package continues installation and **changepk.exe** runs using the product key. The user will receive a reminder notification 30 seconds before the automatic restart. + +After the device restarts, the edition upgrade process completes. The user will receive a notification of the successful upgrade. + +This node can also be used to activate or change a product key on a particular edition of Windows 10 desktop device by entering a product key. Activation or changing a product key does not require a reboot and is a silent process for the user. + +> [!IMPORTANT] +> The product key entered must be 29 characters (that is, it should include dashes), otherwise the activation, edition upgrade, or product key change on Windows 10 desktop devices will fail. The product key is acquired from Microsoft Volume Licensing Service Center. Your organization must have a Volume Licensing contract with Microsoft to access the portal. + + + +The following are valid edition upgrade paths when using this node through an MDM: + +- Windows 10 Enterprise to Windows 10 Education +- Windows 10 Home to Windows 10 Education +- Windows 10 Pro to Windows 10 Education +- Windows 10 Pro to Windows 10 Enterprise + +Activation or changing a product key can be carried out on the following editions: + +- Windows 10 Education +- Windows 10 Enterprise +- Windows 10 Home +- Windows 10 Pro + +**Edition** +Returns a value that maps to the Windows 10 edition. Take the value, convert it into its hexadecimal equivalent and search the GetProductInfo function page on MSDN for edition information. + +The data type is an Int. + +The supported operation is Get. + +**Status** +Returns the status of an edition upgrade on Windows devices. The status corresponds to one of the following values: + +- 0 = Failed +- 1 = Pending +- 2 = In progress +- 3 = Completed +- 4 = Unknown + +The data type is an Int. + +The supported operation is Get. + + + +**LicenseKeyType** +Returns the parameter type used by Windows 10 devices for an edition upgrade, activation, or product key change. + +- Windows 10 client devices require a product key. + +The data type is a chr. + +The supported operation is Get. + +**CheckApplicability** +Returns TRUE if the entered product key can be used for an edition upgrade, activation or changing a product key of Windows 10 for desktop devices. + +The data type is a chr. + +The supported operation is Exec. + +**ChangeProductKey** +Added in Windows 10, version 1703. Installs a product key for Windows 10 desktop devices. Does not reboot. + +The data type is a chr. + +The supported operation is Execute. + +**Subscriptions** +Added in Windows 10, version 1607. Node for subscriptions. + +**Subscriptions/SubscriptionId** +Added in Windows 10, version 1607. Node for subscription IDs. + +**Subscriptions/SubscriptionId/Status** +Added in Windows 10, version 1607. Returns the status of the subscription. + +The data type is an Int. + +The supported operation is Get. + +**Subscriptions/SubscriptionId/Name** +Added in Windows 10, version 1607. Returns the name of the subscription. + +The data type is a chr. + +The supported operation is Get. + +**SMode** +Interior node for managing S mode. + +**SMode/SwitchingPolicy** +Added in Windows 10, version 1809. Determines whether a consumer can switch the device out of S mode. This setting is only applicable to devices available in S mode. For examples, see [Add S mode SwitchingPolicy](#smode-switchingpolicy-add), [Get S mode SwitchingPolicy](#smode-switchingpolicy-get), [Replace S mode SwitchingPolicy](#smode-switchingpolicy-replace) and [Delete S mode SwitchingPolicy](#smode-switchingpolicy-delete) + +Value type is integer. Supported operations are Add, Get, Replace, and Delete. + +Supported values: +- 0 - No Restriction: The user is allowed to switch the device out of S mode. +- 1 - User Blocked: The admin has blocked the user from switching their device out of S mode. Only the admin can switch the device out of S mode through the SMode/SwitchFromSMode node. + +**SMode/SwitchFromSMode** +Added in Windows 10, version 1809. Switches a device out of S mode if possible. Does not reboot. For an example, see [Execute SwitchFromSMode](#smode-switchfromsmode-execute) + +Supported