mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 21:37:22 +00:00
Merge branch 'master' of https://github.com/MicrosoftDocs/windows-docs-pr into DO19H1
This commit is contained in:
jaimeo
commit
0d3b2ec114
@ -14257,7 +14257,7 @@
|
||||
},
|
||||
{
|
||||
"source_path": "windows/privacy/basic-level-windows-diagnostic-events-and-fields.md",
|
||||
"redirect_url": "/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809",
|
||||
"redirect_url": "/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
@ -14933,6 +14933,13 @@
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/user-alert-windows-defender-advanced-threat-protection-new.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/user",
|
||||
"source_path": "windows/deployment/planning/windows-10-fall-creators-deprecation.md",
|
||||
"redirect_url": "/windows/deployment/planning/windows-10-1709-removed-features",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/deployment/planning/windows-10-creators-update-deprecation.md",
|
||||
"redirect_url": "/windows/deployment/planning/windows-10-1703-removed-features",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
@ -14951,6 +14958,11 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/windows/deployment/windows-10-enterprise-subscription-activation.md",
|
||||
"redirect_url": "/windows/windows/deployment/windows-10-subscription-activation",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/manage-indicators.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/manage-indicators",
|
||||
"redirect_document_id": true
|
||||
|
||||
@ -6,15 +6,21 @@ ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: edu
|
||||
author: MikeBlodge
|
||||
ms.author: MikeBlodge
|
||||
ms.date: 05/07/2018
|
||||
author: lizap
|
||||
ms.author: elizapo
|
||||
ms.date: 05/21/2019
|
||||
---
|
||||
|
||||
# Change history for Windows 10 for Education
|
||||
|
||||
This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation.
|
||||
|
||||
## May 2019
|
||||
|
||||
|New or changed topic | Description|
|
||||
|-----------|-------------|
|
||||
|[Windows 10 Subscription Activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation)|Subscription activation support for Windows 10 Pro Education to Windows 10 Education|
|
||||
|
||||
## April 2018
|
||||
New or changed topic | Description
|
||||
--- | ---
|
||||
|
||||
@ -7,9 +7,9 @@ ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: edu
|
||||
ms.localizationpriority: medium
|
||||
author: MikeBlodge
|
||||
ms.author: jaimeo
|
||||
ms.date: 04/30/2018
|
||||
author: lizap
|
||||
ms.author: elizapo
|
||||
ms.date: 05/21/2019
|
||||
---
|
||||
|
||||
# Change to Windows 10 Pro Education from Windows 10 Pro
|
||||
@ -20,6 +20,9 @@ If you have an education tenant and use devices with Windows 10 Pro, global admi
|
||||
|
||||
To take advantage of this offering, make sure you meet the [requirements for changing](#requirements-for-changing). For academic customers who are eligible to change to Windows 10 Pro Education, but are unable to use the above methods, contact Microsoft Support for assistance.
|
||||
|
||||
>[!IMPORTANT]
|
||||
>If you change a Windows 10 Pro device to Windows 10 Pro Education using Microsoft Store for Education, [subscription activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation) won't work.
|
||||
|
||||
## Requirements for changing
|
||||
Before you change to Windows 10 Pro Education, make sure you meet these requirements:
|
||||
- Devices must be running Windows 10 Pro, version 1607 or higher.
|
||||
@ -307,6 +310,8 @@ For more information about integrating on-premises AD DS domains with Azure AD,
|
||||
|
||||
## Related topics
|
||||
|
||||
[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)<BR>
|
||||
[Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md)<BR>
|
||||
[Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare)
|
||||
[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)
|
||||
[Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md)
|
||||
[Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare)
|
||||
[Windows 10 subscription activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation)
|
||||
|
||||
|
||||
@ -7,9 +7,9 @@ ms.mktglfcycl: plan
|
||||
ms.pagetype: edu
|
||||
ms.sitesec: library
|
||||
ms.localizationpriority: medium
|
||||
author: craigash
|
||||
ms.author: celested
|
||||
ms.date: 10/30/2017
|
||||
author: lizap
|
||||
ms.author: elizapo
|
||||
ms.date: 05/21/2019
|
||||
---
|
||||
|
||||
# Deploy Windows 10 in a school
|
||||
@ -598,6 +598,7 @@ Depending on your school’s requirements, you may need any combination of the f
|
||||
- **Windows 10 Education**. Use this operating system to:
|
||||
- Upgrade institution-owned devices to Windows 10 Education.
|
||||
- Deploy new instances of Windows 10 Education so that new devices have a known configuration.
|
||||
- **Windows 10 Pro Education**. Use this operating system to upgrade existing eligible institution-owned devices running Windows 10 Pro Education, version 1903 or later, to Windows 10 Education using [subscription activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation).
|
||||
|
||||
**Note** Although you can use Windows 10 Home on institution-owned devices, Microsoft recommends that you use Windows 10 Pro or Windows 10 Education, instead. Windows 10 Pro and Windows 10 Education provide support for MDM, policy-based management, and Microsoft Store for Business. These features are not available in Windows 10 Home.
|
||||
|
||||
|
||||
@ -7,9 +7,9 @@ ms.mktglfcycl: plan
|
||||
ms.sitesec: library
|
||||
ms.pagetype: edu
|
||||
ms.localizationpriority: medium
|
||||
author: CelesteDG
|
||||
ms.author: celested
|
||||
ms.date: 10/13/2017
|
||||
author: lizap
|
||||
ms.author: elizpao
|
||||
ms.date: 05/21/2019
|
||||
---
|
||||
|
||||
# Windows 10 editions for education customers
|
||||
@ -61,11 +61,12 @@ Customers who deploy Windows 10 Enterprise are able to configure the product to
|
||||
For any other questions, contact [Microsoft Customer Service and Support](https://support.microsoft.com/en-us).
|
||||
|
||||
## Related topics
|
||||
* [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](change-to-pro-education.md)
|
||||
* [Windows deployment for education](https://aka.ms/edudeploy)
|
||||
* [Windows 10 upgrade paths](https://go.microsoft.com/fwlink/?LinkId=822787)
|
||||
* [Volume Activation for Windows 10](https://go.microsoft.com/fwlink/?LinkId=822788)
|
||||
* [Plan for volume activation](https://go.microsoft.com/fwlink/?LinkId=822789)
|
||||
- [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](change-to-pro-education.md)
|
||||
- [Windows deployment for education](https://aka.ms/edudeploy)
|
||||
- [Windows 10 upgrade paths](https://go.microsoft.com/fwlink/?LinkId=822787)
|
||||
- [Volume Activation for Windows 10](https://go.microsoft.com/fwlink/?LinkId=822788)
|
||||
- [Plan for volume activation](https://go.microsoft.com/fwlink/?LinkId=822789)
|
||||
- [Windows 10 subscription activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation)
|
||||
|
||||
|
||||
|
||||
|
||||
@ -283,8 +283,14 @@ MBAM supports the following versions of Configuration Manager.
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr class="even">
|
||||
<td align="left"><p>Microsoft System Center Configuration Manager (Current Branch), versions up to 1902</p></td>
|
||||
<td align="left"><p></p></td>
|
||||
<td align="left"><p>64-bit</p></td>
|
||||
</tr>
|
||||
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Microsoft System Center Configuration Manager (Current Branch), versions up to 1806</p></td>
|
||||
<td align="left"><p>Microsoft System Center Configuration Manager 1806</p></td>
|
||||
<td align="left"><p></p></td>
|
||||
<td align="left"><p>64-bit</p></td>
|
||||
</tr>
|
||||
|
||||
@ -49,6 +49,10 @@ The private store for your organization is a page in Microsoft Store app that co
|
||||
|
||||
|
||||
|
||||
## Troubleshooting Microsoft Store for Business integration with System Center Configuration Manager
|
||||
|
||||
If you encounter any problems when integrating Microsoft Store for Business with Configuration Manager, use the [troubleshooting guide](https://support.microsoft.com/help/4010214/understand-and-troubleshoot-microsoft-store-for-business-integration-w).
|
||||
|
||||
## Still having trouble?
|
||||
|
||||
If you are still having trouble using Microsoft Store or installing an app, Admins can sign in and look for topics on our **Support** page.
|
||||
@ -56,4 +60,4 @@ If you are still having trouble using Microsoft Store or installing an app, Admi
|
||||
**To view Support page**
|
||||
|
||||
1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com)
|
||||
2. Click **Manage**, and then click **Support**.
|
||||
2.Choose **Manage**> **Support**.
|
||||
|
||||
@ -9,7 +9,6 @@ ms.localizationpriority: medium
|
||||
author: jdeckerms
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Enable or block Windows Mixed Reality apps in the enterprise
|
||||
@ -34,7 +33,7 @@ Organizations that use Windows Server Update Services (WSUS) must take action to
|
||||
|
||||
2. Windows Mixed Reality Feature on Demand (FOD) is downloaded from Windows Update. If access to Windows Update is blocked, you must manually install the Windows Mixed Reality FOD.
|
||||
|
||||
a. Download the FOD .cab file for [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](http://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab).
|
||||
a. Download the FOD .cab file for [Windows 10, version 1903](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](http://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab).
|
||||
|
||||
>[!NOTE]
|
||||
>You must download the FOD .cab file that matches your operating system version.
|
||||
|
||||
@ -7,7 +7,7 @@ ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: greg-lindsay
|
||||
ms.date: 04/19/2017
|
||||
ms.date: 05/20/2019
|
||||
---
|
||||
|
||||
# Sideload LOB apps in Windows 10
|
||||
@ -48,10 +48,16 @@ And here's what you'll need to do:
|
||||
## How do I sideload an app on desktop
|
||||
You can sideload apps on managed or unmanaged devices.
|
||||
|
||||
>[!IMPORTANT]
|
||||
> To install an app on Windows 10, in addition to following [these procedures](https://docs.microsoft.com/windows/msix/app-installer/installing-windows10-apps-web), users can also double-click any APPX/MSIX package.
|
||||
|
||||
|
||||
**To turn on sideloading for managed devices**
|
||||
|
||||
- Deploy an enterprise policy.
|
||||
|
||||
|
||||
|
||||
**To turn on sideloading for unmanaged devices**
|
||||
|
||||
1. Open **Settings**.
|
||||
|
||||
@ -127,6 +127,8 @@
|
||||
#### [DynamicManagement DDF file](dynamicmanagement-ddf.md)
|
||||
### [EMAIL2 CSP](email2-csp.md)
|
||||
#### [EMAIL2 DDF file](email2-ddf-file.md)
|
||||
### [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md)
|
||||
#### [EnrollmentStatusTracking DDF file](enrollmentstatustracking-csp-ddf.md)
|
||||
### [EnterpriseAPN CSP](enterpriseapn-csp.md)
|
||||
#### [EnterpriseAPN DDF](enterpriseapn-ddf.md)
|
||||
### [EnterpriseAppManagement CSP](enterpriseappmanagement-csp.md)
|
||||
|
||||
@ -183,6 +183,7 @@ The following diagram shows the CM\_CellularEntries configuration service provid
|
||||
<p style="margin-left: 20px"> Required. Type: String. Specifies the purposes of the connection by a comma-separated list of GUIDs representing purpose values. The following purpose values are available:
|
||||
|
||||
- Internet - 3E5545D2-1137-4DC8-A198-33F1C657515F
|
||||
- LTE attach - 11A6FE68-5B47-4859-9CB6-1EAC96A8F0BD
|
||||
- MMS - 53E2C5D3-D13C-4068-AA38-9C48FF2E55A8
|
||||
- IMS - 474D66ED-0E4B-476B-A455-19BB1239ED13
|
||||
- SUPL - 6D42669F-52A9-408E-9493-1071DCC437BD
|
||||
|
||||
@ -7,11 +7,13 @@ ms.topic: article
|
||||
ms.prod: w10
|
||||
ms.technology: windows
|
||||
author: MariciaAlforque
|
||||
ms.date: 08/27/2018
|
||||
ms.date: 05/13/2019
|
||||
---
|
||||
|
||||
# Configuration service provider reference
|
||||
|
||||
> [!WARNING]
|
||||
> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
|
||||
|
||||
A configuration service provider (CSP) is an interface to read, set, modify, or delete configuration settings on the device. These settings map to registry keys or files. Some configuration service providers support the WAP format, some support SyncML, and some support both. SyncML is only used over–the–air for Open Mobile Alliance Device Management (OMA DM), whereas WAP can be used over–the–air for OMA Client Provisioning, or it can be included in the phone image as a .provxml file that is installed during boot.
|
||||
|
||||
@ -23,14 +25,6 @@ Additional lists:
|
||||
- [List of CSPs supported in Microsoft Surface Hub ](#surfacehubcspsupport)
|
||||
- [List of CSPs supported in Windows 10 IoT Core](#iotcoresupport)
|
||||
|
||||
The following tables show the configuration service providers support in Windows 10.
|
||||
Footnotes:
|
||||
- 1 - Added in Windows 10, version 1607
|
||||
- 2 - Added in Windows 10, version 1703
|
||||
- 3 - Added in Windows 10, version 1709
|
||||
- 4 - Added in Windows 10, version 1803
|
||||
- 5 - Added in Windows 10, version 1809
|
||||
|
||||
<!--StartCSPs-->
|
||||
<hr/>
|
||||
|
||||
@ -932,6 +926,34 @@ Footnotes:
|
||||
<!--EndSKU-->
|
||||
<!--EndCSP-->
|
||||
|
||||
<!--StartCSP-->
|
||||
[EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md)
|
||||
|
||||
<!--StartSKU-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--EndSKU-->
|
||||
<!--EndCSP-->
|
||||
|
||||
<!--StartCSP-->
|
||||
[EnterpriseAPN CSP](enterpriseapn-csp.md)
|
||||
|
||||
@ -2646,14 +2668,6 @@ Footnotes:
|
||||
<hr/>
|
||||
<!--EndCSPs-->
|
||||
|
||||
|
||||
Footnotes:
|
||||
- 1 - Added in Windows 10, version 1607
|
||||
- 2 - Added in Windows 10, version 1703
|
||||
- 3 - Added in Windows 10, version 1709
|
||||
- 4 - Added in Windows 10, version 1803
|
||||
- 5 - Added in Windows 10, version 1809
|
||||
|
||||
## CSP DDF files download
|
||||
|
||||
You can download the DDF files for various CSPs from the links below:
|
||||
@ -2696,13 +2710,7 @@ The following list shows the configuration service providers supported in Window
|
||||
| [WiFi CSP](wifi-csp.md) |  |  |
|
||||
| [WindowsLicensing CSP](windowslicensing-csp.md) |  |  |
|
||||
|
||||
Footnotes:
|
||||
- 1 - Added in Windows 10, version 1607
|
||||
- 2 - Added in Windows 10, version 1703
|
||||
- 3 - Added in Windows 10, version 1709
|
||||
- 4 - Added in Windows 10, version 1803
|
||||
- 5 - Added in Windows 10, version 1809
|
||||
|
||||
|
||||
## <a href="" id="surfacehubcspsupport"></a>CSPs supported in Microsoft Surface Hub
|
||||
|
||||
- [AccountManagement CSP](accountmanagement-csp.md)
|
||||
@ -2750,12 +2758,19 @@ The following list shows the configuration service providers supported in Window
|
||||
- [Policy CSP](policy-configuration-service-provider.md)
|
||||
- [Provisioning CSP (Provisioning only)](provisioning-csp.md)
|
||||
- [Reboot CSP](reboot-csp.md)
|
||||
- [RemoteWipe CSP](remotewipe-csp.md) 1
|
||||
- [RemoteWipe CSP](remotewipe-csp.md)<sup>5<sup>
|
||||
- [RootCATrustedCertificates CSP](rootcacertificates-csp.md)
|
||||
- [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md)
|
||||
- [Update CSP](update-csp.md)
|
||||
- [VPNv2 CSP](vpnv2-csp.md)
|
||||
- [WiFi CSP](wifi-csp.md)
|
||||
|
||||
<hr>
|
||||
|
||||
Footnotes:
|
||||
- 1 - Added in Windows 10, version 1809
|
||||
- 1 - Added in Windows 10, version 1607.
|
||||
- 2 - Added in Windows 10, version 1703.
|
||||
- 3 - Added in Windows 10, version 1709.
|
||||
- 4 - Added in Windows 10, version 1803.
|
||||
- 5 - Added in Windows 10, version 1809.
|
||||
- 6 - Added in Windows 10, version 1903.
|
||||
|
||||
@ -107,20 +107,27 @@ Requirements:
|
||||
- Enterprise AD must be integrated with Azure AD.
|
||||
- Ensure that PCs belong to same computer group.
|
||||
|
||||
1. Create a Group Policy Object (GPO) and enable the Group Policy **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **MDM** > **Enable automatic MDM enrollment using default Azure AD credentials**.
|
||||
>[!Note]
|
||||
>If you do not see the policy, it may be caused because you don’t have the ADMX installed for Windows 10, version 1803. To fix the issue, follow these steps:
|
||||
> 1. Download [Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)
|
||||
](https://www.microsoft.com/en-us/download/details.aspx?id=56880).
|
||||
> 2. Install the package on the Primary Domain Controller.
|
||||
> 3. Navigate to the folder **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2**.
|
||||
> 4. Copy policy definitions folder to **C:\Windows\SYSVOL\domain\Policies**.
|
||||
> 5. Restart the Primary Domain Controller for the policy to be available.
|
||||
>[!IMPORTANT]
|
||||
>If you do not see the policy, it may be because you don’t have the ADMX installed for Windows 10, version 1803 or version 1809. To fix the issue, follow these steps:
|
||||
> 1. Download:
|
||||
> 1803 -->[Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/en-us/download/details.aspx?id=56880) or
|
||||
> 1809 --> [Administrative Templates for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/en-us/download/details.aspx?id=57576).
|
||||
> 2. Install the package on the Primary Domain Controller (PDC).
|
||||
> 3. Navigate, depending on the version to the folder:
|
||||
> 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2**, or
|
||||
> 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2**
|
||||
> 4. Copy policy definitions folder to **C:\Windows\SYSVOL\domain\Policies**.
|
||||
> 5. Restart the Primary Domain Controller for the policy to be available.
|
||||
> This procedure will work for any future version as well.
|
||||
|
||||
1. Create a Group Policy Object (GPO) and enable the Group Policy **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **MDM** > **Enable automatic MDM enrollment using default Azure AD credentials**.
|
||||
2. Create a Security Group for the PCs.
|
||||
3. Link the GPO.
|
||||
4. Filter using Security Groups.
|
||||
5. Enforce a GPO link
|
||||
5. Enforce a GPO link.
|
||||
|
||||
>[!NOTE]
|
||||
> Version 1903 (March 2019) is actually on the Insider program and doesn't yet contain a downloadable version of Templates (version 1903).
|
||||
|
||||
### Related topics
|
||||
|
||||
@ -129,3 +136,8 @@ Requirements:
|
||||
- [Link a Group Policy Object](https://technet.microsoft.com/library/cc732979(v=ws.11).aspx)
|
||||
- [Filter Using Security Groups](https://technet.microsoft.com/library/cc752992(v=ws.11).aspx)
|
||||
- [Enforce a Group Policy Object Link](https://technet.microsoft.com/library/cc753909(v=ws.11).aspx)
|
||||
|
||||
### Useful Links
|
||||
- [Windows 10 Administrative Templates for Windows 10 April 2018 Update 1803](https://www.microsoft.com/download/details.aspx?id=56880)
|
||||
- [Windows 10 Administrative Templates for Windows 10 October 2018 Update 1809](https://www.microsoft.com/download/details.aspx?id=57576)
|
||||
|
||||
|
||||
@ -0,0 +1,906 @@
|
||||
---
|
||||
title: EnrollmentStatusTracking CSP
|
||||
description: EnrollmentStatusTracking CSP
|
||||
ms.author: v-madhi@microsoft.com
|
||||
ms.topic: article
|
||||
ms.prod: w10
|
||||
ms.technology: windows
|
||||
author: ManikaDhiman
|
||||
ms.date: 05/17/2019
|
||||
---
|
||||
|
||||
# EnrollmentStatusTracking DDF
|
||||
|
||||
|
||||
This topic shows the OMA DM device description framework (DDF) for the **EnrollmentStatusTracking** configuration service provider. DDF files are used only with OMA DM provisioning XML.
|
||||
|
||||
Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download).
|
||||
|
||||
### EnrollmentStatusTracking CSP
|
||||
|
||||
``` syntax
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE MgmtTree PUBLIC " -//OMA//DTD-DM-DDF 1.2//EN"
|
||||
"http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd"
|
||||
[<?oma-dm-ddf-ver supported-versions="1.2"?>]>
|
||||
<MgmtTree xmlns:MSFT="http://schemas.microsoft.com/MobileDevice/DM">
|
||||
<VerDTD>1.2</VerDTD>
|
||||
<Node>
|
||||
<NodeName>EnrollmentStatusTracking</NodeName>
|
||||
<Path>./User/Vendor/MSFT</Path>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are used to communicate what policies the Enrollment Status Page (ESP) should block on. Using these settings, policy providers register themselves and the set of policies that need to be tracked. The ESP will include the counts of these policy sets in the status message to the user, and blocks progress on that page until all policies are provisioned. The policy provider is expected to drive the status updates by updating the appropriate node values, which will then be reflected in the ESP status message.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME>com.microsoft/1.0/MDM/EnrollmentStatusTracking</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>Setup</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are read by the Enrollment Status Page (ESP) during the Account Setup phase. Policy providers use these nodes to communicate progress state back to the ESP, which is then displayed to the user through progress message updates.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>Apps</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>Policy providers use these settings to communicate to the ESP which app installations it should block on and provide progress in the status message to the user.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>PolicyProviders</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are read by the Enrollment Status Page (ESP) during the Device Setup phase. Policy providers use these nodes to communicate progress state back to the ESP, which is then displayed to the user through progress message updates.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>This node represents an app policy provider for the Enrollment Status Page (ESP). Existence of this node indicates to the ESP that it should not show the tracking status message until the TrackingPoliciesCreated node has been set to true.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>ProviderName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>TrackingPoliciesCreated</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>Indicates when the provider has created the required policies for the ESP to use for tracking app installation progress. The policy provider itself is expected to set the value of this node, not the MDM server.</Description>
|
||||
<DFFormat>
|
||||
<bool />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>Tracking</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>This node represents an app policy provider for the Enrollment Status Page (ESP). Existence of this node indicates to the ESP that it should not show the tracking status message until the TrackingPoliciesCreated node has been set to true.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>The name of the provider responsible for installing these apps and providing status back to the Enrollment Status Page.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>ProviderName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>A unique name for the app whose progress should be tracked in the ESP. The app name can be arbitrary as it is not used directly by the ESP, so the value can be defined however the policy provider chooses.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>AppName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>TrackingUri</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>An optional URI to another CSP for tracking the apps installation. If this value is not set, installation status is derived from the InstallationState node.</Description>
|
||||
<DFFormat>
|
||||
<chr />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrOne />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>InstallationState</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>The installation state for the app. This node should be updated by the policy providers (not the MDM server) so the ESP can track the installation progress and update the status message. Expected values: 1 = NotInstalled, 2 = InProgress, 3 = Completed, 4 = Error</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrOne />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>RebootRequired</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>An optional node indicating if the app installation requires the ESP to issue a reboot. This node should be set by the policy provider installing the app (not the MDM server). Expected values: 1 = NotRequired, 2 = SoftReboot, 3 = HardReboot. If this node is not set, the ESP will not reboot the device for this app install.</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>HasProvisioningCompleted</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<DefaultValue>false</DefaultValue>
|
||||
<Description>This node is set by the Enrollment Status Page (ESP) when it completes. Providers are able to query this node to determine if the ESP is showing, allowing them to bifurcate their logic accordingly. For instance, when an app install requires a reboot, the policy provider should let the ESP issue the reboot by setting RebootRequired value for that app if and only if the ESP is running, otherwise, the policy provider is responsible for issuing a reboot themselves.</Description>
|
||||
<DFFormat>
|
||||
<bool />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>EnrollmentStatusTracking</NodeName>
|
||||
<Path>./Device/Vendor/MSFT</Path>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are used to communicate what policies the Enrollment Status Page (ESP) should block on. Using these settings, policy providers register themselves and the set of policies that need to be tracked. The ESP will include the counts of these policy sets in the status message to the user, and blocks progress on that page until all policies are provisioned. The policy provider is expected to drive the status updates by updating the appropriate node values, which will then be reflected in the ESP status message.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME>com.microsoft/1.0/MDM/EnrollmentStatusTracking</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>DevicePreparation</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are read by the Enrollment Status Page (ESP) during the the Device Preparation phase. These setting are used to orchestrate any setup activities prior to provisioning the device in the Device Setup phase of the ESP.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>PolicyProviders</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These nodes indicate to the Enrollment Status Page (ESP) that it should wait in the Device Preparation phase until all PolicyProviders are installed or marked as not required.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>This node represents a policy provider for the Enrollment Status Page (ESP). The node should be given a unique name for the policy provider. Registration of a policy provider indicates to the Enrollment Status Page that it should block in the Device Preparation phase until the provider sets its InstallationState node to 1 (not required) or 2 (complete). Once all registered policy providers have been marked as completed (or not required), the Enrollment Status Page will progress to the Device Setup phase.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFTitle>ProviderName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>InstallationState</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>This node communicates the policy provider installation state back to the Enrollment Status Page. Expected values: 1 = NotInstalled, 2 = NotRequired, 3= Completed, 4 = Error. </Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>LastError</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>If a policy provider fails to install, it can optionally set an HRESULT error code that the Enrollment Status Page can display in an error message to the user. This node will only be read by the Enrollment Status Page when the provider's InstallationState node is set to 3 (Error). This node is only intended to be set by the policy provider itself, not the MDM server. </Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>Timeout</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>An optional timeout (in minutes) for provider installation to complete before the Enrollment Status Page shows an error. Provider installation is considered complete when the InstallationState node is set to 2 (NotRequired) or 3 (Complete). If no timeout value is supplied the ESP will choose a default timeout value of 15 minutes.</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>TrackedResourceTypes</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>This node's children registers which resource types the policy provider supports for provisioning. Only registered providers for a particular resource type will have their policies incorporated with Enrollment Status Page tracking message. </Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>Apps</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<DefaultValue>false</DefaultValue>
|
||||
<Description>This node registers the policy provider for App provisioning. </Description>
|
||||
<DFFormat>
|
||||
<bool />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>Setup</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are read by the Enrollment Status Page (ESP) during the Device Setup phase. Policy providers use these nodes to communicate progress state back to the ESP, which is then displayed to the user through progress message updates.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>Apps</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These settings are used to communicate what policies the Enrollment Status Page (ESP) should block on. Using these settings, policy providers register themselves and the set of policies that need to be tracked. The ESP will include the counts of these policy sets in the status message to the user, and blocks progress on that page until all policies are provisioned. The policy provider is expected to drive the status updates by updating the appropriate node values, which will then be reflected in the ESP status message.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>PolicyProviders</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>App policy providers for this CSP. These are the policy providers the ESP should wait on before showing the tracking message with status to the user. </Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>This node represents an app policy provider for the Enrollment Status Page (ESP). Existence of this node indicates to the ESP that it should not show the tracking status message until the TrackingPoliciesCreated node has been set to true.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>ProviderName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>TrackingPoliciesCreated</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>Indicates when the provider has created the required policies for the ESP to use for tracking app installation progress. The policy provider itself is expected to set the value of this node, not the MDM server.</Description>
|
||||
<DFFormat>
|
||||
<bool />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>Tracking</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>These are the set of apps that are being tracked by the Enrollment Status Page.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>The name of the provider responsible for installing these apps and providing status back to the Enrollment Status Page.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>ProviderName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName></NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>A unique name for the app whose progress should be tracked in the ESP. The app name can be arbitrary as it is not used directly by the ESP, so the value can be defined however the policy provider chooses.</Description>
|
||||
<DFFormat>
|
||||
<node />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrMore />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFTitle>AppName</DFTitle>
|
||||
<DFType>
|
||||
<DDFName></DDFName>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>TrackingUri</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Add />
|
||||
<Delete />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>An optional URI to another CSP for tracking the apps installation. If this value is not set, installation status is derived from the InstallationState node.</Description>
|
||||
<DFFormat>
|
||||
<chr />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrOne />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>InstallationState</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>The installation state for the app. This node should be updated by the policy providers (not the MDM server) so the ESP can track the installation progress and update the status message. Expected values: 1 = NotInstalled, 2 = InProgress, 3 = Completed, 4 = Error</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<ZeroOrOne />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>RebootRequired</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
<Replace />
|
||||
<Add />
|
||||
<Delete />
|
||||
</AccessType>
|
||||
<Description>An optional node indicating if the app installation requires the ESP to issue a reboot. This node should be set by the policy provider installing the app (not the MDM server). Expected values: 1 = NotRequired, 2 = SoftReboot, 3 = HardReboot. If this node is not set, the ESP will not reboot the device for this app install.</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>HasProvisioningCompleted</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<DefaultValue>false</DefaultValue>
|
||||
<Description>This node is set by the Enrollment Status Page (ESP) when it completes. Providers are able to query this node to determine if the ESP is showing, allowing them to bifurcate their logic accordingly. For instance, when an app install requires a reboot, the policy provider should let the ESP issue the reboot by setting RebootRequired value for that app if and only if the ESP is running, otherwise, the policy provider is responsible for issuing a reboot themselves.</Description>
|
||||
<DFFormat>
|
||||
<bool />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Permanent />
|
||||
</Scope>
|
||||
<CaseSense>
|
||||
<CIS />
|
||||
</CaseSense>
|
||||
<DFType>
|
||||
<MIME>text/plain</MIME>
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</Node>
|
||||
</MgmtTree>
|
||||
|
||||
```
|
||||
182
windows/client-management/mdm/enrollmentstatustracking-csp.md
Normal file
182
windows/client-management/mdm/enrollmentstatustracking-csp.md
Normal file
@ -0,0 +1,182 @@
|
||||
---
|
||||
title: EnrollmentStatusTracking CSP
|
||||
description: EnrollmentStatusTracking CSP
|
||||
ms.author: v-madhi@microsoft.com
|
||||
ms.topic: article
|
||||
ms.prod: w10
|
||||
ms.technology: windows
|
||||
author: ManikaDhiman
|
||||
ms.date: 04/25/2019
|
||||
---
|
||||
|
||||
# EnrollmentStatusTracking CSP
|
||||
|
||||
> [!WARNING]
|
||||
> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
|
||||
|
||||
During Autopilot deployment, you can configure the Enrollment Status Page (ESP) to block the device use until the required apps are installed. You can select the apps that must be installed before using the device. The EnrollmentStatusTracking configuration service provider (CSP) is used by Intune's agents, such as SideCar to configure ESP for blocking the device use until the required Win32 apps are installed. It tracks the installation status of the required policy providers and the apps they install and sends it to ESP, which displays the installation progress message to the user. For more information on ESP, see [Windows Autopilot Enrollment Status page](https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/enrollment-status).
|
||||
|
||||
ESP uses the EnrollmentStatusTracking CSP along with the DMClient CSP to track the installation of different apps. The EnrollmentStatusTracking CSP tracks Win32 apps installations and DMClient CSP tracks MSI and Universal Windows Platform apps installations. In DMClient CSP, the **FirstSyncStatus/ExpectedMSIAppPackages** and **FirstSyncStatus/ExpectedModernAppPackages** nodes list the apps to track their installation. See [DMClient CSP](dmclient-csp.md) for more information.
|
||||
|
||||
The EnrollmentStatusTracking CSP was added in Windows 10, version 1903.
|
||||
|
||||
|
||||
The following diagram shows the EnrollmentStatusTracking CSP in tree format.
|
||||
|
||||
|
||||
|
||||
<a href="" id="vendor-msft"></a>**./Vendor/MSFT**
|
||||
For device context, use **./Device/Vendor/MSFT** path and for user context, use **./User/Vendor/MSFT** path.
|
||||
|
||||
<a href="" id="enrollmentstatustracking"></a>**EnrollmentStatusTracking**
|
||||
Required. Root node for the CSP. This node is supported in both user context and device context.
|
||||
Provides the settings to communicate what policies the ESP must block on. Using these settings, policy providers register themselves and the set of policies that must be tracked. The ESP includes the counts of these policy settings in the status message that is displayed to the user. It also blocks ESP until all the policies are provisioned. The policy provider is expected to drive the status updates by updating the appropriate node values, which are then reflected in the ESP status message.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation"></a>**EnrollmentStatusTracking/DevicePreparation**
|
||||
Required. This node is supported only in device context.
|
||||
Specifies the settings that ESP reads during the device preparation phase. These settings are used to orchestrate any setup activities prior to provisioning the device in the device setup phase of the ESP.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders**
|
||||
Required. This node is supported only in device context.
|
||||
Indicates to the ESP that it should wait in the device preparation phase until all the policy providers have their InstallationState node set as 2 (NotRequired) or 3 (Completed).
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/_ProviderName_**
|
||||
Optional. This node is supported only in device context.
|
||||
Represents a policy provider for the ESP. The node should be given a unique name for the policy provider. Registration of a policy provider indicates to ESP that it should block in the device preparation phase until the provider sets its InstallationState node to 2 (NotRequired) or 3 (Completed). Once all the registered policy providers are marked as Completed or NotRequired, the ESP progresses to the device setup phase.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername-installationstate"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/*ProviderName*/InstallationState**
|
||||
Required. This node is supported only in device context.
|
||||
Communicates the policy provider installation state back to ESP.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is integer. Expected values are as follows:
|
||||
- 1 — NotInstalled
|
||||
- 2 — NotRequired
|
||||
- 3 — Completed
|
||||
- 4 — Error
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername-lasterror"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/*ProviderName*/LastError**
|
||||
Required. This node is supported only in device context.
|
||||
Represents the last error code during the application installation process. If a policy provider fails to install, it can optionally set an HRESULT error code that the ESP can display in an error message to the user. ESP reads this node only when the provider's InstallationState node is set to 4 (Error). This node must be set only by the policy provider, and not by the MDM server.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is integer.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername-timeout"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/*ProviderName*/Timeout**
|
||||
Optional. This node is supported only in device context.
|
||||
Represents the amount of time, in minutes, that the provider installation process can run before the ESP shows an error. Provider installation is complete when the InstallationState node is set to 2 (NotRequired) or 3 (Completed). If no timeout value is specified, ESP selects the default timeout value of 15 minutes.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is integer. The default is 15 minutes.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername-trackedresourcetypes"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/*ProviderName*/TrackedResourceTypes**
|
||||
Required. This node is supported only in device context.
|
||||
This node's children register which resource types the policy provider supports for provisioning. Only registered providers for a particular resource type will have their policies incorporated with ESP tracking message.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-devicepreparation-policyproviders-providername-trackedresourcetypes-Apps"></a>**EnrollmentStatusTracking/DevicePreparation/PolicyProviders/*ProviderName*/TrackedResourceTypes/Apps**
|
||||
Required. This node is supported only in device context.
|
||||
This node specifies if the policy provider is registered for app provisioning.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is boolean. Expected values are as follows:
|
||||
- false — Indicates that the policy provider is not registered for app provisioning. This is the default.
|
||||
- true — Indicates that the policy provider is registered for app provisioning.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup"></a>**EnrollmentStatusTracking/Setup**
|
||||
Required. This node is supported in both user context and device context.
|
||||
Provides the settings that ESP reads during the account setup phase in the user context and device setup phase in the device context. Policy providers use this node to communicate progress status back to the ESP, which is then displayed to the user through progress messages.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps"></a>**EnrollmentStatusTracking/Setup/Apps**
|
||||
Required. This node is supported in both user context and device context.
|
||||
Provides the settings to communicate to the ESP which app installations it should block on and provide progress in the status message to the user.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-policyproviders"></a>**EnrollmentStatusTracking/Setup/Apps/PolicyProviders**
|
||||
Required. This node is supported in both user context and device context.
|
||||
Specifies the app policy providers for this CSP. These are the policy providers the ESP should wait on before showing the tracking message with the status to the user.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-policyproviders-providername"></a>**EnrollmentStatusTracking/Setup/Apps/PolicyProviders**/***ProviderName***
|
||||
Optional. This node is supported in both user context and device context.
|
||||
Represents an app policy provider for the ESP. Existence of this node indicates to the ESP that it should not show the tracking status message until the TrackingPoliciesCreated node has been set to true.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-policyproviders-providername-trackingpoliciescreated"></a>**EnrollmentStatusTracking/Setup/Apps/PolicyProviders/*ProviderName*/TrackingPoliciesCreated**
|
||||
Required. This node is supported in both user context and device context.
|
||||
Indicates if the provider has created the required policies for the ESP to use for tracking app installation progress. The policy provider itself is expected to set the value of this node, not the MDM server.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is boolean. The expected values are as follows:
|
||||
- true — Indicates that the provider has created the required policies.
|
||||
- false — Indicates that the provider has not created the required policies. This is the default.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-tracking"></a>**EnrollmentStatusTracking/Setup/Apps/Tracking**
|
||||
Required. This node is supported in both user context and device context.
|
||||
Root node for the app installations being tracked by the ESP.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-tracking-providername"></a>**EnrollmentStatusTracking/Setup/Apps/Tracking/_ProviderName_**
|
||||
Optional. This node is supported in both user context and device context.
|
||||
Indicates the provider name responsible for installing the apps and providing status back to ESP.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-tracking-providername-appname"></a>**EnrollmentStatusTracking/Setup/Apps/Tracking/*ProviderName*/_AppName_**
|
||||
Optional. This node is supported in both user context and device context.
|
||||
Represents a unique name for the app whose progress should be tracked by the ESP. The policy provider can define any arbitrary app name as ESP does not use the app name directly.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-tracking-providername-appname-installationstate"></a>**EnrollmentStatusTracking/Setup/Apps/Tracking/*ProviderName*/*AppName*/InstallationState**
|
||||
Optional. This node is supported in both user context and device context.
|
||||
Represents the installation state for the app. The policy providers (not the MDM server) must update this node for the ESP to track the installation progress and update the status message.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is integer. Expected values are as follows:
|
||||
- 1 — NotInstalled
|
||||
- 2 — InProgress
|
||||
- 3 — Completed
|
||||
- 4 — Error
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-apps-tracking-providername-appname-rebootrequired"></a>**EnrollmentStatusTracking/Setup/Apps/Tracking/*ProviderName*/*AppName*/RebootRequired**
|
||||
Optional. This node is supported in both user context and device context.
|
||||
Indicates if the app installation requires ESP to issue a reboot. The policy providers installing the app (not the MDM server) must set this node. If the policy providers do not set this node, the ESP will not reboot the device for the app installation.
|
||||
|
||||
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
|
||||
|
||||
Value type is integer. Expected values are as follows:
|
||||
- 1 — NotRequired
|
||||
- 2 — SoftReboot
|
||||
- 3 — HardReboot
|
||||
|
||||
<a href="" id="enrollmentstatustracking-setup-hasprovisioningcompleted"></a>**EnrollmentStatusTracking/Setup/HasProvisioningCompleted**
|
||||
Required. This node is supported in both user context and device context.
|
||||
ESP sets this node when it completes. Providers can query this node to determine if the ESP is showing, which allows them to determine if they still need to provide status updates for the ESP through this CSP.
|
||||
|
||||
Scope is permanent. Supported operation is Get.
|
||||
|
||||
Value type is boolean. Expected values are as follows:
|
||||
- true — Indicates that ESP has completed. This is the default.
|
||||
- false — Indicates that ESP is displayed, and provisioning is still going.
