From f318c50aed13264cb7e62bcdf808238a472db92c Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Thu, 11 May 2017 13:06:29 -0700 Subject: [PATCH 1/5] correct ICD --- .../provisioning-packages/provisioning-multivariant.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/provisioning-packages/provisioning-multivariant.md b/windows/configuration/provisioning-packages/provisioning-multivariant.md index e3479458a2..77755fdf5a 100644 --- a/windows/configuration/provisioning-packages/provisioning-multivariant.md +++ b/windows/configuration/provisioning-packages/provisioning-multivariant.md @@ -19,7 +19,7 @@ localizationpriority: high In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that will apply to devices set up for French and a different set of customization settings for devices set up for Japanese. -To provision multivariant settings, you use Windows Imaging and Configuration Designer (ICD) to create a provisioning package that contains all of the customization settings that you want to apply to any of your devices. Next, you manually edit the .XML file for that project to define each set of devices (a **Target**). For each **Target**, you specify at least one **Condition** with a value, which identifies the devices to receive the configuration. Finally, for each **Target**, you provide the customization settings to be applied to those devices. +To provision multivariant settings, you use Windows Configuration Designer to create a provisioning package that contains all of the customization settings that you want to apply to any of your devices. Next, you manually edit the .XML file for that project to define each set of devices (a **Target**). For each **Target**, you specify at least one **Condition** with a value, which identifies the devices to receive the configuration. Finally, for each **Target**, you provide the customization settings to be applied to those devices. Let's begin by learning how to define a **Target**. @@ -258,7 +258,7 @@ Follow these steps to create a provisioning package with multivariant capabiliti 6. Save the updated customizations.xml file and note the path to this updated file. You will need the path as one of the values for the next step. -7. Use the [Windows ICD command-line interface](provisioning-command-line.md) to create a provisioning package using the updated customizations.xml. +7. Use the [Windows Configuration Designer command-line interface](provisioning-command-line.md) to create a provisioning package using the updated customizations.xml. For example: From a5a90ca8d8eaadd86fc13dc0a2f59efd6d84105c Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 11 May 2017 16:23:20 -0700 Subject: [PATCH 2/5] Added new KB article URL --- .../credential-guard-known-issues.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/windows/access-protection/credential-guard/credential-guard-known-issues.md b/windows/access-protection/credential-guard/credential-guard-known-issues.md index b9cacf0bc7..d2179cce1b 100644 --- a/windows/access-protection/credential-guard/credential-guard-known-issues.md +++ b/windows/access-protection/credential-guard/credential-guard-known-issues.md @@ -26,24 +26,26 @@ See also Knowledge Base articles [KB4015219](https://support.microsoft.com/en-us [KB4015221](https://support.microsoft.com/en-us/help/4015221/windows-10-update-kb4015221) The following issue is under investigation. For available workarounds, see the following Knowledge Base article: -- [Installing AppSense Environment Manager on Windows 10 machines causes LsaIso.exe to exhibit high CPU usage when Credential Guard is enabled](http://www.appsense.com/kb/160525073917945) * +- [Installing AppSense Environment Manager on Windows 10 machines causes LSAiso.exe to exhibit high CPU usage when Credential Guard is enabled](http://www.appsense.com/kb/160525073917945) * [1] - *Registration required to access this article. + *Registration required to access this article. + + [1] For further technical information on LSAiso.exe, see this MSDN article: [Isolated User Mode (IUM) Processes](https://msdn.microsoft.com/library/windows/desktop/mt809132(v=vs.85).aspx) + + The following issue affects Cisco AnyConnect Secure Mobility Client: - [Blue screen on Windows 10 computers running Device Guard and Credential Guard with Cisco Anyconnect 4.3.04027](https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc66692)** **Registration required to access this article. -Products that connect to Virtualization Based Security (VBS) protected processes can cause Credential Guard-enabled Windows 10 clients to exhibit high CPU usage. For further information, see the following Knowledge Base articles: +Products that connect to Virtualization Based Security (VBS) protected processes can cause Credential Guard-enabled Windows 10 clients to exhibit high CPU usage. For further information, see the following Knowledge Base article: - KB88869: [Windows 10 machines exhibit high CPU usage with McAfee Application and Change Control (MACC) installed when Credential Guard is enabled](https://kc.mcafee.com/corporate/index?page=content&id=KB88869) +The following issue is under investigation: - Windows 10 machines exhibit high CPU usage with Citrix applications installed when Credential Guard is enabled. - Microsoft is currently working with Citrix to investigate this issue. - - ## Vendor support - [Citrix Support for Secure Boot](https://www.citrix.com/blogs/2016/12/08/windows-server-2016-hyper-v-secure-boot-support-now-available-in-xenapp-7-12/) From b6de65a174038f0baf5de9098cc6e7962c579912 Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 11 May 2017 16:53:29 -0700 Subject: [PATCH 3/5] Formatting issue --- .../credential-guard/credential-guard-known-issues.