fixing some warnings

This commit is contained in:
Greg Lindsay
2019-09-06 10:08:40 -07:00
parent e6f4ce3cbb
commit 115accfc56
17 changed files with 118 additions and 132 deletions

View File

@ -4,7 +4,7 @@ description: Windows 10 application management
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
author: jdeckerms author: dansimp
ms.localizationpriority: high ms.localizationpriority: high
ms.date: 09/26/2017 ms.date: 09/26/2017
--- ---

View File

@ -4,7 +4,7 @@ description: Windows 10 client management
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
author: jdeckerms author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 08/16/2017 ms.date: 08/16/2017
--- ---

View File

@ -12,7 +12,6 @@ author: dansimp
ms.author: dansimp ms.author: dansimp
ms.topic: article ms.topic: article
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 11/15/2017
--- ---
# Customize Windows 10 Start and taskbar with provisioning packages # Customize Windows 10 Start and taskbar with provisioning packages
@ -48,7 +47,7 @@ Three features enable Start and taskbar layout control:
<span id="escape"/> <span id="escape"/>
## Prepare the Start layout XML file ## <a href="" id="escape"></a>Prepare the Start layout XML file
The **Export-StartLayout** cmdlet produces an XML file. Because Windows Configuration Designer produces a customizations.xml file that contains the configuration settings, adding the Start layout section to the customizations.xml file directly would result in an XML file embedded in an XML file. Before you add the Start layout section to the customizations.xml file, you must replace the markup characters in your layout.xml with escape characters. The **Export-StartLayout** cmdlet produces an XML file. Because Windows Configuration Designer produces a customizations.xml file that contains the configuration settings, adding the Start layout section to the customizations.xml file directly would result in an XML file embedded in an XML file. Before you add the Start layout section to the customizations.xml file, you must replace the markup characters in your layout.xml with escape characters.
@ -131,7 +130,6 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
## Related topics ## Related topics
- [Manage Windows 10 Start and taskbar layout](windows-10-start-layout-options-and-policies.md) - [Manage Windows 10 Start and taskbar layout](windows-10-start-layout-options-and-policies.md)
- [Configure Windows 10 taskbar](configure-windows-10-taskbar.md) - [Configure Windows 10 taskbar](configure-windows-10-taskbar.md)
- [Customize and export Start layout](customize-and-export-start-layout.md) - [Customize and export Start layout](customize-and-export-start-layout.md)
@ -140,12 +138,3 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
- [Customize Windows 10 Start and taskbar with Group Policy](customize-windows-10-start-screens-by-using-group-policy.md) - [Customize Windows 10 Start and taskbar with Group Policy](customize-windows-10-start-screens-by-using-group-policy.md)
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) - [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md) - [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)

View File

@ -7,8 +7,8 @@ ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
ms.pagetype: security ms.pagetype: security
ms.localizationpriority: high ms.localizationpriority: high
author: jdeckerms author: dansimp
ms.author: jdecker ms.author: dansimp
ms.topic: article ms.topic: article
ms.date: 05/11/2018 ms.date: 05/11/2018
--- ---

View File

@ -4,9 +4,9 @@ description: This section describes the DeviceUpdateCenter settings that you can
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: jdecker ms.author: dansimp
ms.topic: article ms.topic: article
--- ---

View File

@ -4,9 +4,9 @@ description: This section describes the Privacy settings that you can configure
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: jdecker ms.author: dansimp
ms.topic: article ms.topic: article
--- ---

View File

@ -4,9 +4,9 @@ description: This section describes the StorageD3InModernStandby settings that y
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: jdecker ms.author: dansimp
ms.topic: article ms.topic: article
--- ---

View File

@ -4,9 +4,9 @@ description: This section describes the Time settings that you can configure in
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: jdecker ms.author: dansimp
ms.topic: article ms.topic: article
--- ---