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 50 KiB |
@ -92,6 +92,13 @@ For details about Microsoft mobile device management protocols for Windows 10 s
|
||||
<li>[DeliveryOptimization/DODelayCacheServerFallbackBackground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackbackground)</li>
|
||||
<li>[DeliveryOptimization/DODelayCacheServerFallbackForeground](policy-csp-deliveryoptimization.md#deliveryoptimization-dodelaycacheserverfallbackforeground)</li>
|
||||
<li>[Experience/ShowLockOnUserTile](policy-csp-experience.md#experience-showlockonusertile)</li>
|
||||
<li>[InternetExplorer/AllowEnhancedSuggestionsInAddressBar]((policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar)</li>
|
||||
<li>[InternetExplorer/DisableActiveXVersionListAutoDownload](policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload)</li>
|
||||
<li>[InternetExplorer/DisableCompatView](policy-csp-internetexplorer.md#internetexplorer-disablecompatview)</li>
|
||||
<li>[InternetExplorer/DisableFeedsBackgroundSync](policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync)</li>
|
||||
<li>[InternetExplorer/DisableGeolocation](policy-csp-internetexplorer.md#internetexplorer-disablegeolocation)</li>
|
||||
<li>[InternetExplorer/DisableWebAddressAutoComplete](policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete)</li>
|
||||
<li>[InternetExplorer/NewTabDefaultPage](policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage)</li>
|
||||
<li>[Power/EnergySaverBatteryThresholdOnBattery](policy-csp-power.md#power-energysaverbatterythresholdonbattery)</li>
|
||||
<li>[Power/EnergySaverBatteryThresholdPluggedIn](policy-csp-power.md#power-energysaverbatterythresholdpluggedin)</li>
|
||||
<li>[Power/SelectLidCloseActionOnBattery](policy-csp-power.md#power-selectlidcloseactiononbattery)</li>
|
||||
@ -104,6 +111,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
|
||||
<li>[Power/TurnOffHybridSleepPluggedIn](policy-csp-power.md#power-turnoffhybridsleeppluggedin)</li>
|
||||
<li>[Power/UnattendedSleepTimeoutOnBattery](policy-csp-power.md#power-unattendedsleeptimeoutonbattery)</li>
|
||||
<li>[Power/UnattendedSleepTimeoutPluggedIn](policy-csp-power.md#power-unattendedsleeptimeoutpluggedin)</li>
|
||||
<li>[Search/AllowFindMyFiles](policy-csp-search.md#search-allowfindmyfiles)</li>
|
||||
<li>[System/AllowCommercialDataPipeline](policy-csp-system.md#system-allowcommercialdatapipeline)</li>
|
||||
<li>[System/TurnOffFileHistory](policy-csp-system.md#system-turnofffilehistory)</li>
|
||||
<li>[Update/AutomaticMaintenanceWakeUp](policy-csp-update.md#update-automaticmaintenancewakeup)</li>
|
||||
@ -115,6 +123,10 @@ For details about Microsoft mobile device management protocols for Windows 10 s
|
||||
<li>[WindowsLogon/EnableFirstLogonAnimation](policy-csp-windowslogon.md#windowslogon-enablefirstlogonanimation)</li>
|
||||
</ul>
|
||||
</td></tr>
|
||||
<tr>
|
||||
<td style="vertical-align:top">[EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md)</td>
|
||||
<td style="vertical-align:top"><p>Added new CSP in Windows 10, version 1903.</p>
|
||||
</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
|
||||
@ -1332,6 +1332,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-allowenhancedprotectedmode" id="internetexplorer-allowenhancedprotectedmode">InternetExplorer/AllowEnhancedProtectedMode</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar" id="internetexplorer-allowenhancedsuggestionsinaddressbar">InternetExplorer/AllowEnhancedSuggestionsInAddressBar</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-allowenterprisemodefromtoolsmenu" id="internetexplorer-allowenterprisemodefromtoolsmenu">InternetExplorer/AllowEnterpriseModeFromToolsMenu</a>
|
||||
</dd>
|
||||
@ -1398,6 +1401,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-consistentmimehandlinginternetexplorerprocesses" id="internetexplorer-consistentmimehandlinginternetexplorerprocesses">InternetExplorer/ConsistentMimeHandlingInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload" id="internetexplorer-disableactivexversionlistautodownload">InternetExplorer/DisableActiveXVersionListAutoDownload</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableadobeflash" id="internetexplorer-disableadobeflash">InternetExplorer/DisableAdobeFlash</a>
|
||||
</dd>
|
||||
@ -1407,6 +1413,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles" id="internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles">InternetExplorer/DisableBypassOfSmartScreenWarningsAboutUncommonFiles</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablecompatview" id="internetexplorer-disablecompatview">InternetExplorer/DisableCompatView</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableconfiguringhistory" id="internetexplorer-disableconfiguringhistory">InternetExplorer/DisableConfiguringHistory</a>
|
||||
</dd>
|
||||
@ -1425,12 +1434,18 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableencryptionsupport" id="internetexplorer-disableencryptionsupport">InternetExplorer/DisableEncryptionSupport</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync" id="internetexplorer-disablefeedsbackgroundsync">InternetExplorer/DisableFeedsBackgroundSync</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablefirstrunwizard" id="internetexplorer-disablefirstrunwizard">InternetExplorer/DisableFirstRunWizard</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableflipaheadfeature" id="internetexplorer-disableflipaheadfeature">InternetExplorer/DisableFlipAheadFeature</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablegeolocation" id="internetexplorer-disablegeolocation">InternetExplorer/DisableGeolocation</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablehomepagechange" id="internetexplorer-disablehomepagechange">InternetExplorer/DisableHomePageChange</a>
|
||||
</dd>
|
||||
@ -1458,6 +1473,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disableupdatecheck" id="internetexplorer-disableupdatecheck">InternetExplorer/DisableUpdateCheck</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete" id="internetexplorer-disablewebaddressautocomplete">InternetExplorer/DisableWebAddressAutoComplete</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-donotallowactivexcontrolsinprotectedmode" id="internetexplorer-donotallowactivexcontrolsinprotectedmode">InternetExplorer/DoNotAllowActiveXControlsInProtectedMode</a>
|
||||
</dd>
|
||||
@ -1851,6 +1869,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses" id="internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses">InternetExplorer/MimeSniffingSafetyFeatureInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage" id="internetexplorer-newtabdefaultpage">InternetExplorer/NewTabDefaultPage</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-internetexplorer.md#internetexplorer-notificationbarinternetexplorerprocesses" id="internetexplorer-notificationbarinternetexplorerprocesses">InternetExplorer/NotificationBarInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
@ -2899,6 +2920,9 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<dd>
|
||||
<a href="./policy-csp-search.md#search-allowcortanainaad" id="search-allowcortanainaad">Search/AllowCortanaInAAD</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-search.md#search-allowfindmyfiles" id="search-allowfindmyfiles">Search/AllowFindMyFiles</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="./policy-csp-search.md#search-allowindexingencryptedstoresoritems" id="search-allowindexingencryptedstoresoritems">Search/AllowIndexingEncryptedStoresOrItems</a>
|
||||
</dd>
|
||||
@ -3890,6 +3914,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/AllowCertificateAddressMismatchWarning](./policy-csp-internetexplorer.md#internetexplorer-allowcertificateaddressmismatchwarning)
|
||||
- [InternetExplorer/AllowDeletingBrowsingHistoryOnExit](./policy-csp-internetexplorer.md#internetexplorer-allowdeletingbrowsinghistoryonexit)
|
||||
- [InternetExplorer/AllowEnhancedProtectedMode](./policy-csp-internetexplorer.md#internetexplorer-allowenhancedprotectedmode)
|
||||
- [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](./policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar)
|
||||
- [InternetExplorer/AllowEnterpriseModeFromToolsMenu](./policy-csp-internetexplorer.md#internetexplorer-allowenterprisemodefromtoolsmenu)
|
||||
- [InternetExplorer/AllowEnterpriseModeSiteList](./policy-csp-internetexplorer.md#internetexplorer-allowenterprisemodesitelist)
|
||||
- [InternetExplorer/AllowFallbackToSSL3](./policy-csp-internetexplorer.md#internetexplorer-allowfallbacktossl3)
|
||||
@ -3912,17 +3937,21 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/CheckServerCertificateRevocation](./policy-csp-internetexplorer.md#internetexplorer-checkservercertificaterevocation)
|
||||
- [InternetExplorer/CheckSignaturesOnDownloadedPrograms](./policy-csp-internetexplorer.md#internetexplorer-checksignaturesondownloadedprograms)
|
||||
- [InternetExplorer/ConsistentMimeHandlingInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-consistentmimehandlinginternetexplorerprocesses)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](./policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableAdobeFlash](./policy-csp-internetexplorer.md#internetexplorer-disableadobeflash)
|
||||
- [InternetExplorer/DisableBypassOfSmartScreenWarnings](./policy-csp-internetexplorer.md#internetexplorer-disablebypassofsmartscreenwarnings)
|
||||
- [InternetExplorer/DisableBypassOfSmartScreenWarningsAboutUncommonFiles](./policy-csp-internetexplorer.md#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles)
|
||||
- [InternetExplorer/DisableCompatView](./policy-csp-internetexplorer.md#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableConfiguringHistory](./policy-csp-internetexplorer.md#internetexplorer-disableconfiguringhistory)
|
||||
- [InternetExplorer/DisableCrashDetection](./policy-csp-internetexplorer.md#internetexplorer-disablecrashdetection)
|
||||
- [InternetExplorer/DisableCustomerExperienceImprovementProgramParticipation](./policy-csp-internetexplorer.md#internetexplorer-disablecustomerexperienceimprovementprogramparticipation)
|
||||
- [InternetExplorer/DisableDeletingUserVisitedWebsites](./policy-csp-internetexplorer.md#internetexplorer-disabledeletinguservisitedwebsites)
|
||||
- [InternetExplorer/DisableEnclosureDownloading](./policy-csp-internetexplorer.md#internetexplorer-disableenclosuredownloading)
|
||||
- [InternetExplorer/DisableEncryptionSupport](./policy-csp-internetexplorer.md#internetexplorer-disableencryptionsupport)
|
||||
- [InternetExplorer/DisableFeedsBackgroundSync](./policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync)
|
||||
- [InternetExplorer/DisableFirstRunWizard](./policy-csp-internetexplorer.md#internetexplorer-disablefirstrunwizard)
|
||||
- [InternetExplorer/DisableFlipAheadFeature](./policy-csp-internetexplorer.md#internetexplorer-disableflipaheadfeature)
|
||||
- [InternetExplorer/DisableGeolocation](./policy-csp-internetexplorer.md#internetexplorer-disablegeolocation)
|
||||
- [InternetExplorer/DisableHomePageChange](./policy-csp-internetexplorer.md#internetexplorer-disablehomepagechange)
|
||||
- [InternetExplorer/DisableIgnoringCertificateErrors](./policy-csp-internetexplorer.md#internetexplorer-disableignoringcertificateerrors)
|
||||
- [InternetExplorer/DisableInPrivateBrowsing](./policy-csp-internetexplorer.md#internetexplorer-disableinprivatebrowsing)
|
||||
@ -3932,6 +3961,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/DisableSecondaryHomePageChange](./policy-csp-internetexplorer.md#internetexplorer-disablesecondaryhomepagechange)
|
||||
- [InternetExplorer/DisableSecuritySettingsCheck](./policy-csp-internetexplorer.md#internetexplorer-disablesecuritysettingscheck)
|
||||
- [InternetExplorer/DisableUpdateCheck](./policy-csp-internetexplorer.md#internetexplorer-disableupdatecheck)
|
||||
- [InternetExplorer/DisableWebAddressAutoComplete](./policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete)
|
||||
- [InternetExplorer/DoNotAllowActiveXControlsInProtectedMode](./policy-csp-internetexplorer.md#internetexplorer-donotallowactivexcontrolsinprotectedmode)
|
||||
- [InternetExplorer/DoNotAllowUsersToAddSites](./policy-csp-internetexplorer.md#internetexplorer-donotallowuserstoaddsites)
|
||||
- [InternetExplorer/DoNotAllowUsersToChangePolicies](./policy-csp-internetexplorer.md#internetexplorer-donotallowuserstochangepolicies)
|
||||
@ -4062,6 +4092,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/LockedDownTrustedSitesZoneNavigateWindowsAndFrames](./policy-csp-internetexplorer.md#internetexplorer-lockeddowntrustedsiteszonenavigatewindowsandframes)
|
||||
- [InternetExplorer/MKProtocolSecurityRestrictionInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-mkprotocolsecurityrestrictioninternetexplorerprocesses)
|
||||
- [InternetExplorer/MimeSniffingSafetyFeatureInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses)
|
||||
- [InternetExplorer/NewTabDefaultPage](./policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage)
|
||||
- [InternetExplorer/NotificationBarInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-notificationbarinternetexplorerprocesses)
|
||||
- [InternetExplorer/PreventManagingSmartScreenFilter](./policy-csp-internetexplorer.md#internetexplorer-preventmanagingsmartscreenfilter)
|
||||
- [InternetExplorer/PreventPerUserInstallationOfActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-preventperuserinstallationofactivexcontrols)
|
||||
@ -4456,6 +4487,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/AllowCertificateAddressMismatchWarning](./policy-csp-internetexplorer.md#internetexplorer-allowcertificateaddressmismatchwarning)
|
||||
- [InternetExplorer/AllowDeletingBrowsingHistoryOnExit](./policy-csp-internetexplorer.md#internetexplorer-allowdeletingbrowsinghistoryonexit)
|
||||
- [InternetExplorer/AllowEnhancedProtectedMode](./policy-csp-internetexplorer.md#internetexplorer-allowenhancedprotectedmode)
|
||||
- [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](./policy-csp-internetexplorer.md#internetexplorer-allowenhancedsuggestionsinaddressbar)
|
||||
- [InternetExplorer/AllowEnterpriseModeFromToolsMenu](./policy-csp-internetexplorer.md#internetexplorer-allowenterprisemodefromtoolsmenu)
|
||||
- [InternetExplorer/AllowEnterpriseModeSiteList](./policy-csp-internetexplorer.md#internetexplorer-allowenterprisemodesitelist)
|
||||
- [InternetExplorer/AllowFallbackToSSL3](./policy-csp-internetexplorer.md#internetexplorer-allowfallbacktossl3)
|
||||
@ -4478,17 +4510,21 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/CheckServerCertificateRevocation](./policy-csp-internetexplorer.md#internetexplorer-checkservercertificaterevocation)
|
||||
- [InternetExplorer/CheckSignaturesOnDownloadedPrograms](./policy-csp-internetexplorer.md#internetexplorer-checksignaturesondownloadedprograms)
|
||||
- [InternetExplorer/ConsistentMimeHandlingInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-consistentmimehandlinginternetexplorerprocesses)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](./policy-csp-internetexplorer.md#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableAdobeFlash](./policy-csp-internetexplorer.md#internetexplorer-disableadobeflash)
|
||||
- [InternetExplorer/DisableBypassOfSmartScreenWarnings](./policy-csp-internetexplorer.md#internetexplorer-disablebypassofsmartscreenwarnings)
|
||||
- [InternetExplorer/DisableBypassOfSmartScreenWarningsAboutUncommonFiles](./policy-csp-internetexplorer.md#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles)
|
||||
- [InternetExplorer/DisableCompatView](./policy-csp-internetexplorer.md#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableConfiguringHistory](./policy-csp-internetexplorer.md#internetexplorer-disableconfiguringhistory)
|
||||
- [InternetExplorer/DisableCrashDetection](./policy-csp-internetexplorer.md#internetexplorer-disablecrashdetection)
|
||||
- [InternetExplorer/DisableCustomerExperienceImprovementProgramParticipation](./policy-csp-internetexplorer.md#internetexplorer-disablecustomerexperienceimprovementprogramparticipation)
|
||||
- [InternetExplorer/DisableDeletingUserVisitedWebsites](./policy-csp-internetexplorer.md#internetexplorer-disabledeletinguservisitedwebsites)
|
||||
- [InternetExplorer/DisableEnclosureDownloading](./policy-csp-internetexplorer.md#internetexplorer-disableenclosuredownloading)
|
||||
- [InternetExplorer/DisableEncryptionSupport](./policy-csp-internetexplorer.md#internetexplorer-disableencryptionsupport)
|
||||
- [InternetExplorer/DisableFeedsBackgroundSync](./policy-csp-internetexplorer.md#internetexplorer-disablefeedsbackgroundsync)
|
||||
- [InternetExplorer/DisableFirstRunWizard](./policy-csp-internetexplorer.md#internetexplorer-disablefirstrunwizard)
|
||||
- [InternetExplorer/DisableFlipAheadFeature](./policy-csp-internetexplorer.md#internetexplorer-disableflipaheadfeature)
|
||||
- [InternetExplorer/DisableGeolocation](./policy-csp-internetexplorer.md#internetexplorer-disablegeolocation)
|
||||
- [InternetExplorer/DisableHomePageChange](./policy-csp-internetexplorer.md#internetexplorer-disablehomepagechange)
|
||||
- [InternetExplorer/DisableIgnoringCertificateErrors](./policy-csp-internetexplorer.md#internetexplorer-disableignoringcertificateerrors)
|
||||
- [InternetExplorer/DisableInPrivateBrowsing](./policy-csp-internetexplorer.md#internetexplorer-disableinprivatebrowsing)
|
||||
@ -4498,6 +4534,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/DisableSecondaryHomePageChange](./policy-csp-internetexplorer.md#internetexplorer-disablesecondaryhomepagechange)
|
||||
- [InternetExplorer/DisableSecuritySettingsCheck](./policy-csp-internetexplorer.md#internetexplorer-disablesecuritysettingscheck)
|
||||
- [InternetExplorer/DisableUpdateCheck](./policy-csp-internetexplorer.md#internetexplorer-disableupdatecheck)
|
||||
- [InternetExplorer/DisableWebAddressAutoComplete](./policy-csp-internetexplorer.md#internetexplorer-disablewebaddressautocomplete)
|
||||
- [InternetExplorer/DoNotAllowActiveXControlsInProtectedMode](./policy-csp-internetexplorer.md#internetexplorer-donotallowactivexcontrolsinprotectedmode)
|
||||
- [InternetExplorer/DoNotAllowUsersToAddSites](./policy-csp-internetexplorer.md#internetexplorer-donotallowuserstoaddsites)
|
||||
- [InternetExplorer/DoNotAllowUsersToChangePolicies](./policy-csp-internetexplorer.md#internetexplorer-donotallowuserstochangepolicies)
|
||||
@ -4628,6 +4665,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [InternetExplorer/LockedDownTrustedSitesZoneNavigateWindowsAndFrames](./policy-csp-internetexplorer.md#internetexplorer-lockeddowntrustedsiteszonenavigatewindowsandframes)
|
||||
- [InternetExplorer/MKProtocolSecurityRestrictionInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-mkprotocolsecurityrestrictioninternetexplorerprocesses)
|
||||
- [InternetExplorer/MimeSniffingSafetyFeatureInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses)
|
||||
- [InternetExplorer/NewTabDefaultPage](./policy-csp-internetexplorer.md#internetexplorer-newtabdefaultpage)
|
||||
- [InternetExplorer/NotificationBarInternetExplorerProcesses](./policy-csp-internetexplorer.md#internetexplorer-notificationbarinternetexplorerprocesses)
|
||||
- [InternetExplorer/PreventManagingSmartScreenFilter](./policy-csp-internetexplorer.md#internetexplorer-preventmanagingsmartscreenfilter)
|
||||
- [InternetExplorer/PreventPerUserInstallationOfActiveXControls](./policy-csp-internetexplorer.md#internetexplorer-preventperuserinstallationofactivexcontrols)
|
||||
@ -4916,6 +4954,7 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [RemoteShell/SpecifyShellTimeout](./policy-csp-remoteshell.md#remoteshell-specifyshelltimeout)
|
||||
- [Search/AllowCloudSearch](./policy-csp-search.md#search-allowcloudsearch)
|
||||
- [Search/AllowCortanaInAAD](./policy-csp-search.md#search-allowcortanainaad)
|
||||
- [Search/AllowFindMyFiles](./policy-csp-search.md#search-allowfindmyfiles)
|
||||
- [Search/AllowIndexingEncryptedStoresOrItems](./policy-csp-search.md#search-allowindexingencryptedstoresoritems)
|
||||
- [Search/AllowSearchToUseLocation](./policy-csp-search.md#search-allowsearchtouselocation)
|
||||
- [Search/AllowUsingDiacritics](./policy-csp-search.md#search-allowusingdiacritics)
|
||||
@ -5089,272 +5128,24 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
<!--StartHoloLensBusiness-->
|
||||
## <a href="" id="hololenbusinessspolicies"></a>Policies supported by Windows Holographic for Business
|
||||
|
||||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||||
- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps)
|
||||
- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate)
|
||||
- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock)
|
||||
- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect)
|
||||
- [Authentication/PreferredAadTenantDomainName](#authentication-preferredaadtenantdomainname)
|
||||
- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising)
|
||||
- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode)
|
||||
- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename)
|
||||
- [Browser/AllowAutofill](#browser-allowautofill)
|
||||
- [Browser/AllowCookies](#browser-allowcookies)
|
||||
- [Browser/AllowDoNotTrack](#browser-allowdonottrack)
|
||||
- [Browser/AllowPasswordManager](#browser-allowpasswordmanager)
|
||||
- [Browser/AllowPopups](#browser-allowpopups)
|
||||
- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar)
|
||||
- [Browser/AllowSmartScreen](#browser-allowsmartscreen)
|
||||
- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth)
|
||||
- [Connectivity/AllowUSBConnection](#connectivity-allowusbconnection)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword)
|
||||
- [DeviceLock/AllowSimpleDevicePassword](#devicelock-allowsimpledevicepassword)
|
||||
- [DeviceLock/AlphanumericDevicePasswordRequired](#devicelock-alphanumericdevicepasswordrequired)
|
||||
- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled)
|
||||
- [DeviceLock/DevicePasswordHistory](#devicelock-devicepasswordhistory)
|
||||
- [DeviceLock/MaxDevicePasswordFailedAttempts](#devicelock-maxdevicepasswordfailedattempts)
|
||||
- [DeviceLock/MaxInactivityTimeDeviceLock](#devicelock-maxinactivitytimedevicelock)
|
||||
- [DeviceLock/MinDevicePasswordComplexCharacters](#devicelock-mindevicepasswordcomplexcharacters)
|
||||
- [DeviceLock/MinDevicePasswordLength](#devicelock-mindevicepasswordlength)
|
||||
- [Experience/AllowCortana](#experience-allowcortana)
|
||||
- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization)
|
||||
- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation)
|
||||
- [Security/RequireDeviceEncryption](#security-requiredeviceencryption)
|
||||
- [Settings/AllowDateTime](#settings-allowdatetime)
|
||||
- [Settings/AllowVPN](#settings-allowvpn)
|
||||
- [Speech/AllowSpeechModelUpdate](#speech-allowspeechmodelupdate)
|
||||
- [System/AllowLocation](#system-allowlocation)
|
||||
- [System/AllowTelemetry](#system-allowtelemetry)
|
||||
- [Update/AllowAutoUpdate](#update-allowautoupdate)
|
||||
- [Update/AllowUpdateService](#update-allowupdateservice)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Update/RequireDeferUpgrade](#update-requiredeferupgrade)
|
||||
- [Update/RequireUpdateApproval](#update-requireupdateapproval)
|
||||
- [Update/ScheduledInstallDay](#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](#update-scheduledinstalltime)
|
||||
- [Update/UpdateServiceUrl](#update-updateserviceurl)
|
||||
- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration)
|
||||
<!--EndHoloLensBusiness-->
|
||||
|
||||
<!--StartHoloLens-->
|
||||
## <a href="" id="hololenspolicies"></a>Policies supported by Windows Holographic
|
||||
|
||||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||||
- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate)
|
||||
- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock)
|
||||
- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps)
|
||||
- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect)
|
||||
- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising)
|
||||
- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode)
|
||||
- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename)
|
||||
- [Browser/AllowDoNotTrack](#browser-allowdonottrack)
|
||||
- [Browser/AllowPasswordManager](#browser-allowpasswordmanager)
|
||||
- [Browser/AllowPopups](#browser-allowpopups)
|
||||
- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar)
|
||||
- [Browser/AllowSmartScreen](#browser-allowsmartscreen)
|
||||
- [Browser/AllowCookies](#browser-allowcookies)
|
||||
- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth)
|
||||
- [Connectivity/AllowUSBConnection](#connectivity-allowusbconnection)
|
||||
- [DeviceLock/AllowSimpleDevicePassword](#devicelock-allowsimpledevicepassword)
|
||||
- [DeviceLock/MaxDevicePasswordFailedAttempts](#devicelock-maxdevicepasswordfailedattempts)
|
||||
- [DeviceLock/MaxInactivityTimeDeviceLock](#devicelock-maxinactivitytimedevicelock)
|
||||
- [DeviceLock/MinDevicePasswordLength](#devicelock-mindevicepasswordlength)
|
||||
- [DeviceLock/DevicePasswordHistory](#devicelock-devicepasswordhistory)
|
||||
- [DeviceLock/AlphanumericDevicePasswordRequired](#devicelock-alphanumericdevicepasswordrequired)
|
||||
- [DeviceLock/MinDevicePasswordComplexCharacters](#devicelock-mindevicepasswordcomplexcharacters)
|
||||
- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword)
|
||||
- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Experience/AllowCortana](#experience-allowcortana)
|
||||
- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization)
|
||||
- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation)
|
||||
- [Security/RequireDeviceEncryption](#security-requiredeviceencryption)
|
||||
- [Settings/AllowDateTime](#settings-allowdatetime)
|
||||
- [Settings/AllowVPN](#settings-allowvpn)
|
||||
- [Speech/AllowSpeechModelUpdate](#speech-allowspeechmodelupdate)
|
||||
- [System/AllowTelemetry](#system-allowtelemetry)
|
||||
- [System/AllowLocation](#system-allowlocation)
|
||||
- [Update/AllowAutoUpdate](#update-allowautoupdate)
|
||||
- [Update/AllowUpdateService](#update-allowupdateservice)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Update/RequireUpdateApproval](#update-requireupdateapproval)
|
||||
- [Update/ScheduledInstallDay](#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](#update-scheduledinstalltime)
|
||||
- [Update/UpdateServiceUrl](#update-updateserviceurl)
|
||||
- [Update/RequireDeferUpgrade](#update-requiredeferupgrade)
|
||||
- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration)
|
||||
<!--EndHoloLens-->
|
||||
|
||||
<!--StartSurfaceHub-->
|
||||
## <a href="" id="surfacehubpolicies"></a>Policies supported by Microsoft Surface Hub
|
||||
|
||||
- [Camera/AllowCamera](#camera-allowcamera)
|
||||
- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui)
|
||||
- [Cryptography/AllowFipsAlgorithmPolicy](#cryptography-allowfipsalgorithmpolicy)
|
||||
- [Cryptography/TLSCipherSuites](#cryptography-tlsciphersuites)
|
||||
- [Defender/AllowArchiveScanning](#defender-allowarchivescanning)
|
||||
- [Defender/AllowBehaviorMonitoring](#defender-allowbehaviormonitoring)
|
||||
- [Defender/AllowCloudProtection](#defender-allowcloudprotection)
|
||||
- [Defender/AllowEmailScanning](#defender-allowemailscanning)
|
||||
- [Defender/AllowFullScanOnMappedNetworkDrives](#defender-allowfullscanonmappednetworkdrives)
|
||||
- [Defender/AllowFullScanRemovableDriveScanning](#defender-allowfullscanremovabledrivescanning)
|
||||
- [Defender/AllowIOAVProtection](#defender-allowioavprotection)
|
||||
- [Defender/AllowIntrusionPreventionSystem](#defender-allowintrusionpreventionsystem)
|
||||
- [Defender/AllowOnAccessProtection](#defender-allowonaccessprotection)
|
||||
- [Defender/AllowRealtimeMonitoring](#defender-allowrealtimemonitoring)
|
||||
- [Defender/AllowScanningNetworkFiles](#defender-allowscanningnetworkfiles)
|
||||
- [Defender/AllowScriptScanning](#defender-allowscriptscanning)
|
||||
- [Defender/AllowUserUIAccess](#defender-allowuseruiaccess)
|
||||
- [Defender/AvgCPULoadFactor](#defender-avgcpuloadfactor)
|
||||
- [Defender/DaysToRetainCleanedMalware](#defender-daystoretaincleanedmalware)
|
||||
- [Defender/ExcludedExtensions](#defender-excludedextensions)
|
||||
- [Defender/ExcludedPaths](#defender-excludedpaths)
|
||||
- [Defender/ExcludedProcesses](#defender-excludedprocesses)
|
||||
- [Defender/PUAProtection](#defender-puaprotection)
|
||||
- [Defender/RealTimeScanDirection](#defender-realtimescandirection)
|
||||
- [Defender/ScanParameter](#defender-scanparameter)
|
||||
- [Defender/ScheduleQuickScanTime](#defender-schedulequickscantime)
|
||||
- [Defender/ScheduleScanDay](#defender-schedulescanday)
|
||||
- [Defender/ScheduleScanTime](#defender-schedulescantime)
|
||||
- [Defender/SignatureUpdateInterval](#defender-signatureupdateinterval)
|
||||
- [Defender/SubmitSamplesConsent](#defender-submitsamplesconsent)
|
||||
- [Defender/ThreatSeverityDefaultAction](#defender-threatseveritydefaultaction)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [Desktop/PreventUserRedirectionOfProfileFolders](#desktop-preventuserredirectionofprofilefolders)
|
||||
- [TextInput/AllowIMELogging](#textinput-allowimelogging)
|
||||
- [TextInput/AllowIMENetworkAccess](#textinput-allowimenetworkaccess)
|
||||
- [TextInput/AllowInputPanel](#textinput-allowinputpanel)
|
||||
- [TextInput/AllowJapaneseIMESurrogatePairCharacters](#textinput-allowjapaneseimesurrogatepaircharacters)
|
||||
- [TextInput/AllowJapaneseIVSCharacters](#textinput-allowjapaneseivscharacters)
|
||||
- [TextInput/AllowJapaneseNonPublishingStandardGlyph](#textinput-allowjapanesenonpublishingstandardglyph)
|
||||
- [TextInput/AllowJapaneseUserDictionary](#textinput-allowjapaneseuserdictionary)
|
||||
- [TextInput/AllowLanguageFeaturesUninstall](#textinput-allowlanguagefeaturesuninstall)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptJIS0208](#textinput-excludejapaneseimeexceptjis0208)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](#textinput-excludejapaneseimeexceptjis0208andeudc)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptShiftJIS](#textinput-excludejapaneseimeexceptshiftjis)
|
||||
- [WiFi/AllowWiFiHotSpotReporting](#wifi-allowwifihotspotreporting)
|
||||
<!--EndSurfaceHub-->
|
||||
|
||||
<!--StartIoTCore-->
|
||||
## <a href="" id="iotcore"></a>Policies supported by Windows 10 IoT Core
|
||||
|
||||
- [Camera/AllowCamera](#camera-allowcamera)
|
||||
- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui)
|
||||
- [CredentialProviders/AllowPINLogon](#credentialproviders-allowpinlogon)
|
||||
- [CredentialProviders/BlockPicturePassword](#credentialproviders-blockpicturepassword)
|
||||
- [DataProtection/AllowDirectMemoryAccess](#dataprotection-allowdirectmemoryaccess)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Wifi/AllowAutoConnectToWiFiSenseHotspots](#wifi-allowautoconnecttowifisensehotspots)
|
||||
- [Wifi/AllowInternetSharing](#wifi-allowinternetsharing)
|
||||
- [Wifi/AllowWiFi](#wifi-allowwifi)
|
||||
- [Wifi/WLANScanMode](#wifi-wlanscanmode)
|
||||
<!--EndIoTCore-->
|
||||
|
||||
<!--StartIoTEnterprise-->
|
||||
## <a href="" id="iotcore"></a>Policies supported by Windows 10 IoT Enterprise
|
||||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||||
- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps)
|
||||
- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate)
|
||||
- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock)
|
||||
- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect)
|
||||
- [Authentication/PreferredAadTenantDomainName](#authentication-preferredaadtenantdomainname)
|
||||
- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising)
|
||||
- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode)
|
||||
- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename)
|
||||
- [Browser/AllowAutofill](#browser-allowautofill)
|
||||
- [Browser/AllowCookies](#browser-allowcookies)
|
||||
- [Browser/AllowDoNotTrack](#browser-allowdonottrack)
|
||||
- [Browser/AllowPasswordManager](#browser-allowpasswordmanager)
|
||||
- [Browser/AllowPopups](#browser-allowpopups)
|
||||
- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar)
|
||||
- [Browser/AllowSmartScreen](#browser-allowsmartscreen)
|
||||
- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth)
|
||||
- [Connectivity/AllowUSBConnection](#connectivity-allowusbconnection)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
@ -5382,10 +5173,275 @@ The following diagram shows the Policy configuration service provider in tree fo
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword)
|
||||
- [DeviceLock/AllowSimpleDevicePassword](#devicelock-allowsimpledevicepassword)
|
||||
- [DeviceLock/AlphanumericDevicePasswordRequired](#devicelock-alphanumericdevicepasswordrequired)
|
||||
- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled)
|
||||
- [DeviceLock/DevicePasswordHistory](#devicelock-devicepasswordhistory)
|
||||
- [DeviceLock/MaxDevicePasswordFailedAttempts](#devicelock-maxdevicepasswordfailedattempts)
|
||||
- [DeviceLock/MaxInactivityTimeDeviceLock](#devicelock-maxinactivitytimedevicelock)
|
||||
- [DeviceLock/MinDevicePasswordComplexCharacters](#devicelock-mindevicepasswordcomplexcharacters)
|
||||
- [DeviceLock/MinDevicePasswordLength](#devicelock-mindevicepasswordlength)
|
||||
- [Experience/AllowCortana](#experience-allowcortana)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization)
|
||||
- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation)
|
||||
- [Security/RequireDeviceEncryption](#security-requiredeviceencryption)
|
||||
- [Settings/AllowDateTime](#settings-allowdatetime)
|
||||
- [Settings/AllowVPN](#settings-allowvpn)
|
||||
- [Speech/AllowSpeechModelUpdate](#speech-allowspeechmodelupdate)
|
||||
- [System/AllowLocation](#system-allowlocation)
|
||||
- [System/AllowTelemetry](#system-allowtelemetry)
|
||||
- [Update/AllowAutoUpdate](#update-allowautoupdate)
|
||||
- [Update/AllowUpdateService](#update-allowupdateservice)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Update/RequireDeferUpgrade](#update-requiredeferupgrade)
|
||||
- [Update/RequireUpdateApproval](#update-requireupdateapproval)
|
||||
- [Update/ScheduledInstallDay](#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](#update-scheduledinstalltime)
|
||||
- [Update/UpdateServiceUrl](#update-updateserviceurl)
|
||||
- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration)
|
||||
<!--EndHoloLensBusiness-->
|
||||
|
||||
<!--StartHoloLens-->
|
||||
## <a href="" id="hololenspolicies"></a>Policies supported by Windows Holographic
|
||||
|
||||
- [Accounts/AllowMicrosoftAccountConnection](#accounts-allowmicrosoftaccountconnection)
|
||||
- [ApplicationManagement/AllowAppStoreAutoUpdate](#applicationmanagement-allowappstoreautoupdate)
|
||||
- [ApplicationManagement/AllowDeveloperUnlock](#applicationmanagement-allowdeveloperunlock)
|
||||
- [ApplicationManagement/AllowAllTrustedApps](#applicationmanagement-allowalltrustedapps)
|
||||
- [Authentication/AllowFastReconnect](#authentication-allowfastreconnect)
|
||||
- [Bluetooth/AllowAdvertising](#bluetooth-allowadvertising)
|
||||
- [Bluetooth/AllowDiscoverableMode](#bluetooth-allowdiscoverablemode)
|
||||
- [Bluetooth/LocalDeviceName](#bluetooth-localdevicename)
|
||||
- [Browser/AllowDoNotTrack](#browser-allowdonottrack)
|
||||
- [Browser/AllowPasswordManager](#browser-allowpasswordmanager)
|
||||
- [Browser/AllowPopups](#browser-allowpopups)
|
||||
- [Browser/AllowSearchSuggestionsinAddressBar](#browser-allowsearchsuggestionsinaddressbar)
|
||||
- [Browser/AllowSmartScreen](#browser-allowsmartscreen)
|
||||
- [Browser/AllowCookies](#browser-allowcookies)
|
||||
- [Connectivity/AllowBluetooth](#connectivity-allowbluetooth)
|
||||
- [Connectivity/AllowUSBConnection](#connectivity-allowusbconnection)
|
||||
- [DeviceLock/AllowSimpleDevicePassword](#devicelock-allowsimpledevicepassword)
|
||||
- [DeviceLock/MaxDevicePasswordFailedAttempts](#devicelock-maxdevicepasswordfailedattempts)
|
||||
- [DeviceLock/MaxInactivityTimeDeviceLock](#devicelock-maxinactivitytimedevicelock)
|
||||
- [DeviceLock/MinDevicePasswordLength](#devicelock-mindevicepasswordlength)
|
||||
- [DeviceLock/DevicePasswordHistory](#devicelock-devicepasswordhistory)
|
||||
- [DeviceLock/AlphanumericDevicePasswordRequired](#devicelock-alphanumericdevicepasswordrequired)
|
||||
- [DeviceLock/MinDevicePasswordComplexCharacters](#devicelock-mindevicepasswordcomplexcharacters)
|
||||
- [DeviceLock/AllowIdleReturnWithoutPassword](#devicelock-allowidlereturnwithoutpassword)
|
||||
- [DeviceLock/DevicePasswordEnabled](#devicelock-devicepasswordenabled)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Experience/AllowCortana](#experience-allowcortana)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
- [Privacy/AllowInputPersonalization](#privacy-allowinputpersonalization)
|
||||
- [Search/AllowSearchToUseLocation](#search-allowsearchtouselocation)
|
||||
- [Security/RequireDeviceEncryption](#security-requiredeviceencryption)
|
||||
- [Settings/AllowDateTime](#settings-allowdatetime)
|
||||
- [Settings/AllowVPN](#settings-allowvpn)
|
||||
- [Speech/AllowSpeechModelUpdate](#speech-allowspeechmodelupdate)
|
||||
- [System/AllowTelemetry](#system-allowtelemetry)
|
||||
- [System/AllowLocation](#system-allowlocation)
|
||||
- [Update/AllowAutoUpdate](#update-allowautoupdate)
|
||||
- [Update/AllowUpdateService](#update-allowupdateservice)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Update/RequireUpdateApproval](#update-requireupdateapproval)
|
||||
- [Update/ScheduledInstallDay](#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](#update-scheduledinstalltime)
|
||||
- [Update/UpdateServiceUrl](#update-updateserviceurl)
|
||||
- [Update/RequireDeferUpgrade](#update-requiredeferupgrade)
|
||||
- [Wifi/AllowManualWiFiConfiguration](policy-csp-wifi.md#wifi-allowmanualwificonfiguration)
|
||||
<!--EndHoloLens-->
|
||||
|
||||
<!--StartSurfaceHub-->
|
||||
## <a href="" id="surfacehubpolicies"></a>Policies supported by Microsoft Surface Hub
|
||||
|
||||
- [Camera/AllowCamera](#camera-allowcamera)
|
||||
- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui)
|
||||
- [Cryptography/AllowFipsAlgorithmPolicy](#cryptography-allowfipsalgorithmpolicy)
|
||||
- [Cryptography/TLSCipherSuites](#cryptography-tlsciphersuites)
|
||||
- [Defender/AllowArchiveScanning](#defender-allowarchivescanning)
|
||||
- [Defender/AllowBehaviorMonitoring](#defender-allowbehaviormonitoring)
|
||||
- [Defender/AllowCloudProtection](#defender-allowcloudprotection)
|
||||
- [Defender/AllowEmailScanning](#defender-allowemailscanning)
|
||||
- [Defender/AllowFullScanOnMappedNetworkDrives](#defender-allowfullscanonmappednetworkdrives)
|
||||
- [Defender/AllowFullScanRemovableDriveScanning](#defender-allowfullscanremovabledrivescanning)
|
||||
- [Defender/AllowIOAVProtection](#defender-allowioavprotection)
|
||||
- [Defender/AllowIntrusionPreventionSystem](#defender-allowintrusionpreventionsystem)
|
||||
- [Defender/AllowOnAccessProtection](#defender-allowonaccessprotection)
|
||||
- [Defender/AllowRealtimeMonitoring](#defender-allowrealtimemonitoring)
|
||||
- [Defender/AllowScanningNetworkFiles](#defender-allowscanningnetworkfiles)
|
||||
- [Defender/AllowScriptScanning](#defender-allowscriptscanning)
|
||||
- [Defender/AllowUserUIAccess](#defender-allowuseruiaccess)
|
||||
- [Defender/AvgCPULoadFactor](#defender-avgcpuloadfactor)
|
||||
- [Defender/DaysToRetainCleanedMalware](#defender-daystoretaincleanedmalware)
|
||||
- [Defender/ExcludedExtensions](#defender-excludedextensions)
|
||||
- [Defender/ExcludedPaths](#defender-excludedpaths)
|
||||
- [Defender/ExcludedProcesses](#defender-excludedprocesses)
|
||||
- [Defender/PUAProtection](#defender-puaprotection)
|
||||
- [Defender/RealTimeScanDirection](#defender-realtimescandirection)
|
||||
- [Defender/ScanParameter](#defender-scanparameter)
|
||||
- [Defender/ScheduleQuickScanTime](#defender-schedulequickscantime)
|
||||
- [Defender/ScheduleScanDay](#defender-schedulescanday)
|
||||
- [Defender/ScheduleScanTime](#defender-schedulescantime)
|
||||
- [Defender/SignatureUpdateInterval](#defender-signatureupdateinterval)
|
||||
- [Defender/SubmitSamplesConsent](#defender-submitsamplesconsent)
|
||||
- [Defender/ThreatSeverityDefaultAction](#defender-threatseveritydefaultaction)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [Desktop/PreventUserRedirectionOfProfileFolders](#desktop-preventuserredirectionofprofilefolders)
|
||||
- [TextInput/AllowIMELogging](#textinput-allowimelogging)
|
||||
- [TextInput/AllowIMENetworkAccess](#textinput-allowimenetworkaccess)
|
||||
- [TextInput/AllowInputPanel](#textinput-allowinputpanel)
|
||||
- [TextInput/AllowJapaneseIMESurrogatePairCharacters](#textinput-allowjapaneseimesurrogatepaircharacters)
|
||||
- [TextInput/AllowJapaneseIVSCharacters](#textinput-allowjapaneseivscharacters)
|
||||
- [TextInput/AllowJapaneseNonPublishingStandardGlyph](#textinput-allowjapanesenonpublishingstandardglyph)
|
||||
- [TextInput/AllowJapaneseUserDictionary](#textinput-allowjapaneseuserdictionary)
|
||||
- [TextInput/AllowLanguageFeaturesUninstall](#textinput-allowlanguagefeaturesuninstall)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptJIS0208](#textinput-excludejapaneseimeexceptjis0208)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptJIS0208andEUDC](#textinput-excludejapaneseimeexceptjis0208andeudc)
|
||||
- [TextInput/ExcludeJapaneseIMEExceptShiftJIS](#textinput-excludejapaneseimeexceptshiftjis)
|
||||
- [WiFi/AllowWiFiHotSpotReporting](#wifi-allowwifihotspotreporting)
|
||||
<!--EndSurfaceHub-->
|
||||
|
||||
<!--StartIoTCore-->
|
||||
## <a href="" id="iotcore"></a>Policies supported by Windows 10 IoT Core
|
||||
|
||||
- [Camera/AllowCamera](#camera-allowcamera)
|
||||
- [Cellular/ShowAppCellularAccessUI](#cellular-showappcellularaccessui)
|
||||
- [CredentialProviders/AllowPINLogon](#credentialproviders-allowpinlogon)
|
||||
- [CredentialProviders/BlockPicturePassword](#credentialproviders-blockpicturepassword)
|
||||
- [DataProtection/AllowDirectMemoryAccess](#dataprotection-allowdirectmemoryaccess)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
- [Wifi/AllowAutoConnectToWiFiSenseHotspots](#wifi-allowautoconnecttowifisensehotspots)
|
||||
- [Wifi/AllowInternetSharing](#wifi-allowinternetsharing)
|
||||
- [Wifi/AllowWiFi](#wifi-allowwifi)
|
||||
- [Wifi/WLANScanMode](#wifi-wlanscanmode)
|
||||
<!--EndIoTCore-->
|
||||
|
||||
<!--StartIoTEnterprise-->
|
||||
## <a href="" id="iotcore"></a>Policies supported by Windows 10 IoT Enterprise
|
||||
|
||||
- [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](#internetexplorer-allowenhancedsuggestionsinaddressbar)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableFeedsBackgroundSync](#internetexplorer-disablefeedsbackgroundsync)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
- [InternetExplorer/DisableWebAddressAutoComplete](#internetexplorer-disablewebaddressautocomplete)
|
||||
- [InternetExplorer/NewTabDefaultPage](#internetexplorer-newtabdefaultpage)
|
||||
- [DeliveryOptimization/DOAbsoluteMaxCacheSize](#deliveryoptimization-doabsolutemaxcachesize)
|
||||
- [DeliveryOptimization/DOAllowVPNPeerCaching](#deliveryoptimization-doallowvpnpeercaching)
|
||||
- [DeliveryOptimization/DOCacheHost](#deliveryoptimization-docachehost)
|
||||
- [DeliveryOptimization/DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackBackground](#deliveryoptimization-dodelaycacheserverfallbackbackground)
|
||||
- [DeliveryOptimization/DODelayCacheServerFallbackForeground](#deliveryoptimization-dodelaycacheserverfallbackforeground)
|
||||
- [DeliveryOptimization/DODownloadMode](#deliveryoptimization-dodownloadmode)
|
||||
- [DeliveryOptimization/DOGroupId](#deliveryoptimization-dogroupid)
|
||||
- [DeliveryOptimization/DOGroupIdSource](#deliveryoptimization-dogroupidsource)
|
||||
- [DeliveryOptimization/DOMaxCacheAge](#deliveryoptimization-domaxcacheage)
|
||||
- [DeliveryOptimization/DOMaxCacheSize](#deliveryoptimization-domaxcachesize)
|
||||
- [DeliveryOptimization/DOMaxDownloadBandwidth](#deliveryoptimization-domaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOMaxUploadBandwidth](#deliveryoptimization-domaxuploadbandwidth)
|
||||
- [DeliveryOptimization/DOMinBackgroundQos](#deliveryoptimization-dominbackgroundqos)
|
||||
- [DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload](#deliveryoptimization-dominbatterypercentageallowedtoupload)
|
||||
- [DeliveryOptimization/DOMinDiskSizeAllowedToPeer](#deliveryoptimization-domindisksizeallowedtopeer)
|
||||
- [DeliveryOptimization/DOMinFileSizeToCache](#deliveryoptimization-dominfilesizetocache)
|
||||
- [DeliveryOptimization/DOMinRAMAllowedToPeer](#deliveryoptimization-dominramallowedtopeer)
|
||||
- [DeliveryOptimization/DOModifyCacheDrive](#deliveryoptimization-domodifycachedrive)
|
||||
- [DeliveryOptimization/DOMonthlyUploadDataCap](#deliveryoptimization-domonthlyuploaddatacap)
|
||||
- [DeliveryOptimization/DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxDownloadBandwidth](#deliveryoptimization-dopercentagemaxdownloadbandwidth)
|
||||
- [DeliveryOptimization/DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth)
|
||||
- [DeliveryOptimization/DORestrictPeerSelectionBy](#deliveryoptimization-dorestrictpeerselectionby)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth)
|
||||
- [DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth](#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth)
|
||||
- [Update/ConfigureDeadlineForFeatureUpdates](#update-configuredeadlineforfeatureupdates)
|
||||
- [Update/ConfigureDeadlineForQualityUpdates](#update-configuredeadlineforqualityupdates)
|
||||
- [Update/ConfigureDeadlineGracePeriod](#update-configuredeadlinegraceperiod)
|
||||
- [Update/ConfigureDeadlineNoAutoReboot](#update-configuredeadlinenoautoreboot)
|
||||
|
||||
<!--EndIoTCoreEnterprise-->
|
||||
|
||||
|
||||
@ -6,12 +6,13 @@ ms.topic: article
|
||||
ms.prod: w10
|
||||
ms.technology: windows
|
||||
author: MariciaAlforque
|
||||
ms.date: 05/14/2018
|
||||
ms.date: 05/06/2019
|
||||
---
|
||||
|
||||
# Policy CSP - InternetExplorer
|
||||
|
||||
|
||||
> [!WARNING]
|
||||
> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
|
||||
|
||||
<hr/>
|
||||
|
||||
@ -40,6 +41,9 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-allowenhancedprotectedmode">InternetExplorer/AllowEnhancedProtectedMode</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-allowenhancedsuggestionsinaddressbar">InternetExplorer/AllowEnhancedSuggestionsInAddressBar</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-allowenterprisemodefromtoolsmenu">InternetExplorer/AllowEnterpriseModeFromToolsMenu</a>
|
||||
</dd>
|
||||
@ -106,6 +110,9 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-consistentmimehandlinginternetexplorerprocesses">InternetExplorer/ConsistentMimeHandlingInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableactivexversionlistautodownload">InternetExplorer/DisableActiveXVersionListAutoDownload</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableadobeflash">InternetExplorer/DisableAdobeFlash</a>
|
||||
</dd>
|
||||
@ -115,6 +122,9 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles">InternetExplorer/DisableBypassOfSmartScreenWarningsAboutUncommonFiles</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablecompatview">InternetExplorer/DisableCompatView</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableconfiguringhistory">InternetExplorer/DisableConfiguringHistory</a>
|
||||
</dd>
|
||||
@ -133,12 +143,18 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableencryptionsupport">InternetExplorer/DisableEncryptionSupport</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablefeedsbackgroundsync">InternetExplorer/DisableFeedsBackgroundSync</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablefirstrunwizard">InternetExplorer/DisableFirstRunWizard</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableflipaheadfeature">InternetExplorer/DisableFlipAheadFeature</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablegeolocation">InternetExplorer/DisableGeolocation</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablehomepagechange">InternetExplorer/DisableHomePageChange</a>
|
||||
</dd>
|
||||
@ -166,6 +182,9 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-disableupdatecheck">InternetExplorer/DisableUpdateCheck</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-disablewebaddressautocomplete">InternetExplorer/DisableWebAddressAutoComplete</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-donotallowactivexcontrolsinprotectedmode">InternetExplorer/DoNotAllowActiveXControlsInProtectedMode</a>
|
||||
</dd>
|
||||
@ -559,6 +578,9 @@ ms.date: 05/14/2018
|
||||
<dd>
|
||||
<a href="#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses">InternetExplorer/MimeSniffingSafetyFeatureInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-newtabdefaultpage">InternetExplorer/NewTabDefaultPage</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#internetexplorer-notificationbarinternetexplorerprocesses">InternetExplorer/NotificationBarInternetExplorerProcesses</a>
|
||||
</dd>
|
||||
@ -1216,6 +1238,82 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-allowenhancedsuggestionsinaddressbar"></a>**InternetExplorer/AllowEnhancedSuggestionsInAddressBar**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user's keystrokes are sent to Microsoft through Microsoft services.
|
||||
|
||||
If you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users cannot change the Suggestions setting on the Settings charm.
|
||||
|
||||
If you disable this policy setting, users do not receive enhanced suggestions while typing in the Address bar. In addition, users cannot change the Suggestions setting on the Settings charm.
|
||||
|
||||
If you do not configure this policy setting, users can change the Suggestions setting on the Settings charm.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar*
|
||||
- GP name: *AllowServicePoweredQSA*
|
||||
- GP path: *Windows Components/Internet Explorer*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- 0 - Disabled
|
||||
- 1 - Enabled (Default)
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-allowenterprisemodefromtoolsmenu"></a>**InternetExplorer/AllowEnterpriseModeFromToolsMenu**
|
||||
|
||||
@ -2713,6 +2811,80 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disableactivexversionlistautodownload"></a>**InternetExplorer/DisableActiveXVersionListAutoDownload**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This setting determines whether IE automatically downloads updated versions of Microsoft’s VersionList.XML. IE uses this file to determine whether an ActiveX control should be stopped from loading.
|
||||
|
||||
> [!Caution]
|
||||
> If you enable this setting, IE stops downloading updated versions of VersionList.XML. Turning off this automatic download breaks the [out-of-date ActiveX control blocking feature](https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/out-of-date-activex-control-blocking) by not letting the version list update with newly outdated controls, potentially compromising the security of your computer.
|
||||
|
||||
If you disable or do not configure this setting, IE continues to download updated versions of VersionList.XML.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Turn off automatic download of the ActiveX VersionList*
|
||||
- GP name: *VersionListAutomaticDownloadDisable*
|
||||
- GP path: *Windows Components/Internet Explorer/Security Features/Add-on Management*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- 0 - Enabled
|
||||
- 1 - Disabled (Default)
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disableadobeflash"></a>**InternetExplorer/DisableAdobeFlash**
|
||||
|
||||
@ -2904,6 +3076,80 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablecompatview"></a>**InternetExplorer/DisableCompatView**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This policy setting controls the Compatibility View feature, which allows users to fix website display problems that they may encounter while browsing.
|
||||
|
||||
If you enable this policy setting, the user cannot use the Compatibility View button or manage the Compatibility View sites list.
|
||||
|
||||
If you disable or do not configure this policy setting, the user can use the Compatibility View button and manage the Compatibility View sites list.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Turn off Compatibility View*
|
||||
- GP name: *CompatView_DisableList*
|
||||
- GP path: *Windows Components/Internet Explorer/Compatibility View*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- 0 - Disabled (Default)
|
||||
- 1 - Enabled
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disableconfiguringhistory"></a>**InternetExplorer/DisableConfiguringHistory**
|
||||
|
||||
@ -3290,6 +3536,80 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablefeedsbackgroundsync"></a>**InternetExplorer/DisableFeedsBackgroundSync**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This policy setting allows you to choose whether or not to have background synchronization for feeds and Web Slices.
|
||||
|
||||
If you enable this policy setting, the ability to synchronize feeds and Web Slices in the background is turned off.
|
||||
|
||||
If you disable or do not configure this policy setting, the user can synchronize feeds and Web Slices in the background.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Turn off background synchronization for feeds and Web Slices*
|
||||
- GP name: *Disable_Background_Syncing*
|
||||
- GP path: *Windows Components/RSS Feeds*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- 0 - Enabled (Default)
|
||||
- 1 - Disabled
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablefirstrunwizard"></a>**InternetExplorer/DisableFirstRunWizard**
|
||||
|
||||
@ -3424,6 +3744,82 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablegeolocation"></a>**InternetExplorer/DisableGeolocation**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This policy setting allows you to disable browser geolocation support. This prevents websites from requesting location data about the user.
|
||||
|
||||
If you enable this policy setting, browser geolocation support is turned off.
|
||||
|
||||
If you disable this policy setting, browser geolocation support is turned on.
|
||||
|
||||
If you do not configure this policy setting, browser geolocation support can be turned on or off in Internet Options on the Privacy tab.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Turn off browser geolocation*
|
||||
- GP name: *GeolocationDisable*
|
||||
- GP path: *Windows Components/Internet Explorer*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- 0 - Disabled (Default)
|
||||
- 1 - Enabled
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablehomepagechange"></a>**InternetExplorer/DisableHomePageChange**
|
||||
|
||||
@ -4001,6 +4397,82 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-disablewebaddressautocomplete"></a>**InternetExplorer/DisableWebAddressAutoComplete**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar.
|
||||
|
||||
If you enable this policy setting, users are not suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting.
|
||||
|
||||
If you disable this policy setting, users are suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting.
|
||||
|
||||
If you do not configure this policy setting, users can choose to turn the auto-complete setting for web-addresses on or off.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Turn off the auto-complete feature for web addresses*
|
||||
- GP name: *RestrictWebAddressSuggest*
|
||||
- GP path: *Windows Components/Internet Explorer*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- yes - Disabled (Default)
|
||||
- no - Enabled
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-donotallowactivexcontrolsinprotectedmode"></a>**InternetExplorer/DoNotAllowActiveXControlsInProtectedMode**
|
||||
|
||||
@ -12568,6 +13040,83 @@ ADMX Info:
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-newtabdefaultpage"></a>**InternetExplorer/NewTabDefaultPage**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * User
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
This policy setting allows you to specify what is displayed when the user opens a new tab.
|
||||
|
||||
If you enable this policy setting, you can choose which page to display when the user opens a new tab: blank page (about:blank), the first home page, the new tab page or the new tab page with my news feed.
|
||||
|
||||
If you disable or do not configure this policy setting, users can select their preference for this behavior.
|
||||
|
||||
<!--/Description-->
|
||||
> [!TIP]
|
||||
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||
|
||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||
|
||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||
|
||||
<!--ADMXBacked-->
|
||||
ADMX Info:
|
||||
- GP English name: *Specify default behavior for a new tab*
|
||||
- GP name: *NewTabAction*
|
||||
- GP path: *Windows Components/Internet Explorer*
|
||||
- GP ADMX file name: *inetres.admx*
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--SupportedValues-->
|
||||
|
||||
Supported values:
|
||||
- 0 - NewTab_AboutBlank (about:blank)
|
||||
- 1 - NewTab_Homepage (Home page)
|
||||
- 2 - NewTab_AboutTabs (New tab page)
|
||||
- 3 - NewTab_AboutNewsFeed (New tab page with my news feed) (Default)
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="internetexplorer-notificationbarinternetexplorerprocesses"></a>**InternetExplorer/NotificationBarInternetExplorerProcesses**
|
||||
|
||||
@ -16878,14 +17427,53 @@ ADMX Info:
|
||||
|
||||
<!--/ADMXBacked-->
|
||||
<!--/Policy-->
|
||||
|
||||
<!--/Policies-->
|
||||
|
||||
<!--StartHoloLens-->
|
||||
## <a href="" id="hololenspolicies"></a>InternetExplorer policies supported by Windows Holographic
|
||||
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
<!--EndHoloLens-->
|
||||
|
||||
<!--StartHoloLensBusiness-->
|
||||
## <a href="" id="hololenbusinessspolicies"></a>InternetExplorer policies supported by Windows Holographic for Business
|
||||
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
<!--EndHoloLensBusiness-->
|
||||
|
||||
<!--StartIoTCore-->
|
||||
## <a href="" id="iotcore"></a>InternetExplorer policies supported by IoT Core
|
||||
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
<!--EndIoTCore-->
|
||||
|
||||
<!--StartIoTEnterprise-->
|
||||
## <a href="" id="iotcore"></a>InternetExplorer policies supported by IoT Enterprise
|
||||
|
||||
- [InternetExplorer/AllowEnhancedSuggestionsInAddressBar](#internetexplorer-allowenhancedsuggestionsinaddressbar)
|
||||
- [InternetExplorer/DisableActiveXVersionListAutoDownload](#internetexplorer-disableactivexversionlistautodownload)
|
||||
- [InternetExplorer/DisableCompatView](#internetexplorer-disablecompatview)
|
||||
- [InternetExplorer/DisableFeedsBackgroundSync](#internetexplorer-disablefeedsbackgroundsync)
|
||||
- [InternetExplorer/DisableGeolocation](#internetexplorer-disablegeolocation)
|
||||
- [InternetExplorer/DisableWebAddressAutoComplete](#internetexplorer-disablewebaddressautocomplete)
|
||||
- [InternetExplorer/NewTabDefaultPage](#internetexplorer-newtabdefaultpage)
|
||||
<!--EndIoTEnterprise-->
|
||||
|
||||
|
||||
<hr/>
|
||||
|
||||
Footnote:
|
||||
Footnotes:
|
||||
|
||||
- 1 - Added in Windows 10, version 1607.
|
||||
- 2 - Added in Windows 10, version 1703.
|
||||
- 3 - Added in Windows 10, version 1709.
|
||||
- 4 - Added in Windows 10, version 1803.
|
||||
|
||||
<!--/Policies-->
|
||||
|
||||
- 5 - Added in Windows 10, version 1809.
|
||||
- 6 - Added in Windows 10, version 1903.
|
||||
@ -6,12 +6,13 @@ ms.topic: article
|
||||
ms.prod: w10
|
||||
ms.technology: windows
|
||||
author: MariciaAlforque
|
||||
ms.date: 05/01/2019
|
||||
ms.date: 05/14/2019
|
||||
---
|
||||
|
||||
# Policy CSP - Search
|
||||
|
||||
|
||||
> [!WARNING]
|
||||
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
|
||||
|
||||
<hr/>
|
||||
|
||||
@ -25,6 +26,9 @@ ms.date: 05/01/2019
|
||||
<dd>
|
||||
<a href="#search-allowcortanainaad">Search/AllowCortanaInAAD</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#search-allowfindmyfiles">Search/AllowFindMyFiles</a>
|
||||
</dd>
|
||||
<dd>
|
||||
<a href="#search-allowindexingencryptedstoresoritems">Search/AllowIndexingEncryptedStoresOrItems</a>
|
||||
</dd>
|
||||
@ -181,6 +185,71 @@ The following list shows the supported values:
|
||||
<!--/SupportedValues-->
|
||||
<!--/Policy-->
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
<a href="" id="search-allowfindmyfiles"></a>**Search/AllowFindMyFiles**
|
||||
|
||||
<!--SupportedSKUs-->
|
||||
<table>
|
||||
<tr>
|
||||
<th>Home</th>
|
||||
<th>Pro</th>
|
||||
<th>Business</th>
|
||||
<th>Enterprise</th>
|
||||
<th>Education</th>
|
||||
<th>Mobile</th>
|
||||
<th>Mobile Enterprise</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
|
||||
<td></td>
|
||||
<td></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<!--/SupportedSKUs-->
|
||||
<!--Scope-->
|
||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
||||
|
||||
> [!div class = "checklist"]
|
||||
> * Device
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--/Scope-->
|
||||
<!--Description-->
|
||||
Controls if the user can configure search to Find My Files mode, which searches files in secondary hard drives and also outside of the user profile. Find My Files does not allow users to search files or locations to which they do not have access.
|
||||
|
||||
<!--/Description-->
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Allow Find My Files*
|
||||
- GP name: *AllowFindMyFiles*
|
||||
- GP path: *Computer Configuration/Administrative Templates/Windows Components/Search*
|
||||
- GP ADMX file name: *Search.admx*
|
||||
|
||||
<!--/ADMXMapped-->
|
||||
<!--SupportedValues-->
|
||||
The following list shows the supported values:
|
||||
|
||||
- 1 (Default) - Find My Files feature can be toggled (still off by default), and the settings UI is present.
|
||||
- 0 - Find My Files feature is turned off completely, and the settings UI is disabled.
|
||||
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
<!--/Example-->
|
||||
<!--Validation-->
|
||||
|
||||
<!--/Validation-->
|
||||
<!--/Policy-->
|
||||
|
||||
|
||||
<hr/>
|
||||
|
||||
<!--Policy-->
|
||||
@ -872,4 +941,5 @@ Footnotes:
|
||||
- 2 - Added in Windows 10, version 1703.
|
||||
- 3 - Added in Windows 10, version 1709.
|
||||
- 4 - Added in Windows 10, version 1803.
|
||||
- 5 - Added in Windows 10, version 1809.
|
||||
- 5 - Added in Windows 10, version 1809.
|
||||
- 6 - Added in Windows 10, version 1903.
|
||||
@ -998,7 +998,6 @@ If you disable or do not configure this policy setting, the wake setting as spec
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Automatic Maintenance WakeUp Policy*
|
||||
- GP category English path: *Windows Components/Maintenance Scheduler*
|
||||
- GP name: *WakeUpPolicy*
|
||||
- GP path: *Windows Components/Maintenance Scheduler*
|
||||
- GP ADMX file name: *msched.admx*
|
||||
@ -1130,9 +1129,9 @@ Default value is 7.