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/access-protection/credential-guard/credential-guard-known-issues.md b/windows/access-protection/credential-guard/credential-guard-known-issues.md index d2179cce1b..a3780e1d3f 100644 --- a/windows/access-protection/credential-guard/credential-guard-known-issues.md +++ b/windows/access-protection/credential-guard/credential-guard-known-issues.md @@ -32,11 +32,11 @@ The following issue is under investigation. For available workarounds, see the f [1] For further technical information on LSAiso.exe, see this MSDN article: [Isolated User Mode (IUM) Processes](https://msdn.microsoft.com/library/windows/desktop/mt809132(v=vs.85).aspx) - The following issue affects Cisco AnyConnect Secure Mobility Client: +The following issue affects Cisco AnyConnect Secure Mobility Client: - [Blue screen on Windows 10 computers running Device Guard and Credential Guard with Cisco Anyconnect 4.3.04027](https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc66692)** - **Registration required to access this article. +**Registration required to access this article. Products that connect to Virtualization Based Security (VBS) protected processes can cause Credential Guard-enabled Windows 10 clients to exhibit high CPU usage. For further information, see the following Knowledge Base article: @@ -48,6 +48,7 @@ The following issue is under investigation: ## Vendor support +See the following article on Citrix support for Secure Boot: - [Citrix Support for Secure Boot](https://www.citrix.com/blogs/2016/12/08/windows-server-2016-hyper-v-secure-boot-support-now-available-in-xenapp-7-12/) Credential Guard is not supported by either these products, products versions, computer systems, or Windows 10 versions: From fd6f21309c4db3fa67e08a87b33f664b8df85c25 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Thu, 11 May 2017 18:43:47 -0700 Subject: [PATCH 4/5] fixing redirection --- .openpublishing.redirection.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index e5b91868f9..838a6cc065 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -487,17 +487,17 @@ }, { "source_path": "windows/deploy/upgrade-analytics-prepare-your-environment.md", -"redirect_url": "/windows/deployment/upgrade/upgrade-analytics-identify-apps", +"redirect_url": "/windows/deployment/upgrade/upgrade-readiness-identify-apps", "redirect_document_id": true }, { "source_path": "windows/deploy/upgrade-analytics-release-notes.md", -"redirect_url": "/windows/deployment/upgrade/upgrade-analytics-requirements", +"redirect_url": "/windows/deployment/upgrade/upgrade-readiness-requirements", "redirect_document_id": true }, { "source_path": "windows/deploy/upgrade-analytics-review-site-discovery.md", -"redirect_url": "/windows/deployment/upgrade/upgrade-analytics-additional-insights", +"redirect_url": "/windows/deployment/upgrade/upgrade-readiness-additional-insights", "redirect_document_id": true }, { From 9680d5051e6884aa68d19c72a91c524276984f04 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Fri, 12 May 2017 09:04:48 -0700 Subject: [PATCH 5/5] removing duplicates in TOC --- windows/access-protection/TOC.md | 1 - windows/device-security/TOC.md | 1 - 2 files changed, 2 deletions(-) diff --git a/windows/access-protection/TOC.md b/windows/access-protection/TOC.md index 16b848c11f..d9e141960f 100644 --- a/windows/access-protection/TOC.md +++ b/windows/access-protection/TOC.md @@ -47,7 +47,6 @@ #### [User Account Control security policy settings](user-account-control\user-account-control-security-policy-settings.md) #### [User Account Control Group Policy and registry key settings](user-account-control\user-account-control-group-policy-and-registry-key-settings.md) -### [Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-overview.md) ### [Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-overview.md) #### [Understanding and Evaluating Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-understanding-and-evaluating.md) ##### [Get Started with Virtual Smart Cards: Walkthrough Guide](virtual-smart-cards\virtual-smart-card-get-started.md) diff --git a/windows/device-security/TOC.md b/windows/device-security/TOC.md index b5b1477df9..9305ed157e 100644 --- a/windows/device-security/TOC.md +++ b/windows/device-security/TOC.md @@ -12,7 +12,6 @@ #### [Monitor app usage with AppLocker](applocker\monitor-application-usage-with-applocker.md) #### [Manage packaged apps with AppLocker](applocker\manage-packaged-apps-with-applocker.md) #### [Working with AppLocker rules](applocker\working-with-applocker-rules.md) -#### [Working with AppLocker rules](applocker\working-with-applocker-rules.md) ##### [Create a rule that uses a file hash condition](applocker\create-a-rule-that-uses-a-file-hash-condition.md) ##### [Create a rule that uses a path condition](applocker\create-a-rule-that-uses-a-path-condition.md) ##### [Create a rule that uses a publisher condition](applocker\create-a-rule-that-uses-a-publisher-condition.md)