View File

@ -4,11 +4,11 @@ description: Windows 10 provides new deployment capabilities, scenarios, and to
ms.assetid: 002F9B79-B50F-40C5-A7A5-0B4770E6EC15 ms.assetid: 002F9B79-B50F-40C5-A7A5-0B4770E6EC15
keywords: deploy, upgrade, update, configure keywords: deploy, upgrade, update, configure
ms.prod: w10 ms.prod: w10
manager: laurawi
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.localizationpriority: medium ms.localizationpriority: medium
author: TrudyHa author: greg-lindsay
ms.date: 07/27/2017
ms.topic: article ms.topic: article
--- ---

View File

@ -2,11 +2,11 @@
title: Windows 10, version 1703 removed features title: Windows 10, version 1703 removed features
description: Learn about features that were removed in Windows 10, version 1703 description: Learn about features that were removed in Windows 10, version 1703
ms.prod: w10 ms.prod: w10
manager: laurawi
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.localizationpriority: medium ms.localizationpriority: medium
ms.sitesec: library ms.sitesec: library
author: lizap author: greg-lindsay
ms.date: 10/09/2017
ms.topic: article ms.topic: article
--- ---
# Features that are removed or deprecated in Windows 10, version 1703 # Features that are removed or deprecated in Windows 10, version 1703

View File

@ -5,9 +5,9 @@ ms.prod: w10
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
author: Jaimeo author: Jaimeo
manager: laurawi
ms.localizationpriority: high ms.localizationpriority: high
ms.author: jaimeo ms.author: jaimeo
ms.date: 04/06/2018
ms.topic: article ms.topic: article
--- ---

View File

@ -4,9 +4,9 @@ description: Two methods of peer-to-peer content distribution are available in W
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
author: greg-lindsay author: jaimeo
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: greg-lindsay ms.author: jaimeo
ms.reviewer: ms.reviewer:
manager: laurawi manager: laurawi
ms.topic: article ms.topic: article

View File

@ -4,10 +4,9 @@ description: tbd
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
author: greg-lindsay author: jaimeo
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: greg-lindsay ms.author: jaimeo
ms.date: 07/27/2017
ms.reviewer: ms.reviewer:
manager: laurawi manager: laurawi
ms.topic: article ms.topic: article

View File

@ -4,10 +4,9 @@ description: Configure Windows Update for Business settings using Group Policy.
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
author: greg-lindsay author: jaimeo
ms.localizationpriority: medium ms.localizationpriority: medium
ms.author: greg-lindsay ms.author: jaimeo
ms.date: 07/27/2017
ms.reviewer: ms.reviewer:
manager: laurawi manager: laurawi
ms.topic: article ms.topic: article