operation is Execute. + +**SMode/Status** +Added in Windows 10, version 1809. Returns the status of the latest SwitchFromSMode set request. For an example, see [Get S mode status](#smode-status-example) + +Value type is integer. Supported operation is Get. + +Values: +- Request fails with error code 404 - no SwitchFromSMode request has been made. +- 0 - The device successfully switched out of S mode +- 1 - The device is processing the request to switch out of S mode +- 3 - The device was already switched out of S mode +- 4 - The device failed to switch out of S mode + +## SyncML examples + + +**CheckApplicability** + +```xml + + + + $CmdID$ + + + ./Device/Vendor/MSFT/WindowsLicensing/CheckApplicability + + + chr + + XXXXX-XXXXX-XXXXX-XXXXX-XXXXX + + + + + +``` + +> [!NOTE] +> `XXXXX-XXXXX-XXXXX-XXXXX-XXXXX` in the **Data** tag should be replaced with your product key. + + + +**Edition** + +```xml + + + + $CmdID$ + + + ./Device/Vendor/MSFT/WindowsLicensing/Edition + + + + + + +``` + +**LicenseKeyType** + +```xml + + + + $CmdID$ + + + ./Device/Vendor/MSFT/WindowsLicensing/LicenseKeyType + + + + + + +``` + +**Status** + +```xml + + + + $CmdID$ + + + ./Device/Vendor/MSFT/WindowsLicensing/Status + + + + + + +``` + +**UpgradeEditionWithProductKey** + +```xml + + + + $CmdID$ + + + ./Device/Vendor/MSFT/WindowsLicensing/UpgradeEditionWithProductKey + + + chr + + XXXXX-XXXXX-XXXXX-XXXXX-XXXXX + + + + + +``` + +> [!NOTE] +> `XXXXX-XXXXX-XXXXX-XXXXX-XXXXX` in the **Data** tag should be replaced with your product key. + + + +**Get S mode status** + +```xml + + + + 6 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/Status + + + + + + + +``` + +**Execute SwitchFromSMode** + +```xml + + + + 5 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/SwitchFromSMode + + + + null + text/plain + + + + + + + +``` + +**Add S mode SwitchingPolicy** + +```xml + + + + 4 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy + + + + int + text/plain + + 1 + + + + + +``` + +**Get S mode SwitchingPolicy** + +```xml + + + + 2 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy + + + + + + + +``` + +**Replace S mode SwitchingPolicy** + +```xml + + + + 1 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy + + + + int + text/plain + + 1 + + + + + +``` + +**Delete S mode SwitchingPolicy** + +```xml + + + + 3 + + + + ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy + + + + + + + +``` + +## Related topics + +[Configuration service provider reference](configuration-service-provider-reference.md) From 90f7d7cb3c377141e16e2db51710ea0ab7444222 Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Mon, 7 Feb 2022 10:53:15 +0530 Subject: [PATCH 2/8] Updated --- windows/client-management/mdm/toc.yml | 5 + .../mdm/windowsautopilot-csp.md | 466 +---------------- .../mdm/windowsautopilot-ddf-file.md | 483 ++++++++++++++++++ 3 files changed, 491 insertions(+), 463 deletions(-) create mode 100644 windows/client-management/mdm/windowsautopilot-ddf-file.md diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 1b85a93de4..4bb300e18c 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -963,6 +963,11 @@ items: items: - name: WindowsAdvancedThreatProtection DDF file href: windowsadvancedthreatprotection-ddf.md + - name: WindowsAutoPilot CSP + href: windowsautopilot-csp.md + items: + - name: WindowsAutoPilot DDF file + href: windowsautopilot-ddf.md - name: WindowsDefenderApplicationGuard CSP href: windowsdefenderapplicationguard-csp.md items: diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index 58c79ec8dc..6b0b3f0b8e 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -4,12 +4,12 @@ description: Learn how the WindowsLicensing configuration service provider (CSP) ms.assetid: E6BC6B0D-1F16-48A5-9AC4-76D69A7EDDA6 ms.reviewer: manager: dansimp -ms.author: dansimp +ms.author: nimishasatapathy ms.topic: article ms.prod: w10 ms.technology: windows author: dansimp -ms.date: 08/15/2018 +ms.date: 02/07/2022 --- # WindowsAutoPilot CSP @@ -17,465 +17,5 @@ ms.date: 08/15/2018 > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -The WindowsLicensing configuration service provider is designed for licensing related management scenarios. Currently the scope is limited to edition upgrades of