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Specify deadlines for automatic updates and restarts*
|
||||
- GP category English path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP name: *ConfigureDeadlineForFeatureUpdates*
|
||||
- GP element: *ConfigureDeadlineForFeatureUpdates*
|
||||
- GP path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP ADMX file name: *WindowsUpdate.admx*
|
||||
|
||||
<!--/ADMXMapped-->
|
||||
@ -1189,9 +1188,9 @@ Added in Windows 10, version 1903. Allows IT admins to specify the number of day
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Specify deadlines for automatic updates and restarts*
|
||||
- GP category English path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP name: *ConfigureDeadlineForQualityUpdates*
|
||||
- GP element: *ConfigureDeadlineForQualityUpdates*
|
||||
- GP path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP ADMX file name: *WindowsUpdate.admx*
|
||||
|
||||
<!--/ADMXMapped-->
|
||||
@ -1252,9 +1251,9 @@ Added in Windows 10, version 1903. Allows the IT admin (when used with [Update/C
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Specify deadlines for automatic updates and restarts*
|
||||
- GP category English path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP name: *ConfigureDeadlineGracePeriod*
|
||||
- GP element: *ConfigureDeadlineGracePeriod*
|
||||
- GP path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP ADMX file name: *WindowsUpdate.admx*
|
||||
|
||||
<!--/ADMXMapped-->
|
||||
@ -1317,9 +1316,9 @@ When disabled, if the device has installed the required updates and is outside o
|
||||
<!--ADMXMapped-->
|
||||
ADMX Info:
|
||||
- GP English name: *Specify deadlines for automatic updates and restarts*
|
||||
- GP category English path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP name: *ConfigureDeadlineNoAutoReboot*
|
||||
- GP element: *ConfigureDeadlineNoAutoReboot*
|
||||
- GP path: *Administrative Templates\Windows Components\WindowsUpdate*
|
||||
- GP ADMX file name: *WindowsUpdate.admx*
|
||||
|
||||
<!--/ADMXMapped-->
|
||||
|
||||
@ -407,8 +407,8 @@ ADMX Info:
|
||||
<!--/ADMXMapped-->
|
||||
<!--SupportedValues-->
|
||||
Supported values:
|
||||
- false - disabled
|
||||
- true - enabled
|
||||
- 0 - disabled
|
||||
- 1 - enabled
|
||||
<!--/SupportedValues-->
|
||||
<!--Example-->
|
||||
|
||||
@ -556,4 +556,4 @@ Footnotes:
|
||||
- 3 - Added in Windows 10, version 1709.
|
||||
- 4 - Added in Windows 10, version 1803.
|
||||
- 5 - Added in Windows 10, version 1809.
|
||||
- 6 - Added in Windows 10, version 1903.
|
||||
- 6 - Added in Windows 10, version 1903.
|
||||
|
||||
@ -79,6 +79,7 @@
|
||||
#### [DeviceFormFactor](wcd/wcd-deviceformfactor.md)
|
||||
#### [DeviceInfo](wcd/wcd-deviceinfo.md)
|
||||
#### [DeviceManagement](wcd/wcd-devicemanagement.md)
|
||||
#### [DeviceUpdateCenter](wcd/wcd-deviceupdatecenter.md)
|
||||
#### [DMClient](wcd/wcd-dmclient.md)
|
||||
#### [EditionUpgrade](wcd/wcd-editionupgrade.md)
|
||||
#### [EmbeddedLockdownProfiles](wcd/wcd-embeddedlockdownprofiles.md)
|
||||
@ -102,6 +103,7 @@
|
||||
#### [OtherAssets](wcd/wcd-otherassets.md)
|
||||
#### [Personalization](wcd/wcd-personalization.md)
|
||||
#### [Policies](wcd/wcd-policies.md)
|
||||
#### [Privacy](wcd/wcd-privacy.md)
|
||||
#### [ProvisioningCommands](wcd/wcd-provisioningcommands.md)
|
||||
#### [RcsPresence](wcd/wcd-rcspresence.md)
|
||||
#### [SharedPC](wcd/wcd-sharedpc.md)
|
||||
@ -110,11 +112,13 @@
|
||||
#### [Start](wcd/wcd-start.md)
|
||||
#### [StartupApp](wcd/wcd-startupapp.md)
|
||||
#### [StartupBackgroundTasks](wcd/wcd-startupbackgroundtasks.md)
|
||||
#### [StorageD3InModernStandby](wcd/wcd-storaged3inmodernstandby.md)
|
||||
#### [SurfaceHubManagement](wcd/wcd-surfacehubmanagement.md)
|
||||
#### [TabletMode](wcd/wcd-tabletmode.md)
|
||||
#### [TakeATest](wcd/wcd-takeatest.md)
|
||||
#### [TextInput](wcd/wcd-textinput.md)
|
||||
#### [Theme](wcd/wcd-theme.md)
|
||||
#### [Theme](wcd/wcd-theme.md)
|
||||
#### [Time](wcd/wcd-time.md)
|
||||
#### [UnifiedWriteFilter](wcd/wcd-unifiedwritefilter.md)
|
||||
#### [UniversalAppInstall](wcd/wcd-universalappinstall.md)
|
||||
#### [UniversalAppUninstall](wcd/wcd-universalappuninstall.md)
|
||||
|
||||
@ -203,7 +203,7 @@ When you use the **Provision kiosk devices** wizard in Windows Configuration Des
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enable device setup if you want to configure settings on this page.</br></br>**If enabled:**</br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)</br></br>Toggle **Configure devices for shared use** off. This setting optimizes Windows 10 for shared use scenarios and isn't necessary for a kiosk scenario.</br></br>You can also select to remove pre-installed software from the device. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable network setup if you want to configure settings on this page.</br></br>**If enabled:**</br></br>Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>**If enabled:**</br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.</br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>**If enabled:**</br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.</br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can provision the kiosk app in the **Add applications** step. You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md)</br></br>**Warning:** If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in **Installer Path**, and then a **Cancel** button becomes available, allowing you to complete the provisioning package without an application. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>To provision the device with a certificate for the kiosk app, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.</br></br>If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts. (If you encounter issues with auto sign-in after you apply the provisioning package, check the Event Viewer logs for auto logon issues under **Applications and Services Logs\Microsoft\Windows\Authentication User Interface\Operational**.)</br></br>In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.</td><td></td></tr>
|
||||
|
||||
@ -44,7 +44,7 @@ The **Provision Windows mobile devices** wizard lets you configure common settin
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enter a device name.</br></br> Optionally, you can enter a product key to upgrade the device from Windows 10 Mobile to Windows 10 Mobile Enterprise. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Toggle **On** or **Off** for wireless network connectivity. </br></br>If you select **On**, enter the SSID, network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. </br></br> Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. </br></br> Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td></td></tr>
|
||||
</table>
|
||||
|
||||
|
||||
@ -81,7 +81,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)</br></br>Toggle **Yes** or **No** to **Configure devices for shared use**. This setting optimizes Windows 10 for shared use scenarios. [Learn more about shared PC configuration.](../set-up-shared-or-guest-pc.md)</br></br>You can also select to remove pre-installed software from the device. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provision-pcs-with-apps.md). </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>To provision the device with a certificate, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td></td></tr>
|
||||
|
||||
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Cellular (Windows Configuration Designer reference)
|
||||
@ -52,6 +51,10 @@ Enter the destination path for the BrandingIcon .ico file.
|
||||
|
||||
Enter the service provider name for the mobile operator.
|
||||
|
||||
### DataClassMappingTable
|
||||
|
||||
Enter a customized string for the appropriate [data class](https://docs.microsoft.com/windows/desktop/api/mbnapi/ne-mbnapi-mbn_data_class).
|
||||
|
||||
### NetworkBlockList
|
||||
|
||||
Enter a comma-separated list of mobile country code (MCC) and mobile network code (MCC) pairs (MCC:MNC).
|
||||
|
||||
@ -8,12 +8,26 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Changes to settings in Windows Configuration Designer
|
||||
|
||||
Settings added in Windows 10, version 1809
|
||||
## Settings added in Windows 10, version 1903
|
||||
|
||||
- [DeviceUpdateCenter](wcd-deviceupdatecenter.md)
|
||||
- [Privacy](wcd-privacy.md)
|
||||
- [Time](wcd-time.md)
|
||||
- [Cellular > DataClassMappingTable](wcd-cellular.md#dataclassmappingtable)
|
||||
- [OOBE > EnableCortanaVoice](wcd-oobe.md#enablecortanavoice)
|
||||
- [Policies > LocalPoliciesSecurityOptions](wcd-policies.md#localpoliciessecurityoptions)
|
||||
- [Policies > Power](wcd-policies.md#power)
|
||||
- [StorageD3InModernStandby](wcd-storaged3inmodernstandby.md)
|
||||
|
||||
## Settings removed in Windows 10, version 1903
|
||||
|
||||
- [WLAN](wcd-wlan.md)
|
||||
|
||||
## Settings added in Windows 10, version 1809
|
||||
|
||||
|
||||
- [Browser > AllowPrelaunch](wcd-browser.md#allowprelaunch)
|
||||
@ -74,7 +88,7 @@ Settings added in Windows 10, version 1809
|
||||
- [WindowsHelloForBusiness](wcd-windowshelloforbusiness.md)
|
||||
|
||||
|
||||
Settings removed in Windows 10, version 1809
|
||||
## Settings removed in Windows 10, version 1809
|
||||
|
||||
- [CellCore](wcd-cellcore.md)
|
||||
- [Policies > Browser:](wcd-policies.md#browser)
|
||||
|
||||
22
windows/configuration/wcd/wcd-deviceupdatecenter.md
Normal file
22
windows/configuration/wcd/wcd-deviceupdatecenter.md
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
title: DeviceUpdateCenter (Windows 10)
|
||||
description: This section describes the DeviceUpdateCenter settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# DeviceUpdateCenter (Windows Configuration Designer reference)
|
||||
|
||||
Do not use **DeviceUpdateCenter** settings at this time.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | | | | |
|
||||
|
||||
@ -8,20 +8,37 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 09/06/2017
|
||||
---
|
||||
|
||||
# OOBE (Windows Configuration Designer reference)
|
||||
|
||||
Use to configure settings for the Out Of Box Experience (OOBE).
|
||||
Use to configure settings for the [Out Of Box Experience (OOBE)](https://docs.microsoft.com/windows-hardware/customize/desktop/customize-oobe).
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [Desktop > EnableCortanaVoice](#enablecortanavoice) | X | | | | |
|
||||
| [Desktop > HideOobe](#hided) | X | | | | |
|
||||
| [Mobile > EnforceEnterpriseProvisioning](#nforce) | | X | | | |
|
||||
| [Mobile > HideOobe](#hidem) | | X | | | |
|
||||
| [Desktop > HideOobe](#hided) | X | | | | |
|
||||
|
||||
|
||||
|
||||
|
||||
## EnableCortanaVoice
|
||||
|
||||
Use this setting to control whether Cortana voice-over is enabled during OOBE. The voice-over is disabled by default on Windows 10 Pro, Education, and Enterprise. The voice-over is enabled by default on Windows 10 Home. Select **True** to enable voice-over during OOBE, or **False** to disable voice-over during OOBE.
|
||||
|
||||
<span id="hided" />
|
||||
## HideOobe for desktop
|
||||
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10.
|
||||
|
||||
>[!NOTE]
|
||||
>You must create a user account if you set the value to true or the device will not be usable.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
||||
|
||||
<span id="nforce" />
|
||||
## EnforceEnterpriseProvisioning
|
||||
@ -35,14 +52,4 @@ When set to **False**, it does not force the OOBE flow to the enterprise provisi
|
||||
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10 Mobile.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
||||
|
||||
<span id="hided" />
|
||||
## HideOobe for desktop
|
||||
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10.
|
||||
|
||||
>[!NOTE]
|
||||
>You must create a user account if you set the value to true or the device will not be usable.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
||||
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Policies (Windows Configuration Designer reference)
|
||||
@ -154,7 +153,7 @@ PreventTabPreloading | Prevent Microsoft Edge from starting and loading the Star
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [AllowCamera](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#camera-allowcamera) | Disable or enable the camera. | X | X | X | X | |
|
||||
| [AllowCamera](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#camera-allowcamera) | Disable or enable the camera. | X | X | X | | |
|
||||
|
||||
|
||||
## Connectivity
|
||||
@ -337,12 +336,46 @@ To configure multiple URLs for **Blocked URL Exceptions** or **Blocked URLs** in
|
||||
5. Open the project again in Windows Configuration Designer.
|
||||
6. Export the package. Ensure you do not revisit the created policies under Kiosk Browser or else the null character will be removed.
|
||||
|
||||
## LocalPoliciesSecurityOptions
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [InteractiveLogon_DoNotDisplayLastSignedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-interactivelogon-donotdisplaylastsignedin) | Specify whether the Windows sign-in screen will show the username of the last person who signed in. | X | | | | |
|
||||
| [Shutdown_AllowSystemtobeShutDownWithoutHavingToLogOn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-shutdown-allowsystemtobeshutdownwithouthavingtologon) | Specify whether a computer can be shut down without signing in. | X | | | | |
|
||||
| [UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-useraccountcontrol-behavioroftheelevationpromptforstandardusers) | Configure how an elevation prompt should behave for standard users. | X | | | | |
|
||||
|
||||
## Location
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [EnableLocation](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#location-enablelocation) | Do not use. | | | | | |
|
||||
|
||||
## Power
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [AllowStandbyStatesWhenSleepingOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#allowstandbystateswhensleepingonbattery) | Specify whether Windows can use standby states when putting the computer in a sleep state while on battery. | X | | | | |
|
||||
| [AllowStandbyWhenSleepingPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#allowstandbystateswhensleepingpluggedin) | Specify whether Windows can use standby states when putting the computer in a sleep state while plugged in. | X | | | | |
|
||||
| [DisplayOffTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#displayofftimeoutonbattery) | Specify the period of inactivity before Windows turns off the display while on battery. | X | | | | |
|
||||
| [DisplayOffTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#displayofftimeoutpluggedin) | Specify the period of inactivity before Windows turns off the display while plugged in. | X | | | | |
|
||||
| [EnergySaverBatteryThresholdOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#energysaverbatterythresholdonbattery) | Specify the battery charge level at which Energy Saver is turned on while on battery. | X | | | | |
|
||||
| [EnergySaverBatteryThresholdPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#EnergySaverBatteryThresholdPluggedIn) | Specify the battery charge level at which Energy Saver is turned on while plugged in. | X | | | | |
|
||||
| [HibernateTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#hibernatetimeoutonbattery) | Specify the period of inactivity before Windows transitions the system to hibernate while on battery. | X | | | | |
|
||||
| [HibernateTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#hibernatetimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to hibernate while plugged in. | X | | | | |
|
||||
| [RequirePasswordWhenComputerWakesOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#requirepasswordwhencomputerwakesonbattery) | Specify whether the user is prompted for a password when the system resumes from sleep while on battery. | X | | | | |
|
||||
| [RequirePasswordWhenComputerWakesPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#requirepasswordwhencomputerwakespluggedin) | Specify whether the user is prompted for a password when the system resumes from sleep while plugged in. | X | | | | |
|
||||
| [SelectLidCloseActionBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectlidcloseactionpluggedin) | Select the action to be taken when a user closes the lid on a mobile device while on battery. | X | | | | |
|
||||
| [SelectLidCloseActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectlidcloseactionpluggedin) | Select the action to be taken when a user closes the lid on a mobile device while on plugged in. | X | | | | |
|
||||
| [SelectPowerButtonActionOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectpowerbuttonactiononbattery) | Select the action to be taken when the user presses the power button while on battery. | X | | | | |
|
||||
| [SelectPowerButtonActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectpowerbuttonactionpluggedin) | Select the action to be taken when the user presses the power button while on plugged in. | X | | | | |
|
||||
| [SelectSleepButtonActionOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectsleepbuttonactiononbattery) | Select the action to be taken when the user presses the sleep button while on battery. | X | | | | |
|
||||
| [SelectSleepButtonActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectsleepbuttonactionpluggedin) | Select the action to be taken when the user presses the sleep button while plugged in. | X | | | | |
|
||||
| [StandbyTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#StandbyTimeoutOnBattery) | Specify the period of inactivity before Windows transitions the system to sleep while on battery. | X | | | | |
|
||||
| [StandbyTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#standbytimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to sleep while plugged in. | X | | | | |
|
||||
| [TurnOffHybridSleepOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#turnoffhybridsleeponbattery) | Turn off hybrid sleep while on battery. | X | | | | |
|
||||
| [TurnOffHybridSleepPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#turnoffhybridsleeppluggedin) | Turn off hybrid sleep while plugged in. | X | | | | |
|
||||
| [UnattendedSleepTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#unattendedsleeptimeoutonbattery) | Specify the period of inactivity before Windows transitions the system to sleep automatically when a user is not present while on battery. | X | | | | |
|
||||
| [UnattendedSleepTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#unattendedsleeptimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to sleep automatically when a user is not present while plugged in. | X | | | | |
|
||||
|
||||
## Privacy
|
||||
|
||||
@ -534,7 +567,7 @@ ConfigureTelemetryOptInSettingsUx | This policy setting determines whether peopl
|
||||
| [AllowInternetSharing](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowinternetsharing) | Allow Internet sharing. | X | X | | | |
|
||||
| [AllowManualWiFiConfiguration](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowmanualwificonfiguration) | Allow connecting to Wi-Fi outside of MDM server-installed networks. | | X | | | |
|
||||
| [AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowwifi) | Allow Wi-Fi connections. | | X | | | |
|
||||
| [WLANScanMode](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-wlanscanmode) | Configure the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. | X | X | X | X | X |
|
||||
| [WLANScanMode](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-wlanscanmode) | Configure the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. | X | X | X | | X |
|
||||
|
||||
## WindowsInkWorkspace
|
||||
|
||||
|
||||
29
windows/configuration/wcd/wcd-privacy.md
Normal file
29
windows/configuration/wcd/wcd-privacy.md
Normal file
@ -0,0 +1,29 @@
|
||||
---
|
||||
title: Privacy (Windows 10)
|
||||
description: This section describes the Privacy settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Privacy (Windows Configuration Designer reference)
|
||||
|
||||
Use **Privacy** to configure settings for app activation with voice.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | X | X | | X |
|
||||
|
||||
## LetAppsActivateWithVoice
|
||||
|
||||
Select between **User is in control**, **Force allow**, or **Force deny**.
|
||||
|
||||
## LetAppsActivateWithVoiceAboveLock
|
||||
|
||||
Select between **User is in control**, **Force allow**, or **Force deny**.
|
||||
24
windows/configuration/wcd/wcd-storaged3inmodernstandby.md
Normal file
24
windows/configuration/wcd/wcd-storaged3inmodernstandby.md
Normal file
@ -0,0 +1,24 @@
|
||||
---
|
||||
title: StorageD3InModernStandby (Windows 10)
|
||||
description: This section describes the StorageD3InModernStandby settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# StorageD3InModernStandby (Windows Configuration Designer reference)
|
||||
|
||||
Use **StorageD3InModernStandby** to enable or disable low power state (D3) during standby. When this setting is configured to **Enable Storage Device D3**, SATA and NVMe devices will be able to enter the D3 state when the system transits to modern standby state, if they are using a Microsoft inbox driver such as StorAHCI, StorNVMe.
|
||||
|
||||
[Learn more about device power states.](https://docs.microsoft.com/windows-hardware/drivers/kernel/device-power-states)
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | X | X | | X |
|
||||
|
||||
36
windows/configuration/wcd/wcd-time.md
Normal file
36
windows/configuration/wcd/wcd-time.md
Normal file
@ -0,0 +1,36 @@
|
||||
---
|
||||
title: Time (Windows 10)
|
||||
description: This section describes the Time settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Time
|
||||
|
||||
Use **Time** to configure settings for time zone setup for Windows 10, version (TBD) and later.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [ProvisionSetTimeZone](#provisionsettimezone) | X | | | | |
|
||||
|
||||
## ProvisionSetTimeZone
|
||||
|
||||
Set to **True** to skip time zone assignment when the first user signs in, in which case the device will remain in its default time zone. For the proper configuration, you should also use **Policies > TimeLanguageSettings > ConfigureTimeZone** to set the default time zone.
|
||||
|
||||
>[!TIP]
|
||||
>Configuring a time zone in **Policies > TimeLanguageSettings > ConfigureTimeZone** accomplishes the same purpose as setting **ProvisionSetTimeZone** to **True**, so you don't need to configure both settings.
|
||||
|
||||
Set to **False** for time zone assignment to occur when the first user signs in. The user will be prompted to select a time zone during first sign-in.
|
||||
|
||||
>[!NOTE]
|
||||
>Do not set **Time > ProvisionSetTimeZone** to **False** and also set a time zone in **Policies > TimeLanguageSettings > ConfigureTimeZone**.
|
||||
|
||||
|
||||
|
||||
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# WLAN (reference)
|
||||
|
||||
@ -24,34 +24,34 @@ This section describes the settings that you can configure in [provisioning pack
|
||||
| [ADMXIngestion](wcd-admxingestion.md) | X | | | | |
|
||||
| [AssignedAccess](wcd-assignedaccess.md) | X | | | X | |
|
||||
| [AutomaticTime](wcd-automatictime.md) | | X | | | |
|
||||
| [Browser](wcd-browser.md) | X | X | X | X | |
|
||||
| [Browser](wcd-browser.md) | X | X | X | | |
|
||||
| [CallAndMessagingEnhancement](wcd-callandmessagingenhancement.md) | | X | | | |
|
||||
| [Calling](wcd-calling.md) | | X | | | |
|
||||
| [CellCore](wcd-cellcore.md) | X | X | | | |
|
||||
| [Cellular](wcd-cellular.md) | X | | | | |
|
||||
| [Certificates](wcd-certificates.md) | X | X | X | X | X |
|
||||
| [CleanPC](wcd-cleanpc.md) | X | | | | |
|
||||
| [Connections](wcd-connections.md) | X | X | X | X | |
|
||||
| [Connections](wcd-connections.md) | X | X | X | | |
|
||||
| [ConnectivityProfiles](wcd-connectivityprofiles.md) | X | X | X | X | |
|
||||
| [CountryAndRegion](wcd-countryandregion.md) | X | X | X | X | |
|
||||
| [CountryAndRegion](wcd-countryandregion.md) | X | X | X | | |
|
||||
| [DesktopBackgroundAndColors](wcd-desktopbackgroundandcolors.md) | X | | | | |
|
||||
| [DeveloperSetup](wcd-developersetup.md) | | | | X | |
|
||||
| [DeviceFormFactor](wcd-deviceformfactor.md) | X | X | X | X | |
|
||||
| [DeviceFormFactor](wcd-deviceformfactor.md) | X | X | X | | |
|
||||
| [DeviceInfo](wcd-deviceinfo.md) | | X | | | |
|
||||
| [DeviceManagement](wcd-devicemanagement.md) | X | X | X | X | |
|
||||
| [DMClient](wcd-dmclient.md) | X | X | X | X | X |
|
||||
| [EditionUpgrade](wcd-editionupgrade.md) | X | X | X | X | |
|
||||
| [DeviceUpdateCenter](wcd-deviceupdatecenter.md) | X | | | | |
|
||||
| [DMClient](wcd-dmclient.md) | X | X | X | | X |
|
||||
| [EditionUpgrade](wcd-editionupgrade.md) | X | X | | X | |
|
||||
| [EmbeddedLockdownProfiles](wcd-embeddedlockdownprofiles.md) | | X | | | |
|
||||
| [FirewallConfiguration](wcd-firewallconfiguration.md) | | | | | X |
|
||||
| [FirstExperience](wcd-firstexperience.md) | | | | X | |
|
||||
| [Folders](wcd-folders.md) |X | X | X | X | |
|
||||
| [HotSpot](wcd-hotspot.md) | | | | | |
|
||||
| [Folders](wcd-folders.md) |X | X | X | | |
|
||||
| [InitialSetup](wcd-initialsetup.md) | | X | | | |
|
||||
| [InternetExplorer](wcd-internetexplorer.md) | | X | | | |
|
||||
| [KioskBrowser](wcd-kioskbrowser.md) | | | | | X |
|
||||
| [Licensing](wcd-licensing.md) | X | | | | |
|
||||
| [Location](wcd-location.md) | | | | | X |
|
||||
| [Maps](wcd-maps.md) |X | X | X | X | |
|
||||
| [Maps](wcd-maps.md) |X | X | X | | |
|
||||
| [Messaging](wcd-messaging.md) | | X | | | |
|
||||
| [ModemConfigurations](wcd-modemconfigurations.md) | | X | | | |
|
||||
| [Multivariant](wcd-multivariant.md) | | X | | | |
|
||||
@ -62,26 +62,29 @@ This section describes the settings that you can configure in [provisioning pack
|
||||
| [OtherAssets](wcd-otherassets.md) | | X | | | |
|
||||
| [Personalization](wcd-personalization.md) | X | | | | |
|
||||
| [Policies](wcd-policies.md) | X | X | X | X | X |
|
||||
| [Privacy](wcd-folders.md) |X | X | X | | X |
|
||||
| [ProvisioningCommands](wcd-provisioningcommands.md) | X | | | | |
|
||||
[RcsPresence](wcd-rcspresence.md) | | X | | | |
|
||||
| [RcsPresence](wcd-rcspresence.md) | | X | | | |
|
||||
| [SharedPC](wcd-sharedpc.md) | X | | | | |
|
||||
| [Shell](wcd-shell.md) | | X | | | |
|
||||
| [SMISettings](wcd-smisettings.md) | X | | | | |
|
||||
| [Start](wcd-start.md) | X | X | | | |
|
||||
| [StartupApp](wcd-startupapp.md) | | | | | X |
|
||||
| [StartupBackgroundTasks](wcd-startupbackgroundtasks.md) | | | | | X |
|
||||
| [StorageD3InModernStandby](wcd-storaged3inmodernstandby.md) |X | X | X | | X |
|
||||
| [SurfaceHubManagement](wcd-surfacehubmanagement.md) | | | X | | |
|
||||
| [TabletMode](wcd-tabletmode.md) |X | X | X | X | |
|
||||
| [TabletMode](wcd-tabletmode.md) |X | X | X | | |
|
||||
| [TakeATest](wcd-takeatest.md) | X | | | | |
|
||||
| [TextInput](wcd-textinput.md) | | X | | | |
|
||||
| [Theme](wcd-theme.md) | | X | | | |
|
||||
| [Time](wcd-time.md) | X | | | | |
|
||||
| [UnifiedWriteFilter](wcd-unifiedwritefilter.md) | X | | | | X |
|
||||
| [UniversalAppInstall](wcd-universalappinstall.md) | X | X | X | X | X |
|
||||
| [UniversalAppUninstall](wcd-universalappuninstall.md) | X | X | X | X | X |
|
||||
| [WeakCharger](wcd-weakcharger.md) |X | X | X | X | |
|
||||
| [UniversalAppInstall](wcd-universalappinstall.md) | X | X | X | | X |
|
||||
| [UniversalAppUninstall](wcd-universalappuninstall.md) | X | X | X | | X |
|
||||
| [UsbErrorsOEMOverride](wcd-usberrorsoemoverride.md) | X | X | X | | |
|
||||
| [WeakCharger](wcd-weakcharger.md) |X | X | X | | |
|
||||
| [WindowsHelloForBusiness](wcd-windowshelloforbusiness.md) | X | | | | |
|
||||
| [WindowsTeamSettings](wcd-windowsteamsettings.md) | | | X | | |
|
||||
| [WLAN](wcd-wlan.md) | | | | X | |
|
||||
| [Workplace](wcd-workplace.md) |X | X | X | X | X |
|
||||
| [Workplace](wcd-workplace.md) |X | X | X | | X |
|
||||
|
||||
|
||||
|
||||
@ -4,7 +4,7 @@
|
||||
## [What's new in Windows 10 deployment](deploy-whats-new.md)
|
||||
## [Windows 10 deployment scenarios](windows-10-deployment-scenarios.md)
|
||||
## [Windows Autopilot](windows-autopilot/windows-autopilot.md)
|
||||
## [Windows 10 Subscription Activation](windows-10-enterprise-subscription-activation.md)
|
||||
## [Windows 10 Subscription Activation](windows-10-subscription-activation.md)
|
||||
### [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md)
|
||||
### [Configure VDA for Subscription Activation](vda-subscription-activation.md)
|
||||
### [Deploy Windows 10 Enterprise licenses](deploy-enterprise-licenses.md)
|
||||
|
||||
@ -7,17 +7,13 @@ ms.mktglfcycl: deploy
|
||||
ms.localizationpriority: medium
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mdt
|
||||
ms.date: 05/25/2018
|
||||
author: greg-lindsay
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Deploy Windows 10 Enterprise licenses
|
||||
|
||||
>[!IMPORTANT]
|
||||
>Office 365 Enterprise E3 and Office 365 Enterprise E5 include a Windows 10 Enterprise license. This article is about the use and implementation of these licenses in a on-premises Active Directory environment.
|
||||
|
||||
This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with [Windows 10 Enterprise Subscription Activation](windows-10-enterprise-subscription-activation.md) or [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md) and Azure Active Directory (Azure AD).
|
||||
This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with [Windows 10 Enterprise Subscription Activation](windows-10-subscription-activation.md) or [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md) and Azure Active Directory (Azure AD).
|
||||
|
||||
>[!NOTE]
|
||||
>* Windows 10 Enterprise Subscription Activation (EA or MPSA) requires Windows 10 Pro, version 1703 or later.
|
||||
|
||||
@ -25,7 +25,7 @@ This topic provides an overview of new solutions and online content related to d
|
||||
|
||||
## Recent additions to this page
|
||||
|
||||
[SetupDiag](#setupdiag) 1.4 is released.<br>
|
||||
[SetupDiag](#setupdiag) 1.4.1 is released.<br>
|
||||
[MDT](#microsoft-deployment-toolkit-mdt) 8456 is released.<br>
|
||||
New [Windows Autopilot](#windows-autopilot) content is available.<br>
|
||||
The [Microsoft 365](#microsoft-365) section was added.
|
||||
@ -51,7 +51,7 @@ Microsoft is [extending support](https://www.microsoft.com/microsoft-365/blog/20
|
||||
|
||||
## Windows 10 Enterprise upgrade
|
||||
|
||||
Windows 10 version 1703 includes a Windows 10 Enterprise E3 and E5 benefit to Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & Services Agreements (MPSA). These customers can now subscribe users to Windows 10 Enterprise E3 or E5 and activate their subscriptions on up to five devices. Virtual machines can also be activated. For more information, see [Windows 10 Enterprise Subscription Activation](windows-10-enterprise-subscription-activation.md).
|
||||
Windows 10 version 1703 includes a Windows 10 Enterprise E3 and E5 benefit to Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & Services Agreements (MPSA). These customers can now subscribe users to Windows 10 Enterprise E3 or E5 and activate their subscriptions on up to five devices. Virtual machines can also be activated. For more information, see [Windows 10 Enterprise Subscription Activation](windows-10-subscription-activation.md).
|
||||
|
||||
Windows 10 Enterprise E3 launched in the Cloud Solution Provider (CSP) channel on September 1, 2016. Previously, only organizations with a Microsoft Volume Licensing Agreement could deploy Windows 10 Enterprise to their users. With Windows 10 Enterprise E3 in CSP, small and medium-sized organizations can more easily take advantage of Windows 10 Enterprise features.
|
||||
|
||||
@ -72,7 +72,7 @@ Recent Autopilot content includes new instructions for CSPs and OEMs on how to [
|
||||
|
||||
[SetupDiag](upgrade/setupdiag.md) is a standalone diagnostic tool that can be used to obtain details about why a Windows 10 upgrade was unsuccessful.
|
||||
|
||||
SetupDiag version 1.4 was released on 12/18/2018.
|
||||
SetupDiag version 1.4.1 was released on 5/17/2019.
|
||||
|
||||
### Upgrade Readiness
|
||||
|
||||
|
||||
BIN
windows/deployment/images/after.png
Normal file
BIN
windows/deployment/images/after.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 58 KiB |
BIN
windows/deployment/images/before.png
Normal file
BIN
windows/deployment/images/before.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 61 KiB |
BIN
windows/deployment/images/ent.png
Normal file
BIN
windows/deployment/images/ent.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 39 KiB |
@ -5,10 +5,11 @@
|
||||
## [Windows 10 infrastructure requirements](windows-10-infrastructure-requirements.md)
|
||||
|
||||
## Features removed or planned for replacement
|
||||
### [Windows 10, version 1903](windows-10-1903-removed-features.md)
|
||||
### [Windows 10, version 1809](windows-10-1809-removed-features.md)
|
||||
### [Windows 10, version 1803](windows-10-1803-removed-features.md)
|
||||
### [Windows 10, version 1709](windows-10-fall-creators-deprecation.md)
|
||||
### [Windows 10, version 1703](windows-10-creators-update-deprecation.md)
|
||||
### [Windows 10, version 1709](windows-10-1709-removed-features.md)
|
||||
### [Windows 10, version 1703](windows-10-1703-removed-features.md)
|
||||
|
||||
## [Application Compatibility Toolkit (ACT) Technical Reference](act-technical-reference.md)
|
||||
### [SUA User's Guide](sua-users-guide.md)
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Windows 10 Creators Update Deprecated Features
|
||||
description: Learn about features that were removed in Windows 10 Creators Update (version 1703)
|
||||
title: Windows 10, version 1703 removed features
|
||||
description: Learn about features that were removed in Windows 10, version 1703
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: plan
|
||||
ms.localizationpriority: medium
|
||||
@ -9,15 +9,15 @@ author: lizap
|
||||
ms.date: 10/09/2017
|
||||
ms.topic: article
|
||||
---
|
||||
# Features that are removed or deprecated in Windows 10 Creators Update
|
||||
# Features that are removed or deprecated in Windows 10, version 1703
|
||||
|
||||
> Applies to: Windows 10
|
||||
> Applies to: Windows 10, version 1703
|
||||
|
||||
The following features and functionalities in the Windows 10 Creators Update edition (Windows 10, version 1703) have either been removed from the product in the current release (*Removed*) or are not in active development and are planned for potential removal in subsequent releases (*Deprecated*).
|
||||
The following features and functionalities in the Windows 10 Creators Update edition (Windows 10, version 1703) have either been removed from the product in the current release (*Removed*) or are not in active development and are planned for potential removal in subsequent releases.
|
||||
|
||||
This list is intended for IT professionals who are updating operating systems in a commercial environment. The plan and list are subject to change and may not include every deprecated feature or functionality. For more details about a listed feature or functionality and its replacement, see the documentation for that feature.
|
||||
|
||||
| Feature | Removed | Deprecated |
|
||||
| Feature | Removed | Not actively developed |
|
||||
|------------|---------|------------|
|
||||
|Apndatabase.xml is being replaced by the COSA database. Therefore, some constructs will no longer function. This includes Hardware ID, incoming SMS messaging rules in mobile apps, a list of privileged apps in mobile apps, autoconnect order, APN parser, and CDMAProvider ID. | | X |
|
||||
|Apps Corner| | X |
|
||||
@ -1,25 +1,24 @@
|
||||
---
|
||||
title: Windows 10 Fall Creators Update Deprecated Features
|
||||
description: Learn about features that will be removed in Windows 10 Fall Creators Update (version 1709)
|
||||
title: Windows 10, version 1709 removed features
|
||||
description: Learn about features that will be removed in Windows 10, version 1709
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: plan
|
||||
ms.localizationpriority: medium
|
||||
ms.sitesec: library
|
||||
author: lizap
|
||||
ms.date: 10/30/2018
|
||||
author: greg-lindsay
|
||||
ms.topic: article
|
||||
---
|
||||
# Features that are removed or deprecated in Windows 10 Fall Creators Update
|
||||
# Features that are removed or deprecated in Windows 10, version 1709
|
||||
|
||||
> Applies to: Windows 10
|
||||
> Applies to: Windows 10, version 1709
|
||||
|
||||
The following features and functionalities in the Windows 10 Fall Creators Update (Windows 10, version 1709) are either removed from the product in the current release (*Removed*) or are not in active development and might be removed in future releases (*Deprecated*).
|
||||
The following features and functionalities in the Windows 10, version 1709 are either removed from the product in the current release (*Removed*) or are not in active development and might be removed in future releases.
|
||||
|
||||
This list is intended to help customers consider these removals and deprecations for their own planning. The list is subject to change and may not include every deprecated feature or functionality.
|
||||
|
||||
For more information about a listed feature or functionality and its replacement, see the documentation for that feature. You can also follow the provided links in this table to see additional resources.
|
||||
|
||||
| Feature | Removed | Deprecated |
|
||||
| Feature | Removed | Not actively developed |
|
||||
|----------|---------|------------|
|
||||
|**3D Builder app** <br> No longer installed by default. Consider using Print 3D and Paint 3D in its place. However, 3D Builder is still available for download from the Windows Store. | X | |
|
||||
|**Apndatabase.xml** <br> For more information about the replacement database, see the following Hardware Dev Center articles: <br> [MO Process to update COSA](/windows-hardware/drivers/mobilebroadband/planning-your-apn-database-submission) <br> [COSA FAQ](/windows-hardware/drivers/mobilebroadband/cosa---faq) | X | |
|
||||
@ -33,7 +33,7 @@ We've removed the following features and functionalities from the installed prod
|
||||
|Language control in the Control Panel| Use the Settings app to change your language settings.|
|
||||
|HomeGroup|We are removing [HomeGroup](https://support.microsoft.com/help/17145) but not your ability to share printers, files, and folders.<br><br>When you update to Windows 10, version 1803, you won't see HomeGroup in File Explorer, the Control Panel, or Troubleshoot (**Settings > Update & Security > Troubleshoot**). Any printers, files, and folders that you shared using HomeGroup **will continue to be shared**.<br><br>Instead of using HomeGroup, you can now share printers, files and folders by using features that are built into Windows 10: <br>- [Share your network printer](https://www.bing.com/search?q=share+printer+windows+10) <br>- [Share files in File Explorer](https://support.microsoft.com/help/4027674/windows-10-share-files-in-file-explorer) |
|
||||
|**Connect to suggested open hotspots** option in Wi-Fi settings |We previously [disabled the **Connect to suggested open hotspots** option](https://privacy.microsoft.com/windows-10-open-wi-fi-hotspots) and are now removing it from the Wi-Fi settings page. You can manually connect to free wireless hotspots with **Network & Internet** settings, from the taskbar or Control Panel, or by using Wi-Fi Settings (for mobile devices).|
|
||||
|XPS Viewer|We're changing the way you get XPS Viewer. In Windows 10, version 1709 and earlier versions, the app is included in the installation image. <br><br>However, if you install Windows 10, version 1803, you may need to [install XPS Viewer from **Apps and Features** in the Settings app](https://docs.microsoft.com/windows/application-management/add-apps-and-features) or through [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). If you had XPS Viewer in Windows 10, version 1709, but manually removed it before updating, you'll need to manually reinstall it.|
|
||||
|XPS Viewer|We're changing the way you get XPS Viewer. In Windows 10, version 1709 and earlier versions, the app is included in the installation image. If you have XPS Viewer and you update to Windows 10, version 1803, there's no action required. You'll still have XPS Viewer. <br><br>However, if you install Windows 10, version 1803, on a new device (or as a clean installation), you may need to [install XPS Viewer from **Apps and Features** in the Settings app](https://docs.microsoft.com/windows/application-management/add-apps-and-features) or through [Features on Demand](https://docs.microsoft.com/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). If you had XPS Viewer in Windows 10, version 1709, but manually removed it before updating, you'll need to manually reinstall it.|
|
||||
|
||||
|
||||
## Features we’re no longer developing
|
||||
|
||||
@ -0,0 +1,41 @@
|
||||
---
|
||||
title: Windows 10, version 1903 - Features that have been removed
|
||||
description: Learn about features that will be removed or deprecated in Windows 10, version 1903, or a future release
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: plan
|
||||
ms.localizationpriority: medium
|
||||
ms.sitesec: library
|
||||
author: greg-lindsay
|
||||
ms.author: greglin
|
||||
ms.topic: article
|
||||
---
|
||||
# Features removed or planned for replacement starting with Windows 10, version 1903
|
||||
|
||||
> Applies to: Windows 10, version 1903
|
||||
|
||||
Each version of Windows 10 adds new features and functionality; occasionally we also remove features and functionality, often because we've added a better option. Below are the details about the features and functionalities that we removed in Windows 10, version 1903. **The list below is subject to change and might not include every affected feature or functionality.**
|
||||
|
||||
**Note**: Join the [Windows Insider program](https://insider.windows.com) to get early access to new Windows 10 builds and test these changes yourself.
|
||||
|
||||
## Features we removed or will remove soon
|
||||
|
||||
The following features and functionalities are removed from the installed product image for Windows 10, version 1903, or are planned for removal in an upcoming release. Applications or code that depend on these features won't function in this release unless you use another method.
|
||||
|
||||
|Feature |Details|
|
||||
|-----------|--------------------|---------
|
||||
|XDDM-based remote display driver|Starting with this release the Remote Desktop Services uses a Windows Display Driver Model (WDDM) based Indirect Display Driver (IDD) for a single session remote desktop. The support for Windows 2000 Display Driver Model (XDDM) based remote display drivers will be removed in a future release. Independent Software Vendors that use XDDM-based remote display driver should plan a migration to the WDDM driver model. For more information on implementing remote indirect display driver ISVs can reach out to [rdsdev@microsoft.com](mailto:rdsdev@microsoft.com).
|
||||
| Desktop messaging app doesn't offer messages sync| The messaging app on Desktop has a sync feature that can be used to sync SMS text messages received from Windows Mobile and keep a copy of them on the Desktop. The sync feature has been removed from all devices. Due to this change, you will only be able to access messages from the device that received the message. |
|
||||
|
||||
## Features we’re no longer developing
|
||||
|
||||
We're no longer actively developing these features and may remove them from a future update. Some features have been replaced with other features or functionality, while others are now available from different sources.
|
||||
|
||||
If you have feedback about the proposed replacement of any of these features, you can use the [Feedback Hub app](https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app).
|
||||
|
||||
|Feature |Details|
|
||||
|-----------|---------------------|
|
||||
| Taskbar settings roaming| Roaming of taskbar settings is no longer being developed and we plan to disable this capability in a future release|
|
||||
|Wi-Fi WEP and TKIP|In this release a warning message will appear when connecting to Wi-Fi networks secured with WEP or TKIP, which are not as secure as those using WPA2 or WPA3. In a future release, any connection to a Wi-Fi network using these old ciphers will be disallowed. Wi-Fi routers should be updated to use AES ciphers, available with WPA2 or WPA3. |
|
||||
|Windows To Go|Windows To Go is no longer being developed. <br><br>The feature does not support feature updates and therefore does not enable you to stay current. It also requires a specific type of USB that is no longer supported by many OEMs.|
|
||||
|Print 3D app|Going forward, 3D Builder is the recommended 3D printing app. To 3D print objects on new Windows devices, customers must first install 3D Builder from the Store.|
|
||||
|
||||
@ -32,3 +32,16 @@ Refer to the following list for what each state means:
|
||||
* Devices that have failed the given feature update installation are counted as **Update failed**.
|
||||
* If a device should be, in some way, progressing toward this security update, but its status cannot be inferred, it will count as **Status Unknown**. Devices not using Windows Update are the most likely devices to fall into this category.
|
||||
|
||||
## Compatibility holds
|
||||
|
||||
Microsoft uses diagnostic data to determine whether devices that use Windows Update are ready for a feature update in order to ensure a smooth experience. When Microsoft determines a device is not ready to update due to a known issue, a *compatibility hold* is generated to delay the device’s upgrade and safeguard the end-user experience. Holds are released over time as diagnostic data is analyzed and fixes are addressed. Details are provided on some, but not all compatibility holds on the Windows 10 release information page for any given release.
|
||||
|
||||
To learn how compatibility holds are reflected in the experience, see [Update compliance perspectives](update-compliance-perspectives.md#deployment-status).
|
||||
|
||||
### Opting out of compatibility hold
|
||||
|
||||
Microsoft will release a device from a compatibility hold when it has determined it can safely and smoothly install a feature update, but you are ultimately in control of your devices and can opt out if desired. To opt out, set the registry key **HKLM\Software\Microsoft\Windows NT\CurrentVersion\502505fe-762c-4e80-911e-0c3fa4c63fb0** to a name of **DataRequireGatedScanForFeatureUpdates** and a value of **0**.
|
||||
|
||||
|
||||
Setting this registry key to **0** will force the device to opt out from *all* compatibility holds. Any other value, or deleting the key, will resume compatibility protection on the device.
|
||||
|
||||
|
||||
@ -23,6 +23,8 @@ The first blade is the **Build Summary** blade. This blade summarizes the most i
|
||||
|
||||
The second blade is the **Deferral Configurations** blade, breaking down Windows Update for Business deferral settings (if any).
|
||||
|
||||
## Deployment status
|
||||
|
||||
The third blade is the **Deployment Status** blade. This defines how many days it has been since the queried version has been released, and breaks down the various states in the update funnel each device has reported to be in. The possible states are as follows:
|
||||
|
||||
| State | Description |
|
||||
@ -35,6 +37,9 @@ The third blade is the **Deployment Status** blade. This defines how many days i
|
||||
| Blocked | There is a hard block on the update being completed. This could be that another update must be completed before this one, or some other task is blocking the installation of the update. |
|
||||
| Unknown | Devices that do not report detailed information on the status of their updates will report Unknown. This is most likely devices that do not use Windows Update for deployment. |
|
||||
| Update paused | These devices have Windows Update for Business pause enabled, preventing this update from being installed. |
|
||||
| Failed | A device is unable to install an update. This failure could be linked to a serious error in the update installation process or, in some cases, a [compatibility hold](update-compliance-feature-update-status.md#compatibility-holds). |
|
||||
|
||||
## Detailed deployment status
|
||||
|
||||
The final blade is the **Detailed Deployment Status** blade. This blade breaks down the detailed stage of deployment a device is in, beyond the generalized terms defined in Deployment Status. The following are the possible stages a device can report:
|
||||
|
||||
@ -44,6 +49,7 @@ The final blade is the **Detailed Deployment Status** blade. This blade breaks d
|
||||
| Update paused | The device’s Windows Update for Business policy dictates the update is paused from being offered. |
|
||||
| Update offered | The device has been offered the update, but has not begun downloading it. |
|
||||
| Pre-Download tasks passed | The device has finished all necessary tasks prior to downloading the update. |
|
||||
| Compatibility hold | The device has been placed under a *compatibility hold* to ensure a smooth feature update experience and will not resume the update until the hold has been cleared. For more information see [Feature Update Status report](update-compliance-feature-update-status.md#compatibility-holds) |
|
||||
| Download Started | The update has begun downloading on the device. |
|
||||
| Download Succeeded | The update has successfully completed downloading. |
|
||||
| Pre-Install Tasks Passed | Tasks that must be completed prior to installing the update have been completed. |
|
||||
|
||||
@ -7,7 +7,6 @@ ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: deploy
|
||||
author: greg-lindsay
|
||||
ms.date: 12/18/2018
|
||||
ms.localizationpriority: medium
|
||||
ms.topic: article
|
||||
---
|
||||
@ -25,7 +24,7 @@ ms.topic: article
|
||||
|
||||
## About SetupDiag
|
||||
|
||||
<I>Current version of SetupDiag: 1.4.0.0</I>
|
||||
<I>Current version of SetupDiag: 1.4.1.0</I>
|
||||
|
||||
SetupDiag is a standalone diagnostic tool that can be used to obtain details about why a Windows 10 upgrade was unsuccessful.
|
||||
|
||||
@ -64,8 +63,9 @@ The [Release notes](#release-notes) section at the bottom of this topic has info
|
||||
| /Output:\<path to results file\> | <ul><li>This optional parameter enables you to specify the output file for results. This is where you will find what SetupDiag was able to determine. Only text format output is supported. UNC paths will work, provided the context under which SetupDiag runs has access to the UNC path. If the path has a space in it, you must enclose the entire path in double quotes (see the example section below). <li>Default: If not specified, SetupDiag will create the file **SetupDiagResults.log** in the same directory where SetupDiag.exe is run.</ul> |
|
||||
| /LogsPath:\<Path to logs\> | <ul><li>This optional parameter tells SetupDiag.exe where to find the log files for an offline analysis. These log files can be in a flat folder format, or containing multiple subdirectories. SetupDiag will recursively search all child directories.</ul> |
|
||||
| /ZipLogs:\<True \| False\> | <ul><li>This optional parameter tells SetupDiag.exe to create a zip file containing the results and all the log files it parsed. The zip file is created in the same directory where SetupDiag.exe is run.<li>Default: If not specified, a value of 'true' is used.</ul> |
|
||||
| /Verbose | <ul><li>This optional parameter will output much more data to a log file. By default, SetupDiag will only produce a log file entry for serious errors. Using **/Verbose** will cause SetupDiag to always produce an additional log file with debugging details. These details can be useful when reporting a problem with SetupDiag.</ul> |
|
||||
| /Format:\<xml \| json\> | <ul><li>This optional parameter can be used to output log files in xml or JSON format. If this parameter is not specified, text format is used by default.</ul> |
|
||||
| /Scenario:\[Recovery\] | This optional parameter instructs SetupDiag.exe to look for and process reset and recovery logs and ignore setup/upgrade logs.|
|
||||
| /Verbose | <ul><li>This optional parameter will output much more data to a log file. By default, SetupDiag will only produce a log file entry for serious errors. Using **/Verbose** will cause SetupDiag to always produce an additional log file with debugging details. These details can be useful when reporting a problem with SetupDiag.</ul> |
|
||||
| /NoTel | <ul><li>This optional parameter tells SetupDiag.exe not to send diagnostic telemetry to Microsoft.</ul> |
|
||||
|
||||
Note: The **/Mode** parameter is deprecated in version 1.4.0.0 of SetupDiag.
|
||||
@ -97,6 +97,19 @@ The following example specifies that SetupDiag is to run in offline mode, and to
|
||||
SetupDiag.exe /Output:C:\SetupDiag\Results.log /LogsPath:D:\Temp\Logs\LogSet1
|
||||
```
|
||||
|
||||
The following example sets recovery scenario in offline mode. In the example, SetupDiag will search for reset/recovery logs in the specified LogsPath location and output the resuts to the directory specified by the /Output parameter.
|
||||
|
||||
```
|
||||
SetupDiag.exe /Output:C:\SetupDiag\RecoveryResults.log /LogsPath:D:\Temp\Cabs\PBR_Log /Scenario:Recovery
|
||||
```
|
||||
|
||||
The following example sets recovery scenario in online mode. In the example, SetupDiag will search for reset/recovery logs on the current system and output results in XML format.
|
||||
|
||||
```
|
||||
SetupDiag.exe /Scenario:Recovery /Format:xml
|
||||
```
|
||||
|
||||
|
||||
## Log files
|
||||
|
||||
[Windows Setup Log Files and Event Logs](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-log-files-and-event-logs) has information about where logs are created during Windows Setup. For offline processing, you should run SetupDiag against the contents of the entire folder. For example, depending on when the upgrade failed, copy one of the following folders to your offline location:
|
||||
@ -141,7 +154,7 @@ The output also provides an error code 0xC1900208 - 0x4000C which corresponds to
|
||||
```
|
||||
C:\SetupDiag>SetupDiag.exe /Output:C:\SetupDiag\Results.log /LogsPath:C:\Temp\BobMacNeill
|
||||
|
||||
SetupDiag v1.4.0.0
|
||||
SetupDiag v1.4.1.0
|
||||
Copyright (c) Microsoft Corporation. All rights reserved.
|
||||
|
||||
Searching for setup logs, this can take a minute or more depending on the number and size of the logs...please wait.
|
||||
@ -397,6 +410,9 @@ Each rule name and its associated unique rule identifier are listed with a descr
|
||||
|
||||
## Release notes
|
||||
|
||||
05/17/2019 - SetupDiag v1.4.1.0 is released with 53 rules, as a standalone tool available from the Download Center.
|
||||
- This release dds the ability to find and diagnose reset and recovery failures (Push Button Reset).
|
||||
|
||||
12/18/2018 - SetupDiag v1.4.0.0 is released with 53 rules, as a standalone tool available from the Download Center.
|
||||
- This release includes major improvements in rule processing performance: ~3x faster rule processing performance!
|
||||
- The FindDownlevelFailure rule is up to 10x faster.
|
||||
|
||||
@ -7,7 +7,6 @@ ms.mktglfcycl: deploy
|
||||
ms.localizationpriority: medium
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mdt
|
||||
ms.date: 05/17/2018
|
||||
author: greg-lindsay
|
||||
ms.topic: article
|
||||
ms.collection: M365-modern-desktop
|
||||
@ -15,7 +14,7 @@ ms.collection: M365-modern-desktop
|
||||
|
||||
# Configure VDA for Windows 10 Subscription Activation
|
||||
|
||||
This document describes how to configure virtual machines (VMs) to enable [Windows 10 Subscription Activation](windows-10-enterprise-subscription-activation.md) in a Windows Virtual Desktop Access (VDA) scenario. Windows VDA is a device or user-based licensing mechanism for managing access to virtual desktops.
|
||||
This document describes how to configure virtual machines (VMs) to enable [Windows 10 Subscription Activation](windows-10-subscription-activation.md) in a Windows Virtual Desktop Access (VDA) scenario. Windows VDA is a device or user-based licensing mechanism for managing access to virtual desktops.
|
||||
|
||||
Deployment instructions are provided for the following scenarios:
|
||||
1. [Active Directory-joined VMs](#active-directory-joined-vms)
|
||||
@ -40,7 +39,7 @@ Deployment instructions are provided for the following scenarios:
|
||||
### Scenario 2
|
||||
- The Hyper-V host and the VM are both running Windows 10, version 1803 or later.
|
||||
|
||||
[Inherited Activation](https://docs.microsoft.com/windows/deployment/windows-10-enterprise-subscription-activation#inherited-activation) is enabled. All VMs created by a user with a Windows 10 E3 or E5 license are automatically activated independent of whether a user signs in iwth a local account or using an Azure Active Directory account.
|
||||
[Inherited Activation](https://docs.microsoft.com/windows/deployment/windows-10-subscription-activation#inherited-activation) is enabled. All VMs created by a user with a Windows 10 E3 or E5 license are automatically activated independent of whether a user signs in iwth a local account or using an Azure Active Directory account.
|
||||
|
||||
### Scenario 3
|
||||
- The VM is running Windows 10, version 1703 or 1709, or the hoster is not an authorized [QMTH](https://www.microsoft.com/en-us/CloudandHosting/licensing_sca.aspx) partner.
|
||||
@ -88,13 +87,13 @@ For examples of activation issues, see [Troubleshoot the user experience](https:
|
||||
## Azure Active Directory-joined VMs
|
||||
|
||||
>[!IMPORTANT]
|
||||
>Azure Active Directory (Azure AD) provisioning packages have a 30 day limit on bulk token usage. You will need to update the provisioning package and re-inject it into the image after 30 days. Existing virtual machines that are Azure AD-joined and deployed will not need to be recreated.
|
||||
>Azure Active Directory (Azure AD) provisioning packages have a 180 day limit on bulk token usage. You will need to update the provisioning package and re-inject it into the image after 180 days. Existing virtual machines that are Azure AD-joined and deployed will not need to be recreated.
|
||||
|
||||
For Azure AD-joined VMs, follow the same instructions (above) as for [Active Directory-joined VMs](#active-directory-joined-vms) with the following exceptions:
|
||||
- In step 9, during setup with Windows Configuration Designer, under **Name**, type a name for the project that indicates it is not for Active Directory joined VMs, such as **Desktop Bulk Enrollment Token Pro GVLK**.
|
||||
- In step 11, during setup with Windows Configuration Designer, on the Account Management page, instead of enrolling in Active Directory, choose **Enroll in Azure AD**, click **Get Bulk Token**, sign in and add the bulk token using your organization's credentials.
|
||||
- In step 15, sub-step 2, when entering the PackagePath, use the project name you entered in step 9 (ex: **Desktop Bulk Enrollment Token Pro GVLK.ppkg**)
|
||||
- When attempting to access the VM using remote desktop, you will need to create a custom RDP settings file as described below in [Create custom RDP settings for Azure](#create-custom-rpd-settings-for-azure).
|
||||
- When attempting to access the VM using remote desktop, you will need to create a custom RDP settings file as described below in [Create custom RDP settings for Azure](#create-custom-rdp-settings-for-azure).
|
||||
|
||||
## Azure Gallery VMs
|
||||
|
||||
@ -120,7 +119,7 @@ For Azure AD-joined VMs, follow the same instructions (above) as for [Active Dir
|
||||
13. On the Finish page, click **Create**.
|
||||
14. Copy the .ppkg file to the remote Virtual machine. Double click to initiate the provisioning package install. This will reboot the system.
