deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Add CongigLock node in DMClient CSP

Browse Source 
Task 5499285: update the DMClient CSP document to add the 3 new nodes used by Config Lock.
This commit is contained in:
Alekhya Jupudi 2021-10-19 13:19:21 +05:30
parent c3567ef40c
commit 03e8420ba6
1 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
windows/client-management/mdm/dmclient-csp.md
View File

@ -22,7 +22,7 @@ The following shows the DMClient CSP in tree format.
./Vendor/MSFT ./Vendor/MSFT
DMClient DMClient
----Provider ----Provider
-------- --------ProviderID
------------EntDeviceName ------------EntDeviceName
------------ExchangeID ------------ExchangeID
------------EntDMID ------------EntDMID
@ -45,6 +45,10 @@ DMClient
------------HWDevID ------------HWDevID
------------ManagementServerAddressList ------------ManagementServerAddressList
------------CommercialID ------------CommercialID
------------ConfigLock
----------------Lock
----------------UnlockDuration
----------------SecureCore
------------Push ------------Push
----------------PFN ----------------PFN
----------------ChannelURI ----------------ChannelURI
@ -598,6 +602,27 @@ Optional. Boolean value that allows the IT admin to require the device to start
Supported operations are Add, Get, and Replace. Supported operations are Add, Get, and Replace.
<a href="" id="provider-providerid-configlock"></a>**Provider/*ProviderID*/ConfigLock**
Configuration Drift is a major concern for commercial customers. Some customers view it as a security risk. This node mitigates the customer concern by bringing the capability to monitor and quickly remediate the policy configuration when a device is MDM managed.
Default = Locked
> [!Note]
>If the device is not Secure Core, then this feature will not work.
<a href="" id="provider-providerid-configlock-lock"></a>**Provider/*ProviderID*/ConfigLock/Lock**
Supported operations are Add, Delete, Get. Supported values are 0-unlock, 1-lock.
<a href="" id="provider-providerid-configlock-unlockduration"></a>**Provider/*ProviderID*/ConfigLock/UnlockDuration**
Supported operations are Add, Delete, Get. Supported values are 1 to 480 (in min).
<a href="" id="provider-providerid-configlock-securecore"></a>**Provider/*ProviderID*/ConfigLock/SecureCore**
Supported operation is Get only. Supported values are false or true.
<a href="" id="provider-providerid-push"></a>**Provider/*ProviderID*/Push** <a href="" id="provider-providerid-push"></a>**Provider/*ProviderID*/Push**
Optional. Not configurable during WAP Provisioning XML. If removed, DM sessions triggered by Push will no longer be supported. Optional. Not configurable during WAP Provisioning XML. If removed, DM sessions triggered by Push will no longer be supported.