Windows 10 client devices, such as Windows 10 Pro to Windows 10 Enterprise. In addition, this CSP provides the capability to activate or change the product key of Windows 10 client devices. +The WindowsAutopilot CSP collects hardware information about a device and formats it into a blob. This blob is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot. -The following shows the WindowsLicensing configuration service provider in tree format. - -```console -./Vendor/MSFT -WindowsLicensing -----UpgradeEditionWithProductKey -----ChangeProductKey -----Edition -----Status -----LicenseKeyType -----CheckApplicability -----ChangeProductKey (Added in Windows 10, version 1703) -----Subscriptions (Added in Windows 10, version 1607) ---------SubscriptionId (Added in Windows 10, version 1607) -------------Status (Added in Windows 10, version 1607) -------------Name (Added in Windows 10, version 1607) -----SMode (Added in Windows 10, version 1809) ---------SwitchingPolicy (Added in Windows 10, version 1809) ---------SwitchFromSMode (Added in Windows 10, version 1809) ---------Status (Added in Windows 10, version 1809) -``` -**./Device/Vendor/MSFT/WindowsLicensing** -This is the root node for the WindowsLicensing configuration service provider. - -The supported operation is Get. - -**UpgradeEditionWithProductKey** -Enters a product key for an edition upgrade of Windows 10 desktop devices. - -> [!NOTE] -> This upgrade process requires a system restart. - - - -The date type is a chr. - -The supported operation is Exec. - -When a product key is pushed from an MDM server to a user's device, **changepk.exe** runs using the product key. After it completes, a notification is shown to the user that a new edition of Windows 10 is available. The user can then restart their system manually or, after two hours, the device will restart automatically to complete the upgrade. The user will receive a reminder notification 10 minutes before the automatic restart. - -After the device restarts, the edition upgrade process completes. The user will receive a notification of the successful upgrade. - -> [!IMPORTANT] -> If another policy requires a system reboot that occurs when **changepk.exe** is running, the edition upgrade will fail. - - - -If a product key is entered in a provisioning package and the user begins installation of the package, a notification is shown to the user that their system will restart to complete the package installation. Upon explicit consent from the user to proceed, the package continues installation and **changepk.exe** runs using the product key. The user will receive a reminder notification 30 seconds before the automatic restart. - -After the device restarts, the edition upgrade process completes. The user will receive a notification of the successful upgrade. - -This node can also be used to activate or change a product key on a particular edition of Windows 10 desktop device by entering a product key. Activation or changing a product key does not require a reboot and is a silent process for the user. - -> [!IMPORTANT] -> The product key entered must be 29 characters (that is, it should include dashes), otherwise the activation, edition upgrade, or product key change on Windows 10 desktop devices will fail. The product key is acquired from Microsoft Volume Licensing Service Center. Your organization must have a Volume Licensing contract with Microsoft to access the portal. - - - -The following are valid edition upgrade paths when using this node through an MDM: - -- Windows 10 Enterprise to Windows 10 Education -- Windows 10 Home to Windows 10 Education -- Windows 10 Pro to Windows 10 Education -- Windows 10 Pro to Windows 10 Enterprise - -Activation or changing a product key can be carried out on the following editions: - -- Windows 10 Education -- Windows 10 Enterprise -- Windows 10 Home -- Windows 10 Pro - -**Edition** -Returns a value that maps to the Windows 10 edition. Take the value, convert it into its hexadecimal equivalent and search the GetProductInfo function page on MSDN for edition information. - -The data type is an Int. - -The supported operation is Get. - -**Status** -Returns the status of an edition upgrade on Windows devices. The status