|
||||
|
||||
- When attempting to access the VM using remote desktop, you will need to create a custom RDP settings file as described [below](#create-custom-rpd-settings-for-azure).
|
||||
- When attempting to access the VM using remote desktop, you will need to create a custom RDP settings file as described [below](#create-custom-rdp-settings-for-azure).
|
||||
|
||||
## Create custom RDP settings for Azure
|
||||
|
||||
@ -141,7 +140,7 @@ To create custom RDP settings for Azure:
|
||||
|
||||
## Related topics
|
||||
|
||||
[Windows 10 Subscription Activation](windows-10-enterprise-subscription-activation.md)
|
||||
[Windows 10 Subscription Activation](windows-10-subscription-activation.md)
|
||||
<BR>[Recommended settings for VDI desktops](https://docs.microsoft.com/windows-server/remote/remote-desktop-services/rds-vdi-recommendations)
|
||||
<BR>[Licensing the Windows Desktop for VDI Environments](https://download.microsoft.com/download/1/1/4/114A45DD-A1F7-4910-81FD-6CAF401077D0/Microsoft%20VDI%20and%20VDA%20FAQ%20v3%200.pdf)
|
||||
|
||||
|
||||
@ -249,7 +249,7 @@ The Managed User Experience feature is a set of Windows 10 Enterprise edition f
|
||||
|
||||
## Related topics
|
||||
|
||||
[Windows 10 Enterprise Subscription Activation](windows-10-enterprise-subscription-activation.md)
|
||||
[Windows 10 Enterprise Subscription Activation](windows-10-subscription-activation.md)
|
||||
<BR>[Connect domain-joined devices to Azure AD for Windows 10 experiences](https://azure.microsoft.com/documentation/articles/active-directory-azureadjoin-devices-group-policy/)
|
||||
<BR>[Compare Windows 10 editions](https://www.microsoft.com/WindowsForBusiness/Compare)
|
||||
<BR>[Windows for business](https://www.microsoft.com/windowsforbusiness/default.aspx)
|
||||
|
||||
@ -7,7 +7,6 @@ ms.sitesec: library
|
||||
ms.pagetype: deploy
|
||||
keywords: deployment, automate, tools, configure, mdt, sccm
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 11/16/2017
|
||||
author: greg-lindsay
|
||||
ms.topic: article
|
||||
---
|
||||
@ -57,7 +56,7 @@ Topics and procedures in this guide are summarized in the following table. An es
|
||||
<tr><td>[Convert PC to VM](#convert-pc-to-vm)<td>Convert a physical computer on your network to a VM hosted in Hyper-V.<td>30 minutes
|
||||
<tr><td>[Resize VHD](#resize-vhd)<td>Increase the storage capacity for one of the Windows Server VMs.<td>5 minutes
|
||||
<tr><td>[Configure Hyper-V](#configure-hyper-v)<td>Create virtual switches, determine available RAM for virtual machines, and add virtual machines.<td>15 minutes
|
||||
<tr><td>[Configure service and user accounts](#configure-service-and-user-accounts)<td>Start virtual machines and configure all services and settings.<td>60 minutes
|
||||
<tr><td>[Configure service and user accounts](#configure-vms)<td>Start virtual machines and configure all services and settings.<td>60 minutes
|
||||
<tr><td>[Configure VMs](#configure-vms)<td>Start virtual machines and configure all services and settings.<td>60 minutes
|
||||
<tr><td>[Appendix A: Verify the configuration](#appendix-a-verify-the-configuration)<td>Verify and troubleshoot network connectivity and services in the PoC environment.<td>30 minutes
|
||||
<tr><td>[Appendix B: Terminology in this guide](#appendix-b-terminology-used-in-this-guide)<td>Terms used in this guide.<td>Informational
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Windows 10 Subscription Activation
|
||||
description: How to enable Windows 10 Enterprise E3 and E5 subscriptions
|
||||
description: How to dynamically enable Windows 10 Enterprise or Educations subscriptions
|
||||
keywords: upgrade, update, task sequence, deploy
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
@ -16,20 +16,33 @@ ms.topic: article
|
||||
|
||||
# Windows 10 Subscription Activation
|
||||
|
||||
With Windows 10 version 1703 (also known as the Creator’s Update), both Windows 10 Enterprise E3 and Windows 10 Enterprise E5 are available as online services via subscription. Deploying [Windows 10 Enterprise](planning/windows-10-enterprise-faq-itpro.md) in your organization can now be accomplished with no keys and no reboots.
|
||||
Starting with Windows 10, version 1703 Windows 10 Pro supports the Subscription Activation feature, enabling users to “step-up” from Windows 10 Pro to **Windows 10 Enterprise** automatically if they are subscribed to Windows 10 Enterprise E3 or E5.
|
||||
|
||||
If you are running Windows 10 version 1703 or later:
|
||||
With Windows 10, version 1903 the Subscription Activation feature also supports the ability to step-up from Windows 10 Pro Education to the Enterprise grade edition for educational institutions – **Windows 10 Education**.
|
||||
|
||||
The Subscription Activation feature eliminates the need to manually deploy Windows 10 Enterprise or Education images on each target device, then later standing up on-prem key management services such as KMS or MAK based activation, entering GVLKs, and subsequently rebooting client devices.
|
||||
|
||||
## Subscription Activation for Windows 10 Enterprise
|
||||
|
||||
With Windows 10, version 1703 both Windows 10 Enterprise E3 and Windows 10 Enterprise E5 are available as online services via subscription. Deploying [Windows 10 Enterprise](planning/windows-10-enterprise-faq-itpro.md) in your organization can now be accomplished with no keys and no reboots.
|
||||
|
||||
If you are running Windows 10, version 1703 or later:
|
||||
|
||||
- Devices with a current Windows 10 Pro license can be seamlessly upgraded to Windows 10 Enterprise.
|
||||
- Product key-based Windows 10 Enterprise software licenses can be transitioned to Windows 10 Enterprise subscriptions.
|
||||
|
||||
Organizations that have an Enterprise agreement can also benefit from the new service, using traditional Active Directory-joined devices. In this scenario, the Active Directory user that signs in on their device must be synchronized with Azure AD using [Azure AD Connect Sync](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-whatis).
|
||||
|
||||
See the following topics in this article:
|
||||
## Subscription Activation for Windows 10 Education
|
||||
|
||||
Subscription Activation for Education works the same as the Enterprise version, but in order to use Subscription Activation for Education, you must have a device running Windows 10 Pro Education, version 1903 or later and an active subscription plan with a Windows 10 Enterprise license. For more information, see the [requirements](#windows-10-education-requirements) section.
|
||||
|
||||
## In this article
|
||||
|
||||
- [Inherited Activation](#inherited-activation): Description of a new feature available in Windows 10, version 1803 and later.
|
||||
- [The evolution of Windows 10 deployment](#the-evolution-of-deployment): A short history of Windows deployment.
|
||||
- [Requirements](#requirements): Prerequisites to use the Windows 10 Enterprise subscription model.
|
||||
- [Benefits](#benefits): Advantages of Windows 10 Enterprise + subscription-based licensing.
|
||||
- [Requirements](#requirements): Prerequisites to use the Windows 10 Subscription Activation model.
|
||||
- [Benefits](#benefits): Advantages of Windows 10 subscription-based licensing.
|
||||
- [How it works](#how-it-works): A summary of the subscription-based licensing option.
|
||||
- [Virtual Desktop Access (VDA)](#virtual-desktop-access-vda): Enable Windows 10 Subscription Activation for VMs in the cloud.
|
||||
|
||||
@ -39,7 +52,7 @@ For information on how to deploy Windows 10 Enterprise licenses, see [Deploy Win
|
||||
|
||||
Inherited Activation is a new feature available in Windows 10, version 1803 that allows Windows 10 virtual machines to inherit activation state from their Windows 10 host.
|
||||
|
||||
When a user with Windows 10 E3 or E5 license assigned creates a new Windows 10 virtual machine (VM) using a Windows 10 local host, the VM inherits the activation state from a host machine independent of whether user signs on with a local account or using an Azure Active Directory (AAD) account on a VM.
|
||||
When a user with Windows 10 E3/E5 or A3/A5 license assigned creates a new Windows 10 virtual machine (VM) using a Windows 10 local host, the VM inherits the activation state from a host machine independent of whether user signs on with a local account or using an Azure Active Directory (AAD) account on a VM.
|
||||
|
||||
To support Inherited Activation, both the host computer and the VM must be running Windows 10, version 1803 or later.
|
||||
|
||||
@ -53,14 +66,17 @@ The following figure illustrates how deploying Windows 10 has evolved with each
|
||||
|
||||
- **Windows 7** required you to redeploy the operating system using a full wipe-and-load process if you wanted to change from Windows 7 Professional to Windows 10 Enterprise.<br>
|
||||
- **Windows 8.1** added support for a Windows 8.1 Pro to Windows 8.1 Enterprise in-place upgrade (considered a “repair upgrade” because the OS version was the same before and after). This was a lot easier than wipe-and-load, but it was still time-consuming.<br>
|
||||
- **Windows 10 1507** added the ability to install a new product key using a provisioning package or using MDM to change the SKU. This required a reboot, which would install the new OS components, and took several minutes to complete. However, it was a lot quicker than in-place upgrade.<br>
|
||||
- **Windows 10 1607** made a big leap forward. Now you can just change the product key and the SKU instantly changes from Windows 10 Pro to Windows 10 Enterprise. In addition to provisioning packages and MDM, you can just inject a key using SLMGR.VBS (which injects the key into WMI), so it became trivial to do this using a command line.<br>
|
||||
- **Windows 10 1703** made this “step-up” from Windows 10 Pro to Windows 10 Enterprise automatic for those that subscribed to Windows 10 Enterprise E3 or E5 via the CSP program.<br>
|
||||
- **Windows 10 1709** adds support for Windows 10 Subscription Activation, very similar to the CSP support but for large enterprises, enabling the use of Azure AD for assigning licenses to users. When those users sign in on an AD or Azure AD-joined machine, it automatically steps up from Windows 10 Pro to Windows 10 Enterprise.
|
||||
- **Windows 10 1803** updates Windows 10 Subscription Activation to enable pulling activation keys directly from firmware for devices that support firmware-embedded keys. It is no longer necessary to run a script to perform the activation step on Windows 10 Pro prior to activating Enterprise. For virtual machines and hosts running Windows 10, version 1803 [Inherited Activation](#inherited-activation) is also enabled.
|
||||
- **Windows 10, version 1507** added the ability to install a new product key using a provisioning package or using MDM to change the SKU. This required a reboot, which would install the new OS components, and took several minutes to complete. However, it was a lot quicker than in-place upgrade.<br>
|
||||
- **Windows 10, version 1607** made a big leap forward. Now you can just change the product key and the SKU instantly changes from Windows 10 Pro to Windows 10 Enterprise. In addition to provisioning packages and MDM, you can just inject a key using SLMGR.VBS (which injects the key into WMI), so it became trivial to do this using a command line.<br>
|
||||
- **Windows 10, version 1703** made this “step-up” from Windows 10 Pro to Windows 10 Enterprise automatic for those that subscribed to Windows 10 Enterprise E3 or E5 via the CSP program.<br>
|
||||
- **Windows 10, version 1709** adds support for Windows 10 Subscription Activation, very similar to the CSP support but for large enterprises, enabling the use of Azure AD for assigning licenses to users. When those users sign in on an AD or Azure AD-joined machine, it automatically steps up from Windows 10 Pro to Windows 10 Enterprise.<br>
|
||||
- **Windows 10, version 1803** updates Windows 10 Subscription Activation to enable pulling activation keys directly from firmware for devices that support firmware-embedded keys. It is no longer necessary to run a script to perform the activation step on Windows 10 Pro prior to activating Enterprise. For virtual machines and hosts running Windows 10, version 1803 [Inherited Activation](#inherited-activation) is also enabled.<br>
|
||||
- **Windows 10, version 1903** updates Windows 10 Subscription Activation to enable step up from Windows 10 Pro Education to Windows 10 Education for those with a qualifying Windows 10 or Microsoft 365 subscription.
|
||||
|
||||
## Requirements
|
||||
|
||||
### Windows 10 Enterprise requirements
|
||||
|
||||
For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & Services Agreements (MPSA), you must have the following:
|
||||
|
||||
- Windows 10 (Pro or Enterprise) version 1703 or later installed on the devices to be upgraded.
|
||||
@ -70,33 +86,62 @@ For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products &
|
||||
>[!NOTE]
|
||||
>An issue has been identified with Hybrid Azure AD joined devices that have enabled [multi-factor authentication](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfa-getstarted) (MFA). If a user signs into a device using their Active Directory account and MFA is enabled, the device will not successfully upgrade to their Windows Enterprise subscription. To resolve this issue, the user must either sign in with an Azure Active Directory account, or you must disable MFA for this user during the 30-day polling period and renewal.
|
||||
|
||||
For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3 or E5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md).
|
||||
For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3/E5 or A3/A5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md).
|
||||
|
||||
If devices are running Windows 7 or Windows 8.1, see [New Windows 10 upgrade benefits for Windows Cloud Subscriptions in CSP](https://blogs.windows.com/business/2017/01/19/new-windows-10-upgrade-benefits-windows-cloud-subscriptions-csp/)
|
||||
|
||||
### Windows 10 Education requirements
|
||||
|
||||
1. Windows 10 Pro Education, version 1903 or later installed on the devices to be upgraded.
|
||||
2. A device with a Windows 10 Pro Education digital license. You can confirm this information in Settings > Update & Security> Activation.
|
||||
3. The Education tenant must have an active subscription to Microsoft 365 with a Windows 10 Enterprise license or a Windows 10 Enterprise or Education subscription.
|
||||
4. Devices must be Azure AD-joined or Hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices are not supported.
|
||||
|
||||
>If Windows 10 Pro is converted to Windows 10 Pro Education [using benefits available in Store for Education](https://docs.microsoft.com/education/windows/change-to-pro-education#change-using-microsoft-store-for-education), then the feature will not work. You will need to re-image the device using a Windows 10 Pro Education edition.
|
||||
|
||||
|
||||
## Benefits
|
||||
|
||||
With Windows 10 Enterprise, businesses can benefit from enterprise-level security and control. Previously, only organizations with a Microsoft Volume Licensing Agreement could deploy Windows 10 Enterprise E3 or E5 to their users. Now, with Windows 10 Enterprise E3 and E5 being available as a true online service, it is available in every channel thus allowing all organizations to take advantage of enterprise grade Windows 10 features. To compare Windows 10 editions and review pricing, see the following:
|
||||
With Windows 10 Enterprise or Windows 10 Education, businesses and institutions can benefit from enterprise-level security and control. Previously, only organizations with a Microsoft Volume Licensing Agreement could deploy Windows 10 Education or Windows 10 Enterprise to their users. Now, with Windows 10 Enterprise E3 or A3 and E5 or A5 being available as a true online service, it is available in select channels thus allowing all organizations to take advantage of enterprise-grade Windows 10 features. To compare Windows 10 editions and review pricing, see the following:
|
||||
|
||||
- [Compare Windows 10 editions](https://www.microsoft.com/en-us/windowsforbusiness/compare)
|
||||
- [Enterprise Mobility + Security Pricing Options](https://www.microsoft.com/en-us/cloud-platform/enterprise-mobility-security-pricing)
|
||||
|
||||
You can benefit by moving to Windows as an online service in the following ways:
|
||||
|
||||
1. Licenses for Windows 10 Enterprise are checked based on Azure Active Directory (Azure AD) credentials, so now businesses have a systematic way to assign licenses to end users and groups in their organization.
|
||||
1. Licenses for Windows 10 Enterprise and Education are checked based on Azure Active Directory (Azure AD) credentials, so now businesses have a systematic way to assign licenses to end users and groups in their organization.
|
||||
2. User logon triggers a silent edition upgrade, with no reboot required
|
||||
3. Support for mobile worker/BYOD activation; transition away from on-prem KMS and MAK keys.
|
||||
4. Compliance support via seat assignment.
|
||||
4. Compliance support via seat assignment.
|
||||
5. Licenses can be updated to different users dynamically, enabling you to optimize your licensing investment against changing needs.
|
||||
|
||||
## How it works
|
||||
|
||||
When a licensed user signs in to a device that meets requirements using the Azure AD credentials associated with a Windows 10 Enterprise E3 or E5 license, the operating system turns from Windows 10 Pro to Windows 10 Enterprise and all the appropriate Windows 10 Enterprise features are unlocked. When a user’s subscription expires or is transferred to another user, the Windows 10 Enterprise device reverts seamlessly to Windows 10 Pro edition, after a grace period of up to 90 days.
|
||||
The device is AAD joined from Settings > Accounts > Access work or school.
|
||||
|
||||
Devices currently running Windows 10 Pro, version 1703 or later can get Windows 10 Enterprise Semi-Annual Channel on up to five devices for each user covered by the license. This benefit does not include Long Term Servicing Channel.
|
||||
The IT administrator assigns Windows 10 Enterprise to a user. See the following figure.
|
||||
|
||||
|
||||
|
||||
When a licensed user signs in to a device that meets requirements using their Azure AD credentials, the operating system steps up from Windows 10 Pro to Windows 10 Enterprise (or Windows 10 Pro Education to Windows 10 Education) and all the appropriate Windows 10 Enterprise/Education features are unlocked. When a user’s subscription expires or is transferred to another user, the device reverts seamlessly to Windows 10 Pro / Windows 10 Pro Education edition, once current subscription validity expires.
|
||||
|
||||
Devices running Windows 10 Pro, version 1703 or Windows 10 Pro Education, version 1903 or later can get Windows 10 Enterprise or Education Semi-Annual Channel on up to five devices for each user covered by the license. This benefit does not include Long Term Servicing Channel.
|
||||
|
||||
The following figures summarize how the Subscription Activation model works:
|
||||
|
||||
Before Windows 10, version 1903:<br>
|
||||
|
||||
|
||||
After Windows 10, version 1903:<br>
|
||||
|
||||
|
||||
Note:
|
||||
1. A Windows 10 Pro Education device will only step up to Windows 10 Education edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019).
|
||||
2. A Windows 10 Pro device will only step up to Windows 10 Enterprise edition when “Windows 10 Enterprise” license is assigned from M365 Admin center (as of May 2019).
|
||||
|
||||
### Scenarios
|
||||
|
||||
**Scenario #1**: You are using Windows 10 1803 or above, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise).
|
||||
**Scenario #1**: You are using Windows 10, version 1803 or above, and just purchased Windows 10 Enterprise E3 or E5 subscriptions (or have had an E3 or E5 subscription for a while but haven’t yet deployed Windows 10 Enterprise).
|
||||
|
||||
All of your Windows 10 Pro devices will step-up to Windows 10 Enterprise, and devices that are already running Windows 10 Enterprise will migrate from KMS or MAK activated Enterprise edition to Subscription activated Enterprise edition when a Subscription Activation-enabled user signs in to the device.
|
||||
|
||||
@ -118,15 +163,12 @@ If you’re running Windows 7, it can be more work. A wipe-and-load approach w
|
||||
### Licenses
|
||||
|
||||
The following policies apply to acquisition and renewal of licenses on devices:
|
||||
- Devices that have been upgraded will attempt to acquire licenses every 30 days, and must be connected to the Internet to be successful.
|
||||
- Licenses are valid for 90 days. If a device is disconnected from the Internet until its current license expires, the operating system will revert to Windows 10 Pro. As soon as the device is connected to the Internet again, the license will automatically renew assuming the device is still present on list of user devices.
|
||||
- Devices that have been upgraded will attempt to renew licenses about every 30 days, and must be connected to the Internet to successfully acquire or renew a license.
|
||||
- If a device is disconnected from the Internet until its current subscription expires, the operating system will revert to Windows 10 Pro or Windows 10 Pro Education. As soon as the device is connected to the Internet again, the license will automatically renew.
|
||||
- Up to five devices can be upgraded for each user license.
|
||||
- The list of devices is chronological and cannot be manually modified.
|
||||
- If a device meets requirements and a licensed user signs in on that device, it will be upgraded.
|
||||
- If five devices are already on the list and a subscribed user signs in on a sixth device, then this new device is added to the end of the list and the first device is removed.
|
||||
- Devices that are removed from the list will cease trying to acquire a license and revert to Windows 10 Pro when the grace period expires.
|
||||
- If a device the meets requirements and a licensed user signs in on that device, it will be upgraded.
|
||||
|
||||
Licenses can also be reallocated from one user to another user, allowing you to optimize your licensing investment against changing needs.
|
||||
Licenses can be reallocated from one user to another user, allowing you to optimize your licensing investment against changing needs.
|
||||
|
||||
When you have the required Azure AD subscription, group-based licensing is the preferred method to assign Enterprise E3 and E5 licenses to users. For more information, see [Group-based licensing basics in Azure AD](https://docs.microsoft.com/azure/active-directory/active-directory-licensing-whatis-azure-portal).
|
||||
|
||||
@ -154,7 +196,7 @@ changepk.exe /ProductKey %ProductKey%
|
||||
)
|
||||
</pre>
|
||||
|
||||
### Obtaining an Azure AD licence
|
||||
### Obtaining an Azure AD license
|
||||
|
||||
Enterprise Agreement/Software Assurance (EA/SA):
|
||||
- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). For more information, see [Enabling Subscription Activation with an existing EA](https://docs.microsoft.com/windows/deployment/deploy-enterprise-licenses#enabling-subscription-activation-with-an-existing-ea).
|
||||
@ -178,6 +220,6 @@ Virtual machines (VMs) must be configured to enable Windows 10 Enterprise subscr
|
||||
|
||||
## Related topics
|
||||
|
||||
[Connect domain-joined devices to Azure AD for Windows 10 experiences](https://azure.microsoft.com/documentation/articles/active-directory-azureadjoin-devices-group-policy/)
|
||||
<BR>[Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare)
|
||||
<BR>[Windows for business](https://www.microsoft.com/en-us/windowsforbusiness/default.aspx)
|
||||
[Connect domain-joined devices to Azure AD for Windows 10 experiences](https://azure.microsoft.com/documentation/articles/active-directory-azureadjoin-devices-group-policy/)<br>
|
||||
[Compare Windows 10 editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare)<br>
|
||||
[Windows for business](https://www.microsoft.com/en-us/windowsforbusiness/default.aspx)<br>
|
||||
@ -6,6 +6,7 @@
|
||||
### [Licensing requirements](windows-autopilot-requirements-licensing.md)
|
||||
## [Scenarios and Capabilities](windows-autopilot-scenarios.md)
|
||||
### [Support for existing devices](existing-devices.md)
|
||||
### [White glove](white-glove.md)
|
||||
### [User-driven mode](user-driven.md)
|
||||
#### [Azure Active Directory joined](user-driven-aad.md)
|
||||
#### [Hybrid Azure Active Directory joined](user-driven-hybrid.md)
|
||||
|
||||
@ -20,17 +20,20 @@ ms.topic: article
|
||||
|
||||
- Windows 10
|
||||
|
||||
## Deploying new devices
|
||||
<img src="./images/image2.png" width="511" height="249" />
|
||||
|
||||
When deploying new devices using Windows Autopilot, a common set of steps are required:
|
||||
## Configuring Autopilot to deploy new devices
|
||||
|
||||
1. [Register devices with the Windows Autopilot deployment service](add-devices.md). Ideally, this step would be performed by the OEM, reseller, or distributor from which the devices were purchased, but this can also be done by the organization by collecting the hardware identity and uploading it manually.
|
||||
|
||||
2. [Assign a profile of settings to each device](profiles.md), specifying how the device should be deployed and what user experience should be presented.
|
||||
When deploying new devices using Windows Autopilot, the following steps are required:
|
||||
|
||||
1. [Register devices](add-devices.md). Ideally, this step would be performed by the OEM, reseller, or distributor from which the devices were purchased, but this can also be done by the organization by collecting the hardware identity and uploading it manually.
|
||||
2. [Configure device profiles](profiles.md), specifying how the device should be deployed and what user experience should be presented.
|
||||
3. Boot the device. When the device is connected to a network with internet access, it will contact the Windows Autopilot deployment service to see if the device is registered, and if it is, it will download profile settings such as the [Enrollment Status page](enrollment-status.md), which are used to customize the end user experience.
|
||||
|
||||
<img src="./images/image2.png" width="511" height="249" />
|
||||
## Other configuration settings
|
||||
|
||||
- [Bitlocker encryption settings](bitlocker.md): You can configure the BitLocker encryption settings to be applied before automatic encryption is started.
|
||||
- [Cortana voiceover and speech recognition](windows-autopilot-scenarios.md): In Windows 10, version 1903 and later Cortana voiceover and speech recognition during OOBE is DISABLED by default for all Windows 10 Pro, Education and Enterprise SKUs.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 242 KiB |
BIN
windows/deployment/windows-autopilot/images/choice.png
Normal file
BIN
windows/deployment/windows-autopilot/images/choice.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 39 KiB |
BIN
windows/deployment/windows-autopilot/images/landing.png
Normal file
BIN
windows/deployment/windows-autopilot/images/landing.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 99 KiB |
BIN
windows/deployment/windows-autopilot/images/wg01.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg01.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.4 KiB |
BIN
windows/deployment/windows-autopilot/images/wg02.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg02.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 4.0 KiB |
BIN
windows/deployment/windows-autopilot/images/wg03.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg03.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 86 KiB |
BIN
windows/deployment/windows-autopilot/images/wg04.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg04.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 135 KiB |
BIN
windows/deployment/windows-autopilot/images/wg05.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg05.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 130 KiB |
BIN
windows/deployment/windows-autopilot/images/wg06.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg06.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 122 KiB |
BIN
windows/deployment/windows-autopilot/images/wg07.png
Normal file
BIN
windows/deployment/windows-autopilot/images/wg07.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 189 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 99 KiB |
105
windows/deployment/windows-autopilot/white-glove.md
Normal file
105
windows/deployment/windows-autopilot/white-glove.md
Normal file
@ -0,0 +1,105 @@
|
||||
---
|
||||
title: Windows Autopilot for white glove deployment
|
||||
description: Windows Autopilot for white glove deployment
|
||||
keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune, pre-provisioning
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.localizationpriority: low
|
||||
ms.sitesec: library
|
||||
ms.pagetype: deploy
|
||||
author: greg-lindsay
|
||||
ms.author: greg-lindsay
|
||||
ms.collection: M365-modern-desktop
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Windows Autopilot for white glove deployment
|
||||
|
||||
**Applies to: Windows 10, version 1903**
|
||||
|
||||
Windows Autopilot enables organizations to easily provision new devices - leveraging the preinstalled OEM image and drivers with a simple process that can be performed by the end user to help get their device business-ready.
|
||||
|
||||
|
||||
|
||||
Windows Autopilot can also provide a <I>white glove</I> service that enables partners or IT staff to pre-provision a Windows 10 PC so that it is fully configured and business-ready. From the end user’s perspective, the Windows Autopilot user-driven experience is unchanged, but getting their device to a fully provisioned state is faster.
|
||||
|
||||
With **Windows Autopilot for white glove deployment**, the provisioning process is split. The time-consuming portions are performed by IT, partners, or OEMs. The end user simply completes a few neceesary settings and polices and then they can begin using their device.
|
||||
|
||||
|
||||
|
||||
Enabled with Microsoft Intune in Windows 10, version 1903 and later, white glove deployment capabilities build on top of existing Windows Autopilot [user-driven scenarios](user-driven.md), supporting both the user-driven [Azure AD join](user-driven-aad.md) and [Hybrid Azure AD](user-driven-hybrid.md) join scenarios.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
In addition to [Windows Autopilot requirements](windows-autopilot-requirements.md), Windows Autopilot for white glove deployment adds the following:
|
||||
|
||||
- Windows 10, version 1903 or later is required.
|
||||
- An Intune subscription with additional flighted features that are not yet available publicly is currently required. Note: This feature will change soon from flighted to preview. Prior to this feature switching to preview status, attempts to perform white glove deployment without t flighted features will fail with an Intune enrollment error.
|
||||
- Physical devices that support TPM 2.0 and device attestation; virtual machines are not supported. The white glove provisioning process leverages Windows Autopilot self-deploying capabilities, hence the TPM 2.0 requirements.
|
||||
- Physical devices with Ethernet connectivity; Wi-fi connectivity is not supported due to the requirement to choose a language, locale, and keyboard to make that Wi-fi connection; doing that in a pre-provisioning process could prevent the user from choosing their own language, locale, and keyboard when they receive the device.
|
||||
|
||||
## Preparation
|
||||
|
||||
To be ready to try out Windows Autopilot for white glove deployment, ensure that you can first successfully use existing Windows Autopilot user-driven scenarios:
|
||||
|
||||
- User-driven Azure AD join. Devices can be deployed using Windows Autopilot and joined to an Azure Active Directory tenant.
|
||||
- User-driven with Hybrid Azure AD join. Devices can be deployed using Windows Autopilot and joined to an on-premises Active Directory domain, then registered with Azure Active Directory to enable the Hybrid Azure AD join features.
|
||||
|
||||
If these scenarios cannot be completed, Windows Autopilot for white glove deployment will also not succeed since it builds on top of these scenarios.
|
||||
|
||||
To enable white glove deployment, an additional Autopilot profile setting must be configured:
|
||||
|
||||
>[!TIP]
|
||||
>To see the white glove deployment Autopilot profile setting, use this URL to access the Intune portal: https://portal.azure.com/?microsoft_intune_enrollment_enableWhiteGlove=true. This is a temporary requirement.
|
||||
|
||||
|
||||
|
||||
The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. **Note**: other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users.
|
||||
|
||||
## Scenarios
|
||||
|
||||
Windows Autopilot for white glove deployment supports two distinct scenarios:
|
||||
- User-driven deployments with Azure AD Join. The device will be joined to an Azure AD tenant.
|
||||
- User-driven deployments with Hybrid Azure AD Join. The device will be joined to an on-premises Active Directory domain, and separately registered with Azure AD.
|
||||
Each of these scenarios consists of two parts, a technician flow and a user flow. At a high level, these parts are the same for Azure AD Join and Hybrid Azure AD join; differences are primarily seen by the end user in the authentication steps.
|
||||
|
||||
### Technican flow
|
||||
|
||||
The first part of the Windows Autopilot for white glove deployment process is designed to be carried out by a technician; this could be a member of the IT staff, a services partner, or an OEM – each organization can decide who should perform these activities.
|
||||
Regardless of the scenario, the process to be performed by the technician is the same:
|
||||
- Boot the device (running Windows 10 Pro, Enterprise, or Education SKUs, version 1903 or later).
|
||||
- From the first OOBE screen (which could be a language selection or locale selection screen), do not click **Next**. Instead, press the Windows key five times to view an additional options dialog. From that screen, choose the **Windows Autopilot provisioning** option and then click **Continue**.
|
||||
|
||||
|
||||
|
||||
- On the **Windows Autopilot Configuration** screen, information will be displayed about the device:
|
||||
- The Autopilot profile assigned to the device.
|
||||
- The organization name for the device.
|
||||
- The user assigned to the device (if there is one).
|
||||
- A QR code containing a unique identifier for the device, useful to look up the device in Intune to make any configuration changes needed (e.g. assigning a user, adding the device to any additional groups needed for app or policy targeting).
|
||||
- Validate the information displayed. If any changes are needed, make these and then click **Refresh** to re-download the updated Autopilot profile details.
|
||||
|
||||
|
||||
|
||||
- Click **Provision** to begin the provisioning process.
|
||||
If the pre-provisioning process completes successfully:
|
||||
- A green status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps.
|
||||
- Click **Reseal** to shut the device down. At that point, the device can be shipped to the end user.
|
||||
|
||||
If the pre-provisioning process fails:
|
||||
- A red status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps.
|
||||
- Diagnostic logs can be gathered from the device, and then it can be reset to start the process over again.
|
||||
|
||||
|
||||
|
||||
### User flow
|
||||
|
||||
If the pre-provisioning process completed successfully and the device was resealed, it can be delivered to the end user to complete the normal Windows Autopilot user-driven process. They will perform a standard set of steps:
|
||||
|
||||
- Power on the device.
|
||||
- Select the appropriate language, locale, and keyboard layout.
|
||||
- Connect to a network (if using Wi-Fi). If using Hybrid Azure AD Join, there must be connectivity to a domain controller; if using Azure AD Join, internet connectivity is required.
|
||||
- On the branded sign-on screen, enter the user’s Azure Active Directory credentials.
|
||||
- If using Hybrid Azure AD Join, the device will reboot; after the reboot, enter the user’s Active Directory credentials.
|
||||
- Additional policies and apps will be delivered to the device, as tracked by the Enrollment Status Page (ESP). Once complete, the user will be able to access the desktop.
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Windows Autopilot scenarios
|
||||
title: Windows Autopilot scenarios and capabilities
|
||||
description: Listing of Autopilot scenarios
|
||||
keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune
|
||||
ms.prod: w10
|
||||
@ -14,10 +14,12 @@ ms.topic: article
|
||||
---
|
||||
|
||||
|
||||
# Windows Autopilot scenarios
|
||||
# Windows Autopilot scenarios and capabilities
|
||||
|
||||
**Applies to: Windows 10**
|
||||
|
||||
## Scenarios
|
||||
|
||||
Windows Autopilot includes support for a growing list of scenarios, designed to support common organization needs which can vary based on the type of organization and their progress moving to Windows 10 and [transitioning to modern management](https://docs.microsoft.com/windows/client-management/manage-windows-10-in-your-organization-modern-management).
|
||||
|
||||
For details about these scenarios, see these additional topics:
|
||||
@ -27,6 +29,34 @@ For details about these scenarios, see these additional topics:
|
||||
- [Windows Autopilot self-deploying mode](self-deploying.md), for devices that will be automatically configured for shared use, as a kiosk, or as a digital signage device.
|
||||
- [Windows Autopilot Reset](windows-autopilot-reset.md), to re-deploy a device in a business-ready state.
|
||||
|
||||
## Capabilities
|
||||
|
||||
### Windows Autopilot is self-updating during OOBE:
|
||||
|
||||
Starting with the Windows 10, version 1903, Autopilot functional and critical updates will begin downloading automatically during OOBE after a device gets connected to a network and the [critical driver and Windows zero-day patch (ZDP) updates](https://docs.microsoft.com/windows-hardware/customize/desktop/windows-updates-during-oobe) have completed. The user or IT admin cannot opt-out of these Autopilot updates; they are required for Windows Autopilot deployment to operate properly. Windows will alert the user that the device is checking for, downloading and installing the updates.
|
||||
|
||||
### Cortana voiceover and speech recognition during OOBE
|
||||
|
||||
In Windows 10, version 1903 and later Cortana voiceover and speech recognition during OOBE is DISABLED by default for all Windows 10 Pro, Education and Enterprise SKUs.
|
||||
|
||||
If desired, you can enable Cortana voiceover and speech recognition during OOBE by creating the following registry key. This key does not exist by default.
|
||||
|
||||
HKLM\Software\Microsoft\Windows\CurrentVersion\OOBE\EnableVoiceForAllEditions
|
||||
|
||||
The key value is a DWORD with **0** = disabled and **1** = enabled.
|
||||
|
||||
| Value | Description |
|
||||
| --- | --- |
|
||||
| 0 | Cortana voiceover is disabled |
|
||||
| 1 | Cortana voiceover is enabled |
|
||||
| No value | Device will fall back to default behavior of the edition |
|
||||
|
||||
To change this key value, use WCD tool to create as PPKG as documented [here](https://docs.microsoft.com/windows/configuration/wcd/wcd-oobe#nforce).
|
||||
|
||||
### Bitlocker encryption
|
||||
|
||||
With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. For more information, see [Setting the BitLocker encryption algorithm for Autopilot devices](bitlocker.md)
|
||||
|
||||
## Related topics
|
||||
|
||||
[Windows Autopilot Enrollment Status page](enrollment-status.md)
|
||||
|
||||
@ -64,7 +64,7 @@ Windows Autopilot enables you to pre-register devices to your organization so th
|
||||
|
||||
Windows Autopilot enables you to:
|
||||
* Automatically join devices to Azure Active Directory (Azure AD) or Active Directory (via Hybrid Azure AD Join). See [Introduction to device management in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/device-management-introduction) for more information about the differences between these two join options.
|
||||
* Auto-enroll devices into MDM services, such as Microsoft Intune ([*Requires an Azure AD Premium subscription*](#prerequisites)).
|
||||
* Auto-enroll devices into MDM services, such as Microsoft Intune ([*Requires an Azure AD Premium subscription*](windows-autopilot-requirements-configuration.md)).
|
||||
* Restrict the Administrator account creation.
|
||||
* Create and auto-assign devices to configuration groups based on a device's profile.
|
||||
* Customize OOBE content specific to the organization.
|
||||
|
||||
@ -15,19 +15,14 @@ ms.date: 10/02/2018
|
||||
|
||||
Find the latest how to and support content that IT pros need to evaluate, plan, deploy, secure and manage devices running Windows 10 or Windows 10 Mobile.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
> [!video https://www.youtube.com/embed/hAva4B-wsVA]
|
||||
|
||||
|
||||
## Check out [what's new in Windows 10, version 1809](/windows/whats-new/whats-new-windows-10-version-1809).
|
||||
## Check out [what's new in Windows 10, version 1903](/windows/whats-new/whats-new-windows-10-version-1903).
|
||||
<br>
|
||||
<table border="0" width="100%" align="center">
|
||||
<tr style="text-align:center;">
|
||||
<td align="center" style="width:25%; border:0;">
|
||||
<a href="/windows/whats-new/whats-new-windows-10-version-1809">
|
||||
<a href="/windows/whats-new/whats-new-windows-10-version-1903">
|
||||
<img src="images/whatsnew.png" alt="Read what's new in Windows 10" title="Whats new" />
|
||||
<br/>What's New? </a><br>
|
||||
</td>
|
||||
|
||||
@ -7,6 +7,7 @@
|
||||
### [Diagnostic Data Viewer Overview](diagnostic-data-viewer-overview.md)
|
||||
### [Diagnostic Data Viewer for PowerShell Overview](Microsoft-DiagnosticDataViewer.md)
|
||||
## Basic level Windows diagnostic data events and fields
|
||||
### [Windows 10, version 1903 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md)
|
||||
### [Windows 10, version 1809 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
|
||||
### [Windows 10, version 1803 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md)
|
||||
### [Windows 10, version 1709 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1709.md)
|
||||
@ -17,10 +18,14 @@
|
||||
### [Windows 10, version 1709 and newer diagnostic data for the Full level](windows-diagnostic-data.md)
|
||||
### [Windows 10, version 1703 diagnostic data for the Full level](windows-diagnostic-data-1703.md)
|
||||
## Manage Windows 10 connection endpoints
|
||||
### [Connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md)
|
||||
### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md)
|
||||
### [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
|
||||
### [Manage connections from Windows operating system components to Microsoft services using MDM](manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md)
|
||||
### [Connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md)
|
||||
### [Connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md)
|
||||
### [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md)
|
||||
### [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md)
|
||||
### [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md)
|
||||
## [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
|
||||
### [Connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md)
|
||||
### [Connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md)
|
||||
### [Connection endpoints for non-Enterprise editions of Windows 10, version 1903](windows-endpoints-1903-non-enterprise-editions.md)
|
||||
### [Connection endpoints for non-Enterprise editions of Windows 10, version 1809](windows-endpoints-1809-non-enterprise-editions.md)
|
||||
### [Connection endpoints for non-Enterprise editions of Windows 10, version 1803](windows-endpoints-1803-non-enterprise-editions.md)
|
||||
### [Connection endpoints for non-Enterprise editions of Windows 10, version 1709](windows-endpoints-1709-non-enterprise-editions.md)
|
||||
|
||||
|
||||
@ -7,13 +7,13 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
localizationpriority: high
|
||||
audience: ITPro
|
||||
author: brianlic-msft
|
||||
ms.author: brianlic
|
||||
manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 02/15/2019
|
||||
audience: ITPro
|
||||
ms.date: 04/19/2019
|
||||
---
|
||||
|
||||
|
||||
@ -33,6 +33,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
|
||||
You can learn more about Windows functional and diagnostic data through these articles:
|
||||
|
||||
|
||||
- [Windows 10, version 1903 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md)
|
||||
- [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
|
||||
- [Windows 10, version 1803 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md)
|
||||
- [Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1709.md)
|
||||
@ -1464,7 +1465,7 @@ The following fields are available:
|
||||
|
||||
### Census.Processor
|
||||
|
||||
This event sends data about the processor (architecture, speed, number of cores, manufacturer, and model number), to help keep Windows up to date.
|
||||
This event sends data about the processor to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1822,61 +1823,6 @@ The following fields are available:
|
||||
|
||||
## Diagnostic data events
|
||||
|
||||
### TelClientSynthetic.AbnormalShutdown_0
|
||||
|
||||
This event sends data about boot IDs for which a normal clean shutdown was not observed, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **AbnormalShutdownBootId** Retrieves the Boot ID for which the abnormal shutdown was observed.
|
||||
- **CrashDumpEnabled** Indicates whether crash dumps are enabled.
|
||||
- **CumulativeCrashCount** Cumulative count of operating system crashes since the BootId reset.
|
||||
- **CurrentBootId** BootId at the time the abnormal shutdown event was being reported.
|
||||
- **FirmwareResetReasonEmbeddedController** Firmware-supplied reason for the reset.
|
||||
- **FirmwareResetReasonEmbeddedControllerAdditional** Additional data related to the reset reason provided by the firmware.
|
||||
- **FirmwareResetReasonPch** Hardware-supplied reason for the reset.
|
||||
- **FirmwareResetReasonPchAdditional** Additional data related to the reset reason provided by the hardware.
|
||||
- **FirmwareResetReasonSupplied** Indicates whether the firmware supplied any reset reason.
|
||||
- **FirmwareType** ID of the FirmwareType as enumerated in DimFirmwareType.
|
||||
- **HardwareWatchdogTimerGeneratedLastReset** Indicates whether the hardware watchdog timer caused the last reset.
|
||||
- **HardwareWatchdogTimerPresent** Indicates whether hardware watchdog timer was present or not.
|
||||
- **LastBugCheckBootId** The Boot ID of the last captured crash.
|
||||
- **LastBugCheckCode** Code that indicates the type of error.
|
||||
- **LastBugCheckContextFlags** Additional crash dump settings.
|
||||
- **LastBugCheckOriginalDumpType** The type of crash dump the system intended to save.
|
||||
- **LastBugCheckOtherSettings** Other crash dump settings.
|
||||
- **LastBugCheckParameter1** The first parameter with additional info on the type of the error.
|
||||
- **LastBugCheckProgress** Progress towards writing out the last crash dump.
|
||||
- **LastSuccessfullyShutdownBootId** The Boot ID of the last fully successful shutdown.
|
||||
- **PowerButtonCumulativePressCount** Indicates the number of times the power button has been pressed ("pressed" not to be confused with "released").
|
||||
- **PowerButtonCumulativeReleaseCount** Indicates the number of times the power button has been released ("released" not to be confused with "pressed").
|
||||
- **PowerButtonErrorCount** Indicates the number of times there was an error attempting to record Power Button metrics (e.g.: due to a failure to lock/update the bootstat file).
|
||||
- **PowerButtonLastPressBootId** The Boot ID of the last time the Power Button was detected to have been pressed ("pressed" not to be confused with "released").
|
||||
- **PowerButtonLastPressTime** The date and time the Power Button was most recently pressed ("pressed" not to be confused with "released").
|
||||
- **PowerButtonLastReleaseBootId** The Boot ID of the last time the Power Button was released ("released" not to be confused with "pressed").
|
||||
- **PowerButtonLastReleaseTime** The date and time the Power Button was most recently released ("released" not to be confused with "pressed").
|
||||
- **PowerButtonPressCurrentCsPhase** Represents the phase of Connected Standby exit when the power button was pressed.
|
||||
- **PowerButtonPressIsShutdownInProgress** Indicates whether a system shutdown was in progress at the last time the Power Button was pressed.
|
||||
- **PowerButtonPressLastPowerWatchdogStage** The last stage completed when the Power Button was most recently pressed.
|
||||
- **PowerButtonPressPowerWatchdogArmed** Indicates whether or not the watchdog for the monitor was active at the time of the last power button press.
|
||||
- **TransitionInfoBootId** The Boot ID of the captured transition information.
|
||||
- **TransitionInfoCSCount** The total number of times the system transitioned from "Connected Standby" mode to "On" when the last marker was saved.
|
||||
- **TransitionInfoCSEntryReason** Indicates the reason the device last entered "Connected Standby" mode ("entered" not to be confused with "exited").
|
||||
- **TransitionInfoCSExitReason** Indicates the reason the device last exited "Connected Standby" mode ("exited" not to be confused with "entered").
|
||||
- **TransitionInfoCSInProgress** Indicates whether the system was in or entering Connected Standby mode when the last marker was saved.
|
||||
- **TransitionInfoLastReferenceTimeChecksum** The checksum of TransitionInfoLastReferenceTimestamp.
|
||||
- **TransitionInfoLastReferenceTimestamp** The date and time that the marker was last saved.
|
||||
- **TransitionInfoPowerButtonTimestamp** The most recent date and time when the Power Button was pressed (collected via a different mechanism than PowerButtonLastPressTime).
|
||||
- **TransitionInfoSleepInProgress** Indicates whether the system was in or entering Sleep mode when the last marker was saved.
|
||||
- **TransitionInfoSleepTranstionsToOn** The total number of times the system transitioned from Sleep mode to on, when the last marker was saved.
|
||||
- **TransitionInfoSystemRunning** Indicates whether the system was running when the last marker was saved.
|
||||
- **TransitionInfoSystemShutdownInProgress** Indicates whether a device shutdown was in progress when the power button was pressed.
|
||||
- **TransitionInfoUserShutdownInProgress** Indicates whether a user shutdown was in progress when the power button was pressed.
|
||||
- **TransitionLatestCheckpointId** Represents a unique identifier for a checkpoint during the device state transition.
|
||||
- **TransitionLatestCheckpointSeqNumber** Represents the chronological sequence number of the checkpoint.
|
||||
- **TransitionLatestCheckpointType** Represents the type of the checkpoint, which can be the start of a phase, end of a phase, or just informational.
|
||||
|
||||
|
||||
### TelClientSynthetic.AuthorizationInfo_RuntimeTransition
|
||||
|
||||
This event sends data indicating that a device has undergone a change of telemetry opt-in level detected at UTC startup, to help keep Windows up to date. The telemetry opt-in level signals what data we are allowed to collect.
|
||||
@ -3009,26 +2955,43 @@ The following fields are available:
|
||||
- **winInetError** The HResult of the operation.
|
||||
|
||||
|
||||
## Privacy logging notification events
|
||||
|
||||
### Microsoft.Windows.Shell.PrivacyNotifierLogging.PrivacyNotifierCompleted
|
||||
|
||||
This event returns data to report the efficacy of a single-use tool to inform users impacted by a known issue and to take corrective action to address the issue.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **cleanupTask** Indicates whether the task that launched the dialog should be cleaned up.
|
||||
- **cleanupTaskResult** The return code of the attempt to clean up the task used to show the dialog.
|
||||
- **deviceEvaluated** Indicates whether the device was eligible for evaluation of a known issue.
|
||||
- **deviceImpacted** Indicates whether the device was impacted by a known issue.
|
||||
- **modalAction** The action the user took on the dialog that was presented to them.
|
||||
- **modalResult** The return code of the attempt to show a dialog to the user explaining the issue.
|
||||
- **resetSettingsResult** The return code of the action to correct the known issue.
|
||||
|
||||
|
||||
## Remediation events
|
||||
|
||||
### Microsoft.Windows.Remediation.Applicable
|
||||
|
||||
This event indicates a remedial plug-in is applicable if/when such a plug-in is detected. This is used to ensure Windows is up to date.
|
||||
deny
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ActionName** The name of the action to be taken by the plug-in.
|
||||
- **AppraiserBinariesValidResult** Indicates whether plug-in was appraised as valid.
|
||||
- **AppraiserBinariesValidResult** Indicates whether the plug-in was appraised as valid.
|
||||
- **AppraiserDetectCondition** Indicates whether the plug-in passed the appraiser's check.
|
||||
- **AppraiserRegistryValidResult** Indicates whether the registry entry checks out as valid.
|
||||
- **AppraiserTaskDisabled** Indicates the appraiser task is disabled.
|
||||
- **AppraiserTaskValidFailed** Indicates the Appraiser task did not function and requires intervention.
|
||||
- **CV** Correlation vector
|
||||
- **DateTimeDifference** The difference between local and reference clock times.
|
||||
- **DateTimeSyncEnabled** Indicates whether the datetime sync plug-in is enabled.
|
||||
- **DateTimeSyncEnabled** Indicates whether the Datetime Sync plug-in is enabled.
|
||||
- **DaysSinceLastSIH** The number of days since the most recent SIH executed.
|
||||
- **DaysToNextSIH** The number of days until the next scheduled SIH execution.
|
||||
- **DetectedCondition** Indicates whether detect condition is true and the perform action will be run.
|
||||
- **DetectedCondition** Indicates whether detected condition is true and the perform action will be run.
|
||||
- **EvalAndReportAppraiserBinariesFailed** Indicates the EvalAndReportAppraiserBinaries event failed.
|
||||
- **EvalAndReportAppraiserRegEntries** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
- **EvalAndReportAppraiserRegEntriesFailed** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
@ -3042,12 +3005,12 @@ The following fields are available:
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Reload** True if SIH reload is required.
|
||||
- **RemediationNoisyHammerAcLineStatus** Event that indicates the AC Line Status of the machine.
|
||||
- **RemediationNoisyHammerAcLineStatus** Indicates the AC Line Status of the device.
|
||||
- **RemediationNoisyHammerAutoStartCount** The number of times hammer auto-started.
|
||||
- **RemediationNoisyHammerCalendarTaskEnabled** Event that indicates Update Assistant Calendar Task is enabled.
|
||||
- **RemediationNoisyHammerCalendarTaskExists** Event that indicates an Update Assistant Calendar Task exists.
|
||||
- **RemediationNoisyHammerCalendarTaskTriggerEnabledCount** Event that indicates calendar triggers are enabled in the task.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent hammer task ran.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent Noisy Hammer task ran.
|
||||
- **RemediationNoisyHammerGetCurrentSize** Size in MB of the $GetCurrent folder.
|
||||
- **RemediationNoisyHammerIsInstalled** TRUE if the noisy hammer is installed.
|
||||
- **RemediationNoisyHammerLastTaskRunResult** The result of the last hammer task run.
|
||||
@ -3097,7 +3060,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Completed
|
||||
|
||||
This event enables completion tracking of a process that remediates issues preventing security and quality updates.
|
||||
This event is sent when Windows Update sediment remediations have completed on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3113,12 +3076,12 @@ The following fields are available:
|
||||
- **CV** The Correlation Vector.
|
||||
- **DateTimeDifference** The difference between the local and reference clocks.
|
||||
- **DaysSinceOsInstallation** The number of days since the installation of the Operating System.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in Megabytes.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in megabytes.
|
||||
- **DiskMbFreeAfterCleanup** The amount of free hard disk space after cleanup, measured in Megabytes.
|
||||
- **DiskMbFreeBeforeCleanup** The amount of free hard disk space before cleanup, measured in Megabytes.
|
||||
- **ForcedAppraiserTaskTriggered** TRUE if Appraiser task ran from the plug-in.
|
||||
- **GlobalEventCounter** Client-side counter that indicates ordering of events sent by the active user.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in Megabytes.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in megabytes.
|
||||
- **HResult** The result of the event execution.
|
||||
- **LatestState** The final state of the plug-in component.
|
||||
- **PackageVersion** The package version for the current Remediation.
|
||||
@ -3173,7 +3136,7 @@ The following fields are available:
|
||||
- **usoScanIsNetworkMetered** TRUE if the device is currently connected to a metered network.
|
||||
- **usoScanIsNoAutoUpdateKeyPresent** TRUE if no Auto Update registry key is set/present.
|
||||
- **usoScanIsUserLoggedOn** TRUE if the user is logged on.
|
||||
- **usoScanPastThreshold** TRUE if the most recent USO (Update Session Orchestrator) scan is past the threshold (late).
|
||||
- **usoScanPastThreshold** TRUE if the most recent Update Session Orchestrator (USO) scan is past the threshold (late).
|
||||
- **usoScanType** The type of USO (Update Session Orchestrator) scan: "Interactive" or "Background".
|
||||
- **WindowsHyberFilSysSizeInMegabytes** The size of the Windows Hibernation file, measured in Megabytes.
|
||||
- **WindowsInstallerFolderSizeInMegabytes** The size of the Windows Installer folder, measured in Megabytes.
|
||||
@ -3302,13 +3265,13 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Started
|
||||
|
||||
This event reports whether a plug-in started, to help ensure Windows is up to date.
|
||||
deny
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
|
||||
@ -3717,7 +3680,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Applicable
|
||||
|
||||
Indicates whether a given plugin is applicable.
|
||||
This event is sent when the Windows Update sediment remediations launcher finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3733,7 +3696,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Completed
|
||||
|
||||
Indicates whether a given plugin has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations launcher finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3779,7 +3742,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Started
|
||||
|
||||
This event indicates that a given plug-in has started.
|
||||
This event is sent when the Windows Update sediment remediations launcher starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3817,7 +3780,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Applicable
|
||||
|
||||
This event indicates whether a given plug-in is applicable.
|
||||
This event is sent when the Windows Update sediment remediations service finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3833,7 +3796,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Completed
|
||||
|
||||
This event indicates whether a given plug-in has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations service finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3886,7 +3849,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Started
|
||||
|
||||
This event indicates a specified plug-in has started. This information helps ensure Windows is up to date.
|
||||
This event is sent when the Windows Update sediment remediations service starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4042,7 +4005,7 @@ The following fields are available:
|
||||
|
||||
### SIHEngineTelemetry.EvalApplicability
|
||||
|
||||
This event is sent when targeting logic is evaluated to determine if a device is eligible a given action.
|
||||
This event is sent when targeting logic is evaluated to determine if a device is eligible for a given action.
|
||||
|
||||
|
||||
|
||||
@ -4236,7 +4199,7 @@ The following fields are available:
|
||||
- **RelatedCV** The Correlation Vector that was used before the most recent change to a new Correlation Vector.
|
||||
- **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to download.
|
||||
- **RevisionNumber** The revision number of the specified piece of content.