corresponds to one of the following values: - -- 0 = Failed -- 1 = Pending -- 2 = In progress -- 3 = Completed -- 4 = Unknown - -The data type is an Int. - -The supported operation is Get. - - - -**LicenseKeyType** -Returns the parameter type used by Windows 10 devices for an edition upgrade, activation, or product key change. - -- Windows 10 client devices require a product key. - -The data type is a chr. - -The supported operation is Get. - -**CheckApplicability** -Returns TRUE if the entered product key can be used for an edition upgrade, activation or changing a product key of Windows 10 for desktop devices. - -The data type is a chr. - -The supported operation is Exec. - -**ChangeProductKey** -Added in Windows 10, version 1703. Installs a product key for Windows 10 desktop devices. Does not reboot. - -The data type is a chr. - -The supported operation is Execute. - -**Subscriptions** -Added in Windows 10, version 1607. Node for subscriptions. - -**Subscriptions/SubscriptionId** -Added in Windows 10, version 1607. Node for subscription IDs. - -**Subscriptions/SubscriptionId/Status** -Added in Windows 10, version 1607. Returns the status of the subscription. - -The data type is an Int. - -The supported operation is Get. - -**Subscriptions/SubscriptionId/Name** -Added in Windows 10, version 1607. Returns the name of the subscription. - -The data type is a chr. - -The supported operation is Get. - -**SMode** -Interior node for managing S mode. - -**SMode/SwitchingPolicy** -Added in Windows 10, version 1809. Determines whether a consumer can switch the device out of S mode. This setting is only applicable to devices available in S mode. For examples, see [Add S mode SwitchingPolicy](#smode-switchingpolicy-add), [Get S mode SwitchingPolicy](#smode-switchingpolicy-get), [Replace S mode SwitchingPolicy](#smode-switchingpolicy-replace) and [Delete S mode SwitchingPolicy](#smode-switchingpolicy-delete) - -Value type is integer. Supported operations are Add, Get, Replace, and Delete. - -Supported values: -- 0 - No Restriction: The user is allowed to switch the device out of S mode. -- 1 - User Blocked: The admin has blocked the user from switching their device out of S mode. Only the admin can switch the device out of S mode through the SMode/SwitchFromSMode node. - -**SMode/SwitchFromSMode** -Added in Windows 10, version 1809. Switches a device out of S mode if possible. Does not reboot. For an example, see [Execute SwitchFromSMode](#smode-switchfromsmode-execute) - -Supported operation is Execute. - -**SMode/Status** -Added in Windows 10, version 1809. Returns the status of the latest SwitchFromSMode set request. For an example, see [Get S mode status](#smode-status-example) - -Value type is integer. Supported operation is Get. - -Values: -- Request fails with error code 404 - no SwitchFromSMode request has been made. -- 0 - The device successfully switched out of S mode -- 1 - The device is processing the request to switch out of S mode -- 3 - The device was already switched out of S mode -- 4 - The device failed to switch out of S mode - -## SyncML examples - - -**CheckApplicability** - -```xml - - - - $CmdID$ - - - ./Device/Vendor/MSFT/WindowsLicensing/CheckApplicability - - - chr - - XXXXX-XXXXX-XXXXX-XXXXX-XXXXX - - - - - -``` - -> [!NOTE] -> `XXXXX-XXXXX-XXXXX-XXXXX-XXXXX` in the **Data** tag should be replaced with your product key. - - - -**Edition** - -```xml - - - - $CmdID$ - - - ./Device/Vendor/MSFT/WindowsLicensing/Edition - - - - - - -``` - -**LicenseKeyType** - -```xml - - - - $CmdID$ - - - ./Device/Vendor/MSFT/WindowsLicensing/LicenseKeyType - - - - - - -``` - -**Status** - -```xml - - - - $CmdID$ - - - ./Device/Vendor/MSFT/WindowsLicensing/Status - - - - - - -``` - -**UpgradeEditionWithProductKey** - -```xml - - - - $CmdID$ - - - ./Device/Vendor/MSFT/WindowsLicensing/UpgradeEditionWithProductKey - - - chr - - XXXXX-XXXXX-XXXXX-XXXXX-XXXXX - - - - - -``` - -> [!NOTE] -> `XXXXX-XXXXX-XXXXX-XXXXX-XXXXX` in the **Data** tag should be replaced with your product key. - - - -**Get S mode status** - -```xml - - - - 6 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/Status - - - - - - - -``` - -**Execute SwitchFromSMode** - -```xml - - - - 5 