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **Setup360Phase** Identifies the active phase of the upgrade download if the current download is for an Operating System upgrade.
|
||||
- **ShippingMobileOperator** The mobile operator linked to the device when the device shipped.
|
||||
- **StatusCode** Indicates the result of a Download event (success, cancellation, failure code HResult).
|
||||
@ -5127,12 +5090,12 @@ This event lists the reboot reason when an app is going to reboot.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **BootId** The boot ID.
|
||||
- **BootId** The system boot ID.
|
||||
- **BoottimeSinceLastShutdown** The boot time since the last shutdown.
|
||||
- **RebootReason** Reason for the reboot.
|
||||
|
||||
|
||||
## Microsoft Store events
|
||||
## Windows Store events
|
||||
|
||||
### Microsoft.Windows.Store.Partner.ReportApplication
|
||||
|
||||
@ -6296,6 +6259,12 @@ This event sends data specific to the FixupEditionId mitigation used for OS Upda
|
||||
|
||||
## Windows Update Reserve Manager events
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.InitializeUpdateReserveManager
|
||||
|
||||
This event returns data about the Update Reserve Manager, including whether it’s been initialized.
|
||||
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.RemovePendingHardReserveAdjustment
|
||||
|
||||
This event is sent when the Update Reserve Manager removes a pending hard reserve adjustment.
|
||||
|
||||
@ -7,13 +7,13 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
localizationpriority: high
|
||||
audience: ITPro
|
||||
author: brianlic-msft
|
||||
ms.author: brianlic
|
||||
manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 02/15/2019
|
||||
audience: ITPro
|
||||
ms.date: 04/19/2019
|
||||
---
|
||||
|
||||
|
||||
@ -33,6 +33,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
|
||||
You can learn more about Windows functional and diagnostic data through these articles:
|
||||
|
||||
|
||||
- [Windows 10, version 1903 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md)
|
||||
- [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
|
||||
- [Windows 10, version 1803 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md)
|
||||
- [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md)
|
||||
@ -68,7 +69,7 @@ The following fields are available:
|
||||
- **DecisionSystemBios_19H1Setup** The total DecisionSystemBios objects targeting the next release of Windows on this device.
|
||||
- **DecisionSystemBios_RS4** The total DecisionSystemBios objects targeting Windows 10 version, 1803 present on this device.
|
||||
- **InventoryApplicationFile** The count of the number of this particular object type present on this device.
|
||||
- **InventoryLanguagePack** The count of the number of this particular object type present on this device.
|
||||
- **InventoryLanguagePack** The count of InventoryLanguagePack objects present on this machine.
|
||||
- **InventoryMediaCenter** The count of the number of this particular object type present on this device.
|
||||
- **InventorySystemBios** The count of the number of this particular object type present on this device.
|
||||
- **InventoryUplevelDriverPackage** The count of the number of this particular object type present on this device.
|
||||
@ -1329,7 +1330,7 @@ The following fields are available:
|
||||
|
||||
### Census.App
|
||||
|
||||
Provides information on IE and Census versions running on the device
|
||||
This event sends version data about the Apps running on this device, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1538,7 +1539,7 @@ The following fields are available:
|
||||
|
||||
### Census.Processor
|
||||
|
||||
Provides information on several important data points about Processor settings
|
||||
This event sends data about the processor to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1912,6 +1913,41 @@ The following fields are available:
|
||||
- **pendingDecision** Indicates the cause of reboot, if applicable.
|
||||
|
||||
|
||||
### CbsServicingProvider.CbsSelectableUpdateChangeV2
|
||||
|
||||
This event reports the results of enabling or disabling optional Windows Content to keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **applicableUpdateState** Indicates the highest applicable state of the optional content.
|
||||
- **buildVersion** The build version of the package being installed.
|
||||
- **clientId** The name of the application requesting the optional content change.
|
||||
- **downloadSource** Indicates if optional content was obtained from Windows Update or a locally accessible file.
|
||||
- **downloadtimeInSeconds** Indicates if optional content was obtained from Windows Update or a locally accessible file.
|
||||
- **executionID** A unique ID used to identify events associated with a single servicing operation and not reused for future operations.
|
||||
- **executionSequence** A counter that tracks the number of servicing operations attempted on the device.
|
||||
- **firstMergedExecutionSequence** The value of a pervious executionSequence counter that is being merged with the current operation, if applicable.
|
||||
- **firstMergedID** A unique ID of a pervious servicing operation that is being merged with this operation, if applicable.
|
||||
- **hrDownloadResult** The return code of the download operation.
|
||||
- **hrStatusUpdate** The return code of the servicing operation.
|
||||
- **identityHash** A pseudonymized (hashed) identifier for the Windows Package that is being installed or uninstalled.
|
||||
- **initiatedOffline** Indicates whether the operation was performed against an offline Windows image file or a running instance of Windows.
|
||||
- **majorVersion** The major version of the package being installed.
|
||||
- **minorVersion** The minor version of the package being installed.
|
||||
- **packageArchitecture** The architecture of the package being installed.
|
||||
- **packageLanguage** The language of the package being installed.
|
||||
- **packageName** The name of the package being installed.
|
||||
- **rebootRequired** Indicates whether a reboot is required to complete the operation.
|
||||
- **revisionVersion** The revision number of the package being installed.
|
||||
- **stackBuild** The build number of the servicing stack binary performing the installation.
|
||||
- **stackMajorVersion** The major version number of the servicing stack binary performing the installation.
|
||||
- **stackMinorVersion** The minor version number of the servicing stack binary performing the installation.
|
||||
- **stackRevision** The revision number of the servicing stack binary performing the installation.
|
||||
- **updateName** The name of the optional Windows Operation System feature being enabled or disabled.
|
||||
- **updateStartState** A value indicating the state of the optional content before the operation started.
|
||||
- **updateTargetState** A value indicating the desired state of the optional content.
|
||||
|
||||
|
||||
## Diagnostic data events
|
||||
|
||||
### TelClientSynthetic.AuthorizationInfo_RuntimeTransition
|
||||
@ -3107,25 +3143,42 @@ The following fields are available:
|
||||
- **winInetError** The HResult of the operation.
|
||||
|
||||
|
||||
## Privacy logging notification events
|
||||
|
||||
### Microsoft.Windows.Shell.PrivacyNotifierLogging.PrivacyNotifierCompleted
|
||||
|
||||
This event returns data to report the efficacy of a single-use tool to inform users impacted by a known issue and to take corrective action to address the issue.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **cleanupTask** Indicates whether the task that launched the dialog should be cleaned up.
|
||||
- **cleanupTaskResult** The return code of the attempt to clean up the task used to show the dialog.
|
||||
- **deviceEvaluated** Indicates whether the device was eligible for evaluation of a known issue.
|
||||
- **deviceImpacted** Indicates whether the device was impacted by a known issue.
|
||||
- **modalAction** The action the user took on the dialog that was presented to them.
|
||||
- **modalResult** The return code of the attempt to show a dialog to the user explaining the issue.
|
||||
- **resetSettingsResult** The return code of the action to correct the known issue.
|
||||
|
||||
|
||||
## Remediation events
|
||||
|
||||
### Microsoft.Windows.Remediation.Applicable
|
||||
|
||||
This event indicates a remedial plug-in is applicable if/when such a plug-in is detected. This is used to ensure Windows is up to date.
|
||||
deny
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ActionName** The name of the action to be taken by the plug-in.
|
||||
- **AppraiserBinariesValidResult** Indicates whether plug-in was appraised as valid.
|
||||
- **AppraiserBinariesValidResult** Indicates whether the plug-in was appraised as valid.
|
||||
- **AppraiserDetectCondition** Indicates whether the plug-in passed the appraiser's check.
|
||||
- **AppraiserRegistryValidResult** Indicates whether the registry entry checks out as valid.
|
||||
- **AppraiserTaskDisabled** Indicates the appraiser task is disabled.
|
||||
- **CV** Correlation vector
|
||||
- **DateTimeDifference** The difference between local and reference clock times.
|
||||
- **DateTimeSyncEnabled** Indicates whether the datetime sync plug-in is enabled.
|
||||
- **DateTimeSyncEnabled** Indicates whether the Datetime Sync plug-in is enabled.
|
||||
- **DaysSinceLastSIH** The number of days since the most recent SIH executed.
|
||||
- **DaysToNextSIH** The number of days until the next scheduled SIH execution.
|
||||
- **DetectedCondition** Indicates whether detect condition is true and the perform action will be run.
|
||||
- **DetectedCondition** Indicates whether detected condition is true and the perform action will be run.
|
||||
- **EvalAndReportAppraiserBinariesFailed** Indicates the EvalAndReportAppraiserBinaries event failed.
|
||||
- **EvalAndReportAppraiserRegEntries** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
- **EvalAndReportAppraiserRegEntriesFailed** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
@ -3139,12 +3192,12 @@ The following fields are available:
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Reload** True if SIH reload is required.
|
||||
- **RemediationNoisyHammerAcLineStatus** Event that indicates the AC Line Status of the machine.
|
||||
- **RemediationNoisyHammerAcLineStatus** Indicates the AC Line Status of the device.
|
||||
- **RemediationNoisyHammerAutoStartCount** The number of times hammer auto-started.
|
||||
- **RemediationNoisyHammerCalendarTaskEnabled** Event that indicates Update Assistant Calendar Task is enabled.
|
||||
- **RemediationNoisyHammerCalendarTaskExists** Event that indicates an Update Assistant Calendar Task exists.
|
||||
- **RemediationNoisyHammerCalendarTaskTriggerEnabledCount** Event that indicates calendar triggers are enabled in the task.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent hammer task ran.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent Noisy Hammer task ran.
|
||||
- **RemediationNoisyHammerGetCurrentSize** Size in MB of the $GetCurrent folder.
|
||||
- **RemediationNoisyHammerIsInstalled** TRUE if the noisy hammer is installed.
|
||||
- **RemediationNoisyHammerLastTaskRunResult** The result of the last hammer task run.
|
||||
@ -3214,7 +3267,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Completed
|
||||
|
||||
This event enables completion tracking of a process that remediates issues preventing security and quality updates.
|
||||
This event is sent when Windows Update sediment remediations have completed on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3232,12 +3285,12 @@ The following fields are available:
|
||||
- **CV** The Correlation Vector.
|
||||
- **DateTimeDifference** The difference between the local and reference clocks.
|
||||
- **DaysSinceOsInstallation** The number of days since the installation of the Operating System.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in Megabytes.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in megabytes.
|
||||
- **DiskMbFreeAfterCleanup** The amount of free hard disk space after cleanup, measured in Megabytes.
|
||||
- **DiskMbFreeBeforeCleanup** The amount of free hard disk space before cleanup, measured in Megabytes.
|
||||
- **ForcedAppraiserTaskTriggered** TRUE if Appraiser task ran from the plug-in.
|
||||
- **GlobalEventCounter** Client-side counter that indicates ordering of events sent by the active user.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in Megabytes.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in megabytes.
|
||||
- **hasRolledBack** Indicates whether the client machine has rolled back.
|
||||
- **hasUninstalled** Indicates whether the client machine has uninstalled a later version of the OS.
|
||||
- **hResult** The result of the event execution.
|
||||
@ -3298,7 +3351,7 @@ The following fields are available:
|
||||
- **RunResult** The HRESULT for Detection or Perform Action phases of the plug-in.
|
||||
- **ServiceHealthPlugin** The nae of the Service Health plug-in.
|
||||
- **StartComponentCleanupTask** TRUE if the Component Cleanup task started successfully.
|
||||
- **systemDriveFreeDiskSpace** Indicates the free disk space on system drive in MBs.
|
||||
- **systemDriveFreeDiskSpace** Indicates the free disk space on system drive, in megabytes.
|
||||
- **systemUptimeInHours** Indicates the amount of time the system in hours has been on since the last boot.
|
||||
- **TotalSizeofOrphanedInstallerFilesInMegabytes** The size of any orphaned Windows Installer files, measured in Megabytes.
|
||||
- **TotalSizeofStoreCacheAfterCleanupInMegabytes** The size of the Microsoft Store cache after cleanup, measured in Megabytes.
|
||||
@ -3313,7 +3366,7 @@ The following fields are available:
|
||||
- **usoScanIsNetworkMetered** TRUE if the device is currently connected to a metered network.
|
||||
- **usoScanIsNoAutoUpdateKeyPresent** TRUE if no Auto Update registry key is set/present.
|
||||
- **usoScanIsUserLoggedOn** TRUE if the user is logged on.
|
||||
- **usoScanPastThreshold** TRUE if the most recent USO (Update Session Orchestrator) scan is past the threshold (late).
|
||||
- **usoScanPastThreshold** TRUE if the most recent Update Session Orchestrator (USO) scan is past the threshold (late).
|
||||
- **usoScanType** The type of USO (Update Session Orchestrator) scan: "Interactive" or "Background".
|
||||
- **windows10UpgraderBlockWuUpdates** Event to report the value of Windows 10 Upgrader BlockWuUpdates Key.
|
||||
- **windowsEditionId** Event to report the value of Windows Edition ID.
|
||||
@ -3347,13 +3400,13 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Started
|
||||
|
||||
This event reports whether a plug-in started, to help ensure Windows is up to date.
|
||||
This event is sent when Windows Update sediment remediations have started on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
|
||||
@ -3615,7 +3668,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Applicable
|
||||
|
||||
Indicates whether a given plugin is applicable.
|
||||
This event is sent when the Windows Update sediment remediations launcher finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3631,7 +3684,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Completed
|
||||
|
||||
Indicates whether a given plugin has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations launcher finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3678,7 +3731,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Started
|
||||
|
||||
This event indicates that a given plug-in has started.
|
||||
This event is sent when the Windows Update sediment remediations launcher starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3716,7 +3769,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Applicable
|
||||
|
||||
This event indicates whether a given plug-in is applicable.
|
||||
This event is sent when the Windows Update sediment remediations service finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3732,7 +3785,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Completed
|
||||
|
||||
This event indicates whether a given plug-in has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations service finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3786,7 +3839,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Started
|
||||
|
||||
This event indicates a specified plug-in has started. This information helps ensure Windows is up to date.
|
||||
This event is sent when the Windows Update sediment remediations service starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4128,7 +4181,7 @@ The following fields are available:
|
||||
- **HandlerType** Indicates the kind of content (app, driver, windows patch, etc.)
|
||||
- **RevisionNumber** Unique revision number of Update
|
||||
- **ServerId** Identifier for the service to which the software distribution client is connecting, such as Windows Update and Microsoft Store.
|
||||
- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc)
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **SystemBIOSMajorRelease** Major version of the BIOS.
|
||||
- **SystemBIOSMinorRelease** Minor version of the BIOS.
|
||||
- **UpdateId** Unique Update ID
|
||||
@ -4192,7 +4245,7 @@ The following fields are available:
|
||||
- **RelatedCV** The previous Correlation Vector that was used before swapping with a new one
|
||||
- **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to download.
|
||||
- **RevisionNumber** The revision number of the specified piece of content.
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **Setup360Phase** Identifies the active phase of the upgrade download if the current download is for an Operating System upgrade.
|
||||
- **ShippingMobileOperator** The mobile operator linked to the device when the device shipped.
|
||||
- **StatusCode** Indicates the result of a Download event (success, cancellation, failure code HResult).
|
||||
@ -5298,7 +5351,7 @@ The following fields are available:
|
||||
- **ReportId** WER Report Id associated with this bug check (used for finding the corresponding report archive in Watson).
|
||||
|
||||
|
||||
## Microsoft Store events
|
||||
## Windows Store events
|
||||
|
||||
### Microsoft.Windows.Store.Partner.ReportApplication
|
||||
|
||||
@ -6514,12 +6567,29 @@ The following fields are available:
|
||||
|
||||
## Windows Update Reserve Manager events
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.CommitPendingHardReserveAdjustment
|
||||
|
||||
This event is sent when the Update Reserve Manager commits a hard reserve adjustment that was pending.
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.InitializeUpdateReserveManager
|
||||
|
||||
This event returns data about the Update Reserve Manager, including whether it’s been initialized.
|
||||
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.RemovePendingHardReserveAdjustment
|
||||
|
||||
This event is sent when the Update Reserve Manager removes a pending hard reserve adjustment.
|
||||
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.UpdatePendingHardReserveAdjustment
|
||||
|
||||
This event is sent when the Update Reserve Manager needs to adjust the size of the hard reserve after the option content is installed.
|
||||
|
||||
|
||||
|
||||
## Winlogon events
|
||||
|
||||
### Microsoft.Windows.Security.Winlogon.SetupCompleteLogon
|
||||
|
||||
@ -7,13 +7,13 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
localizationpriority: high
|
||||
audience: ITPro
|
||||
author: brianlic-msft
|
||||
ms.author: brianlic
|
||||
manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 02/15/2019
|
||||
audience: ITPro
|
||||
ms.date: 04/19/2019
|
||||
---
|
||||
|
||||
|
||||
@ -32,7 +32,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
|
||||
|
||||
You can learn more about Windows functional and diagnostic data through these articles:
|
||||
|
||||
|
||||
- [Windows 10, version 1903 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md)
|
||||
- [Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
|
||||
- [Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1709.md)
|
||||
- [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md)
|
||||
@ -1374,7 +1374,7 @@ The following fields are available:
|
||||
|
||||
### Census.App
|
||||
|
||||
Provides information on IE and Census versions running on the device.
|
||||
This event sends version data about the Apps running on this device, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1582,9 +1582,53 @@ The following fields are available:
|
||||
- **SLICVersion** Returns OS type/version from SLIC table.
|
||||
|
||||
|
||||
### Census.PrivacySettings
|
||||
|
||||
This event provides information about the device level privacy settings and whether device-level access was granted to these capabilities. Not all settings are applicable to all devices. Each field records the consent state for the corresponding privacy setting. The consent state is encoded as a 16-bit signed integer, where the first 8 bits represents the effective consent value, and the last 8 bits represent the authority that set the value. The effective consent (first 8 bits) is one of the following values: -3 = unexpected consent value, -2 = value was not requested, -1 = an error occurred while attempting to retrieve the value, 0 = undefined, 1 = allow, 2 = deny, 3 = prompt. The consent authority (last 8 bits) is one of the following values: -3 = unexpected authority, -2 = value was not requested, -1 = an error occurred while attempting to retrieve the value, 0 = system, 1 = a higher authority (a gating setting, the system-wide setting, or a group policy), 2 = advertising ID group policy, 3 = advertising ID policy for child account, 4 = privacy setting provider doesn't know the actual consent authority, 5 = consent was not configured and a default set in code was used, 6 = system default, 7 = organization policy, 8 = OneSettings.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **Activity** Current state of the activity history setting.
|
||||
- **ActivityHistoryCloudSync** Current state of the activity history cloud sync setting.
|
||||
- **ActivityHistoryCollection** Current state of the activity history collection setting.
|
||||
- **AdvertisingId** Current state of the advertising ID setting.
|
||||
- **AppDiagnostics** Current state of the app diagnostics setting.
|
||||
- **Appointments** Current state of the calendar setting.
|
||||
- **Bluetooth** Current state of the Bluetooth capability setting.
|
||||
- **BluetoothSync** Current state of the Bluetooth sync capability setting.
|
||||
- **BroadFileSystemAccess** Current state of the broad file system access setting.
|
||||
- **CellularData** Current state of the cellular data capability setting.
|
||||
- **Chat** Current state of the chat setting.
|
||||
- **Contacts** Current state of the contacts setting.
|
||||
- **DocumentsLibrary** Current state of the documents library setting.
|
||||
- **Email** Current state of the email setting.
|
||||
- **FindMyDevice** Current state of the "find my device" setting.
|
||||
- **GazeInput** Current state of the gaze input setting.
|
||||
- **HumanInterfaceDevice** Current state of the human interface device setting.
|
||||
- **InkTypeImprovement** Current state of the improve inking and typing setting.
|
||||
- **Location** Current state of the location setting.
|
||||
- **LocationHistory** Current state of the location history setting.
|
||||
- **Microphone** Current state of the microphone setting.
|
||||
- **PhoneCall** Current state of the phone call setting.
|
||||
- **PhoneCallHistory** Current state of the call history setting.
|
||||
- **PicturesLibrary** Current state of the pictures library setting.
|
||||
- **Radios** Current state of the radios setting.
|
||||
- **SensorsCustom** Current state of the custom sensor setting.
|
||||
- **SerialCommunication** Current state of the serial communication setting.
|
||||
- **Sms** Current state of the text messaging setting.
|
||||
- **SpeechPersonalization** Current state of the speech services setting.
|
||||
- **USB** Current state of the USB setting.
|
||||
- **UserAccountInformation** Current state of the account information setting.
|
||||
- **UserDataTasks** Current state of the tasks setting.
|
||||
- **UserNotificationListener** Current state of the notifications setting.
|
||||
- **VideosLibrary** Current state of the videos library setting.
|
||||
- **Webcam** Current state of the camera setting.
|
||||
- **WiFiDirect** Current state of the Wi-Fi direct setting.
|
||||
|
||||
|
||||
### Census.Processor
|
||||
|
||||
Provides information on several important data points about Processor settings.
|
||||
This event sends data about the processor to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1695,6 +1739,50 @@ The following fields are available:
|
||||
- **SpeechInputLanguages** The Speech Input languages installed on the device.
|
||||
|
||||
|
||||
### Census.UserPrivacySettings
|
||||
|
||||
This event provides information about the current users privacy settings and whether device-level access was granted to these capabilities. Not all settings are applicable to all devices. Each field records the consent state for the corresponding privacy setting. The consent state is encoded as a 16-bit signed integer, where the first 8 bits represents the effective consent value, and the last 8 bits represents the authority that set the value. The effective consent is one of the following values: -3 = unexpected consent value, -2 = value was not requested, -1 = an error occurred while attempting to retrieve the value, 0 = undefined, 1 = allow, 2 = deny, 3 = prompt. The consent authority is one of the following values: -3 = unexpected authority, -2 = value was not requested, -1 = an error occurred while attempting to retrieve the value, 0 = user, 1 = a higher authority (a gating setting, the system-wide setting, or a group policy), 2 = advertising ID group policy, 3 = advertising ID policy for child account, 4 = privacy setting provider doesn't know the actual consent authority, 5 = consent was not configured and a default set in code was used, 6 = system default, 7 = organization policy, 8 = OneSettings.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **Activity** Current state of the activity history setting.
|
||||
- **ActivityHistoryCloudSync** Current state of the activity history cloud sync setting.
|
||||
- **ActivityHistoryCollection** Current state of the activity history collection setting.
|
||||
- **AdvertisingId** Current state of the advertising ID setting.
|
||||
- **AppDiagnostics** Current state of the app diagnostics setting.
|
||||
- **Appointments** Current state of the calendar setting.
|
||||
- **Bluetooth** Current state of the Bluetooth capability setting.
|
||||
- **BluetoothSync** Current state of the Bluetooth sync capability setting.
|
||||
- **BroadFileSystemAccess** Current state of the broad file system access setting.
|
||||
- **CellularData** Current state of the cellular data capability setting.
|
||||
- **Chat** Current state of the chat setting.
|
||||
- **Contacts** Current state of the contacts setting.
|
||||
- **DocumentsLibrary** Current state of the documents library setting.
|
||||
- **Email** Current state of the email setting.
|
||||
- **GazeInput** Current state of the gaze input setting.
|
||||
- **HumanInterfaceDevice** Current state of the human interface device setting.
|
||||
- **InkTypeImprovement** Current state of the improve inking and typing setting.
|
||||
- **InkTypePersonalization** Current state of the inking and typing personalization setting.
|
||||
- **Location** Current state of the location setting.
|
||||
- **LocationHistory** Current state of the location history setting.
|
||||
- **Microphone** Current state of the microphone setting.
|
||||
- **PhoneCall** Current state of the phone call setting.
|
||||
- **PhoneCallHistory** Current state of the call history setting.
|
||||
- **PicturesLibrary** Current state of the pictures library setting.
|
||||
- **Radios** Current state of the radios setting.
|
||||
- **SensorsCustom** Current state of the custom sensor setting.
|
||||
- **SerialCommunication** Current state of the serial communication setting.
|
||||
- **Sms** Current state of the text messaging setting.
|
||||
- **SpeechPersonalization** Current state of the speech services setting.
|
||||
- **USB** Current state of the USB setting.
|
||||
- **UserAccountInformation** Current state of the account information setting.
|
||||
- **UserDataTasks** Current state of the tasks setting.
|
||||
- **UserNotificationListener** Current state of the notifications setting.
|
||||
- **VideosLibrary** Current state of the videos library setting.
|
||||
- **Webcam** Current state of the camera setting.
|
||||
- **WiFiDirect** Current state of the Wi-Fi direct setting.
|
||||
|
||||
|
||||
### Census.VM
|
||||
|
||||
This event sends data indicating whether virtualization is enabled on the device, and its various characteristics, to help keep Windows up to date.
|
||||
@ -1819,7 +1907,6 @@ The following fields are available:
|
||||
- **ext_cs** Describes properties related to the schema of the event. See [Common Data Extensions.cs](#common-data-extensionscs).
|
||||
- **ext_device** Describes the device-related fields. See [Common Data Extensions.device](#common-data-extensionsdevice).
|
||||
- **ext_os** Describes the operating system properties that would be populated by the client. See [Common Data Extensions.os](#common-data-extensionsos).
|
||||
- **ext_receipts** Describes the fields related to time as provided by the client for debugging purposes. See [Common Data Extensions.receipts](#common-data-extensionsreceipts).
|
||||
- **ext_sdk** Describes the fields related to a platform library required for a specific SDK. See [Common Data Extensions.sdk](#common-data-extensionssdk).
|
||||
- **ext_user** Describes the fields related to a user. See [Common Data Extensions.user](#common-data-extensionsuser).
|
||||
- **ext_utc** Describes the fields that might be populated by a logging library on Windows. See [Common Data Extensions.utc](#common-data-extensionsutc).
|
||||
@ -1845,16 +1932,6 @@ The following fields are available:
|
||||
- **ver** Represents the major and minor version of the extension.
|
||||
|
||||
|
||||
### Common Data Extensions.receipts
|
||||
|
||||
Represents various time information as provided by the client and helps for debugging purposes.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **originalTime** The original event time.
|
||||
- **uploadTime** The time the event was uploaded.
|
||||
|
||||
|
||||
### Common Data Extensions.sdk
|
||||
|
||||
Used by platform specific libraries to record fields that are required for a specific SDK.
|
||||
@ -2027,6 +2104,41 @@ The following fields are available:
|
||||
- **transactionCanceled** Indicates whether the uninstall was cancelled.
|
||||
|
||||
|
||||
### CbsServicingProvider.CbsSelectableUpdateChangeV2
|
||||
|
||||
This event reports the results of enabling or disabling optional Windows Content to keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **applicableUpdateState** Indicates the highest applicable state of the optional content.
|
||||
- **buildVersion** The build version of the package being installed.
|
||||
- **clientId** The name of the application requesting the optional content change.
|
||||
- **downloadSource** Indicates if optional content was obtained from Windows Update or a locally accessible file.
|
||||
- **downloadtimeInSeconds** Indicates if optional content was obtained from Windows Update or a locally accessible file.
|
||||
- **executionID** A unique ID used to identify events associated with a single servicing operation and not reused for future operations.
|
||||
- **executionSequence** A counter that tracks the number of servicing operations attempted on the device.
|
||||
- **firstMergedExecutionSequence** The value of a pervious executionSequence counter that is being merged with the current operation, if applicable.
|
||||
- **firstMergedID** A unique ID of a pervious servicing operation that is being merged with this operation, if applicable.
|
||||
- **hrDownloadResult** The return code of the download operation.
|
||||
- **hrStatusUpdate** The return code of the servicing operation.
|
||||
- **identityHash** A pseudonymized (hashed) identifier for the Windows Package that is being installed or uninstalled.
|
||||
- **initiatedOffline** Indicates whether the operation was performed against an offline Windows image file or a running instance of Windows.
|
||||
- **majorVersion** The major version of the package being installed.
|
||||
- **minorVersion** The minor version of the package being installed.
|
||||
- **packageArchitecture** The architecture of the package being installed.
|
||||
- **packageLanguage** The language of the package being installed.
|
||||
- **packageName** The name of the package being installed.
|
||||
- **rebootRequired** Indicates whether a reboot is required to complete the operation.
|
||||
- **revisionVersion** The revision number of the package being installed.
|
||||
- **stackBuild** The build number of the servicing stack binary performing the installation.
|
||||
- **stackMajorVersion** The major version number of the servicing stack binary performing the installation.
|
||||
- **stackMinorVersion** The minor version number of the servicing stack binary performing the installation.
|
||||
- **stackRevision** The revision number of the servicing stack binary performing the installation.
|
||||
- **updateName** The name of the optional Windows Operation System feature being enabled or disabled.
|
||||
- **updateStartState** A value indicating the state of the optional content before the operation started.
|
||||
- **updateTargetState** A value indicating the desired state of the optional content.
|
||||
|
||||
|
||||
## Deployment extensions
|
||||
|
||||
### DeploymentTelemetry.Deployment_End
|
||||
@ -4120,26 +4232,43 @@ The following fields are available:
|
||||
- **threadId** The ID of the thread the activity was run on.
|
||||
|
||||
|
||||
## Privacy logging notification events
|
||||
|
||||
### Microsoft.Windows.Shell.PrivacyNotifierLogging.PrivacyNotifierCompleted
|
||||
|
||||
This event returns data to report the efficacy of a single-use tool to inform users impacted by a known issue and to take corrective action to address the issue.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **cleanupTask** Indicates whether the task that launched the dialog should be cleaned up.
|
||||
- **cleanupTaskResult** The return code of the attempt to clean up the task used to show the dialog.
|
||||
- **deviceEvaluated** Indicates whether the device was eligible for evaluation of a known issue.
|
||||
- **deviceImpacted** Indicates whether the device was impacted by a known issue.
|
||||
- **modalAction** The action the user took on the dialog that was presented to them.
|
||||
- **modalResult** The return code of the attempt to show a dialog to the user explaining the issue.
|
||||
- **resetSettingsResult** The return code of the action to correct the known issue.
|
||||
|
||||
|
||||
## Remediation events
|
||||
|
||||
### Microsoft.Windows.Remediation.Applicable
|
||||
|
||||
This event indicates a remedial plug-in is applicable if/when such a plug-in is detected. This is used to ensure Windows is up to date.
|
||||
deny
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ActionName** The name of the action to be taken by the plug-in.
|
||||
- **AppraiserBinariesValidResult** Indicates whether plug-in was appraised as valid.
|
||||
- **AppraiserBinariesValidResult** Indicates whether the plug-in was appraised as valid.
|
||||
- **AppraiserDetectCondition** Indicates whether the plug-in passed the appraiser's check.
|
||||
- **AppraiserRegistryValidResult** Indicates whether the registry entry checks out as valid.
|
||||
- **AppraiserTaskDisabled** Indicates the appraiser task is disabled.
|
||||
- **AppraiserTaskValidFailed** Indicates the Appraiser task did not function and requires intervention.
|
||||
- **CV** Correlation vector
|
||||
- **DateTimeDifference** The difference between local and reference clock times.
|
||||
- **DateTimeSyncEnabled** Indicates whether the datetime sync plug-in is enabled.
|
||||
- **DateTimeSyncEnabled** Indicates whether the Datetime Sync plug-in is enabled.
|
||||
- **DaysSinceLastSIH** The number of days since the most recent SIH executed.
|
||||
- **DaysToNextSIH** The number of days until the next scheduled SIH execution.
|
||||
- **DetectedCondition** Indicates whether detect condition is true and the perform action will be run.
|
||||
- **DetectedCondition** Indicates whether detected condition is true and the perform action will be run.
|
||||
- **EvalAndReportAppraiserBinariesFailed** Indicates the EvalAndReportAppraiserBinaries event failed.
|
||||
- **EvalAndReportAppraiserRegEntries** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
- **EvalAndReportAppraiserRegEntriesFailed** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
@ -4153,12 +4282,12 @@ The following fields are available:
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Reload** True if SIH reload is required.
|
||||
- **RemediationNoisyHammerAcLineStatus** Event that indicates the AC Line Status of the machine.
|
||||
- **RemediationNoisyHammerAcLineStatus** Indicates the AC Line Status of the device.
|
||||
- **RemediationNoisyHammerAutoStartCount** The number of times hammer auto-started.
|
||||
- **RemediationNoisyHammerCalendarTaskEnabled** Event that indicates Update Assistant Calendar Task is enabled.
|
||||
- **RemediationNoisyHammerCalendarTaskExists** Event that indicates an Update Assistant Calendar Task exists.
|
||||
- **RemediationNoisyHammerCalendarTaskTriggerEnabledCount** Event that indicates calendar triggers are enabled in the task.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent hammer task ran.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent Noisy Hammer task ran.
|
||||
- **RemediationNoisyHammerGetCurrentSize** Size in MB of the $GetCurrent folder.
|
||||
- **RemediationNoisyHammerIsInstalled** TRUE if the noisy hammer is installed.
|
||||
- **RemediationNoisyHammerLastTaskRunResult** The result of the last hammer task run.
|
||||
@ -4228,7 +4357,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Completed
|
||||
|
||||
This event enables completion tracking of a process that remediates issues preventing security and quality updates.
|
||||
This event is sent when Windows Update sediment remediations have completed on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4246,12 +4375,12 @@ The following fields are available:
|
||||
- **CV** The Correlation Vector.
|
||||
- **DateTimeDifference** The difference between the local and reference clocks.
|
||||
- **DaysSinceOsInstallation** The number of days since the installation of the Operating System.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in Megabytes.
|
||||
- **DiskMbCleaned** The amount of space cleaned on the hard disk, measured in megabytes.
|
||||
- **DiskMbFreeAfterCleanup** The amount of free hard disk space after cleanup, measured in Megabytes.
|
||||
- **DiskMbFreeBeforeCleanup** The amount of free hard disk space before cleanup, measured in Megabytes.
|
||||
- **ForcedAppraiserTaskTriggered** TRUE if Appraiser task ran from the plug-in.
|
||||
- **GlobalEventCounter** Client-side counter that indicates ordering of events sent by the active user.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in Megabytes.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in megabytes.
|
||||
- **hasRolledBack** Indicates whether the client machine has rolled back.
|
||||
- **hasUninstalled** Indicates whether the client machine has uninstalled a later version of the OS.
|
||||
- **hResult** The result of the event execution.
|
||||
@ -4316,7 +4445,7 @@ The following fields are available:
|
||||
- **ServiceHealthInstalledBitMap** List of services installed by the plugin.
|
||||
- **ServiceHealthPlugin** The nae of the Service Health plug-in.
|
||||
- **StartComponentCleanupTask** TRUE if the Component Cleanup task started successfully.
|
||||
- **systemDriveFreeDiskSpace** Indicates the free disk space on system drive in MBs.
|
||||
- **systemDriveFreeDiskSpace** Indicates the free disk space on system drive, in megabytes.
|
||||
- **systemUptimeInHours** Indicates the amount of time the system in hours has been on since the last boot.
|
||||
- **TotalSizeofOrphanedInstallerFilesInMegabytes** The size of any orphaned Windows Installer files, measured in Megabytes.
|
||||
- **TotalSizeofStoreCacheAfterCleanupInMegabytes** The size of the Microsoft Store cache after cleanup, measured in Megabytes.
|
||||
@ -4331,7 +4460,7 @@ The following fields are available:
|
||||
- **usoScanIsNetworkMetered** TRUE if the device is currently connected to a metered network.
|
||||
- **usoScanIsNoAutoUpdateKeyPresent** TRUE if no Auto Update registry key is set/present.
|
||||
- **usoScanIsUserLoggedOn** TRUE if the user is logged on.
|
||||
- **usoScanPastThreshold** TRUE if the most recent USO (Update Session Orchestrator) scan is past the threshold (late).
|
||||
- **usoScanPastThreshold** TRUE if the most recent Update Session Orchestrator (USO) scan is past the threshold (late).
|
||||
- **usoScanType** The type of USO (Update Session Orchestrator) scan: "Interactive" or "Background".
|
||||
- **windows10UpgraderBlockWuUpdates** Event to report the value of Windows 10 Upgrader BlockWuUpdates Key.
|
||||
- **windowsEditionId** Event to report the value of Windows Edition ID.
|
||||
@ -4365,13 +4494,13 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Remediation.Started
|
||||
|
||||
This event reports whether a plug-in started, to help ensure Windows is up to date.
|
||||
This event is sent when Windows Update sediment remediations have started on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
- **RunCount** The number of times the remediation event started (whether it completed successfully or not).
|
||||
@ -4598,7 +4727,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Applicable
|
||||
|
||||
Indicates whether a given plugin is applicable.
|
||||
This event is sent when the Windows Update sediment remediations launcher finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4614,7 +4743,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Completed
|
||||
|
||||
Indicates whether a given plugin has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations launcher finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4629,7 +4758,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Started
|
||||
|
||||
This event indicates that a given plug-in has started.
|
||||
This event is sent when the Windows Update sediment remediations launcher starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4642,7 +4771,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Applicable
|
||||
|
||||
This event indicates whether a given plug-in is applicable.
|
||||
This event is sent when the Windows Update sediment remediations service finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4658,7 +4787,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Completed
|
||||
|
||||
This event indicates whether a given plug-in has completed its work.
|
||||
This event is sent when the Windows Update sediment remediations service finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4680,7 +4809,7 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.SedimentService.Started
|
||||
|
||||
This event indicates a specified plug-in has started. This information helps ensure Windows is up to date.
|
||||
This event is sent when the Windows Update sediment remediations service starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -4934,7 +5063,7 @@ The following fields are available:
|
||||
- **FlightId** The specific id of the flight the device is getting
|
||||
- **HandlerType** Indicates the kind of content (app, driver, windows patch, etc.)
|
||||
- **RevisionNumber** Identifies the revision number of this specific piece of content
|
||||
- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc)
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **SystemBIOSMajorRelease** Major release version of the system bios
|
||||
- **SystemBIOSMinorRelease** Minor release version of the system bios
|
||||
- **UpdateId** Identifier associated with the specific piece of content
|
||||
@ -4997,7 +5126,7 @@ The following fields are available:
|
||||
- **RelatedCV** The Correlation Vector that was used before the most recent change to a new Correlation Vector.
|
||||
- **RepeatFailFlag** Indicates whether this specific piece of content had previously failed to download.
|
||||
- **RevisionNumber** The revision number of the specified piece of content.
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **Setup360Phase** Identifies the active phase of the upgrade download if the current download is for an Operating System upgrade.
|
||||
- **ShippingMobileOperator** The mobile operator linked to the device when the device shipped.
|
||||
- **StatusCode** Indicates the result of a Download event (success, cancellation, failure code HResult).
|
||||
@ -5988,7 +6117,7 @@ The following fields are available:
|
||||
- **PertProb** Constant used in algorithm for randomization.
|
||||
|
||||
|
||||
## Microsoft Store events
|
||||
## Windows Store events
|
||||
|
||||
### Microsoft.Windows.Store.StoreActivating
|
||||
|
||||
@ -7646,6 +7775,12 @@ This event is sent when the Update Reserve Manager returns an error from one of
|
||||
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.InitializeUpdateReserveManager
|
||||
|
||||
This event returns data about the Update Reserve Manager, including whether it’s been initialized.
|
||||
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.PrepareTIForReserveInitialization
|
||||
|
||||
This event is sent when the Update Reserve Manager prepares the Trusted Installer to initialize reserves on the next boot.
|
||||
|
||||
@ -7,13 +7,13 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
localizationpriority: high
|
||||
audience: ITPro
|
||||
author: brianlic-msft
|
||||
ms.author: brianlic
|
||||
manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 02/15/2019
|
||||
audience: ITPro
|
||||
ms.date: 04/19/2019
|
||||
---
|
||||
|
||||
|
||||
@ -32,7 +32,7 @@ Use this article to learn about diagnostic events, grouped by event area, and th
|
||||
|
||||
You can learn more about Windows functional and diagnostic data through these articles:
|
||||
|
||||
|
||||
- [Windows 10, version 1903 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1903.md)
|
||||
- [Windows 10, version 1803 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1803.md)
|
||||
- [Windows 10, version 1709 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1709.md)
|
||||
- [Windows 10, version 1703 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1703.md)
|
||||
@ -311,6 +311,7 @@ The following fields are available:
|
||||
- **DatasourceApplicationFile_RS1** An ID for the system, calculated by hashing hardware identifiers.
|
||||
- **DatasourceApplicationFile_RS2** An ID for the system, calculated by hashing hardware identifiers.
|
||||
- **DatasourceApplicationFile_RS3** The count of the number of this particular object type present on this device.
|
||||
- **DatasourceApplicationFile_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DatasourceApplicationFile_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DatasourceApplicationFile_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DatasourceApplicationFile_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -349,6 +350,7 @@ The following fields are available:
|
||||
- **DataSourceMatchingInfoBlock_RS1** The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS2** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS3** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoBlock_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -361,6 +363,7 @@ The following fields are available:
|
||||
- **DataSourceMatchingInfoPassive_RS1** The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS2** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS3** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPassive_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -373,6 +376,7 @@ The following fields are available:
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS1** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS2** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS3** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DataSourceMatchingInfoPostUpgrade_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -398,6 +402,7 @@ The following fields are available:
|
||||
- **DecisionApplicationFile_RS1** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS2** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS3** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionApplicationFile_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -436,6 +441,7 @@ The following fields are available:
|
||||
- **DecisionMatchingInfoBlock_RS1** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS2** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS3** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS4** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1803 present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoBlock_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -448,6 +454,7 @@ The following fields are available:
|
||||
- **DecisionMatchingInfoPassive_RS1** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device.
|
||||
- **DecisionMatchingInfoPassive_RS2** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device.
|
||||
- **DecisionMatchingInfoPassive_RS3** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device.
|
||||
- **DecisionMatchingInfoPassive_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPassive_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPassive_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPassive_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -460,6 +467,7 @@ The following fields are available:
|
||||
- **DecisionMatchingInfoPostUpgrade_RS1** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS2** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS3** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS4** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMatchingInfoPostUpgrade_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -472,6 +480,7 @@ The following fields are available:
|
||||
- **DecisionMediaCenter_RS1** The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device.
|
||||
- **DecisionMediaCenter_RS2** The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device.
|
||||
- **DecisionMediaCenter_RS3** The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device.
|
||||
- **DecisionMediaCenter_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMediaCenter_RS4** The total DecisionMediaCenter objects targeting Windows 10 version 1803 present on this device.
|
||||
- **DecisionMediaCenter_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **DecisionMediaCenter_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -522,6 +531,7 @@ The following fields are available:
|
||||
- **Wmdrm_RS1** An ID for the system, calculated by hashing hardware identifiers.
|
||||
- **Wmdrm_RS2** An ID for the system, calculated by hashing hardware identifiers.
|
||||
- **Wmdrm_RS3** An ID for the system, calculated by hashing hardware identifiers.
|
||||
- **Wmdrm_RS3Setup** The count of the number of this particular object type present on this device.
|
||||
- **Wmdrm_RS4** The total Wmdrm objects targeting Windows 10, version 1803 present on this device.
|
||||
- **Wmdrm_RS4Setup** The count of the number of this particular object type present on this device.
|
||||
- **Wmdrm_RS5** The count of the number of this particular object type present on this device.
|
||||
@ -624,6 +634,17 @@ The following fields are available:
|
||||
- **AppraiserVersion** The version of the appraiser file generating the events.
|
||||
|
||||
|
||||
### Microsoft.Windows.Appraiser.General.DatasourceDriverPackageRemove
|
||||
|
||||
This event indicates that the DatasourceDriverPackage object is no longer present.
|
||||
|
||||
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
|
||||
|
||||
|
||||
### Microsoft.Windows.Appraiser.General.DatasourceDriverPackageStartSync
|
||||
|
||||
This event indicates that a new set of DatasourceDriverPackageAdd events will be sent.
|
||||
@ -1780,7 +1801,7 @@ The following fields are available:
|
||||
|
||||
### Census.App
|
||||
|
||||
Provides information on IE and Census versions running on the device
|
||||
This event sends version data about the Apps running on this device, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1796,6 +1817,17 @@ The following fields are available:
|
||||
- **IEVersion** The version of Internet Explorer that is running on the device.
|
||||
|
||||
|
||||
### Census.Azure
|
||||
|
||||
This event returns data from Microsoft-internal Azure server machines (only from Microsoft-internal machines with Server SKUs). All other machines (those outside Microsoft and/or machines that are not part of the “Azure fleet”) return empty data sets.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CloudCoreBuildEx** The Azure CloudCore build number.
|
||||
- **CloudCoreSupportBuildEx** The Azure CloudCore support build number.
|
||||
- **NodeID** The node identifier on the device that indicates whether the device is part of the Azure fleet.
|
||||
|
||||
|
||||
### Census.Battery
|
||||
|
||||
This event sends type and capacity data about the battery on the device, as well as the number of connected standby devices in use, type to help keep Windows up to date.
|
||||
@ -2038,7 +2070,7 @@ The following fields are available:
|
||||
|
||||
### Census.Processor
|
||||
|
||||
Provides information on several important data points about Processor settings
|
||||
This event sends data about the processor to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -2325,7 +2357,6 @@ The following fields are available:
|
||||
- **ext_cs** Describes properties related to the schema of the event. See [Common Data Extensions.cs](#common-data-extensionscs).
|
||||
- **ext_device** Describes the device-related fields. See [Common Data Extensions.device](#common-data-extensionsdevice).
|
||||
- **ext_os** Describes the operating system properties that would be populated by the client. See [Common Data Extensions.os](#common-data-extensionsos).
|
||||
- **ext_receipts** Describes the fields related to time as provided by the client for debugging purposes. See [Common Data Extensions.receipts](#common-data-extensionsreceipts).
|
||||
- **ext_sdk** Describes the fields related to a platform library required for a specific SDK. See [Common Data Extensions.sdk](#common-data-extensionssdk).
|
||||
- **ext_user** Describes the fields related to a user. See [Common Data Extensions.user](#common-data-extensionsuser).
|
||||
- **ext_utc** Describes the fields that might be populated by a logging library on Windows. See [Common Data Extensions.utc](#common-data-extensionsutc).
|
||||
@ -2351,16 +2382,6 @@ The following fields are available:
|
||||
- **ver** Represents the major and minor version of the extension.
|
||||
|
||||
|
||||
### Common Data Extensions.receipts
|
||||
|
||||
Represents various time information as provided by the client and helps for debugging purposes.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **originalTime** The original event time.
|
||||
- **uploadTime** The time the event was uploaded.
|
||||
|
||||
|
||||
### Common Data Extensions.sdk
|
||||
|
||||
Used by platform specific libraries to record fields that are required for a specific SDK.
|
||||
@ -2580,6 +2601,41 @@ The following fields are available:
|
||||
- **stageTimeSeconds** The time (in seconds) required to stage all files that are part of the update.
|
||||
|
||||
|
||||
### CbsServicingProvider.CbsSelectableUpdateChangeV2
|
||||
|
||||
This event reports the results of enabling or disabling optional Windows Content to keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **applicableUpdateState** Indicates the highest applicable state of the optional content.
|
||||
- **buildVersion** The build version of the package being installed.
|
||||
- **clientId** The name of the application requesting the optional content change.
|
||||
- **downloadSource** Indicates if optional content was obtained from Windows Update or a locally accessible file.
|
||||
- **downloadtimeInSeconds** The number of seconds required to complete the optional content download.
|
||||
- **executionID** A unique ID used to identify events associated with a single servicing operation and not reused for future operations.
|
||||
- **executionSequence** A counter that tracks the number of servicing operations attempted on the device.
|
||||
- **firstMergedExecutionSequence** The value of a pervious executionSequence counter that is being merged with the current operation, if applicable.
|
||||
- **firstMergedID** A unique ID of a pervious servicing operation that is being merged with this operation, if applicable.
|
||||
- **hrDownloadResult** The return code of the download operation.
|
||||
- **hrStatusUpdate** The return code of the servicing operation.
|
||||
- **identityHash** A pseudonymized (hashed) identifier for the Windows Package that is being installed or uninstalled.
|
||||
- **initiatedOffline** Indicates whether the operation was performed against an offline Windows image file or a running instance of Windows.
|
||||
- **majorVersion** The major version of the package being installed.
|
||||
- **minorVersion** The minor version of the package being installed.
|
||||
- **packageArchitecture** The architecture of the package being installed.
|
||||
- **packageLanguage** The language of the package being installed.
|
||||
- **packageName** The name of the package being installed.
|
||||
- **rebootRequired** Indicates whether a reboot is required to complete the operation.
|
||||
- **revisionVersion** The revision number of the package being installed.
|
||||
- **stackBuild** The build number of the servicing stack binary performing the installation.
|
||||
- **stackMajorVersion** The major version number of the servicing stack binary performing the installation.
|
||||
- **stackMinorVersion** The minor version number of the servicing stack binary performing the installation.
|
||||
- **stackRevision** The revision number of the servicing stack binary performing the installation.
|
||||
- **updateName** The name of the optional Windows Operation System feature being enabled or disabled.
|
||||
- **updateStartState** A value indicating the state of the optional content before the operation started.
|
||||
- **updateTargetState** A value indicating the desired state of the optional content.
|
||||
|
||||
|
||||
## Deployment extensions
|
||||
|
||||
### DeploymentTelemetry.Deployment_End
|
||||
@ -2730,6 +2786,7 @@ The following fields are available:
|
||||
- **MaxActiveAgentConnectionCount** The maximum number of active agents during this heartbeat timeframe.
|
||||
- **MaxInUseScenarioCounter** Soft maximum number of scenarios loaded by UTC.
|
||||
- **PreviousHeartBeatTime** Time of last heartbeat event (allows chaining of events).
|
||||
- **PrivacyBlockedCount** The number of events blocked due to privacy settings or tags.
|
||||
- **RepeatedUploadFailureDropped** Number of events lost due to repeated upload failures for a single buffer.
|
||||
- **SettingsHttpAttempts** Number of attempts to contact OneSettings service.
|
||||
- **SettingsHttpFailures** The number of failures from contacting the OneSettings service.
|
||||
@ -2769,6 +2826,7 @@ The following fields are available:
|
||||
- **LastEventSizeOffender** Event name of last event which exceeded max event size.
|
||||
- **LastInvalidHttpCode** Last invalid HTTP code received from Vortex.
|
||||
- **PreviousHeartBeatTime** The FILETIME of the previous heartbeat fire.
|
||||
- **PrivacyBlockedCount** The number of events blocked due to privacy settings or tags.
|
||||
- **RepeatedUploadFailureDropped** Number of events lost due to repeated upload failures for a single buffer.
|
||||
- **SettingsHttpAttempts** Number of attempts to contact OneSettings service.
|
||||
- **SettingsHttpFailures** Number of failures from contacting OneSettings service.
|
||||
@ -2837,6 +2895,33 @@ The following fields are available:
|
||||
|
||||
## Direct to update events
|
||||
|
||||
### Microsoft.Windows.DirectToUpdate.DTUCoordinatorCheckApplicability
|
||||
|
||||
Event to indicate that the Coordinator CheckApplicability call succeeded.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ApplicabilityResult** Result of CheckApplicability function.
|
||||
- **CampaignID** Campaign ID being run.
|
||||
- **ClientID** Client ID being run.
|
||||
- **CoordinatorVersion** Coordinator version of DTU.
|
||||
- **CV** Correlation vector.
|
||||
- **IsDeviceAADDomainJoined** Indicates whether the device is logged in to the AAD (Azure Active Directory) domain.
|
||||
- **IsDeviceADDomainJoined** Indicates whether the device is logged in to the AD (Active Directory) domain.
|
||||
- **IsDeviceCloverTrail** Indicates whether the device has a Clover Trail system installed.
|
||||
- **IsDeviceFeatureUpdatingPaused** Indicates whether Feature Update is paused on the device.
|
||||
- **IsDeviceNetworkMetered** Indicates whether the device is connected to a metered network.
|
||||
- **IsDeviceOobeBlocked** Indicates whether user approval is required to install updates on the device.
|
||||
- **IsDeviceRequireUpdateApproval** Indicates whether user approval is required to install updates on the device.
|
||||
- **IsDeviceSccmManaged** Indicates whether the device is running the Microsoft SCCM (System Center Configuration Manager) to keep the operating system and applications up to date.
|
||||
- **IsDeviceUninstallActive** Indicates whether the OS (operating system) on the device was recently updated.
|
||||
- **IsDeviceUpdateNotificationLevel** Indicates whether the device has a set policy to control update notifications.