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/SwitchFromSMode - - - - null - text/plain - - - - - - - -``` - -**Add S mode SwitchingPolicy** - -```xml - - - - 4 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy - - - - int - text/plain - - 1 - - - - - -``` - -**Get S mode SwitchingPolicy** - -```xml - - - - 2 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy - - - - - - - -``` - -**Replace S mode SwitchingPolicy** - -```xml - - - - 1 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy - - - - int - text/plain - - 1 - - - - - -``` - -**Delete S mode SwitchingPolicy** - -```xml - - - - 3 - - - - ./Vendor/MSFT/WindowsLicensing/SMode/SwitchingPolicy - - - - - - - -``` - -## Related topics - -[Configuration service provider reference](configuration-service-provider-reference.md) diff --git a/windows/client-management/mdm/windowsautopilot-ddf-file.md b/windows/client-management/mdm/windowsautopilot-ddf-file.md new file mode 100644 index 0000000000..56746c960a --- /dev/null +++ b/windows/client-management/mdm/windowsautopilot-ddf-file.md @@ -0,0 +1,483 @@ +--- +title: WindowsAutoPilot DDF file +description: learn about the OMA DM device description framework (DDF) for the WindowsDefenderApplicationGuard DDF file configuration service provider (CSP). +ms.author: dansimp +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: dansimp +ms.date: 02/07/2022 +ms.reviewer: +manager: dansimp +--- + +# WindowsAutoPilot DDF file + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +This topic shows the OMA DM device description framework (DDF) for the **WindowsDefenderApplicationGuard** configuration service provider. + +Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). + +This XML is for Windows 10, version 1809. + +```xml + +]> + + 1.2 + + WindowsDefenderApplicationGuard + ./Device/Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.3/MDM/WindowsDefenderApplicationGuard + + + + Settings + + + + + + + + + + + + + + + + + + + AllowWindowsDefenderApplicationGuard + + + + + + + + + + + + + + + + + + text/plain + + + + + ClipboardFileType + + + + + + + + + + + + + + + + + + text/plain + + + + + ClipboardSettings + + + + + + + + + + + + + + + + + + text/plain + + + + + PrintingSettings + + + + + + + + + + + + + + + + + + text/plain + + + + + BlockNonEnterpriseContent + + + + + + + + + + + + + + + + + + text/plain + + + + + AllowPersistence + + + + + + + + + + + + + + + + + + text/plain + + + + + AllowVirtualGPU + + + + + + + + + + + + + + + + + + text/plain + + + + + SaveFilesToHost + + + + + + + + + + + + + + + + + + text/plain + + + + + FileTrustCriteria + + + + + + + + + + + + + + + + + + text/plain + + + + + FileTrustOriginRemovableMedia + + + + + + + + + + + + + + + + + + text/plain + + + + + FileTrustOriginNetworkShare + + + + + + + + + + + + + + + + + + text/plain + + + + + FileTrustOriginMarkOfTheWeb + + + + + + + + + + + + + + + + + + text/plain + + + + + CertificateThumbprints + + + + + + + + + + + + + + + + + + + + + text/plain + + + + + AllowCameraMicrophoneRedirection + + + + + + + + + + + + + + + + + + text/plain + + + + + + Status + + + + + + + + + + + + + + + text/plain + + + + + InstallWindowsDefenderApplicationGuard + + + + + + + + + + + + + + + + text/plain + + + + + Audit + + + + + + + + + + + + + + + + + + + AuditApplicationGuard + + + + + + + + + + + + + + + + + + text/plain + + + + + + +``` From 94da4d431bdeec7af6d2ffc4d5dd8b8ebe6c33cd Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Mon, 7 Feb 2022 11:12:03 +0530 Subject: [PATCH 3/8] Update windowsautopilot-csp.md --- windows/client-management/mdm/windowsautopilot-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index 6b0b3f0b8e..e1134594a8 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -4,7 +4,7 @@ description: Learn how the WindowsLicensing configuration service provider (CSP) ms.assetid: E6BC6B0D-1F16-48A5-9AC4-76D69A7EDDA6 ms.reviewer: manager: dansimp -ms.author: nimishasatapathy +ms.author: v-nsatapathy ms.topic: article ms.prod: w10 ms.technology: windows From 33e8e7810130ee0d57a50e333ba850a62cd2488d Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Mon, 7 Feb 2022 11:17:55 +0530 Subject: [PATCH 4/8] Updated --- .../mdm/windowsautopilot-csp.md | 2 +- .../mdm/windowsautopilot-ddf-file.md | 465 ------------------ 2 files changed, 1 insertion(+), 466 deletions(-) diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index e1134594a8..e13ba622fc 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -1,6 +1,6 @@ --- title: WindowsAutoPilot CSP -description: Learn how the WindowsLicensing configuration service provider (CSP) is designed for licensing related management scenarios. +description: Learn how without the ability to mark a device as remediation required, the device will remain in a broken state, which results in security and privacy concerns in Autopilot. ms.assetid: E6BC6B0D-1F16-48A5-9AC4-76D69A7EDDA6 ms.reviewer: manager: dansimp diff --git a/windows/client-management/mdm/windowsautopilot-ddf-file.md b/windows/client-management/mdm/windowsautopilot-ddf-file.md index 56746c960a..a25906a591 100644 --- a/windows/client-management/mdm/windowsautopilot-ddf-file.md +++ b/windows/client-management/mdm/windowsautopilot-ddf-file.md @@ -16,468 +16,3 @@ manager: dansimp > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -This topic shows the OMA DM device description framework (DDF) for the **WindowsDefenderApplicationGuard** configuration service provider. - -Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). - -This XML is for Windows 10, version 1809. - -```xml - -]> - - 1.2 - - WindowsDefenderApplicationGuard - ./Device/Vendor/MSFT - - - - - - - - - - - - - - - com.microsoft/1.3/MDM/WindowsDefenderApplicationGuard - - - - Settings - - - - - - - - - - - - - - - - - - - AllowWindowsDefenderApplicationGuard - - - - - - - - - - - - - - - - - - text/plain - - - - - ClipboardFileType - - - - - - - - - - - - - - - - - - text/plain - - - - - ClipboardSettings - - - - - - - - - - - - - - - - - - text/plain - - - - - PrintingSettings - - - - - - - - - - - - - - - - - - text/plain - - - - - BlockNonEnterpriseContent - - - - - - - - - - - - - - - - - - text/plain - - - - - AllowPersistence - - - - - - - - - - - - - - - - - - text/plain - - - - - AllowVirtualGPU - - - - - - - - - - - - - - - - - - text/plain - - - - - SaveFilesToHost - - - - - - - - - - - - - - - - - - text/plain - - - - - FileTrustCriteria - - - - - - - - - - - - - - - - - - text/plain - - - - - FileTrustOriginRemovableMedia - - - - - - - - - - - - - - - - - - text/plain - - - - - FileTrustOriginNetworkShare - - - - - - - - - - - - - - - - - - text/plain - - - - - FileTrustOriginMarkOfTheWeb - - - - - - - - - - - - - - - - - - text/plain - - - - - CertificateThumbprints - - - - - - - - - - - - - - - - - - - - - text/plain - - - - - AllowCameraMicrophoneRedirection - - - - - - - - - - - - - - - - - - text/plain - - - - - - Status - - - - - - - - - - - - - - - text/plain - - - - - InstallWindowsDefenderApplicationGuard - - - - - - - - - - - - - - - - text/plain - - - - - Audit - - - - - - - - - - - - - - - - - - - AuditApplicationGuard - - - - - - - - - - - - - - - - - - text/plain - - - - - - -``` From 012ae6a2c1a9ebb97fc80646b14a63fc1919f3f2 Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Mon, 7 Feb 2022 11:21:20 +0530 Subject: [PATCH 5/8] Updated --- windows/client-management/mdm/windowsautopilot-csp.md | 2 +- windows/client-management/mdm/windowsautopilot-ddf-file.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index e13ba622fc..99e3e1705a 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -17,5 +17,5 @@ ms.date: 02/07/2022 > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -The WindowsAutopilot CSP collects hardware information about a device and formats it into a blob. This blob is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot. +The WindowsAutopilot CSP collects hardware information about a device and formats it into a BLOB. This BLOB is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot. diff --git a/windows/client-management/mdm/windowsautopilot-ddf-file.md b/windows/client-management/mdm/windowsautopilot-ddf-file.md index a25906a591..e63343cd63 100644 --- a/windows/client-management/mdm/windowsautopilot-ddf-file.md +++ b/windows/client-management/mdm/windowsautopilot-ddf-file.md @@ -1,6 +1,6 @@ --- title: WindowsAutoPilot DDF file -description: learn about the OMA DM device description framework (DDF) for the