|
||||
- **IsDeviceUpdateServiceManaged** Indicates whether the device uses WSUS (Windows Server Update Services).
|
||||
- **IsDeviceZeroExhaust** Indicates whether the device subscribes to the Zero Exhaust policy to minimize connections from Windows to Microsoft.
|
||||
- **IsGreaterThanMaxRetry** Indicates whether the DTU (Direct to Update) service has exceeded its maximum retry count.
|
||||
- **IsVolumeLicensed** Indicates whether a volume license was used to authenticate the operating system or applications on the device.
|
||||
|
||||
|
||||
### Microsoft.Windows.DirectToUpdate.DTUCoordinatorCheckApplicabilityGenericFailure
|
||||
|
||||
This event indicatse that we have received an unexpected error in the Direct to Update (DTU) Coordinators CheckApplicability call.
|
||||
@ -3813,6 +3898,8 @@ The following fields are available:
|
||||
- **COMPID** The list of “Compatible IDs” for this device.
|
||||
- **ContainerId** The system-supplied unique identifier that specifies which group(s) the device(s) installed on the parent (main) device belong to.
|
||||
- **Description** The description of the device.
|
||||
- **DeviceDriverFlightId** The test build (Flight) identifier of the device driver.
|
||||
- **DeviceExtDriversFlightIds** The test build (Flight) identifier for all extended device drivers.
|
||||
- **DeviceInterfaceClasses** The device interfaces that this device implements.
|
||||
- **DeviceState** Identifies the current state of the parent (main) device.
|
||||
- **DriverId** The unique identifier for the installed driver.
|
||||
@ -3822,8 +3909,10 @@ The following fields are available:
|
||||
- **DriverVerVersion** The version number of the driver installed on the device.
|
||||
- **Enumerator** Identifies the bus that enumerated the device.
|
||||
- **ExtendedInfs** The extended INF file names.
|
||||
- **FirstInstallDate** The first time this device was installed on the machine.
|
||||
- **HWID** A list of hardware IDs for the device.
|
||||
- **Inf** The name of the INF file (possibly renamed by the OS, such as oemXX.inf).
|
||||
- **InstallDate** The date of the most recent installation of the device on the machine.
|
||||
- **InstallState** The device installation state. For a list of values, see: https://msdn.microsoft.com/en-us/library/windows/hardware/ff543130.aspx
|
||||
- **InventoryVersion** The version number of the inventory process generating the events.
|
||||
- **LowerClassFilters** The identifiers of the Lower Class filters installed for the device.
|
||||
@ -3879,6 +3968,7 @@ The following fields are available:
|
||||
|
||||
This event indicates that a new set of InventoryDeviceUsbHubClassAdd events will be sent.
|
||||
|
||||
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -3980,12 +4070,18 @@ The following fields are available:
|
||||
|
||||
This event collects traces of all other Core events, not used in typical customer scenarios. This event signals the beginning of the event download, and that tracing should begin.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **key** The globally unique identifier (GUID) used to identify the specific Json Trace logging session.
|
||||
|
||||
|
||||
### Microsoft.Windows.Inventory.Core.StopUtcJsonTrace
|
||||
|
||||
This event collects traces of all other Core events, not used in typical customer scenarios. This event signals the end of the event download, and that tracing should end.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **key** The globally unique identifier (GUID) used to identify the specific Json Trace logging session.
|
||||
|
||||
|
||||
### Microsoft.Windows.Inventory.General.AppHealthStaticAdd
|
||||
@ -4437,6 +4533,43 @@ The following fields are available:
|
||||
- **UserInputTime** The amount of time the loader application spent waiting for user input.
|
||||
|
||||
|
||||
## Migration events
|
||||
|
||||
### Microsoft.Windows.MigrationCore.MigObjectCountDLUsr
|
||||
|
||||
This event returns data to track the count of the migration objects across various phases during feature update.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **currentSid** Indicates the user SID for which the migration is being performed.
|
||||
- **knownFoldersUsr[i]** Predefined folder path locations.
|
||||
- **migDiagSession->CString** The phase of the upgrade where migration occurs. (E.g.: Validate tracked content)
|
||||
- **objectCount** The count for the number of objects that are being transferred.
|
||||
|
||||
|
||||
### Microsoft.Windows.MigrationCore.MigObjectCountKFSys
|
||||
|
||||
This event returns data about the count of the migration objects across various phases during feature update.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **knownFoldersSys[i]** The predefined folder path locations.
|
||||
- **migDiagSession->CString** Identifies the phase of the upgrade where migration happens.
|
||||
- **objectCount** The count of the number of objects that are being transferred.
|
||||
|
||||
|
||||
### Microsoft.Windows.MigrationCore.MigObjectCountKFUsr
|
||||
|
||||
This event returns data to track the count of the migration objects across various phases during feature update.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **currentSid** Indicates the user SID for which the migration is being performed.
|
||||
- **knownFoldersUsr[i]** Predefined folder path locations.
|
||||
- **migDiagSession->CString** The phase of the upgrade where the migration occurs. (For example, Validate tracked content.)
|
||||
- **objectCount** The number of objects that are being transferred.
|
||||
|
||||
|
||||
## Miracast events
|
||||
|
||||
### Microsoft.Windows.Cast.Miracast.MiracastSessionEnd
|
||||
@ -4669,6 +4802,354 @@ The following fields are available:
|
||||
- **threadId** The ID of the thread on which the activity is executing.
|
||||
|
||||
|
||||
## Remediation events
|
||||
|
||||
### Microsoft.Windows.Remediation.Applicable
|
||||
|
||||
This event indicates whether Windows Update sediment remediations need to be applied to the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **AllowAutoUpdateExists** Indicates whether the Automatic Update feature is turned on.
|
||||
- **AllowAutoUpdateProviderSetExists** Indicates whether the Allow Automatic Update provider exists.
|
||||
- **AppraiserBinariesValidResult** Indicates whether the plug-in was appraised as valid.
|
||||
- **AppraiserRegistryValidResult** Indicates whether the registry entry checks out as valid.
|
||||
- **AppraiserTaskRepairDisabled** Task repair performed by the Appraiser plug-in is disabled.
|
||||
- **AppraiserTaskValid** Indicates that the Appraiser task is valid.
|
||||
- **AUOptionsExists** Indicates whether the Automatic Update options exist.
|
||||
- **CTACTargetingAttributesInvalid** Indicates whether the Common Targeting Attribute Client (CTAC) attributes are valid. CTAC is a Windows Runtime client library.
|
||||
- **CTACVersion** The Common Targeting Attribute Client (CTAT) version on the device. CTAT is a Windows Runtime client library.
|
||||
- **CV** Correlation vector
|
||||
- **DataStoreSizeInBytes** Size of the data store, in bytes.
|
||||
- **DateTimeDifference** The difference between local and reference clock times.
|
||||
- **DateTimeSyncEnabled** Indicates whether the Datetime Sync plug-in is enabled.
|
||||
- **daysSinceInstallThreshold** The maximum number of days since the operating system was installed before the device is checked to see if remediation is needed.
|
||||
- **daysSinceInstallValue** Number of days since the operating system was installed.
|
||||
- **DaysSinceLastSIH** The number of days since the most recent SIH executed.
|
||||
- **DaysToNextSIH** The number of days until the next scheduled SIH execution.
|
||||
- **DetectConditionEnabled** Indicates whether a condition that the remediation tool can repair was detected.
|
||||
- **DetectedCondition** Indicates whether detected condition is true and the perform action will be run.
|
||||
- **DetectionFailedReason** Indicates why a given remediation failed to fix a problem that was detected.
|
||||
- **DiskFreeSpaceBeforeSedimentPackInMB** Number of megabytes of disk space available on the device before running the Sediment Pack.
|
||||
- **DiskSpaceBefore** The amount of free disk space available before a remediation was run.
|
||||
- **EditionIdFixCorrupted** Indicates whether the Edition ID is corrupted.
|
||||
- **EscalationTimerResetFixResult** The result of fixing the escalation timer.
|
||||
- **EvalAndReportAppraiserRegEntries** Indicates the EvalAndReportAppraiserRegEntriesFailed event failed.
|
||||
- **FixedEditionId** Indicates whether we fixed the edition ID.
|
||||
- **FlightRebootTime** The amount of time before the system is rebooted.
|
||||
- **ForcedRebootToleranceDays** The maximum number of days before a system reboot is forced on the devie.
|
||||
- **FreeSpaceRequirement** The amount of free space required.
|
||||
- **GlobalEventCounter** Client side counter that indicates ordering of events sent by the remediation system.
|
||||
- **HResult** The HRESULT for detection or perform action phases of the plugin.
|
||||
- **installDateValue** The date of the installation.
|
||||
- **IsAppraiserLatestResult** The HRESULT from the appraiser task.
|
||||
- **IsConfigurationCorrected** Indicates whether the configuration of SIH task was successfully corrected.
|
||||
- **IsEscalationTimerResetFixNeeded** Determines whether a fix is applicable.
|
||||
- **IsForcedModeEnabled** Indicates whether forced reboot mode is enabled.
|
||||
- **IsHomeSku** Indicates whether the device is running the Windows 10 Home edition.
|
||||
- **IsRebootForcedMode** Indicates whether the forced reboot mode is turned on.
|
||||
- **IsServiceHardeningEnabled** Indicates whether the Windows Service Hardening feature was turned on for the device.
|
||||
- **IsServiceHardeningNeeded** Indicates whether Windows Service Hardening was needed for the device (multiple instances of service tampering were detected.)
|
||||
- **isThreshold** Indicates whether the value meets our threshold.
|
||||
- **IsUsoRebootPending** Indicates whether a system reboot is pending.
|
||||
- **IsUsoRebootPendingInUpdateStore** Indicates whether a reboot is pending.
|
||||
- **IsUsoRebootTaskEnabled** Indicates whether the Update Service Orchestrator (USO) reboot task is enabled
|
||||
- **IsUsoRebootTaskExists** Indicates whether the Update Service Orchestrator (USO) reboot task exists.
|
||||
- **IsUsoRebootTaskValid** Indicates whether the Update Service Orchestrator (USO) reboot task is valid.
|
||||
- **LastHresult** The HRESULT for detection or perform action phases of the plugin.
|
||||
- **LastRebootTaskRunResult** Indicates the result of the last reboot task.
|
||||
- **LastRebootTaskRunTime** The length of time the last reboot task took to run.
|
||||
- **LastRun** The date of the most recent SIH run.
|
||||
- **LPCountBefore** The number of language packs on the device before remediation started.
|
||||
- **NextCheck** Indicates when remediation will next be attempted.
|
||||
- **NextRebootTaskRunTime** Indicates when the next system reboot task will run.
|
||||
- **NextRun** Date of the next scheduled SIH run.
|
||||
- **NoAutoUpdateExists** Indicates whether the Automatic Updates feature is turned off.
|
||||
- **NumberOfDaysStuckInReboot** The number of days tht the device has been unable to successfully reboot.
|
||||
- **OriginalEditionId** The Windows edition ID before remediation started.
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **ProductType** The product type of Windows 10.
|
||||
- **QualityUpdateSedimentFunnelState** Provides information about whether Windows Quality Updates are missing on the device.
|
||||
- **QualityUpdateSedimentJsonSchemaVersion** The schema version of the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentLastRunSeconds** The number of seconds since the Quality Updates were run.
|
||||
- **QualityUpdateSedimentLocalStartTime** Provides information about when Quality Updates were run.
|
||||
- **QualityUpdateSedimentLocaltTime** The local time of the device running the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentTargetedPlugins** Provides the list of remediation plug-ins that are applicable to enable Quality Updates on the device.
|
||||
- **QualityUpdateSedimentTargetedTriggers** Provides information about remediations that are applicable to enable Quality Updates on the device.
|
||||
- **RegkeysExist** Indicates whether specified registry keys exist.
|
||||
- **Reload** True if SIH reload is required.
|
||||
- **RemediationAutoUAAcLineStatus** Indicates the power status returned by the Automatic Update Assistant tool.
|
||||
- **RemediationAutoUAAutoStartCount** Indicates the number of times the Automatic Update Assistant tool has automatically started.
|
||||
- **RemediationAutoUACalendarTaskEnabled** Indicates whether an Automatic Update Assistant tool task is enabled.
|
||||
- **RemediationAutoUACalendarTaskExists** Indicates whether an Automatic Update Assistant tool task exists.
|
||||
- **RemediationAutoUACalendarTaskTriggerEnabledCount** Indicates the number of times an Automatic Update Assistant tool task has been triggered.
|
||||
- **RemediationAutoUADaysSinceLastTaskRunTime** Indicates the last run time an Automatic Update Assistant tool task was run.
|
||||
- **RemediationAutoUAGetCurrentSize** Indicates the current size of the Automatic Update Assistant tool.
|
||||
- **RemediationAutoUAIsInstalled** Indicates whether the Automatic Update Assistant tool is installed.
|
||||
- **RemediationAutoUALastTaskRunResult** Indicates the result from the last time the Automatic Update Assistant tool was run.
|
||||
- **RemediationAutoUAMeteredNetwork** Indicates whether the Automatic Update Assistant tool is running on a metered network.
|
||||
- **RemediationAutoUATaskEnabled** Indicates whether the Automatic Update Assistant tool task is enabled.
|
||||
- **RemediationAutoUATaskExists** Indicates whether an Automatic Update Assistant tool task exists.
|
||||
- **RemediationAutoUATasksStalled** Indicates whether an Automatic Update Assistant tool task is stalled.
|
||||
- **RemediationAutoUATaskTriggerEnabledCount** Indicates how many times an Automatic Update Assistant tool task was triggered.
|
||||
- **RemediationAutoUAUAExitCode** Indicates any exit code provided by the Automatic Update Assistant tool.
|
||||
- **RemediationAutoUAUAExitState** Indicates the exit state of the Automatic Update Assistant tool.
|
||||
- **RemediationAutoUAUserLoggedIn** Indicates whether a user is logged in.
|
||||
- **RemediationAutoUAUserLoggedInAdmin** Indicates whether a user is logged in as an Administrator.
|
||||
- **RemediationCorruptionRepairBuildNumber** The build number to use to repair corruption.
|
||||
- **RemediationCorruptionRepairCorruptionsDetected** Indicates whether corruption was detected.
|
||||
- **RemediationCorruptionRepairDetected** Indicates whether an attempt was made to repair the corruption.
|
||||
- **RemediationDeliverToastBuildNumber** Indicates a build number that should be applicable to this device.
|
||||
- **RemediationDeliverToastDetected** Indicates that a plug-in has been detected.
|
||||
- **RemediationDeliverToastDeviceExcludedNation** Indicates the geographic identity (GEO ID) that is not applicable for a given plug-in.
|
||||
- **RemediationDeliverToastDeviceFreeSpaceInMB** Indicates the amount of free space, in megabytes.
|
||||
- **RemediationDeliverToastDeviceHomeSku** Indicates whether the plug-in is applicable for the Windows 10 Home edition.
|
||||
- **RemediationDeliverToastDeviceIncludedNation** Indicates the geographic identifier (GEO ID) that is applicable for a given plug-in.
|
||||
- **RemediationDeliverToastDeviceProSku** Indicates whether the plug-in is applicable for the Windows 10 Professional edition.
|
||||
- **RemediationDeliverToastDeviceSystemDiskSizeInMB** Indicates the size of a system disk, in megabytes.
|
||||
- **RemediationDeliverToastGeoId** Indicates the geographic identifier (GEO ID) that is applicable for a given plug-in.
|
||||
- **RemediationDeviceSkuId** The Windows 10 edition ID that maps to the version of Windows 10 on the device.
|
||||
- **RemediationGetCurrentFolderExist** Indicates whether the GetCurrent folder exists.
|
||||
- **RemediationNoisyHammerAcLineStatus** Indicates the AC Line Status of the device.
|
||||
- **RemediationNoisyHammerAutoStartCount** The number of times hammer auto-started.
|
||||
- **RemediationNoisyHammerCalendarTaskEnabled** Event that indicates Update Assistant Calendar Task is enabled.
|
||||
- **RemediationNoisyHammerCalendarTaskExists** Event that indicates an Update Assistant Calendar Task exists.
|
||||
- **RemediationNoisyHammerCalendarTaskTriggerEnabledCount** Event that indicates calendar triggers are enabled in the task.
|
||||
- **RemediationNoisyHammerDaysSinceLastTaskRunTime** The number of days since the most recent Noisy Hammer task ran.
|
||||
- **RemediationNoisyHammerGetCurrentSize** Size in MB of the $GetCurrent folder.
|
||||
- **RemediationNoisyHammerIsInstalled** TRUE if the noisy hammer is installed.
|
||||
- **RemediationNoisyHammerLastTaskRunResult** The result of the last hammer task run.
|
||||
- **RemediationNoisyHammerMeteredNetwork** TRUE if the machine is on a metered network.
|
||||
- **RemediationNoisyHammerTaskEnabled** Indicates whether the Update Assistant Task (Noisy Hammer) is enabled.
|
||||
- **RemediationNoisyHammerTaskExists** Indicates whether the Update Assistant Task (Noisy Hammer) exists.
|
||||
- **RemediationNoisyHammerTasksStalled** Indicates whether a task (Noisy Hammer) is stalled.
|
||||
- **RemediationNoisyHammerTaskTriggerEnabledCount** Indicates whether counting is enabled for the Update Assistant (Noisy Hammer) task trigger.
|
||||
- **RemediationNoisyHammerUAExitCode** The exit code of the Update Assistant (Noisy Hammer) task.
|
||||
- **RemediationNoisyHammerUAExitState** The code for the exit state of the Update Assistant (Noisy Hammer) task.
|
||||
- **RemediationNoisyHammerUserLoggedIn** TRUE if there is a user logged in.
|
||||
- **RemediationNoisyHammerUserLoggedInAdmin** TRUE if there is the user currently logged in is an Admin.
|
||||
- **RemediationNotifyUserFixIssuesBoxStatusKey** Status of the remediation plug-in.
|
||||
- **RemediationNotifyUserFixIssuesBuildNumber** The build number of the remediation plug-in.
|
||||
- **RemediationNotifyUserFixIssuesDetected** Indicates whether the remediation is necessary.
|
||||
- **RemediationNotifyUserFixIssuesDiskSpace** Indicates whether the remediation is necessary due to low disk space.
|
||||
- **RemediationNotifyUserFixIssuesFeatureUpdateBlocked** Indicates whether the remediation is necessary due to Feature Updates being blocked.
|
||||
- **RemediationNotifyUserFixIssuesFeatureUpdateInProgress** Indicates whether the remediation is necessary due to Feature Updates in progress.
|
||||
- **RemediationNotifyUserFixIssuesIsUserAdmin** Indicates whether the remediation requires that an Administrator is logged in.
|
||||
- **RemediationNotifyUserFixIssuesIsUserLoggedIn** Indicates whether the remediation can take place when a non-Administrator is logged in.
|
||||
- **RemediationProgramDataFolderSizeInMB** The size (in megabytes) of the Program Data folder on the device.
|
||||
- **RemediationProgramFilesFolderSizeInMB** The size (in megabytes) of the Program Files folder on the device.
|
||||
- **RemediationShellDeviceApplicabilityFailedReason** The reason the Remediation is not applicable to the device (expressed as a bitmap).
|
||||
- **RemediationShellDeviceEducationSku** Indicates whether the Windows 10 Education edition is detected on the device.
|
||||
- **RemediationShellDeviceEnterpriseSku** Indicates whether the Windows 10 Enterprise edition is detected on the device.
|
||||
- **RemediationShellDeviceFeatureUpdatesPaused** Indicates whether Feature Updates are paused on the device.
|
||||
- **RemediationShellDeviceHomeSku** Indicates whether the Windows 10 Home edition is detected on the device.
|
||||
- **RemediationShellDeviceIsAllowedSku** Indicates whether the Windows 10 edition is applicable to the device.
|
||||
- **RemediationShellDeviceManaged** TRUE if the device is WSUS managed or Windows Updated disabled.
|
||||
- **RemediationShellDeviceNewOS** TRUE if the device has a recently installed OS.
|
||||
- **RemediationShellDeviceProSku** Indicates whether a Windows 10 Professional edition is detected.
|
||||
- **RemediationShellDeviceQualityUpdatesPaused** Indicates whether Quality Updates are paused on the device.
|
||||
- **RemediationShellDeviceSccm** TRUE if the device is managed by SCCM (Microsoft System Center Configuration Manager).
|
||||
- **RemediationShellDeviceSedimentMutexInUse** Indicates whether the Sediment Pack mutual exclusion object (mutex) is in use.
|
||||
- **RemediationShellDeviceSetupMutexInUse** Indicates whether device setup is in progress.
|
||||
- **RemediationShellDeviceWuRegistryBlocked** Indicates whether the Windows Update is blocked on the device via the registry.
|
||||
- **RemediationShellDeviceZeroExhaust** TRUE if the device has opted out of Windows Updates completely.
|
||||
- **RemediationShellHasExpired** Indicates whether the remediation iterations have ended.
|
||||
- **RemediationShellHasUpgraded** Indicates whether the device upgraded.
|
||||
- **RemediationShellIsDeviceApplicable** Indicates whether the remediation is applicable to the device.
|
||||
- **RemediationTargetMachine** Indicates whether the device is a target of the specified fix.
|
||||
- **RemediationTaskHealthAutochkProxy** True/False based on the health of the AutochkProxy task.
|
||||
- **RemediationTaskHealthChkdskProactiveScan** True/False based on the health of the Check Disk task.
|
||||
- **RemediationTaskHealthDiskCleanup_SilentCleanup** True/False based on the health of the Disk Cleanup task.
|
||||
- **RemediationTaskHealthMaintenance_WinSAT** True/False based on the health of the Health Maintenance task.
|
||||
- **RemediationTaskHealthServicing_ComponentCleanupTask** True/False based on the health of the Health Servicing Component task.
|
||||
- **RemediationTaskHealthUSO_ScheduleScanTask** True/False based on the health of the USO (Update Session Orchestrator) Schedule task.
|
||||
- **RemediationTaskHealthWindowsUpdate_ScheduledStartTask** True/False based on the health of the Windows Update Scheduled Start task.
|
||||
- **RemediationTaskHealthWindowsUpdate_SihbootTask** True/False based on the health of the Sihboot task.
|
||||
- **RemediationUHServiceDisabledBitMap** A bitmap indicating which services were disabled.
|
||||
- **RemediationUHServiceNotExistBitMap** A bitmap indicating which services were deleted.
|
||||
- **RemediationUsersFolderSizeInMB** The size (in megabytes) of the Users folder on the device.
|
||||
- **RemediationWindows10UpgradeFolderExist** Indicates whether the Windows 10 Upgrade folder exists.
|
||||
- **RemediationWindows10UpgradeFolderSizeInMB** The size (in megabytes) of the Windows 10 Upgrade folder on the device.
|
||||
- **RemediationWindowsAppsFolderSizeInMB** The size (in megabytes) of the Windows Applications folder on the device.
|
||||
- **RemediationWindowsBtFolderSizeInMB** The size (in megabytes) of the Windows BT folder on the device.
|
||||
- **RemediationWindowsFolderSizeInMB** The size (in megabytes) of the Windows folder on the device.
|
||||
- **RemediationWindowsServiceProfilesFolderSizeInMB** The size (in megabytes) of the Windows service profile on the device.
|
||||
- **Result** This is the HRESULT for Detection or Perform Action phases of the plugin.
|
||||
- **RunTask** TRUE if SIH task should be run by the plug-in.
|
||||
- **StorageSenseDiskCompresserEstimateInMB** The estimated amount of free space that can be cleaned up by running Storage Sense.
|
||||
- **StorageSenseHelloFaceRecognitionFodCleanupEstimateInByte** The estimated amount of space that can be cleaned up by running Storage Sense and removing Windows Hello facial recognition.
|
||||
- **StorageSenseRestorePointCleanupEstimateInMB** The estimated amount of free space (in megabytes) that can be cleaned up by running Storage Sense.
|
||||
- **StorageSenseUserDownloadFolderCleanupEstimateInByte** The estimated amount of space that can be cleaned up by running Storage Sense to clean up the User Download folder.
|
||||
- **TimeServiceNTPServer** The URL for the NTP time server used by device.
|
||||
- **TimeServiceStartType** The startup type for the NTP time service.
|
||||
- **TimeServiceSyncDomainJoined** True if device domain joined and hence uses DC for clock.
|
||||
- **TimeServiceSyncType** Type of sync behavior for Date & Time service on device.
|
||||
- **uninstallActiveValue** Indicates whether an uninstall is in progress.
|
||||
- **UpdateApplicabilityFixerTriggerBitMap** A bitmap containing the reason(s) why the Update Applicability Fixer Plugin was executed.
|
||||
- **UpdateRebootTime** The amount of time it took to reboot to install the updates.
|
||||
- **usoScanHoursSinceLastScan** The number of hours since the last scan by the Update Service Orchestrator (USO).
|
||||
- **usoScanPastThreshold** Indicates whether the Update Service Orchestrator (USO) scan is overdue.
|
||||
- **WindowsHiberFilSysSizeInMegabytes** The size of the Windows Hibernation file, in megabytes.
|
||||
- **WindowsInstallerFolderSizeInMegabytes** The size of the Windows Installer folder, in megabytes.
|
||||
- **WindowsPageFileSysSizeInMegabytes** The size of the Windows Page file, in megabytes.
|
||||
- **WindowsSoftwareDistributionFolderSizeInMegabytes** The size of the Software Distribution folder, in megabytes.
|
||||
- **WindowsSwapFileSysSizeInMegabytes** The size of the Windows Swap file, in megabytes.
|
||||
- **WindowsSxsFolderSizeInMegabytes** The size of the WinSxS (Windows Side-by-Side) folder, in megabytes.
|
||||
|
||||
|
||||
### Microsoft.Windows.Remediation.Completed
|
||||
|
||||
This event is sent when Windows Update sediment remediations have completed on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ActionName** Name of the action to be completed by the plug-in.
|
||||
- **AppraiserTaskMissing** TRUE if the Appraiser task is missing.
|
||||
- **branchReadinessLevel** Branch readiness level policy.
|
||||
- **cloudControlState** Value indicating whether the shell is enabled on the cloud control settings.
|
||||
- **CV** The Correlation Vector.
|
||||
- **DiskFreeSpaceAfterSedimentPackInMB** The amount of free disk space (in megabytes) after executing the Sediment Pack.
|
||||
- **DiskFreeSpaceBeforeSedimentPackInMB** The amount of free disk space (in megabytes) before executing the Sediment Pack.
|
||||
- **DiskMbFreeAfterCleanup** The amount of free hard disk space after cleanup, measured in Megabytes.
|
||||
- **DiskMbFreeBeforeCleanup** The amount of free hard disk space before cleanup, measured in Megabytes.
|
||||
- **DiskSpaceCleanedByComponentCleanup** The amount of disk space (in megabytes) in the component store that was cleaned up by the plug-in.
|
||||
- **DiskSpaceCleanedByNGenRemoval** The amount of diskspace (megabytes) in the Native Image Generator (NGEN) cache that was cleaned up by the plug-in.
|
||||
- **DiskSpaceCleanedByRestorePointRemoval** The amount of disk space (megabytes) in restore points that was cleaned up by the plug-in.
|
||||
- **ForcedAppraiserTaskTriggered** TRUE if Appraiser task ran from the plug-in.
|
||||
- **GlobalEventCounter** Client-side counter that indicates ordering of events sent by the active user.
|
||||
- **HandlerCleanupFreeDiskInMegabytes** The amount of hard disk space cleaned by the storage sense handlers, measured in megabytes.
|
||||
- **hasRolledBack** Indicates whether the client machine has rolled back.
|
||||
- **hasUninstalled** Indicates whether the client machine has uninstalled a later version of the OS.
|
||||
- **hResult** The result of the event execution.
|
||||
- **HResult** The result of the event execution.
|
||||
- **installDate** The value of installDate registry key. Indicates the install date.
|
||||
- **isNetworkMetered** Indicates whether the client machine has uninstalled a later version of the OS.
|
||||
- **LatestState** The final state of the plug-in component.
|
||||
- **MicrosoftCompatibilityAppraiser** The name of the component targeted by the Appraiser plug-in.
|
||||
- **PackageVersion** The package version for the current Remediation.
|
||||
- **PluginName** The name of the plug-in specified for each generic plug-in event.
|
||||
- **QualityUpdateSedimentExecutedPlugins** The number of plug-ins executed by the Windows Quality Update remediation.
|
||||
- **QualityUpdateSedimentFunnelState** The state of the Windows Quality Update remediation funnel for the device.
|
||||
- **QualityUpdateSedimentJsonSchemaVersion** The schema version of the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentLocalEndTime** The local time on the device when the Windows Quality Update remediation executed.
|
||||
- **QualityUpdateSedimentLocaltTime** The local time of the device running the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentMatchedTriggers** The list of triggers that were matched by the Windows Quality Update remediation.
|
||||
- **QualityUpdateSedimentModelExecutionSeconds** The number of seconds needed to execute the Windows Quality Update remediation.
|
||||
- **recoveredFromTargetOS** Indicates whether the device recovered from the target operating system (OS).
|
||||
- **RemediationBatteryPowerBatteryLevel** Indicates the battery level at which it is acceptable to continue operation.
|
||||
- **RemediationBatteryPowerExitDueToLowBattery** True when we exit due to low battery power.
|
||||
- **RemediationBatteryPowerOnBattery** True if we allow execution on battery.
|
||||
- **RemediationCbsTempDiskSpaceCleanedInMB** The amount of space (in megabytes) that the plug-in cleaned up in the CbsTemp folder.
|
||||
- **RemediationCbsTempEstimateInMB** The amount of space (megabytes) in the CbsTemp folder that is available for cleanup by the plug-in.
|
||||
- **RemediationComponentCleanupEstimateInMB** The amount of space (megabytes) in the WinSxS (Windows Side-by-Side) folder that is available for cleanup by the plug-in.
|
||||
- **RemediationConfigurationTroubleshooterIpconfigFix** TRUE if IPConfig Fix completed successfully.
|
||||
- **RemediationConfigurationTroubleshooterNetShFix** TRUE if network card cache reset ran successfully.
|
||||
- **RemediationCorruptionRepairCorruptionsDetected** Number of corruptions detected on the device.
|
||||
- **RemediationCorruptionRepairCorruptionsFixed** Number of detected corruptions that were fixed on the device.
|
||||
- **RemediationCorruptionRepairPerformActionSuccessful** Indicates whether corruption repair was successful on the device.
|
||||
- **RemediationDiskCleanupSearchFileSizeInMB** The size of the Cleanup Search index file, measured in megabytes.
|
||||
- **RemediationDiskSpaceSavedByCompressionInMB** The amount of disk space (megabytes) that was compressed by the plug-in.
|
||||
- **RemediationDiskSpaceSavedByUserProfileCompressionInMB** The amount of User disk space (in megabytes) that was compressed by the plug-in.
|
||||
- **remediationExecution** Remediation shell is in "applying remediation" state.
|
||||
- **RemediationHandlerCleanupEstimateInMB** The estimated amount of disk space (in megabytes) to be cleaned up by running Storage Sense.
|
||||
- **RemediationHibernationMigrated** TRUE if hibernation was migrated.
|
||||
- **RemediationHibernationMigrationSucceeded** TRUE if hibernation migration succeeded.
|
||||
- **RemediationNGenDiskSpaceRestored** The amount of disk space (in megabytes) that was restored after re-running the Native Image Generator (NGEN).
|
||||
- **RemediationNGenEstimateInMB** The amount of disk space (in megabytes) estimated to be in the Native Image Generator (NGEN) cache by the plug-in.
|
||||
- **RemediationNGenMigrationSucceeded** Indicates whether the Native Image Generator (NGEN) migration succeeded.
|
||||
- **RemediationRestorePointEstimateInMB** The amount of disk space (in megabytes) estimated to be used by storage points found by the plug-in.
|
||||
- **RemediationSearchFileSizeEstimateInMB** The amount of disk space (megabytes) estimated to be used by the Cleanup Search index file found by the plug-in.
|
||||
- **RemediationShellHasUpgraded** TRUE if the device upgraded.
|
||||
- **RemediationShellMinimumTimeBetweenShellRuns** Indicates the time between shell runs exceeded the minimum required to execute plugins.
|
||||
- **RemediationShellRunFromService** TRUE if the shell driver was run from the service.
|
||||
- **RemediationShellSessionIdentifier** Unique identifier tracking a shell session.
|
||||
- **RemediationShellSessionTimeInSeconds** Indicates the time the shell session took in seconds.
|
||||
- **RemediationShellTaskDeleted** Indicates that the shell task has been deleted so no additional sediment pack runs occur for this installation.
|
||||
- **RemediationSoftwareDistributionCleanedInMB** The amount of disk space (megabytes) in the Software Distribution folder that was cleaned up by the plug-in.
|
||||
- **RemediationSoftwareDistributionEstimateInMB** The amount of disk space (megabytes) in the Software Distribution folder that is available for clean up by the plug-in.
|
||||
- **RemediationTotalDiskSpaceCleanedInMB** The total disk space (in megabytes) that was cleaned up by the plug-in.
|
||||
- **RemediationUpdateServiceHealthRemediationResult** The result of the Update Service Health plug-in.
|
||||
- **RemediationUpdateTaskHealthRemediationResult** The result of the Update Task Health plug-in.
|
||||
- **RemediationUpdateTaskHealthTaskList** A list of tasks fixed by the Update Task Health plug-in.
|
||||
- **RemediationUserFolderCompressionEstimateInMB** The amount of disk space (in megabytes) estimated to be compressible in User folders by the plug-in.
|
||||
- **RemediationUserProfileCompressionEstimateInMB** The amount of disk space (megabytes) estimated to be compressible in User Profile folders by the plug-in.
|
||||
- **RemediationUSORebootRequred** Indicates whether a reboot is determined to be required by calling the Update Service Orchestrator (USO).
|
||||
- **RemediationWindowsCompactedEstimateInMB** The amount of disk space (megabytes) estimated to be available by compacting the operating system using the plug-in.
|
||||
- **RemediationWindowsLogSpaceEstimateInMB** The amount of disk space (in megabytes) available in Windows logs that can be cleaned by the plug-in.
|
||||
- **RemediationWindowsLogSpaceFreed** The amount of disk space freed by deleting the Windows log files, measured in Megabytes.
|
||||
- **RemediationWindowsOldSpaceEstimateInMB** The amount of disk space (megabytes) in the Windows.OLD folder that can be cleaned up by the plug-in.
|
||||
- **RemediationWindowsSpaceCompactedInMB** The amount of disk space (megabytes) that can be cleaned up by the plug-in.
|
||||
- **RemediationWindowsStoreSpaceCleanedInMB** The amount of disk space (megabytes) from the Windows Store cache that was cleaned up by the plug-in.
|
||||
- **RemediationWindowsStoreSpaceEstimateInMB** The amount of disk space (megabytes) in the Windows store cache that is estimated to be cleanable by the plug-in.
|
||||
- **Result** The HRESULT for Detection or Perform Action phases of the plug-in.
|
||||
- **RunCount** The number of times the plugin has executed.
|
||||
- **RunResult** The HRESULT for Detection or Perform Action phases of the plug-in.
|
||||
- **ServiceHardeningExitCode** The exit code returned by Windows Service Repair.
|
||||
- **ServiceHealthEnabledBitMap** List of services updated by the plugin.
|
||||
- **ServiceHealthInstalledBitMap** List of services installed by the plugin.
|
||||
- **StorageSenseDiskCompresserTotalInMB** The total number of megabytes that Storage Sense cleaned up in the User Download folder.
|
||||
- **StorageSenseHelloFaceRecognitionFodCleanupTotalInByte** The amount of space that Storage Sense was able to clean up in the User Download folder by removing Windows Hello facial recognition.
|
||||
- **StorageSenseRestorePointCleanupTotalInMB** The total number of megabytes that Storage Sense cleaned up in the User Download folder.
|
||||
- **StorageSenseUserDownloadFolderCleanupTotalInByte** The total number of bytes that Storage Sense cleaned up in the User Download folder.
|
||||
- **systemDriveFreeDiskSpace** Indicates the free disk space on system drive, in megabytes.
|
||||
- **systemUptimeInHours** Indicates the amount of time the system in hours has been on since the last boot.
|
||||
- **uninstallActive** TRUE if previous uninstall has occurred for current OS
|
||||
- **usoScanDaysSinceLastScan** The number of days since the last USO (Update Session Orchestrator) scan.
|
||||
- **usoScanInProgress** TRUE if a USO (Update Session Orchestrator) scan is in progress, to prevent multiple simultaneous scans.
|
||||
- **usoScanIsAllowAutoUpdateKeyPresent** TRUE if the AllowAutoUpdate registry key is set.
|
||||
- **usoScanIsAllowAutoUpdateProviderSetKeyPresent** TRUE if AllowAutoUpdateProviderSet registry key is set.
|
||||
- **usoScanIsAuOptionsPresent** TRUE if Auto Update Options registry key is set.
|
||||
- **usoScanIsFeatureUpdateInProgress** TRUE if a USO (Update Session Orchestrator) scan is in progress, to prevent multiple simultaneous scans.
|
||||
- **usoScanIsNetworkMetered** TRUE if the device is currently connected to a metered network.
|
||||
- **usoScanIsNoAutoUpdateKeyPresent** TRUE if no Auto Update registry key is set/present.
|
||||
- **usoScanIsUserLoggedOn** TRUE if the user is logged on.
|
||||
- **usoScanPastThreshold** TRUE if the most recent Update Session Orchestrator (USO) scan is past the threshold (late).
|
||||
- **usoScanType** The type of USO (Update Session Orchestrator) scan: "Interactive" or "Background".
|
||||
- **windows10UpgraderBlockWuUpdates** Event to report the value of Windows 10 Upgrader BlockWuUpdates Key.
|
||||
- **windowsEditionId** Event to report the value of Windows Edition ID.
|
||||
- **WindowsOldSpaceCleanedInMB** The amount of disk space freed by removing the Windows.OLD folder, measured in Megabytes.
|
||||
- **windowsUpgradeRecoveredFromRs4** Event to report the value of the Windows Upgrade Recovered key.
|
||||
|
||||
|
||||
### Microsoft.Windows.Remediation.Started
|
||||
|
||||
This event is sent when Windows Update sediment remediations have started on the sediment device to keep Windows up to date. A sediment device is one that has been on a previous OS version for an extended period. The remediations address issues on the system that prevent the device from receiving OS updates.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** The version of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **QualityUpdateSedimentFunnelState** Provides information about whether quality updates are missing on the device.
|
||||
- **QualityUpdateSedimentFunnelType** Indicates whether the Remediation is for Quality Updates or Feature Updates.
|
||||
- **QualityUpdateSedimentJsonSchemaVersion** The schema version of the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentLastRunSeconds** The number of seconds since Quality Updates were run.
|
||||
- **QualityUpdateSedimentLocaltTime** The local time of the device running the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentMatchedTriggers** The list of triggers that were matched by the Windows Quality Update Remediation.
|
||||
- **QualityUpdateSedimentSelectedPlugins** The number of plugins that were selected for execution in the Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentTargetedPlugins** The list of plug-ins targeted by the current Quality Update Sediment Remediation.
|
||||
- **QualityUpdateSedimentTargetedTriggers** The list of triggers targeted by the current Quality Update Sediment Remediation.
|
||||
- **RemediationProgramDataFolderSizeInMB** The size (in megabytes) of the Program Data folder on the device.
|
||||
- **RemediationProgramFilesFolderSizeInMB** The size (in megabytes) of the Program Files folder on the device.
|
||||
- **RemediationUsersFolderSizeInMB** The size (in megabytes) of the Users folder on the device.
|
||||
- **RemediationWindowsAppsFolderSizeInMB** The size (in megabytes) of the Windows Applications folder on the device.
|
||||
- **RemediationWindowsBtFolderSizeInMB** The size (in megabytes) of the Windows BT folder on the device.
|
||||
- **RemediationWindowsFolderSizeInMB** The size (in megabytes) of the Windows folder on the device.
|
||||
- **RemediationWindowsServiceProfilesFolderSizeInMB** The size (in megabytes) of the Windows Service Profiles folder on the device.
|
||||
- **RemediationWindowsTotalSystemDiskSize** The total storage capacity of the System disk drive, measured in megabytes.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
- **RunCount** The number of times the remediation event started (whether it completed successfully or not).
|
||||
- **WindowsHiberFilSysSizeInMegabytes** The size of the Windows Hibernation file, measured in megabytes.
|
||||
- **WindowsInstallerFolderSizeInMegabytes** The size of the Windows Installer folder, measured in megabytes.
|
||||
- **WindowsOldFolderSizeInMegabytes** The size of the Windows.OLD folder, measured in megabytes.
|
||||
- **WindowsPageFileSysSizeInMegabytes** The size of the Windows Page file, measured in megabytes.
|
||||
- **WindowsSoftwareDistributionFolderSizeInMegabytes** The size of the Software Distribution folder, measured in megabytes.
|
||||
- **WindowsSwapFileSysSizeInMegabytes** The size of the Windows Swap file, measured in megabytes.
|
||||
- **WindowsSxsFolderSizeInMegabytes** The size of the WinSxS (Windows Side-by-Side) folder, measured in megabytes.
|
||||
|
||||
|
||||
## Sediment events
|
||||
|
||||
### Microsoft.Windows.Sediment.Info.DetailedState
|
||||
@ -4709,6 +5190,107 @@ The following fields are available:
|
||||
- **Time** The system time at which the phase chance occurred.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Applicable
|
||||
|
||||
This event is sent when the Windows Update sediment remediations launcher finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **DetectedCondition** Boolean true if detect condition is true and perform action will be run.
|
||||
- **FileVersion** The version of the data-link library (DLL) that will be applied by the self-update process.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **IsHashMismatch** Indicates whether the hash is a mismatch.
|
||||
- **IsSelfUpdateEnabledInOneSettings** True if self update enabled in Settings.
|
||||
- **IsSelfUpdateNeeded** True if self update needed by device.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Completed
|
||||
|
||||
This event is sent when the Windows Update sediment remediations launcher finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **FailedReasons** Concatenated list of failure reasons.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
- **SedLauncherExecutionResult** HRESULT for one execution of the Sediment Launcher.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentLauncher.Started
|
||||
|
||||
This event is sent when the Windows Update sediment remediations launcher starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentService.Applicable
|
||||
|
||||
This event is sent when the Windows Update sediment remediations service finds that an applicable plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **DetectedCondition** Determine whether action needs to run based on device properties.
|
||||
- **FileVersion** The version of the dynamic-link library (DLL) that will be applied by the self-update process.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **IsHashMismatch** Indicates whether the hash is a mismatch.
|
||||
- **IsSelfUpdateEnabledInOneSettings** Indicates if self update is enabled in One Settings.
|
||||
- **IsSelfUpdateNeeded** Indicates if self update is needed.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PluginName** Name of the plugin.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentService.Completed
|
||||
|
||||
This event is sent when the Windows Update sediment remediations service finishes running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** Correlation vector.
|
||||
- **FailedReasons** List of reasons when the plugin action failed.
|
||||
- **GlobalEventCounter** Client side counter which indicates ordering of events sent by this user.
|
||||
- **PackageVersion** Current package version of Remediation.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for detection or perform action phases of the plugin.
|
||||
- **SedimentServiceCheckTaskFunctional** True/False if scheduled task check succeeded.
|
||||
- **SedimentServiceCurrentBytes** Number of current private bytes of memory consumed by sedsvc.exe.
|
||||
- **SedimentServiceKillService** True/False if service is marked for kill (Shell.KillService).
|
||||
- **SedimentServiceMaximumBytes** Maximum bytes allowed for the service.
|
||||
- **SedimentServiceRanShell** Indicates whether the shell was run by the service.
|
||||
- **SedimentServiceRetrievedKillService** True/False if result of One Settings check for kill succeeded - we only send back one of these indicators (not for each call).
|
||||
- **SedimentServiceShellRunHResult** The HRESULT returned when the shell was run by the service.
|
||||
- **SedimentServiceStopping** True/False indicating whether the service is stopping.
|
||||
- **SedimentServiceTaskFunctional** True/False if scheduled task is functional. If task is not functional this indicates plugins will be run.
|
||||
- **SedimentServiceTotalIterations** Number of 5 second iterations service will wait before running again.
|
||||
|
||||
|
||||
### Microsoft.Windows.SedimentService.Started
|
||||
|
||||
This event is sent when the Windows Update sediment remediations service starts running a plug-in to address issues that may be preventing the sediment device from receiving OS updates. A sediment device is one that has been on a previous OS version for an extended period.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CV** The Correlation Vector.
|
||||
- **GlobalEventCounter** The client-side counter that indicates ordering of events.
|
||||
- **PackageVersion** The version number of the current remediation package.
|
||||
- **PluginName** Name of the plugin specified for each generic plugin event.
|
||||
- **Result** This is the HRESULT for Detection or Perform Action phases of the plugin.
|
||||
|
||||
|
||||
## Setup events
|
||||
|
||||
### SetupPlatformTel.SetupPlatformTelActivityEvent
|
||||
@ -4748,6 +5330,32 @@ The following fields are available:
|
||||
- **Value** Retrieves the value associated with the corresponding event name (Field Name). For example: For time related events this will include the system time.
|
||||
|
||||
|
||||
## SIH events
|
||||
|
||||
### SIHEngineTelemetry.EvalApplicability
|
||||
|
||||
This event is sent when targeting logic is evaluated to determine if a device is eligible for a given action.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ActionReasons** If an action has been assessed as inapplicable, the additional logic prevented it.
|
||||
- **AdditionalReasons** If an action has been assessed as inapplicable, the additional logic prevented it.
|
||||
- **CachedEngineVersion** The engine DLL version that is being used.
|
||||
- **EventInstanceID** A unique identifier for event instance.
|
||||
- **EventScenario** Indicates the purpose of sending this event – whether because the software distribution just started checking for content, or whether it was cancelled, succeeded, or failed.
|
||||
- **HandlerReasons** If an action has been assessed as inapplicable, the installer technology-specific logic prevented it.
|
||||
- **IsExecutingAction** If the action is presently being executed.
|
||||
- **ServiceGuid** A unique identifier that represents which service the software distribution client is connecting to (SIH, Windows Update, Microsoft Store, etc.)
|
||||
- **SihclientVersion** The client version that is being used.
|
||||
- **StandardReasons** If an action has been assessed as inapplicable, the standard logic the prevented it.
|
||||
- **StatusCode** Result code of the event (success, cancellation, failure code HResult).
|
||||
- **UpdateID** A unique identifier for the action being acted upon.
|
||||
- **WuapiVersion** The Windows Update API version that is currently installed.
|
||||
- **WuaucltVersion** The Windows Update client version that is currently installed.
|
||||
- **WuauengVersion** The Windows Update engine version that is currently installed.
|
||||
- **WUDeviceID** The unique identifier controlled by the software distribution client.
|
||||
|
||||
|
||||
## Software update events
|
||||
|
||||
### SoftwareUpdateClientTelemetry.CheckForUpdates
|
||||
@ -4859,7 +5467,7 @@ The following fields are available:
|
||||
- **FlightId** The specific id of the flight the device is getting
|
||||
- **HandlerType** Indicates the kind of content (app, driver, windows patch, etc.)
|
||||
- **RevisionNumber** Identifies the revision number of this specific piece of content
|
||||
- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc)
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **SystemBIOSMajorRelease** Major release version of the system bios
|
||||
- **SystemBIOSMinorRelease** Minor release version of the system bios
|
||||
- **UpdateId** Identifier associated with the specific piece of content
|
||||
@ -4901,7 +5509,7 @@ The following fields are available:
|
||||
- **CurrentMobileOperator** The mobile operator the device is currently connected to.
|
||||
- **DeviceModel** The model of the device.
|
||||
- **DownloadPriority** Indicates whether a download happened at background, normal, or foreground priority.
|
||||
- **DownloadProps** Information about the download operation.
|
||||
- **DownloadProps** Information about the download operation properties in the form of a bitmask.
|
||||
- **DownloadType** Differentiates the download type of “Self-Initiated Healing” (SIH) downloads between Metadata and Payload downloads.
|
||||
- **EventInstanceID** A globally unique identifier for event instance.
|
||||
- **EventScenario** Indicates the purpose for sending this event: whether because the software distribution just started downloading content; or whether it was cancelled, succeeded, or failed.
|
||||
@ -4935,7 +5543,7 @@ The following fields are available:
|
||||
- **RepeatFailCount** Indicates whether this specific content has previously failed.
|
||||
- **RepeatFailFlag** Indicates whether this specific content previously failed to download.
|
||||
- **RevisionNumber** The revision number of the specified piece of content.
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **Setup360Phase** Identifies the active phase of the upgrade download if the current download is for an Operating System upgrade.
|
||||
- **ShippingMobileOperator** The mobile operator linked to the device when the device shipped.
|
||||
- **SizeCalcTime** Time (in seconds) taken to calculate the total download size of the payload.
|
||||
@ -5117,7 +5725,7 @@ The following fields are available:
|
||||
- **RelatedCV** The previous correlation vector that was used by the client before swapping with a new one.
|
||||
- **RepeatFailCount** Indicates whether this specific piece of content has previously failed.
|
||||
- **RevisionNumber** Identifies the revision number of this specific piece of content.
|
||||
- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **StatusCode** Result code of the event (success, cancellation, failure code HResult).
|
||||
- **TargetGroupId** For drivers targeted to a specific device model, this ID indicates the distribution group of devices receiving that driver.
|
||||
- **TargetingVersion** For drivers targeted to a specific device model, this is the version number of the drivers being distributed to the device.
|
||||
@ -5177,7 +5785,7 @@ The following fields are available:
|
||||
- **RelatedCV** The previous correlation vector that was used by the client before swapping with a new one.
|
||||
- **RepeatFailCount** Indicates whether this specific piece of content previously failed.
|
||||
- **RevisionNumber** Identifies the revision number of this specific piece of content.
|
||||
- **ServiceGuid** Identifier for the service to which the software distribution client is connecting (Windows Update, Microsoft Store, etc.).
|
||||
- **ServiceGuid** A unique identifier for the service that the software distribution client is installing content for (Windows Update, Microsoft Store, etc).
|
||||
- **StatusCode** Result code of the event (success, cancellation, failure code HResult).
|
||||
- **TargetGroupId** For drivers targeted to a specific device model, this ID indicates the distribution group of devices receiving that driver.
|
||||
- **TargetingVersion** For drivers targeted to a specific device model, this is the version number of the drivers being distributed to the device.
|
||||
@ -5209,12 +5817,12 @@ Ensures Windows Updates are secure and complete. Event helps to identify whether
|
||||
The following fields are available:
|
||||
|
||||
- **CallerApplicationName** Name of application making the Windows Update request. Used to identify context of request.
|
||||
- **EndpointUrl** The endpoint URL where the device obtains update metadata. This is used to distinguish between test, staging, and production environments.
|
||||
- **EventScenario** The purpose of this event, such as scan started, scan succeeded, or scan failed.
|
||||
- **ExtendedStatusCode** The secondary status code of the event.
|
||||
- **EndpointUrl** URL of the endpoint where client obtains update metadata. Used to identify test vs staging vs production environments.
|
||||
- **EventScenario** Indicates the purpose of the event - whether because scan started, succeded, failed, etc.
|
||||
- **ExtendedStatusCode** Secondary status code for certain scenarios where StatusCode was not specific enough.
|
||||
- **LeafCertId** The integral ID from the FragmentSigning data for the certificate that failed.
|
||||
- **ListOfSHA256OfIntermediateCerData** A semicolon delimited list of base64 encoding of hashes for the Base64CerData in the FragmentSigning data of an intermediate certificate.
|
||||
- **MetadataIntegrityMode** The mode of the transport metadata integrity check. 0 = unknown; 1 = ignore; 2 = audit; 3 = enforce
|
||||
- **MetadataIntegrityMode** Mode of update transport metadata integrity check. 0-Unknown, 1-Ignoe, 2-Audit, 3-Enforce
|
||||
- **MetadataSignature** A base64-encoded string of the signature associated with the update metadata (specified by revision ID).
|
||||
- **RawMode** The raw unparsed mode string from the SLS response. This field is null if not applicable.
|
||||
- **RawValidityWindowInDays** The raw unparsed validity window string in days of the timestamp token. This field is null if not applicable.
|
||||
@ -5225,8 +5833,8 @@ The following fields are available:
|
||||
- **SHA256OfLeafCertPublicKey** A base64 encoding of the hash of the Base64CertData in the FragmentSigning data of the leaf certificate.
|
||||
- **SHA256OfTimestampToken** An encoded string of the timestamp token.
|
||||
- **SignatureAlgorithm** The hash algorithm for the metadata signature.
|
||||
- **SLSPrograms** A test program to which a device may have opted in. Example: Insider Fast
|
||||
- **StatusCode** The status code of the event.
|
||||
- **SLSPrograms** A test program a machine may be opted in. Examples include "Canary" and "Insider Fast".
|
||||
- **StatusCode** Result code of the event (success, cancellation, failure code HResult)
|
||||
- **TimestampTokenCertThumbprint** The thumbprint of the encoded timestamp token.
|
||||
- **TimestampTokenId** The time this was created. It is encoded in a timestamp blob and will be zero if the token is malformed.
|
||||
- **UpdateId** The update ID for a specific piece of content.
|
||||
@ -5319,10 +5927,12 @@ The following fields are available:
|
||||
- **PackageCountTotalCanonical** Total number of canonical packages.
|
||||
- **PackageCountTotalDiff** Total number of diff packages.
|
||||
- **PackageCountTotalExpress** Total number of express packages.
|
||||
- **PackageCountTotalPSFX** The total number of PSFX packages.
|
||||
- **PackageExpressType** Type of express package.
|
||||
- **PackageSizeCanonical** Size of canonical packages in bytes.
|
||||
- **PackageSizeDiff** Size of diff packages in bytes.
|
||||
- **PackageSizeExpress** Size of express packages in bytes.
|
||||
- **PackageSizePSFX** The size of PSFX packages, in bytes.
|
||||
- **RangeRequestState** Indicates the range request type used.
|
||||
- **RelatedCV** Correlation vector value generated from the latest USO scan.
|
||||
- **Result** Outcome of the download request phase of update.
|
||||
@ -5918,14 +6528,21 @@ Result of the WaaSMedic operation.
|
||||
The following fields are available:
|
||||
|
||||
- **callerApplication** The name of the calling application.
|
||||
- **capsuleCount** The number of Sediment Pack capsules.
|
||||
- **capsuleFailureCount** The number of capsule failures.
|
||||
- **detectionSummary** Result of each applicable detection that was run.
|
||||
- **featureAssessmentImpact** WaaS Assessment impact for feature updates.
|
||||
- **hrEngineBlockReason** Indicates the reason for stopping WaaSMedic.
|
||||
- **hrEngineResult** Error code from the engine operation.
|
||||
- **hrLastSandboxError** The last error sent by the WaaSMedic sandbox.
|
||||
- **initSummary** Summary data of the initialization method.
|
||||
- **insufficientSessions** Device not eligible for diagnostics.
|
||||
- **isInteractiveMode** The user started a run of WaaSMedic.
|
||||
- **isManaged** Device is managed for updates.
|
||||
- **isWUConnected** Device is connected to Windows Update.
|
||||
- **noMoreActions** No more applicable diagnostics.
|
||||
- **pluginFailureCount** The number of plugins that have failed.
|
||||
- **pluginsCount** The number of plugins.
|
||||
- **qualityAssessmentImpact** WaaS Assessment impact for quality updates.
|
||||
- **remediationSummary** Result of each operation performed on a device to fix an invalid state or configuration that's preventing the device from getting updates. For example, if Windows Update service is turned off, the fix is to turn the it back on.
|
||||
- **usingBackupFeatureAssessment** Relying on backup feature assessment.
|
||||
@ -5983,7 +6600,7 @@ The following fields are available:
|
||||
- **PertProb** The probability the entry will be Perturbed if the algorithm chosen is “heavy-hitters”.
|
||||
|
||||
|
||||
## Microsoft Store events
|
||||
## Windows Store events
|
||||
|
||||
### Microsoft.Windows.Store.StoreActivating
|
||||
|
||||
@ -6422,6 +7039,7 @@ The following fields are available:
|
||||
- **bytesFromCDN** The number of bytes received from a CDN source.
|
||||
- **bytesFromGroupPeers** The number of bytes received from a peer in the same group.
|
||||
- **bytesFromIntPeers** The number of bytes received from peers not in the same LAN or in the same group.
|
||||
- **bytesFromLinkLocalPeers** The number of bytes received from local peers.
|
||||
- **bytesFromLocalCache** Bytes copied over from local (on disk) cache.
|
||||
- **bytesFromPeers** The number of bytes received from a peer in the same LAN.
|
||||
- **cdnErrorCodes** A list of CDN connection errors since the last FailureCDNCommunication event.
|
||||
@ -6473,6 +7091,7 @@ The following fields are available:
|
||||
- **downloadModeReason** Reason for the download.
|
||||
- **downloadModeSrc** Source of the DownloadMode setting (KvsProvider = 0, GeoProvider = 1, GeoVerProvider = 2, CpProvider = 3, DiscoveryProvider = 4, RegistryProvider = 5, GroupPolicyProvider = 6, MdmProvider = 7, SettingsProvider = 8, InvalidProviderType = 9).
|
||||
- **experimentId** When running a test, this is used to correlate with other events that are part of the same test.
|
||||
- **expiresAt** The time when the content will expire from the Delivery Optimization Cache.
|
||||
- **fileID** The ID of the file being downloaded.
|
||||
- **fileSize** The size of the file being downloaded.
|
||||
- **gCurMemoryStreamBytes** Current usage for memory streaming.
|
||||
@ -7462,6 +8081,21 @@ The following fields are available:
|
||||
- **ReturnCode** The return code of the function.