WindowsDefenderApplicationGuard DDF file configuration service provider (CSP). +description: Learn how without the ability to mark a device as remediation required, the device will remain in a broken state, for the WindowsAutoPilot DDF file configuration service provider (CSP) . ms.author: dansimp ms.topic: article ms.prod: w10 From c85ee3f9f9bbccd2dbd8cd00fc85205ca978e4f9 Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Wed, 16 Feb 2022 16:47:25 +0530 Subject: [PATCH 6/8] Updated --- .../mdm/windowsautopilot-csp.md | 7 +++ .../mdm/windowsautopilot-ddf-file.md | 58 +++++++++++++++++++ 2 files changed, 65 insertions(+) diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index 99e3e1705a..c567125721 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -19,3 +19,10 @@ ms.date: 02/07/2022 The WindowsAutopilot CSP collects hardware information about a device and formats it into a BLOB. This BLOB is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot. +**./Vendor/MSFT/WindowsAutopilot** + +Root node. Supported operation is Get. + +**HardwareMismatchRemediationData** + +Interior node. Supported operation is Get. Collects hardware information about a device and returns it as an encoded string. This string is used as input for calling Windows Autopilot Service to remediate a device if the device underwent a hardware change that affects its ability to use Windows Autopilot. diff --git a/windows/client-management/mdm/windowsautopilot-ddf-file.md b/windows/client-management/mdm/windowsautopilot-ddf-file.md index e63343cd63..a07f24501d 100644 --- a/windows/client-management/mdm/windowsautopilot-ddf-file.md +++ b/windows/client-management/mdm/windowsautopilot-ddf-file.md @@ -16,3 +16,61 @@ manager: dansimp > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. +This topic shows the device description framework (DDF) for the **WindowsAutoPilot** configuration service provider. + +Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). + +```xml +WindowsAutopilot + ./Vendor/MSFT + + + + + These settings enable configuration of Windows Autopilot + + + + + + + + + + + com.microsoft/1.0/MDM/WindowsAutopilot + + + 99.9.99999, 10.0.19041.1202, 10.0.19042.1202, 10.0.19043.1202 + 1.0 + + + + + + + HardwareMismatchRemediationData + + + + + This data is used to remediate Autopilot hardware mismatches. + + + + + + + + + + + text/plain + + + + + + + +``` From 9afe72b471d4547dddac79d078995c058f3a7073 Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Wed, 16 Feb 2022 23:01:12 +0530 Subject: [PATCH 7/8] Updated --- windows/client-management/mdm/toc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 4bb300e18c..ee13358bb5 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -967,7 +967,7 @@ items: href: windowsautopilot-csp.md items: - name: WindowsAutoPilot DDF file - href: windowsautopilot-ddf.md + href: windowsautopilot-ddf-file.md - name: WindowsDefenderApplicationGuard CSP href: windowsdefenderapplicationguard-csp.md items: From ff84bc678a48a3d214b6aa598b156378a507ff6e Mon Sep 17 00:00:00 2001 From: Nimisha Satapathy Date: Fri, 18 Feb 2022 10:28:16 +0530 Subject: [PATCH 8/8] Update windowsautopilot-csp.md --- windows/client-management/mdm/windowsautopilot-csp.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/windowsautopilot-csp.md b/windows/client-management/mdm/windowsautopilot-csp.md index c567125721..b50c42c129 100644 --- a/windows/client-management/mdm/windowsautopilot-csp.md +++ b/windows/client-management/mdm/windowsautopilot-csp.md @@ -17,7 +17,8 @@ ms.date: 02/07/2022 > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. -The WindowsAutopilot CSP collects hardware information about a device and formats it into a BLOB. This BLOB is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot. + +The WindowsAutopilot CSP collects hardware information about a device and formats it into a BLOB. This BLOB is used as input for calling Windows Autopilot Service to mark a device as remediation required if the device underwent a hardware change that affects its ability to use Windows Autopilot.” with “The WindowsAutopilot CSP exposes Windows Autopilot related device information.” Because the CSP description should be more general/high level. **./Vendor/MSFT/WindowsAutopilot**