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.InitializeUpdateReserveManager
|
||||
|
||||
This event returns data about the Update Reserve Manager, including whether it’s been initialized.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **ClientId** The ID of the caller application.
|
||||
- **Flags** The enumerated flags used to initialize the manager.
|
||||
- **FlightId** The flight ID of the content the calling client is currently operating with.
|
||||
- **Offline** Indicates whether or the reserve manager is called during offline operations.
|
||||
- **PolicyPassed** Indicates whether the machine is able to use reserves.
|
||||
- **ReturnCode** Return code of the operation.
|
||||
- **Version** The version of the Update Reserve Manager.
|
||||
|
||||
|
||||
### Microsoft.Windows.UpdateReserveManager.PrepareTIForReserveInitialization
|
||||
|
||||
This event is sent when the Update Reserve Manager prepares the Trusted Installer to initialize reserves on the next boot.
|
||||
@ -7484,6 +8118,8 @@ This event is sent when the Update Reserve Manager needs to adjust the size of t
|
||||
The following fields are available:
|
||||
|
||||
- **ChangeSize** The change in the hard reserve size based on the addition or removal of optional content.
|
||||
- **Disposition** The parameter for the hard reserve adjustment function.
|
||||
- **Flags** The flags passed to the hard reserve adjustment function.
|
||||
- **PendingHardReserveAdjustment** The final change to the hard reserve size.
|
||||
- **UpdateType** Indicates whether the change is an increase or decrease in the size of the hard reserve.
|
||||
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,135 @@
|
||||
---
|
||||
title: Manage connections from Windows operating system components to Microsoft services using Microsoft Intune MDM Server
|
||||
description: Use MDM CSPs to minimize connections from Windows to Microsoft services, or to configure particular privacy settings.
|
||||
ms.assetid: ACCEB0DD-BC6F-41B1-B359-140B242183D9
|
||||
keywords: privacy, manage connections to Microsoft, Windows 10
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.localizationpriority: medium
|
||||
author: medgarmedgar
|
||||
ms.author: v-medgar
|
||||
ms.date: 3/1/2019
|
||||
---
|
||||
|
||||
# Manage connections from Windows operating system components to Microsoft services using Microsoft Intune MDM Server
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10 Enterprise 1903 version and newer
|
||||
|
||||
You can use Microsoft InTune with MDM CSPs and custom [OMA URIs](https://docs.microsoft.com/en-us/intune/custom-settings-windows-10) to minimize connections from Windows to Microsoft services, or to configure particular privacy settings. You can configure diagnostic data at the lowest level for your edition of Windows, and also evaluate which other connections Windows makes to Microsoft services you want to turn off in your environment from the list in this article.
|
||||
|
||||
To ensure CSPs take priority over Group Policies in case of conflicts, use the [ControlPolicyConflict](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict) policy.
|
||||
|
||||
You can configure diagnostic data at the Security/Basic level, turn off Windows Defender diagnostic data and MSRT reporting, and turn off all other connections to Microsoft network endpoints as described in this article to help prevent Windows from sending any data to Microsoft. There are many reasons why these communications are enabled by default, such as updating malware definitions and maintain current certificate revocation lists, which is why we strongly recommend against this. This data helps us deliver a secure, reliable, and more delightful personalized experience.
|
||||
|
||||
Note, there is some traffic which is required (i.e. "whitelisted") for the operation of Windows and the Microsoft InTune based management. This traffic includes CRL and OCSP network traffic which will show up in network traces. CRL and OCSP checks are made to the issuing certificate authorities. Microsoft is one of them, but there are many others, such as DigiCert, Thawte, Google, Symantec, and VeriSign. Additional whitelisted traffic specifically for MDM managed devices includes Windows Notification Service related traffic as well as some specific Microsoft InTune and Windows Update related traffic.
|
||||
|
||||
For more information on Microsoft InTune please see [Transform IT service delivery for your modern workplace](https://www.microsoft.com/en-us/enterprise-mobility-security/microsoft-intune?rtc=1) and [Microsoft Intune documentation](https://docs.microsoft.com/en-us/intune/).
|
||||
|
||||
For detailed information about managing network connections to Microsoft services using Registries, Group Policies, or UI see [Manage connections from Windows operating system components to Microsoft services](https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services).
|
||||
|
||||
|
||||
The endpoints for the MDM “whitelisted” traffic are in the [Whitelisted Traffic](#bkmk-mdm-whitelist).
|
||||
|
||||
|
||||
### Settings for Windows 10 Enterprise edition 1903 and newer
|
||||
|
||||
The following table lists management options for each setting.
|
||||
|
||||
For Windows 10, the following MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||
|
||||
| Setting | MDM Policy | Description |
|
||||
| --- | --- | --- |
|
||||
| 1. Automatic Root Certificates Update | There is intentionally no MDM available for Automatic Root Certificate Update. | This MDM does not exist since it would prevent the operation and management of MDM management of devices.
|
||||
| 2. Cortana and Search | [Experience/AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana) | Choose whether to let Cortana install and run on the device. **Set to 0 (zero)**
|
||||
| | [Search/AllowSearchToUseLocation](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-search#search-allowsearchtouselocation) | Choose whether Cortana and Search can provide location-aware search results. **Set to 0 (zero)**
|
||||
| 3. Date & Time | [Settings/AllowDateTime](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-settings#settings-allowdatetime)| Allows the user to change date and time settings. **Set to 0 (zero)**
|
||||
| 4. Device metadata retrieval | [DeviceInstallation/PreventDeviceMetadataFromNetwork](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventdevicemetadatafromnetwork) | Choose whether to prevent Windows from retrieving device metadata from the Internet. **Set to Enabled**
|
||||
| 5. Find My Device | [Experience/AllowFindMyDevice](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowfindmydevice)| This policy turns on Find My Device. **Set to 0 (zero)**
|
||||
| 6. Font streaming | [System/AllowFontProviders](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-allowfontproviders) | Setting that determines whether Windows is allowed to download fonts and font catalog data from an online font provider. **Set to 0 (zero)**
|
||||
| 7. Insider Preview builds | [System/AllowBuildPreview](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-allowbuildpreview) | This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. **Set to 0 (zero)**
|
||||
| 8. Internet Explorer | The following Microsoft Internet Explorer MDM policies are available in the [Internet Explorer CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer) |
|
||||
| | [InternetExplorer/AllowSuggestedSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsuggestedsites) | Recommends websites based on the user’s browsing activity. **Set to Disabled**
|
||||
| | [InternetExplorer/PreventManagingSmartScreenFilter]( https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventmanagingsmartscreenfilter) | Prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. **Set to Enabled**
|
||||
| | [InternetExplorer/DisableFlipAheadFeature]( https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableflipaheadfeature) | Determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website. **Set to Enabled**
|
||||
| | [InternetExplorer/DisableHomePageChange]( https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablehomepagechange) | Determines whether users can change the default Home Page or not. **Set to Enabled**
|
||||
| | [InternetExplorer/DisableFirstRunWizard]( https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefirstrunwizard) | Prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows. **Set to Enabled**
|
||||
| 9. Live Tiles | [Notifications/DisallowTileNotification](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-notifications)| This policy setting turns off tile notifications. If you enable this policy setting applications and system features will not be able to update their tiles and tile badges in the Start screen. **Set to Enabled**
|
||||
| 10. Mail synchronization | [Accounts/AllowMicrosoftAccountConnection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-accounts#accounts-allowmicrosoftaccountconnection) | Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services. **Set to 0 (zero)**
|
||||
| 11. Microsoft Account | [Accounts/AllowMicrosoftAccountSignInAssistant](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-accounts#accounts-allowmicrosoftaccountsigninassistant) | Disable the Microsoft Account Sign-In Assistant. **Set to 0 (zero)**
|
||||
| 12. Microsoft Edge | | The following Microsoft Edge MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/available-policies).
|
||||
| | [Browser/AllowAutoFill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) | Choose whether employees can use autofill on websites. **Set to 0 (zero)**
|
||||
| | [Browser/AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) | Choose whether employees can send Do Not Track headers. **Set to 0 (zero)**
|
||||
| | [Browser/AllowMicrosoftCompatbilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) | Specify the Microsoft compatibility list in Microsoft Edge. **Set to 0 (zero)**
|
||||
| | [Browser/AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) | Choose whether employees can save passwords locally on their devices. **Set to 0 (zero)**
|
||||
| | [Browser/AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar) | Choose whether the Address Bar shows search suggestions. **Set to 0 (zero)**
|
||||
| | [Browser/AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | Choose whether SmartScreen is turned on or off. **Set to 0 (zero)**
|
||||
| 13. Network Connection Status Indicator | [Connectivity/DisallowNetworkConnectivityActiveTests](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-disallownetworkconnectivityactivetests) | Note: After you apply this policy you must restart the device for the policy setting to take effect. **Set to 1 (one)**
|
||||
| 14. Offline maps | [AllowOfflineMapsDownloadOverMeteredConnection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-maps)|Allows the download and update of map data over metered connections. <br /> **Set to 0 (zero)**
|
||||
| | [EnableOfflineMapsAutoUpdate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-maps#maps-enableofflinemapsautoupdate)|Disables the automatic download and update of map data. **Set to 0 (zero)**
|
||||
| 15. OneDrive | [DisableOneDriveFileSync](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-disableonedrivefilesync)| Allows IT Admins to prevent apps and features from working with files on OneDrive. **Set to 1 (one)**
|
||||
| 16. Preinstalled apps | N/A | N/A
|
||||
| 17. Privacy settings | | Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.
|
||||
| 17.1 General | [TextInput/AllowLinguisticDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-textinput#textinput-allowlinguisticdatacollection) | This policy setting controls the ability to send inking and typing data to Microsoft. **Set to 0 (zero)**
|
||||
| 17.2 Location | [System/AllowLocation](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-allowlocation) | Specifies whether to allow app access to the Location service. **Set to 0 (zero)**
|
||||
| 17.3 Camera | [Camera/AllowCamera](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-camera#camera-allowcamera) | Disables or enables the camera. **Set to 0 (zero)**
|
||||
| 17.4 Microphone | [Privacy/LetAppsAccessMicrophone](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessmicrophone) | Specifies whether Windows apps can access the microphone. **Set to 2 (two)**
|
||||
| 17.5 Notifications | [Notifications/DisallowCloudNotification](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-notifications#notifications-disallowcloudnotification) | Turn off notifications network usage. **DO NOT TURN OFF WNS Notifications if you want manage your device(s) using Microsoft InTune**
|
||||
| | [Privacy/LetAppsAccessNotifications](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessnotifications) | Specifies whether Windows apps can access notifications. **Set to 2 (two)**
|
||||
| | [Settings/AllowOnlineTips]( https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-settings#settings-allowonlinetips) | Enables or disables the retrieval of online tips and help for the Settings app. **Set to Disabled**
|
||||
| 17.6 Speech, Inking, & Typing | [Privacy/AllowInputPersonalization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization) | This policy specifies whether users on the device have the option to enable online speech recognition. **Set to 0 (zero)**
|
||||
| | [TextInput/AllowLinguisticDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-textinput#textinput-allowlinguisticdatacollection)| This policy setting controls the ability to send inking and typing data to Microsoft **Set to 0 (zero)**
|
||||
| 17.7 Account info | [Privacy/LetAppsAccessAccountInfo](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessaccountinfo) | Specifies whether Windows apps can access account information. **Set to 2 (two)**
|
||||
| 17.8 Contacts | [Privacy/LetAppsAccessContacts](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesscontacts) | Specifies whether Windows apps can access contacts. **Set to 2 (two)**
|
||||
| 17.9 Calendar | [Privacy/LetAppsAccessCalendar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesscalendar) | Specifies whether Windows apps can access the calendar. **Set to 2 (two)**
|
||||
| 17.10 Call history | [Privacy/LetAppsAccessCallHistory](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesscallhistory) | Specifies whether Windows apps can access account information. **Set to 2 (two)**
|
||||
| 17.11 Email | [Privacy/LetAppsAccessEmail](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessemail) | Specifies whether Windows apps can access email. **Set to 2 (two)**
|
||||
| 17.12 Messaging | [Privacy/LetAppsAccessMessaging](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessmessaging) | Specifies whether Windows apps can read or send messages (text or MMS). **Set to 2 (two)**
|
||||
| 17.13 Phone calls | [Privacy/LetAppsAccessPhone](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessphone) | Specifies whether Windows apps can make phone calls. **Set to 2 (two)**
|
||||
| 17.14 Radios | [Privacy/LetAppsAccessRadios](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessradios) | Specifies whether Windows apps have access to control radios. **Set to 2 (two)**
|
||||
| 17.15 Other devices | [Privacy/LetAppsSyncWithDevices](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappssyncwithdevices) | Specifies whether Windows apps can sync with devices. **Set to 2 (two)**
|
||||
| | [Privacy/LetAppsAccessTrustedDevices](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesstrusteddevices) | Specifies whether Windows apps can access trusted devices. **Set to 2 (two)**
|
||||
| 17.16 Feedback & diagnostics | [System/AllowTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | Allow the device to send diagnostic and usage telemetry data, such as Watson. **Set to 0 (zero)**
|
||||
| | [Experience/DoNotShowFeedbackNotifications](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-donotshowfeedbacknotifications)| Prevents devices from showing feedback questions from Microsoft. **Set to 1 (one)**
|
||||
| 17.17 Background apps | [Privacy/LetAppsRunInBackground](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsruninbackground) | Specifies whether Windows apps can run in the background. **Set to 2 (two)**
|
||||
| 17.18 Motion | [Privacy/LetAppsAccessMotion](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessmotion) | Specifies whether Windows apps can access motion data. **Set to 2 (two)**
|
||||
| 17.19 Tasks | [Privacy/LetAppsAccessTasks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccesstasks) | Turn off the ability to choose which apps have access to tasks. **Set to 2 (two)**
|
||||
| 17.20 App Diagnostics | [Privacy/LetAppsGetDiagnosticInfo](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy#privacy-letappsgetdiagnosticinfo) | Force allow, force deny or give user control of apps that can get diagnostic information about other running apps. **Set to 2 (two)**
|
||||
| 18. Software Protection Platform | [Licensing/DisallowKMSClientOnlineAVSValidation](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-licensing#licensing-disallowkmsclientonlineavsvalidation) | Opt out of sending KMS client activation data to Microsoft automatically. **Set to 1 (one)**
|
||||
| 19. Storage Health | [Storage/AllowDiskHealthModelUpdates](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-storage#storage-allowdiskhealthmodelupdates) | Allows disk health model updates. **Set to 0 (zero)**
|
||||
| 20. Sync your settings | [Experience/AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) | Control whether your settings are synchronized. **Set to 0 (zero)**
|
||||
| 21. Teredo | No MDM needed | Teredo is **Off by default**. Delivery Optimization (DO) can turn on Teredo, but DO itself is turned Off via MDM.
|
||||
| 22. Wi-Fi Sense | No MDM needed | Wi-Fi Sense is no longer available from Windows 10 version 1803 and newer.
|
||||
| 23. Windows Defender | [Defender/AllowCloudProtection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#defender-allowcloudprotection) | Disconnect from the Microsoft Antimalware Protection Service. **Set to 0 (zero)**
|
||||
| | [Defender/SubmitSamplesConsent](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#defender-submitsamplesconsent) | Stop sending file samples back to Microsoft. **Set to 2 (two)**
|
||||
| 23.1 Windows Defender Smartscreen | [Browser/AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | Disable Windows Defender Smartscreen. **Set to 0 (zero)**
|
||||
| 23.2 Windows Defender Smartscreen EnableAppInstallControl | [SmartScreen/EnableAppInstallControl](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#smartscreen-enableappinstallcontrol) | Controls whether users are allowed to install apps from places other than the Microsoft Store. **Set to 0 (zero)**
|
||||
| 24. Windows Spotlight | [Experience/AllowWindowsSpotlight](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowwindowsspotlight) | Disable Windows Spotlight. **Set to 0 (zero)**
|
||||
| 25. Microsoft Store | [ApplicationManagement/DisableStoreOriginatedApps](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-disablestoreoriginatedapps)| Boolean value that disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded. **Set to 1 (one)**
|
||||
| | [ApplicationManagement/AllowAppStoreAutoUpdate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#applicationmanagement-allowappstoreautoupdate)| Specifies whether automatic update of apps from Microsoft Store are allowed. **Set to 0 (zero)**
|
||||
| 25.1 Apps for websites | [ApplicationDefaults/EnableAppUriHandlers](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationdefaults#applicationdefaults-enableappurihandlers) | This policy setting determines whether Windows supports web-to-app linking with app URI handlers. **Set to 0 (zero)**
|
||||
| 26. Windows Update Delivery Optimization | | The following Delivery Optimization MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||
| | [DeliveryOptimization/DODownloadMode](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-dodownloadmode)| Lets you choose where Delivery Optimization gets or sends updates and apps. **Set to 100 (one hundred)**
|
||||
| 27. Windows Update | [Update/AllowAutoUpdate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#update-allowautoupdate) | Control automatic updates. **Set to 5 (five)**
|
||||
|
||||
|
||||
### <a href="" id="bkmk-mdm-whitelist"></a> Allowed traffic ("Whitelisted traffic") for Microsoft InTune / MDM configurations
|
||||
|
||||
|**Allowed traffic endpoints** |
|
||||
| --- |
|
||||
|ctldl.windowsupdate.com|
|
||||
|cdn.onenote.net|
|
||||
|r.manage.microsoft.com|
|
||||
|tile-service.weather.microsoft.com|
|
||||
|settings-win.data.microsoft.com|
|
||||
|client.wns.windows.com|
|
||||
|dm3p.wns.windows.com|
|
||||
|crl.microsoft.com/pki/crl/*|
|
||||
|*microsoft.com/pkiops/crl/**|
|
||||
|activation-v2.sls.microsoft.com/*|
|
||||
|ocsp.digicert.com/*|
|
||||
|
||||
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
172
windows/privacy/manage-windows-1903-endpoints.md
Normal file
172
windows/privacy/manage-windows-1903-endpoints.md
Normal file
@ -0,0 +1,172 @@
|
||||
---
|
||||
title: Connection endpoints for Windows 10 Enterprise, version 1903
|
||||
description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact.
|
||||
keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.localizationpriority: high
|
||||
audience: ITPro
|
||||
author: danihalfin
|
||||
ms.author: v-medgar
|
||||
manager: sanashar
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 5/3/2019
|
||||
---
|
||||
# Manage connection endpoints for Windows 10 Enterprise, version 1903
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10 Enterprise, version 1903
|
||||
|
||||
Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include:
|
||||
|
||||
- Connecting to Microsoft Office and Windows sites to download the latest app and security updates.
|
||||
- Connecting to email servers to send and receive email.
|
||||
- Connecting to the web for every day web browsing.
|
||||
- Connecting to the cloud to store and access backups.
|
||||
- Using your location to show a weather forecast.
|
||||
|
||||
This article lists different endpoints that are available on a clean installation of Windows 10, version 1709 and later.
|
||||
Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md).
|
||||
Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic.
|
||||
|
||||
The following methodology was used to derive these network endpoints:
|
||||
|
||||
1. Set up the latest version of Windows 10 on a test virtual machine using the default settings.
|
||||
2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device).
|
||||
3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
|
||||
4. Compile reports on traffic going to public IP addresses.
|
||||
5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.
|
||||
6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here.
|
||||
7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different.
|
||||
8. These tests were conducted for one week, but if you capture traffic for longer you may have different results.
|
||||
|
||||
> [!NOTE]
|
||||
> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
|
||||
|
||||
## Windows 10 1903 Enterprise connection endpoints
|
||||
|
||||
|Area|Description|Protocol|Destination|
|
||||
|----------------|----------|----------|------------|
|
||||
|Apps|The following endpoints are used to download updates to the Weather app Live Tile. If you turn off traffic to this endpoint, no Live Tiles will be updated.|HTTP|blob.weather.microsoft.com|
|
||||
|||HTTP|tile-service.weather.microsoft.com
|
||||
||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|cdn.onenote.net/livetile/?Language=en-US
|
||||
||The following endpoint is used for Twitter updates. To turn off traffic for these endpoints, either uninstall Twitter or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|*.twimg.com*|
|
||||
||The following endpoint is used for Candy Crush Saga updates. To turn off traffic for this endpoint, either uninstall Candy Crush Saga or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLS v1.2|candycrushsoda.king.com|
|
||||
||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office Online. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|evoke-windowsservices-tas.msedge.net|
|
||||
||The following endpoint is used for by the Microsoft Wallet app. To turn off traffic for this endpoint, either uninstall the Wallet app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTPS|wallet.microsoft.com|
|
||||
||The following endpoint is used by the Groove Music app for update HTTP handler status. If you turn off traffic for this endpoint, apps for websites won't work and customers who visit websites (such as mediaredirect.microsoft.com) that are registered with their associated app (such as Groove Music) will stay at the website and won't be able to directly launch the app.|HTTPS|mediaredirect.microsoft.com|
|
||||
||The following endpoints are used when using the Whiteboard app. To turn off traffic for this endpoint disable the Microsoft Store.|HTTPS|int.whiteboard.microsoft.com|
|
||||
|||HTTPS|wbd.ms|
|
||||
|||HTTPS|whiteboard.microsoft.com|
|
||||
|||HTTP / HTTPS|whiteboard.ms|
|
||||
|Azure |The following endpoints are related to Azure. |HTTPS|wd-prod-*fe*.cloudapp.azure.com|
|
||||
|||HTTPS|ris-prod-atm.trafficmanager.net|
|
||||
|||HTTPS|validation-v2.sls.trafficmanager.net|
|
||||
|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible turn off traffic to this endpoint, but that is not recommended because when root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.|HTTP|ctldl.windowsupdate.com|
|
||||
|Cortana and Search|The following endpoint is used to get images that are used for Microsoft Store suggestions. If you turn off traffic for this endpoint, you will block images that are used for Microsoft Store suggestions. |HTTPS|store-images.*microsoft.com|
|
||||
||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|HTTPS|www.bing.com/client|
|
||||
|||HTTPS|www.bing.com|
|
||||
|||HTTPS|www.bing.com/proactive|
|
||||
|||HTTPS|www.bing.com/threshold/xls.aspx|
|
||||
|||HTTP|exo-ring.msedge.net|
|
||||
|||HTTP|fp.msedge.net|
|
||||
|||HTTP|fp-vp.azureedge.net|
|
||||
|||HTTP|odinvzc.azureedge.net|
|
||||
|||HTTP|spo-ring.msedge.net|
|
||||
|Device authentication|
|
||||
||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*|
|
||||
||The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.|HTTP|dmd.metaservices.microsoft.com|
|
||||
|Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft.|HTTP|v10.events.data.microsoft.com|
|
||||
|||HTTPS|v10.vortex-win.data.microsoft.com/collect/v1|
|
||||
|||HTTP|www.microsoft.com|
|
||||
||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|HTTPS|co4.telecommand.telemetry.microsoft.com|
|
||||
|||HTTP|cs11.wpc.v0cdn.net|
|
||||
|||HTTPS|cs1137.wpc.gammacdn.net|
|
||||
|||TLS v1.2|modern.watson.data.microsoft.com*|
|
||||
|||HTTPS|watson.telemetry.microsoft.com|
|
||||
|Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.|HTTPS|*licensing.mp.microsoft.com*|
|
||||
|Location|The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|HTTPS|inference.location.live.net|
|
||||
|||HTTP|location-inference-westus.cloudapp.net|
|
||||
|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|HTTPS|*g.akamaiedge.net|
|
||||
|||HTTP|*maps.windows.com*|
|
||||
|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |HTTP|login.msa.akadns6.net|
|
||||
|||HTTP|us.configsvc1.live.com.akadns.net|
|
||||
|Microsoft Edge|This traffic is related to the Microsoft Edge browser.|HTTPS|iecvlist.microsoft.com|
|
||||
|Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTPS|go.microsoft.com|
|
||||
|Microsoft Store|The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|HTTPS|*.wns.windows.com|
|
||||
||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTP|storecatalogrevocation.storequality.microsoft.com|
|
||||
||The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you turn off traffic for these endpoints, the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTPS|img-prod-cms-rt-microsoft-com*|HTTPS|store-images.microsoft.com|
|
||||
||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|TLS v1.2|*.md.mp.microsoft.com*|
|
||||
|||HTTPS|*displaycatalog.mp.microsoft.com|
|
||||
|||HTTP \ HTTPS|pti.store.microsoft.com|
|
||||
|||HTTP|storeedgefd.dsx.mp.microsoft.com|
|
||||
|||HTTP|markets.books.microsoft.com|
|
||||
|||HTTP |share.microsoft.com|
|
||||
|Network Connection Status Indicator (NCSI)|
|
||||
||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTP|www.msftconnecttest.com*|
|
||||
Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office Online. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.|HTTP|*.c-msedge.net|
|
||||
|||HTTPS|*.e-msedge.net|
|
||||
|||HTTPS|*.s-msedge.net|
|
||||
|||HTTPS|nexusrules.officeapps.live.com|
|
||||
|||HTTPS|ocos-office365-s2s.msedge.net|
|
||||
|||HTTPS|officeclient.microsoft.com|
|
||||
|||HTTPS|outlook.office365.com|
|
||||
|||HTTPS|client-office365-tas.msedge.net|
|
||||
|||HTTPS|www.office.com|
|
||||
|||HTTPS|onecollector.cloudapp.aria|
|
||||
|||HTTP|v10.events.data.microsoft.com/onecollector/1.0/|
|
||||
|||HTTPS|self.events.data.microsoft.com|
|
||||
||The following endpoint is used to connect the Office To-Do app to its cloud service. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store.|HTTPS|to-do.microsoft.com
|
||||
|OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.|HTTP \ HTTPS|g.live.com/1rewlive5skydrive/*|
|
||||
|||HTTP|msagfx.live.com|
|
||||
|||HTTPS|oneclient.sfx.ms|
|
||||
|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.|HTTPS|cy2.settings.data.microsoft.com.akadns.net|
|
||||
|||HTTPS|settings.data.microsoft.com|
|
||||
|||HTTPS|settings-win.data.microsoft.com|
|
||||
|Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTPS|browser.pipe.aria.microsoft.com|
|
||||
|||HTTP|config.edge.skype.com|
|
||||
|||HTTP|s2s.config.skype.com|
|
||||
|||HTTPS|skypeecs-prod-usw-0-b.cloudapp.net|
|
||||
|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.|HTTPS|wdcp.microsoft.com|
|
||||
|||HTTPS|definitionupdates.microsoft.com|
|
||||
|||HTTPS|go.microsoft.com|
|
||||
||The following endpoints are used for Windows Defender Smartscreen reporting and notifications. If you turn off traffic for these endpoints, Smartscreen notifications will not appear.|HTTPS|*smartscreen.microsoft.com|
|
||||
|||HTTPS|smartscreen-sn3p.smartscreen.microsoft.com|
|
||||
|||HTTPS|unitedstates.smartscreen-prod.microsoft.com|
|
||||
|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.|TLS v1.2|*.search.msn.com|
|
||||
|||HTTPS|arc.msn.com|
|
||||
|||HTTPS|g.msn.com*|
|
||||
|||HTTPS|query.prod.cms.rt.microsoft.com|
|
||||
|||HTTPS|ris.api.iris.microsoft.com|
|
||||
|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.|HTTPS|*.prod.do.dsp.mp.microsoft.com|
|
||||
|||HTTP|cs9.wac.phicdn.net|
|
||||
|||HTTP|emdl.ws.microsoft.com|
|
||||
||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|HTTP|*.dl.delivery.mp.microsoft.com|
|
||||
|||HTTP|*.windowsupdate.com*|
|
||||
||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store.|HTTPS|*.delivery.mp.microsoft.com|
|
||||
|||HTTPS|*.update.microsoft.com|
|
||||
||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly.|HTTPS|tsfe.trafficshaping.dsp.mp.microsoft.com|
|
||||
|
||||
|
||||
## Other Windows 10 editions
|
||||
|
||||
To view endpoints for other versions of Windows 10 Enterprise, see:
|
||||
- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md)
|
||||
- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md)
|
||||
- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md)
|
||||
|
||||
To view endpoints for non-Enterprise Windows 10 editions, see:
|
||||
- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md)
|
||||
- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md)
|
||||
- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md)
|
||||
|
||||
|
||||
## Related links
|
||||
|
||||
- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US)
|
||||
- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/intune/get-started/network-infrastructure-requirements-for-microsoft-intune)
|
||||
|
||||
|
||||
@ -12,17 +12,18 @@ ms.author: daniha
|
||||
manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 03/13/2018
|
||||
ms.date: 04/15/2019
|
||||
---
|
||||
|
||||
# Windows 10, version 1709 and newer diagnostic data for the Full level
|
||||
|
||||
Applies to:
|
||||
- Windows 10, version 1903
|
||||
- Windows 10, version 1809
|
||||
- Windows 10, version 1803
|
||||
- Windows 10, version 1709
|
||||
|
||||
Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1809 Basic level diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields).
|
||||
Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of diagnostic data collected by Windows at the Full level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1903 Basic level diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields).
|
||||
|
||||
In addition, this article provides references to equivalent definitions for the data types and examples from [ISO/IEC 19944:2017 Information technology -- Cloud computing -- Cloud services and devices: Data flow, data categories and data use](https://www.iso.org/standard/66674.html). Each data type also has a Data Use statement, for diagnostics and for Tailored experiences on the device, using the terms as defined by the standard. These Data Use statements define the purposes for which Microsoft processes each type of Windows diagnostic data, using a uniform set of definitions referenced at the end of this document and based on the ISO standard. Reference to the ISO standard provides additional clarity about the information collected, and allows easy comparison with other services or guidance that also references the standard.
|
||||
|
||||
|
||||
@ -0,0 +1,274 @@
|
||||
---
|
||||
title: Windows 10, version 1903, connection endpoints for non-Enterprise editions
|
||||
description: Explains what Windows 10 endpoints are used in non-Enterprise editions.
|
||||
keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.localizationpriority: high
|
||||
audience: ITPro
|
||||
author: mikeedgar
|
||||
ms.author: v-medgar
|
||||
manager: sanashar
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
ms.date: 5/9/2019
|
||||
---
|
||||
# Windows 10, version 1903, connection endpoints for non-Enterprise editions
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10 Home, version 1903
|
||||
- Windows 10 Professional, version 1903
|
||||
- Windows 10 Education, version 1903
|
||||
|
||||
In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-1903-endpoints.md), the following endpoints are available on other non-Enterprise editions of Windows 10, version 1903.
|
||||
|
||||
The following methodology was used to derive the network endpoints:
|
||||
|
||||
1. Set up the latest version of Windows 10 on a test virtual machine using the default settings.
|
||||
2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device).
|
||||
3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
|
||||
4. Compile reports on traffic going to public IP addresses.
|
||||
5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.
|
||||
6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here.
|
||||
7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different.
|
||||
8. These tests were conducted for one week, but if you capture traffic for longer you may have different results.
|
||||
|
||||
|
||||
> [!NOTE]
|
||||
> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
|
||||
|
||||
## Windows 10 Family
|
||||
|
||||
| **Destination** | **Protocol** | **Description** |
|
||||
| --- | --- | --- |
|
||||
|\*.aria.microsoft.com*|HTTPS|Microsoft Office Telemetry
|
||||
|\*.b.akamai*.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use
|
||||
|\*.c-msedge.net|HTTP|Microsoft Office
|
||||
|\*.dl.delivery.mp.microsoft.com*|HTTP|Enables connections to Windows Update
|
||||
|\*.download.windowsupdate.com*|HTTP|Used to download operating system patches and updates
|
||||
|\*.g.akamai*.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use
|
||||
|\*.login.msa.*.net|HTTPS|Microsoft Account related
|
||||
|\*.msn.com*|TLSv1.2/HTTPS|Windows Spotlight
|
||||
|\*.skype.com|HTTP/HTTPS|Skype
|
||||
|\*.smartscreen.microsoft.com*|HTTPS|Windows Defender Smartscreen
|
||||
|\*.telecommand.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting
|
||||
|*cdn.onenote.net*|HTTP|OneNote
|
||||
|*displaycatalog.*mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store
|
||||
|*emdl.ws.microsoft.com*|HTTP|Windows Update
|
||||
|*geo-prod.do.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update
|
||||
|*hwcdn.net*|HTTP|Highwinds Content Delivery Network / Windows updates
|
||||
|*img-prod-cms-rt-microsoft-com*|HTTPS|Microsoft Store or Inbox MSN Apps image download
|
||||
|*licensing.*mp.microsoft.com*|HTTPS|Licensing
|
||||
|*maps.windows.com*|HTTPS|Related to Maps application
|
||||
|*msedge.net*|HTTPS|Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps
|
||||
|*nexusrules.officeapps.live.com*|HTTPS|Microsoft Office Telemetry
|
||||
|*photos.microsoft.com*|HTTPS|Photos App
|
||||
|*prod.do.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Used for Windows Update downloads of apps and OS updates
|
||||
|*purchase.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store
|
||||
|*settings.data.microsoft.com.akadns.net|HTTPS|Used for Windows apps to dynamically update their configuration
|
||||
|*wac.phicdn.net*|HTTP|Windows Update
|
||||
|*windowsupdate.com*|HTTP|Windows Update
|
||||
|*wns.*windows.com*|TLSv1.2/HTTPS|Used for the Windows Push Notification Services (WNS)
|
||||
|*wpc.v0cdn.net*|HTTP|Windows Telemetry
|
||||
|arc.msn.com|HTTPS|Spotlight
|
||||
|auth.gfx.ms*|HTTPS|MSA related
|
||||
|cdn.onenote.net|HTTPS|OneNote Live Tile
|
||||
|dmd.metaservices.microsoft.com*|HTTP|Device Authentication
|
||||
|e-0009.e-msedge.net|HTTPS|Microsoft Office
|
||||
|e10198.b.akamaiedge.net|HTTPS|Maps application
|
||||
|evoke-windowsservices-tas.msedge*|HTTPS|Photos app
|
||||
|fe2.update.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store
|
||||
|fe3.*.mp.microsoft.com.*|TLSv1.2/HTTPS|Windows Update, Microsoft Update, and Microsoft Store services
|
||||
|g.live.com*|HTTPS|OneDrive
|
||||
|go.microsoft.com|HTTP|Windows Defender
|
||||
|iriscoremetadataprod.blob.core.windows.net|HTTPS|Windows Telemetry
|
||||
|login.live.com|HTTPS|Device Authentication
|
||||
|msagfx.live.com|HTTP|OneDrive
|
||||
|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|
||||
|officeclient.microsoft.com|HTTPS|Microsoft Office
|
||||
|oneclient.sfx.ms*|HTTPS|Used by OneDrive for Business to download and verify app updates
|
||||
|onecollector.cloudapp.aria.akadns.net|HTTPS|Microsoft Office
|
||||
|ow1.res.office365.com|HTTP|Microsoft Office
|
||||
|pti.store.microsoft.com|HTTPS|Microsoft Store
|
||||
|purchase.mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store
|
||||
|query.prod.cms.rt.microsoft.com*|HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|ris.api.iris.microsoft.com*|TLSv1.2/HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|ris-prod-atm.trafficmanager.net|HTTPS|Azure traffic manager
|
||||
|s-0001.s-msedge.net|HTTPS|Microsoft Office
|
||||
|self.events.data.microsoft.com|HTTPS|Microsoft Office
|
||||
|settings.data.microsoft.com*|HTTPS|Used for Windows apps to dynamically update their configuration
|
||||
|settings-win.data.microsoft.com*|HTTPS|Used for Windows apps to dynamically update their configuration
|
||||
|share.microsoft.com|HTTPS|Microsoft Store
|
||||
|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Microsoft Store
|
||||
|sls.update.microsoft.com*|TLSv1.2/HTTPS|Enables connections to Windows Update
|
||||
|slscr.update.microsoft.com*|HTTPS|Enables connections to Windows Update
|
||||
|store*.dsx.mp.microsoft.com*|HTTPS|Used to communicate with Microsoft Store
|
||||
|storecatalogrevocation.storequality.microsoft.com|HTTPS|Microsoft Store
|
||||
|storecatalogrevocation.storequality.microsoft.com*|HTTPS|Used to revoke licenses for malicious apps on the Microsoft Store
|
||||
|store-images.*microsoft.com*|HTTP|Used to get images that are used for Microsoft Store suggestions
|
||||
|storesdk.dsx.mp.microsoft.com|HTTP|Microsoft Store
|
||||
|tile-service.weather.microsoft.com*|HTTP|Used to download updates to the Weather app Live Tile
|
||||
|time.windows.com|HTTP|Microsoft Windows Time related
|
||||
|tsfe.trafficshaping.dsp.mp.microsoft.com*|TLSv1.2/HTTPS|Used for content regulation
|
||||
|v10.events.data.microsoft.com|HTTPS|Diagnostic Data
|
||||
|watson.telemetry.microsoft.com|HTTPS|Diagnostic Data
|
||||
|wdcp.microsoft.*|TLSv1.2, HTTPS|Used for Windows Defender when Cloud-based Protection is enabled
|
||||
|wd-prod-cp-us-west-1-fe.westus.cloudapp.azure.com|HTTPS|Windows Defender
|
||||
|wusofficehome.msocdn.com|HTTPS|Microsoft Office
|
||||
|www.bing.com*|HTTP|Used for updates for Cortana, apps, and Live Tiles
|
||||
|www.msftconnecttest.com|HTTP|Network Connection (NCSI)
|
||||
|www.office.com|HTTPS|Microsoft Office
|
||||
|
||||
|
||||
## Windows 10 Pro
|
||||
|
||||
| **Destination** | **Protocol** | **Description** |
|
||||
| --- | --- | --- |
|
||||
|\*.cloudapp.azure.com|HTTPS|Azure
|
||||
|\*.delivery.dsp.mp.microsoft.com.nsatc.net|HTTPS|Windows Update, Microsoft Update, and Microsoft Store services
|
||||
|\*.displaycatalog.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store
|
||||
|\*.dl.delivery.mp.microsoft.com*|HTTP|Enables connections to Windows Update
|
||||
|\*.e-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
|
||||
|\*.g.akamaiedge.net|HTTPS|Used to check for updates to maps that have been downloaded for offline use
|
||||
|\*.s-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
|
||||
|\*.windowsupdate.com*|HTTP|Enables connections to Windows Update
|
||||
|\*.wns.notify.windows.com.akadns.net|HTTPS|Used for the Windows Push Notification Services (WNS)
|
||||
|\*dsp.mp.microsoft.com.nsatc.net|HTTPS|Enables connections to Windows Update
|
||||
|\*c-msedge.net|HTTP|Office
|
||||
|a1158.g.akamai.net|HTTP|Maps application
|
||||
|arc.msn.com*|HTTP / HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|blob.mwh01prdstr06a.store.core.windows.net|HTTPS|Microsoft Store
|
||||
|browser.pipe.aria.microsoft.com|HTTPS|Microsoft Office
|
||||
|bubblewitch3mobile.king.com|HTTPS|Bubble Witch application
|
||||
|candycrush.king.com|HTTPS|Candy Crush application
|
||||
|cdn.onenote.net|HTTP|Microsoft OneNote
|
||||
|cds.p9u4n2q3.hwcdn.net|HTTP|Highwinds Content Delivery Network traffic for Windows updates
|
||||
|client.wns.windows.com|HTTPS|Winddows Notification System
|
||||
|co4.telecommand.telemetry.microsoft.com.akadns.net|HTTPS|Windows Error Reporting
|
||||
|config.edge.skype.com|HTTPS|Microsoft Skype
|
||||
|cs11.wpc.v0cdn.net|HTTP|Windows Telemetry
|
||||
|cs9.wac.phicdn.net|HTTP|Windows Update
|
||||
|cy2.licensing.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store
|
||||
|cy2.purchase.md.mp.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store
|
||||
|cy2.settings.data.microsoft.com.akadns.net|HTTPS|Used to communicate with Microsoft Store
|
||||
|dmd.metaservices.microsoft.com.akadns.net|HTTP|Device Authentication
|
||||
|e-0009.e-msedge.net|HTTPS|Microsoft Office
|
||||
|e10198.b.akamaiedge.net|HTTPS|Maps application
|
||||
|fe3.update.microsoft.com|HTTPS|Windows Update
|
||||
|g.live.com|HTTPS|Microsoft OneDrive
|
||||
|g.msn.com.nsatc.net|HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|geo-prod.do.dsp.mp.microsoft.com|HTTPS|Windows Update
|
||||
|go.microsoft.com|HTTP|Windows Defender
|
||||
|iecvlist.microsoft.com|HTTPS|Microsoft Edge
|
||||
|img-prod-cms-rt-microsoft-com.akamaized.net|HTTP / HTTPS|Microsoft Store
|
||||
|ipv4.login.msa.akadns6.net|HTTPS|Used for Microsoft accounts to sign in
|
||||
|licensing.mp.microsoft.com|HTTP|Licensing
|
||||
|location-inference-westus.cloudapp.net|HTTPS|Used for location data
|
||||
|login.live.com|HTTP|Device Authentication
|
||||
|maps.windows.com|HTTP|Maps application
|
||||
|modern.watson.data.microsoft.com.akadns.net|HTTPS|Used by Windows Error Reporting
|
||||
|msagfx.live.com|HTTP|OneDrive
|
||||
|nav.smartscreen.microsoft.com|HTTPS|Windows Defender
|
||||
|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|
||||
|oneclient.sfx.ms|HTTP|OneDrive
|
||||
|pti.store.microsoft.com|HTTPS|Microsoft Store
|
||||
|ris.api.iris.microsoft.com.akadns.net|HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|ris-prod-atm.trafficmanager.net|HTTPS|Azure
|
||||
|s2s.config.skype.com|HTTP|Microsoft Skype
|
||||
|settings-win.data.microsoft.com|HTTPS|Application settings
|
||||
|share.microsoft.com|HTTPS|Microsoft Store
|
||||
|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Microsoft Skype
|
||||
|slscr.update.microsoft.com|HTTPS|Windows Update
|
||||
|storecatalogrevocation.storequality.microsoft.com|HTTPS|Microsoft Store
|
||||
|store-images.microsoft.com|HTTPS|Microsoft Store
|
||||
|tile-service.weather.microsoft.com/*|HTTP|Used to download updates to the Weather app Live Tile
|
||||
|time.windows.com|HTTP|Windows time
|
||||
|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Used for content regulation
|
||||
|v10.events.data.microsoft.com*|HTTPS|Microsoft Office
|
||||
|vip5.afdorigin-prod-am02.afdogw.com|HTTPS|Used to serve office 365 experimentation traffic
|
||||
|watson.telemetry.microsoft.com|HTTPS|Telemetry
|
||||
|wdcp.microsoft.com|HTTPS|Windows Defender
|
||||
|wusofficehome.msocdn.com|HTTPS|Microsoft Office
|
||||
|www.bing.com|HTTPS|Cortana and Search
|
||||
|www.microsoft.com|HTTP|Diagnostic
|
||||
|www.msftconnecttest.com|HTTP|Network connection
|
||||
|www.office.com|HTTPS|Microsoft Office
|
||||
|
||||
|
||||
|
||||
## Windows 10 Education
|
||||
|
||||
| **Destination** | **Protocol** | **Description** |
|
||||
| --- | --- | --- |
|
||||
|\*.b.akamaiedge.net|HTTPS|Used to check for updates to maps that have been downloaded for offline use
|
||||
|\*.c-msedge.net|HTTP|Used by OfficeHub to get the metadata of Office apps
|
||||
|\*.dl.delivery.mp.microsoft.com*|HTTP|Windows Update
|
||||
|\*.e-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
|
||||
|\*.g.akamaiedge.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use
|
||||
|\*.licensing.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store
|
||||
|\*.settings.data.microsoft.com.akadns.net|HTTPS|Microsoft Store
|
||||
|\*.skype.com*|HTTPS|Used to retrieve Skype configuration values
|
||||
|\*.smartscreen*.microsoft.com|HTTPS|Windows Defender
|
||||
|\*.s-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
|
||||
|\*.telecommand.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting
|
||||
|\*.wac.phicdn.net|HTTP|Windows Update
|
||||
|\*.windowsupdate.com*|HTTP|Windows Update
|
||||
|\*.wns.windows.com|HTTPS|Windows Notifications Service
|
||||
|\*.wpc.*.net|HTTP|Diagnostic Data
|
||||
|\*displaycatalog.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store
|
||||
|\*dsp.mp.microsoft.com|HTTPS|Windows Update
|
||||
|a1158.g.akamai.net|HTTP|Maps
|
||||
|a122.dscg3.akamai.net|HTTP|Maps
|
||||
|a767.dscg3.akamai.net|HTTP|Maps
|
||||
|au.download.windowsupdate.com*|HTTP|Windows Update
|
||||
|bing.com/*|HTTPS|Used for updates for Cortana, apps, and Live Tiles
|
||||
|blob.dz5prdstr01a.store.core.windows.net|HTTPS|Microsoft Store
|
||||
|browser.pipe.aria.microsoft.com|HTTP|Used by OfficeHub to get the metadata of Office apps
|
||||
|cdn.onenote.net/livetile/*|HTTPS|Used for OneNote Live Tile
|
||||
|cds.p9u4n2q3.hwcdn.net|HTTP|Used by the Highwinds Content Delivery Network to perform Windows updates
|
||||
|client-office365-tas.msedge.net/*|HTTPS|Office 365 porta and Office Online
|
||||
|ctldl.windowsupdate.com*|HTTP|Used to download certificates that are publicly known to be fraudulent
|
||||
|displaycatalog.mp.microsoft.com/*|HTTPS|Microsoft Store
|
||||
|dmd.metaservices.microsoft.com*|HTTP|Device Authentication
|
||||
|download.windowsupdate.com*|HTTPS|Windows Update
|
||||
|emdl.ws.microsoft.com/*|HTTP|Used to download apps from the Microsoft Store
|
||||
|evoke-windowsservices-tas.msedge.net|HTTPS|Photo app
|
||||
|fe2.update.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
|
||||
|fe3.delivery.dsp.mp.microsoft.com.nsatc.net|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
|
||||
|fe3.delivery.mp.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
|
||||
|g.live.com*|HTTPS|Used by OneDrive for Business to download and verify app updates
|
||||
|g.msn.com.nsatc.net|HTTPS|Used to retrieve Windows Spotlight metadata
|
||||
|go.microsoft.com|HTTP|Windows Defender
|
||||
|iecvlist.microsoft.com|HTTPS|Microsoft Edge browser
|
||||
|ipv4.login.msa.akadns6.net|HTTPS|Used for Microsoft accounts to sign in
|
||||
|licensing.mp.microsoft.com*|HTTPS|Used for online activation and some app licensing
|
||||
|login.live.com|HTTPS|Device Authentication
|
||||
|maps.windows.com/windows-app-web-link|HTTPS|Maps application
|
||||
|modern.watson.data.microsoft.com.akadns.net|HTTPS|Used by Windows Error Reporting
|
||||
|msagfx.live.com|HTTPS|OneDrive
|
||||
|ocos-office365-s2s.msedge.net/*|HTTPS|Used to connect to the Office 365 portal's shared infrastructure
|
||||
|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|
||||
|oneclient.sfx.ms/*|HTTPS|Used by OneDrive for Business to download and verify app updates
|
||||
|onecollector.cloudapp.aria.akadns.net|HTTPS|Microsoft Office
|
||||
|pti.store.microsoft.com|HTTPS|Microsoft Store
|
||||
|settings-win.data.microsoft.com/settings/*|HTTPS|Used as a way for apps to dynamically update their configuration
|
||||
|share.microsoft.com|HTTPS|Microsoft Store
|
||||
|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Skype
|
||||
|sls.update.microsoft.com*|HTTPS|Windows Update
|
||||
|storecatalogrevocation.storequality.microsoft.com*|HTTPS|Used to revoke licenses for malicious apps on the Microsoft Store
|
||||
|tile-service.weather.microsoft.com*|HTTP|Used to download updates to the Weather app Live Tile
|
||||
|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Windows Update
|
||||
|v10.events.data.microsoft.com*|HTTPS|Diagnostic Data
|
||||
|vip5.afdorigin-prod-ch02.afdogw.com|HTTPS|Used to serve Office 365 experimentation traffic
|
||||
|watson.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting
|
||||
|wdcp.microsoft.com|HTTPS|Windows Defender
|
||||
|wd-prod-cp-us-east-1-fe.eastus.cloudapp.azure.com|HTTPS|Azure
|
||||
|wusofficehome.msocdn.com|HTTPS|Microsoft Office
|
||||
|www.bing.com|HTTPS|Cortana and Search
|
||||
|www.microsoft.com|HTTP|Diagnostic Data
|
||||
|www.microsoft.com/pkiops/certs/*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|
||||
|www.msftconnecttest.com|HTTP|Network Connection
|
||||
|www.office.com|HTTPS|Microsoft Office
|
||||
|
||||
@ -1,23 +1,36 @@
|
||||
# [Windows 10 release information](index.md)
|
||||
## [Message center](windows-message-center.yml)
|
||||
## [Version 1809 and Windows Server 2019](status-windows-10-1809-and-windows-server-2019.yml)
|
||||
## Version 1903
|
||||
### [Known issues and notifications](status-windows-10-1903.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1903.yml)
|
||||
## Version 1809 and Windows Server 2019
|
||||
### [Known issues and notifications](status-windows-10-1809-and-windows-server-2019.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1809-and-windows-server-2019.yml)
|
||||
## [Version 1803](status-windows-10-1803.yml)
|
||||
## Version 1803
|
||||
### [Known issues and notifications](status-windows-10-1803.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1803.yml)
|
||||
## [Version 1709](status-windows-10-1709.yml)
|
||||
## Version 1709
|
||||
### [Known issues and notifications](status-windows-10-1709.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1709.yml)
|
||||
## [Version 1703](status-windows-10-1703.yml)
|
||||
## Version 1703
|
||||
### [Known issues and notifications](status-windows-10-1703.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1703.yml)
|
||||
## [Version 1607 and Windows Server 2016](status-windows-10-1607-and-windows-server-2016.yml)
|
||||
## Version 1607 and Windows Server 2016
|
||||
### [Known issues and notifications](status-windows-10-1607-and-windows-server-2016.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1607.yml)
|
||||
## [Version 1507](status-windows-10-1507.yml)
|
||||
## Version 1507
|
||||
### [Known issues and notifications](status-windows-10-1507.yml)
|
||||
### [Resolved issues](resolved-issues-windows-10-1507.yml)
|
||||
## Previous versions
|
||||
### [Windows 8.1 and Windows Server 2012 R2](status-windows-8.1-and-windows-server-2012-r2.yml)
|
||||
### Windows 8.1 and Windows Server 2012 R2
|
||||
#### [Known issues and notifications](status-windows-8.1-and-windows-server-2012-r2.yml)
|
||||
####[Resolved issues](resolved-issues-windows-8.1-and-windows-server-2012-r2.yml)
|
||||
### [Windows Server 2012](status-windows-server-2012.yml)
|
||||
### Windows Server 2012
|
||||
#### [Known issues and notifications](status-windows-server-2012.yml)
|
||||
####[Resolved issues](resolved-issues-windows-server-2012.yml)
|
||||
### [Windows 7 and Windows Server 2008 R2](status-windows-7-and-windows-server-2008-r2-sp1.yml)
|
||||
### Windows 7 and Windows Server 2008 R2
|
||||
#### [Known issues and notifications](status-windows-7-and-windows-server-2008-r2-sp1.yml)
|
||||
####[Resolved issues](resolved-issues-windows-7-and-windows-server-2008-r2-sp1.yml)
|
||||
### [Windows Server 2008 SP2](status-windows-server-2008-sp2.yml)
|
||||
### Windows Server 2008 SP2
|
||||
#### [Known issues and notifications](status-windows-server-2008-sp2.yml)
|
||||
####[Resolved issues](resolved-issues-windows-server-2008-sp2.yml)
|
||||
@ -13,12 +13,14 @@ ms.localizationpriority: high
|
||||
---
|
||||
# Windows 10 release information
|
||||
|
||||
Feature updates for Windows 10 are released twice a year, targeting March and September, via the Semi-Annual Channel (SAC) and will be serviced with monthly quality updates for 18 months from the date of the release. We recommend that you begin deployment of each SAC release immediately to devices selected for early adoption and ramp up to full deployment at your discretion. This will enable you to gain access to new features, experiences, and integrated security as soon as possible.
|
||||
Feature updates for Windows 10 are released twice a year, around March and September, via the Semi-Annual Channel and will be serviced with monthly quality updates for 18 months from the date of the release.
|
||||
|
||||
Starting with Windows 10, version 1809, feature updates for Windows 10 Enterprise and Education editions with a targeted release month of September will be serviced for 30 months from their release date. For information about servicing timelines, see the [Windows lifecycle fact sheet](https://support.microsoft.com/help/13853).
|
||||
We recommend that you begin deployment of each Semi-Annual Channel release immediately as a targeted deployment to devices selected for early adoption and ramp up to full deployment at your discretion. This will enable you to gain access to new features, experiences, and integrated security as soon as possible.
|
||||
|
||||
Starting with Windows 10, version 1809, feature updates for Windows 10 Enterprise and Education editions are serviced for 30 months from their release date. For information about servicing timelines, see the [Windows lifecycle fact sheet](https://support.microsoft.com/help/13853).
|
||||
|
||||
>[!NOTE]
|
||||
>If you are not using Windows Update for Business today, the "Semi-Annual Channel (Targeted)" servicing option has no impact on when your devices will be updated. It merely reflects a milestone for the semi-annual release, the period of time during which Microsoft recommends that your IT team make the release available to specific, "targeted" devices for the purpose of validating and generating data in order to get to a broad deployment decision. For more information, see [this blog post](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Update-for-Business-and-the-retirement-of-SAC-T/ba-p/339523).
|
||||
>Beginning with Windows 10, version 1903, this page will no longer list Semi-Annual Channel (Targeted) information for version 1903 and future feature updates. Instead, you will find a single entry for each Semi-Annual Channel release. For more information, see [this blog post](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-Update-for-Business-and-the-retirement-of-SAC-T/ba-p/339523).
|
||||
|
||||
|
||||
<div class="m-rich-content-block" data-grid="col-12">
|
||||
|
||||
@ -32,6 +32,7 @@ sections:
|
||||
- type: markdown
|
||||
text: "
|
||||
<table border ='0'><tr><td width='65%'>Summary</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>Date resolved</td></tr>
|
||||
<tr><td><div id='438msg'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><br>Upgrade block: Microsoft has identified issues with certain new Intel display drivers, which accidentally turn on unsupported features in Windows.<br><br><a href = '#438msgdesc'>See details ></a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>07:42 AM PT</td></tr>
|
||||
<tr><td><div id='422msg'></div><b>Unable to access some gov.uk websites</b><br>gov.uk websites that don’t support “HSTS” may not be accessible<br><br><a href = '#422msgdesc'>See details ></a></td><td>OS Build 17763.503<br><br>May 14, 2019<br><a href ='https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4505056' target='_blank'>KB4505056</a></td><td>May 19, 2019 <br>02:00 PM PT</td></tr>
|
||||
<tr><td><div id='377msg'></div><b>Windows 10, version 1809 update history may show an update installed twice</b><br>Some customers are reporting that KB4494441 installed twice on their device<br><br><a href = '#377msgdesc'>See details ></a></td><td>OS Build 17763.503<br><br>May 14, 2019<br><a href ='https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>May 16, 2019 <br>02:37 PM PT</td></tr>
|
||||
<tr><td><div id='379msg'></div><b>Layout and cell size of Excel sheets may change when using MS UI Gothic </b><br>When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. <br><br><a href = '#379msgdesc'>See details ></a></td><td>OS Build 17763.475<br><br>May 03, 2019<br><a href ='https://support.microsoft.com/help/4495667' target='_blank'>KB4495667</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>May 14, 2019 <br>10:00 AM PT</td></tr>
|
||||
@ -136,6 +137,7 @@ sections:
|
||||
- type: markdown
|
||||
text: "
|
||||
<table border ='0'><tr><td width='65%'>Details</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>History</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='438msgdesc'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><div><strong>Upgrade block:</strong> Microsoft has identified issues with certain new Intel display drivers. Intel inadvertently released versions of its display driver (versions 24.20.100.6344, 24.20.100.6345) to OEMs that accidentally turned on unsupported features in Windows. </div><div> </div><div>As a result, after updating to Windows 10, version 1809, audio playback from a monitor or television connected to a PC via HDMI, USB-C, or a DisplayPort may not function correctly on devices with these drivers.</div><div><strong>Note:</strong> This Intel display driver issue is different from the Intel Smart Sound Technology driver (version 09.21.00.3755) audio issue previously <a href=\"https://answers.microsoft.com/en-us/windows/forum/all/windows-10-audio-stops-working-after-installing/5a541c88-89e1-4bf3-b356-2837d564b109\" target=\"_blank\">documented</a>.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019 </li></ul><div></div><div><strong>Next steps:</strong> Intel has released updated drivers to OEM device manufacturers. OEMs need to make the updated driver available via Windows Update. For more information, see the <a href=\"https://www.intel.com/content/www/us/en/support/articles/000031612/graphics-drivers.html\" target=\"_blank\">Intel Customer Support article</a>.</div><div><br></div><div><strong>Resolution: </strong>Microsoft has removed the safeguard hold. </div><div><br></div><div><br></div><br><a href ='#438msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>Resolved:<br>May 21, 2019 <br>07:42 AM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='164msgdesc'></div><b>Shared albums may not sync with iCloud for Windows</b><div><strong>Upgrade block:</strong> Users who attempt to install iCloud for Windows (version 7.7.0.27) will see a message displayed that this version iCloud for Windows isn't supported and the install will fail.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019</li></ul><div></div><div>To ensure a seamless experience, Microsoft is blocking devices with iCloud for Windows (version 7.7.0.27) software installed from being offered Window 10, version 1809 until this issue has been resolved. </div><div><br></div><div>We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool from the Microsoft software download website until this issue is resolved. </div><div> </div><div><strong>Resolution</strong>: Apple has released an updated version of iCloud for Windows (version 7.8.1) that resolves compatibility issues encountered when updating or synching Shared Albums after updating to Windows 10, version 1809. We recommend that you update your iCloud for Windows to version 7.8.1 when prompted before attempting to upgrade to Windows 10, version 1809. You can also manually download the latest version of iCloud for Windows by visiting <a href=\"https://support.apple.com/HT204283\" target=\"_blank\">https://support.apple.com/HT204283</a>.</div><br><a href ='#164msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4482887' target='_blank'>KB4482887</a></td><td>Resolved:<br>March 01, 2019 <br>10:00 AM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='161msgdesc'></div><b>Intel Audio Display (intcdaud.sys) notification during Windows 10 Setup</b><div><strong>Upgrade block:</strong> Microsoft and Intel have identified a compatibility issue with a range of Intel Display Audio device drivers (intcdaud.sys, versions 10.25.0.3 - 10.25.0.8) that may result in excessive processor demand and reduced battery life. As a result, the update process to the Windows 10 October 2018 Update (Windows 10, version 1809) will fail and affected devices will automatically revert to the previous working configuration. </div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019</li></ul><div></div><div>If you see a \"What needs your attention\" notification during installation of the October 2018 Update, you have one of these affected drivers on your system. On the notification, click <strong>Back</strong> to remain on your current version of Windows 10. </div><div> </div><div>To ensure a seamless experience, we are blocking devices from being offered the October 2018 Update until updated Intel device drivers are installed on your current operating system. We recommend that you do not attempt to manually update to Windows 10, version 1809, using the Update Now button or the Media Creation Tool from the <a href=\"https://www.microsoft.com/software-download/windows10\" target=\"_blank\">Microsoft Software Download Center</a> until newer Intel device drivers are available with the update. You can either wait for newer drivers to be installed automatically through Windows Update or check with your computer manufacturer for the latest device driver software availability and installation procedures. For more information about this issue, see <a href=\"https://www.intel.com/content/www/us/en/support/articles/000030792/graphics-drivers.html\" target=\"_blank\">Intel's customer support guidance</a>.</div><div> </div><div><strong>Resolution:</strong> This issue was resolved in <a href=\"https://support.microsoft.com/help/4482887\" target=\"_blank\">KB4482887</a> and the upgrade block removed. </div><br><a href ='#161msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4482887' target='_blank'>KB4482887</a></td><td>Resolved:<br>March 01, 2019 <br>10:00 AM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='160msgdesc'></div><b>F5 VPN clients losing network connectivity </b><div><strong>Upgrade block:</strong> After updating to Window 10, version 1809, F5 VPN clients may lose network connectivity when the VPN service is in a split tunnel configuration.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019</li></ul><div></div><div><strong>Resolution:</strong> This issue was resolved in <a href=\"https://support.microsoft.com/help/4482887\" target=\"_blank\">KB4482887</a> and the upgrade block removed. </div><br><a href ='#160msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4482887' target='_blank'>KB4482887</a></td><td>Resolved:<br>March 01, 2019 <br>10:00 AM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
|
||||
@ -0,0 +1,36 @@
|
||||
### YamlMime:YamlDocument
|
||||
|
||||
documentType: LandingData
|
||||
title: Resolved issues in Windows 10, version 1903 and Windows Server, vesion 1903
|
||||
metadata:
|
||||
document_id:
|
||||
title: Resolved issues in Windows 10, version 1903 and Windows Server, vesion 1903
|
||||
description: Resolved issues in Windows 10, version 1903 and Windows Server 1903
|
||||
keywords: ["Resolved issues in Windows 10", "Windows 10", "Windows 10, version 1903"]
|
||||
ms.localizationpriority: high
|
||||
author: greg-lindsay
|
||||
ms.author: greglin
|
||||
manager: dougkim
|
||||
ms.topic: article
|
||||
ms.devlang: na
|
||||
|
||||
sections:
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
See a list of known issues that have been resolved for Windows 10, version 1903 and Windows Server, version 1903 over the last six months. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s) to search the page.
|
||||
|
||||
"
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<hr class='cardsM'>
|
||||
"
|
||||
|
||||
- title: Resolved issues
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<div>There are no recently resolved issues at this time.
|
||||
</div>
|
||||
"
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
@ -60,6 +60,7 @@ sections:
|
||||
- type: markdown
|
||||
text: "<div>This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.</div><br>
|
||||
<table border ='0'><tr><td width='65%'>Summary</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>Last updated</td></tr>
|
||||
<tr><td><div id='441msg'></div><b>Machines running Windows Server 2016 with Hyper-V seeing Bitlocker error 0xC0210000</b><br>Some machines running Windows Server with Hyper-V enabled may boot into Bitlocker recovery <br><br><a href = '#441msgdesc'>See details ></a></td><td>N/A <br><br><a href ='' target='_blank'></a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>09:21 AM PT</td></tr>
|
||||
<tr><td><div id='135msg'></div><b>Cluster service may fail if the minimum password length is set to greater than 14</b><br>The cluster service may fail to start with the error “2245 (NERR_PasswordTooShort)” if the Group Policy “Minimum Password Length” is configured with greater than 14 characters.<br><br><a href = '#135msgdesc'>See details ></a></td><td>OS Build 14393.2639<br><br>November 27, 2018<br><a href ='https://support.microsoft.com/help/4467684' target='_blank'>KB4467684</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>April 25, 2019 <br>02:00 PM PT</td></tr>
|
||||
<tr><td><div id='238msg'></div><b>Issue using PXE to start a device from WDS</b><br>There may be issues using the Preboot Execution Environment (PXE) to start a device from a Windows Deployment Services (WDS) server configured to use Variable Window Extension.<br><br><a href = '#238msgdesc'>See details ></a></td><td>OS Build 14393.2848<br><br>March 12, 2019<br><a href ='https://support.microsoft.com/help/4489882' target='_blank'>KB4489882</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>April 25, 2019 <br>02:00 PM PT</td></tr>
|
||||
<tr><td><div id='149msg'></div><b>SCVMM cannot enumerate and manage logical switches deployed on the host</b><br>For hosts managed by System Center Virtual Machine Manager (VMM), VMM cannot enumerate and manage logical switches deployed on the host.<br><br><a href = '#149msgdesc'>See details ></a></td><td>OS Build 14393.2639<br><br>November 27, 2018<br><a href ='https://support.microsoft.com/help/4467684' target='_blank'>KB4467684</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>April 25, 2019 <br>02:00 PM PT</td></tr>
|
||||
@ -84,6 +85,7 @@ sections:
|
||||
- type: markdown
|
||||
text: "
|
||||
<table border ='0'><tr><td width='65%'>Details</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>History</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='441msgdesc'></div><b>Machines running Windows Server 2016 with Hyper-V seeing Bitlocker error 0xC0210000</b><div>We are investigating reports that some machines running Windows Server 2016 with Hyper-V enabled may enter Bitlocker recovery mode with an error 0xC0210000 after installing KB4494440 and rebooting.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10 Enterprise LTSC 2016; Windows 10, version 1607</li><li>Server: Windows Server 2016</li></ul><div></div><div><strong>Workaround: </strong>You can reboot machines successfully after suspending Bitlocker from Windows Recovery Environment. Below steps can be followed to suspend Bitlocker</div><ul><li>Retrieve the 48 digit Bitlocker recovery password for the OS volume (From organization portal/key storage).</li><li>From the recovery screen, press the enter key to get to the recovery password entry screen and enter the recovery password.</li><li>If machine boots to windows recovery environment and asks for recovery key again, press “skip the drive” to enter Windows Recovery Environment</li><li>Click on “Advanced options”->”Troubleshoot”->”Advanced options”->”Command Prompt”</li><li>Unlock OS drive using the following command</li><li class=\"ql-indent-1\">Mange-bde -unlock c: -rp <48 digit numerical recovery password separated by “-“ in 6 digit group></li><li>Suspend Bitlocker using the following command</li><li class=\"ql-indent-1\">Manage-bde -protectors -disable c:</li><li>Exit the command Window using the following command</li><li class=\"ql-indent-1\">exit</li><li>Click on “Continue” from recovery environment</li><li>This should boot system to Windows</li><li>Once booted, launch an Administrator command prompt and resume the Bitlocker to ensure the system remains protected.</li><li class=\"ql-indent-1\">Mange-bde -protectors -enable c:</li></ul><div></div><div>The workaround needs to be followed on every system boot. To prevent hitting the issue, execute following command to temporarily suspend Bitlocker just before rebooting the system:</div><ul><li>Manage-bde -protectors -disable c: -rc 1</li><li>This command will suspend Bitlocker until 1 reboot of the machine (-rc 1 option only works inside OS and does not work from recovery environment).</li></ul><div></div><div> <strong>Next steps: </strong>Microsoft is presently investigating this issue and will provide an update when available.</div><br><a href ='#441msg'>Back to top</a></td><td>N/A <br><br><a href ='' target='_blank'></a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>09:21 AM PT<br><br>Opened:<br>May 21, 2019 <br>08:50 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='423msgdesc'></div><b>Unable to access some gov.uk websites</b><div>After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10, version 1507; Windows 8.1; Windows 7 SP1 </li><li>Server: Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1</li></ul><div></div><div><strong>Resolution: </strong>We have released an \"optional, <a href=\"https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-update-servicing-cadence/ba-p/222376\" target=\"_blank\">out-of-band</a>\" update for Windows 10 (<a href='https://support.microsoft.com/help/4505052' target='_blank'>KB4505052</a>) to resolve this issue. If you are affected, we recommend you apply this update by installing <a href='https://support.microsoft.com/help/4505052' target='_blank'>KB4505052</a> from Windows Update and then restarting your device.</div><div><br></div><div>This update will not be applied automatically. To download and install this update, go to <strong>Settings</strong> > <strong>Update & Security</strong> > <strong>Windows Update</strong> and select <strong>Check for updates</strong>. To get the standalone package for <a href='https://support.microsoft.com/help/4505052' target='_blank'>KB4505052</a>, search for it in the <a href=\"http://www.catalog.update.microsoft.com/home.aspx\" target=\"_blank\">Microsoft Update Catalog</a>.</div><div> </div><br><a href ='#423msg'>Back to top</a></td><td>OS Build 14393.2969<br><br>May 14, 2019<br><a href ='https://support.microsoft.com/help/4494440' target='_blank'>KB4494440</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4505052' target='_blank'>KB4505052</a></td><td>Resolved:<br>May 19, 2019 <br>02:00 PM PT<br><br>Opened:<br>May 16, 2019 <br>01:57 PM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='379msgdesc'></div><b>Layout and cell size of Excel sheets may change when using MS UI Gothic </b><div>When using the <strong>MS UI Gothic</strong> or <strong>MS PGothic</strong> fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using <strong>MS</strong> <strong>UI Gothic</strong>.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10, version 1803; Windows 10, version 1709; Windows 10, version 1703; Windows 10, version 1607; Windows 10 Enterprise LTSC 2016; Windows 10, version 1507; Windows 10 Enterprise LTSB 2015; Windows 8.1</li><li>Server: Windows Server, version 1809; Windows Server 2019; Windows Server, version 1803; Windows Server, version 1709; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012</li></ul><div></div><div><strong>Resolution</strong>: This issue has been resolved.</div><br><a href ='#379msg'>Back to top</a></td><td>OS Build 14393.2941<br><br>April 25, 2019<br><a href ='https://support.microsoft.com/help/4493473' target='_blank'>KB4493473</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4494440' target='_blank'>KB4494440</a></td><td>Resolved:<br>May 14, 2019 <br>10:00 AM PT<br><br>Opened:<br>May 10, 2019 <br>10:35 AM PT</td></tr>
|
||||
</table>
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -34,21 +34,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
@ -69,7 +69,7 @@ sections:
|
||||
<tr><td><div id='341msg'></div><b>Printing from Microsoft Edge or other UWP apps, you may receive the error 0x80070007</b><br>Attempting to print from Microsoft Edge or other Universal Windows Platform (UWP) applications, you may receive an error.<br><br><a href = '#341msgdesc'>See details ></a></td><td>OS Build 17763.379<br><br>March 12, 2019<br><a href ='https://support.microsoft.com/help/4489899' target='_blank'>KB4489899</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 02, 2019 <br>04:47 PM PT</td></tr>
|
||||
<tr><td><div id='239msg'></div><b>Issue using PXE to start a device from WDS</b><br>Using PXE to start a device from a WDS server configured to use Variable Window Extension may cause the connection to the WDS server to terminate prematurely.<br><br><a href = '#239msgdesc'>See details ></a></td><td>OS Build 17763.379<br><br>March 12, 2019<br><a href ='https://support.microsoft.com/help/4489899' target='_blank'>KB4489899</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>April 09, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><div id='318msg'></div><b>Certain operations performed on a Cluster Shared Volume may fail </b><br>Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\".<br><br><a href = '#318msgdesc'>See details ></a></td><td>OS Build 17763.253<br><br>January 08, 2019<br><a href ='https://support.microsoft.com/help/4480116' target='_blank'>KB4480116</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>April 09, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><div id='167msg'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><br>Upgrade block: Microsoft has identified issues with certain new Intel display drivers, which accidentally turn on unsupported features in Windows.<br><br><a href = '#167msgdesc'>See details ></a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>March 15, 2019 <br>12:00 PM PT</td></tr>
|
||||
<tr><td><div id='438msg'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><br>Upgrade block: Microsoft has identified issues with certain new Intel display drivers, which accidentally turn on unsupported features in Windows.<br><br><a href = '#438msgdesc'>See details ></a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>07:42 AM PT</td></tr>
|
||||
<tr><td><div id='422msg'></div><b>Unable to access some gov.uk websites</b><br>gov.uk websites that don’t support “HSTS” may not be accessible<br><br><a href = '#422msgdesc'>See details ></a></td><td>OS Build 17763.503<br><br>May 14, 2019<br><a href ='https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4505056' target='_blank'>KB4505056</a></td><td>May 19, 2019 <br>02:00 PM PT</td></tr>
|
||||
<tr><td><div id='377msg'></div><b>Windows 10, version 1809 update history may show an update installed twice</b><br>Some customers are reporting that KB4494441 installed twice on their device<br><br><a href = '#377msgdesc'>See details ></a></td><td>OS Build 17763.503<br><br>May 14, 2019<br><a href ='https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>May 16, 2019 <br>02:37 PM PT</td></tr>
|
||||
<tr><td><div id='379msg'></div><b>Layout and cell size of Excel sheets may change when using MS UI Gothic </b><br>When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. <br><br><a href = '#379msgdesc'>See details ></a></td><td>OS Build 17763.475<br><br>May 03, 2019<br><a href ='https://support.microsoft.com/help/4495667' target='_blank'>KB4495667</a></td><td>Resolved<br><a href = 'https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a></td><td>May 14, 2019 <br>10:00 AM PT</td></tr>
|
||||
@ -136,6 +136,6 @@ sections:
|
||||
- type: markdown
|
||||
text: "
|
||||
<table border ='0'><tr><td width='65%'>Details</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>History</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='167msgdesc'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><div><strong>Upgrade block:</strong> Microsoft has identified issues with certain new Intel display drivers. Intel inadvertently released versions of its display driver (versions 24.20.100.6344, 24.20.100.6345) to OEMs that accidentally turned on unsupported features in Windows. </div><div> </div><div>As a result, after updating to Windows 10, version 1809, audio playback from a monitor or television connected to a PC via HDMI, USB-C, or a DisplayPort may not function correctly on devices with these drivers.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019 </li></ul><div></div><div><strong>Next steps:</strong> Intel has released updated drivers to OEM device manufacturers. OEMs need to make the updated driver available via Windows Update.</div><div><br></div><div>For more information, see the <a href=\"https://www.intel.com/content/www/us/en/support/articles/000031612/graphics-drivers.html\" target=\"_blank\">Intel Customer Support article</a>.</div><div><br></div><div><strong>Note:</strong> This Intel display driver issue is different from the Intel Smart Sound Technology driver (version 09.21.00.3755) audio issue previously <a href=\"https://answers.microsoft.com/en-us/windows/forum/all/windows-10-audio-stops-working-after-installing/5a541c88-89e1-4bf3-b356-2837d564b109\" target=\"_blank\">documented</a>.</div><br><a href ='#167msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>March 15, 2019 <br>12:00 PM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='438msgdesc'></div><b>Audio not working on monitors or TV connected to a PC via HDMI, USB, or DisplayPort</b><div><strong>Upgrade block:</strong> Microsoft has identified issues with certain new Intel display drivers. Intel inadvertently released versions of its display driver (versions 24.20.100.6344, 24.20.100.6345) to OEMs that accidentally turned on unsupported features in Windows. </div><div> </div><div>As a result, after updating to Windows 10, version 1809, audio playback from a monitor or television connected to a PC via HDMI, USB-C, or a DisplayPort may not function correctly on devices with these drivers.</div><div><strong>Note:</strong> This Intel display driver issue is different from the Intel Smart Sound Technology driver (version 09.21.00.3755) audio issue previously <a href=\"https://answers.microsoft.com/en-us/windows/forum/all/windows-10-audio-stops-working-after-installing/5a541c88-89e1-4bf3-b356-2837d564b109\" target=\"_blank\">documented</a>.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1809; Windows 10 Enterprise LTSC 2019</li><li>Server: Windows Server, version 1809; Windows Server 2019 </li></ul><div></div><div><strong>Next steps:</strong> Intel has released updated drivers to OEM device manufacturers. OEMs need to make the updated driver available via Windows Update. For more information, see the <a href=\"https://www.intel.com/content/www/us/en/support/articles/000031612/graphics-drivers.html\" target=\"_blank\">Intel Customer Support article</a>.</div><div><br></div><div><strong>Resolution: </strong>Microsoft has removed the safeguard hold. </div><div><br></div><div><br></div><br><a href ='#438msg'>Back to top</a></td><td>OS Build 17763.134<br><br>November 13, 2018<br><a href ='https://support.microsoft.com/help/4467708' target='_blank'>KB4467708</a></td><td>Resolved<br><a href = '' target='_blank'></a></td><td>Resolved:<br>May 21, 2019 <br>07:42 AM PT<br><br>Opened:<br>November 13, 2018 <br>10:00 AM PT</td></tr>
|
||||
</table>
|
||||
"
|
||||
|
||||
108
windows/release-information/status-windows-10-1903.yml
Normal file
108
windows/release-information/status-windows-10-1903.yml
Normal file
@ -0,0 +1,108 @@
|
||||
### YamlMime:YamlDocument
|
||||
|
||||
documentType: LandingData
|
||||
title: Windows 10, version 1903 and Windows Server, version 1903
|
||||
metadata:
|
||||
document_id:
|
||||
title: Windows 10, version 1903 and Windows Server, version 1903
|
||||
description: View annoucements and review known issues and fixes for Windows 10 version 1903 and Windows Server 1903
|
||||
keywords: Windows 10, issues, fixes, announcements, Windows Server, advisories
|
||||
ms.localizationpriority: high
|
||||
author: greg-lindsay
|
||||
ms.author: greglin
|
||||
manager: dougkim
|
||||
ms.topic: article
|
||||
ms.devlang: na
|
||||
|
||||
sections:
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
Find information on known issues for Windows 10, version 1903 and Windows Server, version 1903. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s).
|
||||
|
||||
<table border = '0' class='box-info'><tr>
|
||||
<td bgcolor='#d3f1fb' class='alert is-primary'><b>Current status</b>:<br>
|
||||
<div>Windows 10, version 1903 is available by manually selecting “Check for updates” via Windows Update. (<b>Note</b> We are slowly throttling up this availability while we carefully monitor data and feedback.) The recommended servicing status is Semi-Annual Channel.</div>
|
||||
</td></tr></table>
|
||||
|
||||
"
|
||||
|
||||
- items:
|
||||
- type: list
|
||||
style: cards
|
||||
className: cardsM
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<div align='right' style='font-size:0.87rem'><a class='is-size-7' href='https://docs.microsoft.com/windows/release-information/windows-message-center'>See all messages ></a></div>
|
||||
"
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<hr class='cardsM'>
|
||||
"
|
||||
|
||||
- title: Known issues
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "<div>This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.</div><br>
|
||||
<table border ='0'><tr><td width='65%'>Summary</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>Last updated</td></tr>
|
||||
<tr><td><div id='448msg'></div><b>Display brightness may not respond to adjustments</b><br>Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers.<br><br><a href = '#448msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:47 PM PT</td></tr>
|
||||
<tr><td><div id='433msg'></div><b>Audio not working with Dolby Atmos headphones and home theater </b><br>Users may experience audio loss with Dolby Atmos headphones or Dolby Atmos home theater.<br><br><a href = '#433msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>07:17 AM PT</td></tr>
|
||||
<tr><td><div id='426msg'></div><b>Duplicate folders and documents showing in user profile directory</b><br>If known folders (e.g. Desktop, Documents, or Pictures folders) are redirected, an empty folder with that same name may be created.<br><br><a href = '#426msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>07:16 AM PT</td></tr>
|
||||
<tr><td><div id='442msg'></div><b>Error attempting to update with external USB device or memory card attached </b><br>PCs with an external USB device or SD memory card attached may get error: \"This PC can't be upgraded to Windows 10.\"<br><br><a href = '#442msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:49 PM PT</td></tr>
|
||||
<tr><td><div id='450msg'></div><b>Unable to discover or connect to Bluetooth devices</b><br>Microsoft has identified compatibility issues with some versions of Realtek and Qualcomm Bluetooth radio drivers.<br><br><a href = '#450msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:48 PM PT</td></tr>
|
||||
<tr><td><div id='449msg'></div><b>Night light settings do not apply in some cases</b><br>Microsoft has identified some scenarios where night light settings may stop working.<br><br><a href = '#449msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:48 PM PT</td></tr>
|
||||
<tr><td><div id='447msg'></div><b>Intel Audio displays an intcdaud.sys notification</b><br>Microsoft and Intel have identified an issue with a range of Intel Display Audio device drivers that may result in battery drain. <br><br><a href = '#447msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:47 PM PT</td></tr>
|
||||
<tr><td><div id='446msg'></div><b>Cannot launch Camera app </b><br>Microsoft and Intel have identified an issue affecting Intel RealSense SR300 or Intel RealSense S200 camera apps.<br><br><a href = '#446msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:47 PM PT</td></tr>
|
||||
<tr><td><div id='445msg'></div><b>Intermittent loss of Wi-Fi connectivity</b><br>Some older devices may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver. <br><br><a href = '#445msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:46 PM PT</td></tr>
|
||||
<tr><td><div id='443msg'></div><b>AMD RAID driver incompatibility </b><br>Installation process may stop when trying to install Windows 10, version 1903 update on computers that run certain versions of AMD RAID drivers.<br><br><a href = '#443msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:45 PM PT</td></tr>
|
||||
<tr><td><div id='444msg'></div><b>D3D applications and games may fail to enter full-screen mode on rotated displays</b><br>Some Direct3D (D3D) applications and games may fail to enter full-screen mode on rotated displays.<br><br><a href = '#444msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>04:45 PM PT</td></tr>
|
||||
<tr><td><div id='427msg'></div><b>Older versions of BattlEye anti-cheat software incompatible</b><br>Microsoft and BattlEye have identified a compatibility issue with some games that use older versions of BattlEye anti-cheat software.<br><br><a href = '#427msgdesc'>See details ></a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>May 21, 2019 <br>07:34 AM PT</td></tr>
|
||||
</table>
|
||||
"
|
||||
|
||||
- title: Issue details
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<div>
|
||||
</div>
|
||||
"
|
||||
- title: May 2019
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
<table border ='0'><tr><td width='65%'>Details</td><td width='15%'>Originating update</td><td width='10%'>Status</td><td width='10%'>History</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='448msgdesc'></div><b>Display brightness may not respond to adjustments</b><div>Microsoft and Intel have identified a driver compatibility issue on devices configured with certain Intel display drivers. After updating to Window 10, version 1903, brightness settings may sometime appear as if changes applied took effect, yet the actual display brightness doesn't change.</div><div><br></div><div>To safeguard your update experience, we have applied a compatibility hold on devices with certain Intel drivers from being offered Windows 10, version 1903, until this issue is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>Restart your device to apply changes to brightness.</div><div><br></div><div><strong>Note</strong> We recommend that you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until this issue has been resolved.</div><div><br></div><div><strong>Next steps: </strong>We are working on a resolution that will be made available in upcoming release.</div><br><a href ='#448msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:47 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:56 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='433msgdesc'></div><b>Audio not working with Dolby Atmos headphones and home theater </b><div>After updating to Windows 10, version 1903, you may experience loss of audio with Dolby Atmos for home theater (free extension) or Dolby Atmos for headphones (paid extension) acquired through the Microsoft Store due to a licensing configuration error.</div><div> </div><div>This occurs due to an issue with a Microsoft Store licensing component, where license holders are not able to connect to the Dolby Access app and enable Dolby Atmos extensions.</div><div> </div><div>To safeguard your update experience, we have applied protective hold on devices from being offered Windows 10, version 1903 until this issue is resolved. This configuration error will not result in loss of access for the acquired license once the problem is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Next steps: </strong>We are working on a resolution for Microsoft Store and estimate a solution will be available in mid-June.</div><div><strong>Note</strong> We recommend you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until this issue has been resolved. </div><br><a href ='#433msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>07:17 AM PT<br><br>Opened:<br>May 21, 2019 <br>07:16 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='426msgdesc'></div><b>Duplicate folders and documents showing in user profile directory</b><div>If you have redirected known folders (e.g. Desktop, Documents, or Pictures folders) you may see an empty folder with the same name in your %userprofile% directories after updating to Windows 10, version 1903. This may occur if known folders were redirected when you chose to back up your content to OneDrive using the OneDrive wizard, or if you chose to back up your content during the Windows Out-of-Box-Experience (OOBE). This may also occur if you redirected your known folders manually through the Properties dialog box in File Explorer. This issue does not cause any user files to be deleted and a solution is in progress.</div><div><br></div><div>To safeguard your update experience, we have applied a quality hold on devices with redirected known folders from being offered Windows 10, version 1903, until this issue is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Next steps: </strong>Microsoft is working on a resolution and estimates a solution will be available in late May.</div><div><strong>Note </strong>We recommend that you do not attempt to manually update to Windows 10, version 1903 using the <strong>Update now</strong> button or the Media Creation Tool until this issue has been resolved.</div><br><a href ='#426msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Investigating<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>07:16 AM PT<br><br>Opened:<br>May 21, 2019 <br>07:16 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='442msgdesc'></div><b>Error attempting to update with external USB device or memory card attached </b><div>If you have an external USB device or SD memory card attached when installing Windows 10, version 1903, you may get an error message stating \"This PC can't be upgraded to Windows 10.\" This is caused by inappropriate drive reassignment during installation.</div><div><br></div><div>Sample scenario: An update to Windows 10, version 1903 is attempted on a computer that has a thumb drive inserted into its USB port. Before the update, the thumb drive is mounted in the system as drive G based on the existing drive configuration. After the feature update is installed; however, the device is reassigned a different drive letter (e.g., drive H).</div><div><br></div><div><strong>Note</strong> The drive reassignment is not limited to removable drives. Internal hard drives may also be affected.</div><div><br></div><div>To safeguard your update experience, we have applied a hold on devices with an external USB device or SD memory card attached from being offered Windows 10, version 1903 until this issue is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>To work around this issue, remove all external media, such as USB devices and SD cards, from your computer and restart installation of the Windows 10, version 1903 feature update. The update should then proceed normally.</div><div><strong>Note </strong>If you need to keep your external device, SD memory card, or other devices attached to your computer while updating, we recommend that you do not attempt to manually update to Windows 10, version 1903 using the <strong>Update now </strong>button or the Media Creation Tool until this issue has been resolved.</div><div><br></div><div><strong>Next steps: </strong>Microsoft is working on a resolution and estimate a solution will be available in late May.</div><br><a href ='#442msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:49 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:38 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='450msgdesc'></div><b>Unable to discover or connect to Bluetooth devices</b><div>Microsoft has identified compatibility issues with some driver versions for Bluetooth radios made by Realtek and Qualcomm. To safeguard your update experience, we have applied a compatibility hold on devices with affected driver versions for Realtek or Qualcomm Bluetooth radios from being offered Windows 10, version 1903 or Windows Server, version 1903 until the driver has been updated.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li><li>Server: Windows Server, version 1903</li></ul><div></div><div><strong>Workaround: </strong>Check with your device manufacturer (OEM) to see if an updated driver is available and install it.</div><div><br></div><ul><li>For Qualcomm drivers, you will need to install a driver version greater than 10.0.1.11.</li><li>For Realtek drivers, you will need to install a driver version greater than 1.5.1011.0.</li></ul><div></div><div><strong>Note</strong> Until an updated driver has been installed, we recommend you do not attempt to manually update using the<strong> Update now </strong>button or the Media Creation Tool. </div><div><br></div><div><strong>Next steps: </strong>Microsoft is working with Realtek and Qualcomm to release new drivers for all affected system via Windows Update.<strong> </strong> </div><div><br></div><br><a href ='#450msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:48 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:29 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='449msgdesc'></div><b>Night light settings do not apply in some cases</b><div>Microsoft has identified some scenarios where night light settings may stop working, for example:</div><ul><li>Connecting to (or disconnecting from) an external monitor, dock, or projector</li><li>Rotating the screen</li><li>Updating display drivers or making other display mode changes</li></ul><div></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>If you find that your night light settings have stopped working, try turning the night light on and off, or restart your computer.<strong> </strong></div><div><br></div><div><strong>Note </strong>We recommend that you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until this issue has been resolved.</div><div><br></div><div><strong>Next steps: </strong>We are working on a resolution and will provide an update in an upcoming release.</div><div><br></div><br><a href ='#449msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:48 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:28 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='447msgdesc'></div><b>Intel Audio displays an intcdaud.sys notification</b><div>Microsoft and Intel have identified an issue with a range of Intel Display Audio device drivers that may result in higher than normal battery drain. If you see an <strong>intcdaud.sys</strong> notification or “What needs your attention” notification when trying to update to Windows 10, version 1903, you have an affected Intel Audio Display device driver installed on your machine (intcdaud.sys, versions 10.25.0.3 through 10.25.0.8).</div><div> </div><div>To safeguard your update experience, we have applied a compatibility hold on devices with drivers from being offered Windows 10, version 1903 until updated device drivers have been installed.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903; Windows 10, version 1809</li></ul><div></div><div><strong>Workaround:</strong></div><div>On the “What needs your attention\" notification, click the <strong>Back </strong>button to remain on your current version of Windows 10. (Do not click <strong>Confirm</strong> as this will proceed with the update and you may experience compatibility issues.) Affected devices will automatically revert to the previous working configuration.</div><div><br></div><div>For more information, see <a href=\"https://www.intel.com/content/www/us/en/support/articles/000030792/graphics-drivers.html\" target=\"_blank\" style=\"\">Intel's customer support guidance</a> and the Microsoft knowledge base article <a href=\"https://support.microsoft.com/help/4465877\" target=\"_blank\" style=\"\">KB4465877</a>.</div><div><br></div><div><strong>Note</strong> We recommend you do not attempt to update your devices until newer device drivers are installed.</div><div><br></div><div><strong>Next steps: </strong>You can opt to wait for newer drivers to be installed automatically through Windows Update or check with the computer manufacturer for the latest device driver software availability and installation procedures.</div><br><a href ='#447msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:47 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:22 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='446msgdesc'></div><b>Cannot launch Camera app </b><div>Microsoft and Intel have identified an issue affecting Intel RealSense SR300 and Intel RealSense S200 cameras when using the Camera app. After updating to the Windows 10 May 2019 Update and launching the Camera app, you may get an error message stating:</div><p class=\"ql-indent-1\">\"Close other apps, error code: 0XA00F4243.”</div><div><br></div><div>To safeguard your update experience, we have applied a protective hold on machines with Intel RealSense SR300 or Intel RealSense S200 cameras installed from being offered Windows 10, version 1903, until this issue is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>To temporarily resolve this issue, perform one of the following:</div><div><br></div><ul><li>Unplug your camera and plug it back in.</li></ul><p class=\"ql-indent-1\">or</div><ul><li>Disable and re-enable the driver in Device Manager. In the Search box, type \"Device Manager\" and press <strong>Enter</strong>. In the Device Manager dialog box, expand <strong>Cameras</strong>, then right-click on any <strong>RealSense</strong> driver listed and select <strong>Disable device</strong>. Right click on the driver again and select <strong>Enable device</strong>.</li></ul><p class=\"ql-indent-1\">or</div><ul><li>Restart the <strong>RealSense </strong>service. In the Search box, type \"Task Manager\" and hit <strong>Enter</strong>. In the Task Manager dialog box, click on the <strong>Services </strong>tab, right-click on <strong>RealSense</strong>, and select <strong>Restart</strong>. </li></ul><div></div><div><strong>Note </strong>This workaround will only resolve the issue until your next system restart.</div><div><br></div><div><strong>Note </strong>We recommend that you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until this issue has been resolved.</div><div><br></div><div><strong>Next steps: </strong>We are working on a resolution and will provide an update in an upcoming release.</div><br><a href ='#446msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:47 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:20 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='445msgdesc'></div><b>Intermittent loss of Wi-Fi connectivity</b><div>Some older computers may experience loss of Wi-Fi connectivity due to an outdated Qualcomm driver. An updated Wi-Fi driver should be available from your device manufacturer (OEM).</div><div><br></div><div>To safeguard your upgrade experience, we have applied a hold on devices with this Qualcomm driver from being offered Windows 10, version 1903, until the updated driver is installed.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>Download<strong> </strong>and install an updated Wi-Fi driver from your device manufacturer (OEM).</div><div> </div><div><strong>Note</strong> We recommend that you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until a new driver has been installed and the Windows 10, version 1903 feature update has been automatically offered to you.</div><br><a href ='#445msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:46 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:13 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='443msgdesc'></div><b>AMD RAID driver incompatibility </b><div>Microsoft and AMD have identified an incompatibility with AMD RAID driver versions lower than 9.2.0.105. When you attempt to install the Windows 10, version 1903 update on a Windows 10-based computer with an affected driver version, the installation process stops and you get a message like the following:</div><p class=\"ql-indent-1\">AMD Ryzen™ or AMD Ryzen™ Threadripper™ configured in SATA or NVMe RAID mode.</div><p class=\"ql-indent-1\">“A driver is installed that causes stability problems on Windows. This driver will be disabled. Check with your software/driver provider for an updated version that runs on this version of Windows.”</div><div><strong> </strong></div><div>To safeguard your update experience, we have applied a compatibility hold on devices with these AMD drivers from being offered Windows 10, version 1903, until this issue is resolved.</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Workaround: </strong>To resolve this issue, download the latest AMD RAID drivers directly from AMD at <a href=\"https://www.amd.com/en/support/chipsets/amd-socket-tr4/x399\" target=\"_blank\">https://www.amd.com/en/support/chipsets/amd-socket-tr4/x399</a>. The drivers must be version 9.2.0.105 or later. Install the drivers on the affected computer, and then restart the installation process for the Windows 10, version 1903 feature update.</div><div> </div><div><strong>Note</strong> We recommend that you do not attempt to manually update using the <strong>Update now</strong> button or the Media Creation Tool until a new driver has been installed and the Windows 10, version 1903 feature update has been automatically offered to you.</div><div> </div><br><a href ='#443msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:45 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:12 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='444msgdesc'></div><b>D3D applications and games may fail to enter full-screen mode on rotated displays</b><div>Some Direct3D (D3D) applications and games (e.g., 3DMark) may fail to enter full-screen mode on displays where the display orientation has been changed from the default (e.g., a landscape display in portrait mode).</div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li><li>Server: Windows Server, version 1903</li></ul><div></div><div><strong>Workaround: </strong>To work around this issue, do one of the following:</div><ul><li>Run applications in windowed mode or, if available, on a secondary non-rotated display. </li><li>Change compatibility settings for the applications to “Disable Full Screen Optimizations.”</li></ul><div></div><div><strong>Next steps: </strong>Microsoft is working on a resolution and estimates a solution will be available in late May.</div><br><a href ='#444msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>04:45 PM PT<br><br>Opened:<br>May 21, 2019 <br>07:05 AM PT</td></tr>
|
||||
<tr><td style='border-left-width:1px;border-right-width:1px;border-bottom-width:1px;'><div id='427msgdesc'></div><b>Older versions of BattlEye anti-cheat software incompatible</b><div>Microsoft and BattlEye have identified a compatibility issue with some games that use older versions of BattlEye anti-cheat software. When launching a game that uses an older, impacted version of BattlEye anti-cheat software on a device running Windows 10, version 1903, the device may experience a system crash.</div><div><br></div><div>To safeguard your gaming experience, we have applied a compatibility hold on devices with the impacted versions of BattlEye software used by games installed on your PC. This will prevent Windows 10, version 1903 from being offered until the incompatible version of BattlEye software is no longer installed on the device. </div><div><br></div><div><strong>Affected platforms:</strong></div><ul><li>Client: Windows 10, version 1903</li></ul><div></div><div><strong>Mitigated: </strong>BattlEye has provided an updated patch to known impacted games. For a list of recent games that use BattlEye, go to <a href=\"https://www.battleye.com/\" target=\"_blank\">https://www.battleye.com/</a>.</div><div><br></div><div><strong>Workaround: </strong>Before updating your machine, we recommend you do one or more of the following:</div><div><br></div><ul><li>Verify that your game is up to date with the latest available version of BattlEye software. Some game platforms allow you to validate your game files, which can confirm that your installation is fully up to date.</li><li>Restart your system and open the game again.</li><li>Uninstall BattlEye using <a href=\"https://www.battleye.com/downloads/UninstallBE.exe\" target=\"_blank\">https://www.battleye.com/downloads/UninstallBE.exe</a>, and then reopen your game.</li><li>Uninstall and reinstall your game.</li></ul><div></div><div>For more troubleshooting options, see <a href=\"https://www.battleye.com/support/faq/\" target=\"_blank\">https://www.battleye.com/support/faq/</a>.</div><div><br></div><div><strong>Next steps: </strong>We are working with BattlEye and gaming partners to ensure games are automatically updated with the latest BattlEye software. We have confirmed the latest version of impacted games do not exhibit this issue. To minimize the chance of hitting this upgrade compatibility hold, please make sure you are running the latest version of your games before attempting to update the operating system. </div><div><strong>Note </strong>We recommend that you do not attempt to manually update using the <strong>Update now </strong>button or the Media Creation Tool until you have installed an updated version of BattlEye software that resolves this issue.</div><br><a href ='#427msg'>Back to top</a></td><td>OS Build 18362.116<br><br>May 20, 2019<br><a href ='https://support.microsoft.com/help/4505057' target='_blank'>KB4505057</a></td><td>Mitigated<br><a href = '' target='_blank'></a></td><td>Last updated:<br>May 21, 2019 <br>07:34 AM PT<br><br>Opened:<br>May 21, 2019 <br>07:34 AM PT</td></tr>
|
||||
</table>
|
||||
"
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -29,21 +29,21 @@ sections:
|
||||
columns: 3
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- items:
|
||||
- type: markdown
|
||||
text: "
|
||||
|
||||
@ -23,21 +23,21 @@ sections:
|
||||
columns: 2
|
||||
items:
|
||||
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1809-designated-for-broad-deployment/ba-p/389540
|
||||
html: Read the announcement >
|
||||
- href: https://blogs.windows.com/windowsexperience/
|
||||
html: Get the update >
|
||||
image:
|
||||
src: https://docs.microsoft.com//media/common/i_deploy.svg
|
||||
title: Windows 10, version 1809 designated for broad deployment
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency
|
||||
html: Find out more >
|
||||
src: https://docs.microsoft.com/media/common/i_deploy.svg
|
||||
title: Windows 10, version 1903 rollout begins
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Read about the latest enhancements >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_whats-new.svg
|
||||
title: Improvements to the Windows 10 update experience are coming
|
||||
- href: https://blogs.windows.com/windowsexperience/2019/03/06/data-insights-and-listening-to-improve-the-customer-experience
|
||||
html: Learn about our approach >
|
||||
title: What’s new in Windows Update for Business
|
||||
- href: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog
|
||||
html: Get an overview >
|
||||
image:
|
||||
src: https://docs.microsoft.com/media/common/i_investigate.svg
|
||||
title: How do we measure and improve the quality of Windows?
|
||||
title: What’s new for businesses and IT pros in Windows 10
|
||||
- href: https://docs.microsoft.com/windows/windows-10/release-information
|
||||
html: Visit the Windows 10 release information page >
|
||||
image:
|
||||
@ -50,6 +50,9 @@ sections:
|
||||
text: "
|
||||
<table border ='0'><tr><td width='80%'>Message</td><td width='20%'>Date</td></tr>
|
||||
|
||||
<tr><td><a href = 'https://blogs.windows.com/windowsexperience/' target='_blank'><b>Windows 10, version 1903 rollout begins</b></a><br>The Windows 10 May 2019 Update (Windows 10, version 1903) is available today to commercial customers via Windows Server Update Services (WSUS), Windows Update for Business, and the Volume Licensing Service Center (VLSC)—and to end users who manually select “Check for updates.” We are slowly throttling up availability while we carefully monitor data and feedback.</td><td>May 21, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><a href = 'https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog' target='_blank'><b>What’s new in Windows Update for Business</b></a><br>We are enhancing and expanding the capabilities of Windows Update for Business to make the move to the cloud even easier. From simplified branch readiness options to better control over deadlines and reboots, read about the enhancements to Windows Update for Business as a part of Windows 10, version 1903. </td><td>May 21, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><a href = 'https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/bg-p/Windows10Blog' target='_blank'><b>What’s new for businesses and IT pros in Windows 10</b></a><br>Explore the newest capabilities for businesses and IT in the latest feature update in the areas of intelligent security, simplified updates, flexible management, and enhanced productivity. </td><td>May 21, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><a href = 'https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates' target='_blank'><b>Reminder: Install the latest SSU for a smoother update experience </b></a><br><div>We strongly recommend that you install the latest servicing stack update (SSU) before installing any Windows update; especially as an SSU may be a prerequisite for some updates. If you have difficulty installing Windows updates, verify that you have installed the latest SSU package for your version of Windows and then try installing the update again. Links to the latest SSU are always provided in the “How to get this update” section of each update KB article (e.g., <a href='https://support.microsoft.com/help/4494441' target='_blank'>KB4494441</a>). For more information about SSUs, see our <a href='https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates' target='_blank'>Servicing stack updates</a> guidance.</div></td><td>May 14, 2019 <br>10:00 AM PT</td></tr>
|
||||
<tr><td><a href = 'https://blogs.technet.microsoft.com/msrc/2019/05/14/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/' target='_blank'><b>Take action: Update Remote Desktop Services on older versions of Windows</b></a><br><div>Today, we released fixes for a critical wormable, remote code execution vulnerability (<a href='https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708' target='_blank'>CVE-2019-0708</a>) in Remote Desktop Services—formerly known as Terminal Services. This vulnerability affects Windows 7, Windows Server 2008 R2, and earlier versions of Windows nearing end of support. It does not affect Windows 8, Windows Server 2012, or newer operating systems. While we have not observed attacks exploiting this vulnerability, affected systems should be patched with priority. Here is what you need to know:<br> <br>
|
||||
<strong>Call to action:</strong>
|
||||
|
||||
@ -149,7 +149,7 @@ Any user who accesses the system through a sign-in process has the Authenticated
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td><p>Default Location in Active Directory</p></td>
|
||||
<td><p>cn=WellKnown Security Principals, cn=Configuration, dc=<forestRootDomain></p></td>
|
||||
<td><p>cn=System,cn=WellKnown Security Principals, cn=Configuration, dc=<forestRootDomain></p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td><p>Default User Rights</p></td>
|
||||
|
||||
@ -43,7 +43,7 @@ When the PIN is created, it establishes a trusted relationship with the identity
|
||||
|
||||
The Hello PIN is backed by a Trusted Platform Module (TPM) chip, which is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper resistant, and malicious software is unable to tamper with the security functions of the TPM. All Windows 10 Mobile phones and many modern laptops have TPM.
|
||||
|
||||
User key material is generated and available within the Trusted Platform Module (TPM) of the user device, which protects it from attackers who want to capture the key material and reuse it. Because Hello uses asymmetrical key pairs, users credentials can’t be stolen in cases where the identity provider or websites the user accesses have been compromised.
|
||||
User key material is generated and available within the Trusted Platform Module (TPM) of the user device, which protects it from attackers who want to capture the key material and reuse it. Because Hello uses asymmetric key pairs, users credentials can’t be stolen in cases where the identity provider or websites the user accesses have been compromised.
|
||||
|
||||
The TPM protects against a variety of known and potential attacks, including PIN brute-force attacks. After too many incorrect guesses, the device is locked.
|
||||
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user