View File

@ -1,54 +1,54 @@
--- ---
title: Setting the BitLocker encryption algorithm for Autopilot devices title: Setting the BitLocker encryption algorithm for Autopilot devices
ms.reviewer: ms.reviewer:
manager: laurawi manager: laurawi
description: Microsoft Intune provides a comprehensive set of configuration options to manage BitLocker on Windows 10 devices. description: Microsoft Intune provides a comprehensive set of configuration options to manage BitLocker on Windows 10 devices.
keywords: Autopilot, BitLocker, encryption, 256-bit, Windows 10 keywords: Autopilot, BitLocker, encryption, 256-bit, Windows 10
ms.prod: w10 ms.prod: w10
ms.technology: Windows ms.mktglfcycl: deploy
ms.mktglfcycl: deploy ms.sitesec: library
ms.sitesec: library ms.pagetype: deploy
ms.pagetype: deploy ms.localizationpriority: medium
ms.localizationpriority: medium audience: itpro
audience: itpro author: greg-lindsay
author: greg-lindsay ms.author: greglin
ms.author: greglin ms.collection: M365-modern-desktop
ms.collection: M365-modern-desktop ms.topic: article
ms.topic: article ---
---
# Setting the BitLocker encryption algorithm for Autopilot devices
# Setting the BitLocker encryption algorithm for Autopilot devices
**Applies to**
**Applies to**
- Windows 10
- Windows 10
With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encrytion algorithm is not applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins.
With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encrytion algorithm is not applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins.
The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use.
The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use.
To ensure the desired BitLocker encryption algorithm is set before automatic encryption occurs for Autopilot devices:
To ensure the desired BitLocker encryption algorithm is set before automatic encryption occurs for Autopilot devices:
1. Configure the [encryption method settings](https://docs.microsoft.com/intune/endpoint-protection-windows-10#windows-encryption) in the Windows 10 Endpoint Protection profile to the desired encryption algorithm.
1. Configure the [encryption method settings](https://docs.microsoft.com/intune/endpoint-protection-windows-10#windows-encryption) in the Windows 10 Endpoint Protection profile to the desired encryption algorithm. 2. [Assign the policy](https://docs.microsoft.com/intune/device-profile-assign) to your Autopilot device group.
2. [Assign the policy](https://docs.microsoft.com/intune/device-profile-assign) to your Autopilot device group. - **IMPORTANT**: The encryption policy must be assigned to **devices** in the group, not users.
- **IMPORTANT**: The encryption policy must be assigned to **devices** in the group, not users. 3. Enable the Autopilot [Enrollment Status Page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) (ESP) for these devices.
3. Enable the Autopilot [Enrollment Status Page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) (ESP) for these devices. - **IMPORTANT**: If the ESP is not enabled, the policy will not apply before encryption starts.
- **IMPORTANT**: If the ESP is not enabled, the policy will not apply before encryption starts.
An example of Microsoft Intune Windows Encryption settings is shown below.
An example of Microsoft Intune Windows Encryption settings is shown below.
![BitLocker encryption settings](images/bitlocker-encryption.png)
![BitLocker encryption settings](images/bitlocker-encryption.png)
Note that a device which is encrypted automatically will need to be decrypted prior to changing the encyption algorithm.
Note that a device which is encrypted automatically will need to be decrypted prior to changing the encyption algorithm.
The settings are available under Device Configuration -> Profiles -> Create profile -> Platform = Windows 10 and later, Profile type = Endpoint protection -> Configure -> Windows Encryption -> BitLocker base settings, Configure encryption methods = Enable.
The settings are available under Device Configuration -> Profiles -> Create profile -> Platform = Windows 10 and later, Profile type = Endpoint protection -> Configure -> Windows Encryption -> BitLocker base settings, Configure encryption methods = Enable.
Note: It is also recommended to set Windows Encryption -> Windows Settings -> Encrypt = **Require**.
Note: It is also recommended to set Windows Encryption -> Windows Settings -> Encrypt = **Require**.
## Requirements
## Requirements
Windows 10, version 1809 or later.
Windows 10, version 1809 or later.
## See also
## See also
[Bitlocker overview](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview)

View File

@ -1,39 +1,39 @@
--- ---
title: Windows Autopilot Enrollment Status Page title: Windows Autopilot Enrollment Status Page
ms.reviewer: ms.reviewer:
manager: laurawi manager: laurawi
description: Gives an overview of the Enrollment Status Page capabilities, configuration description: Gives an overview of the Enrollment Status Page capabilities, configuration
keywords: Autopilot Plug and Forget, Windows 10 keywords: Autopilot Plug and Forget, Windows 10
ms.prod: w10 ms.prod: w10
ms.technology: Windows ms.mktglfcycl: deploy
ms.mktglfcycl: deploy ms.sitesec: library
ms.sitesec: library ms.pagetype: deploy
ms.pagetype: deploy ms.localizationpriority: medium
ms.localizationpriority: medium audience: itpro
audience: itpro author: greg-lindsay
author: greg-lindsay ms.author: greglin
ms.author: greglin ms.collection: M365-modern-desktop
ms.collection: M365-modern-desktop ms.topic: article
ms.topic: article ---
---
# Windows Autopilot Enrollment Status Page
# Windows Autopilot Enrollment Status Page
**Applies to**
**Applies to**
- Windows 10, version 1803 and later
- Windows 10, version 1803 and later
The Enrollment Status Page (ESP) displays the status of the complete device configuration process when an MDM managed user signs into a device for the very first time. The ESP will help users understand the progress of device provisioning and ensures the device has met the organizations desired state before the user can access the desktop for the first time.
The Enrollment Status Page (ESP) displays the status of the complete device configuration process when an MDM managed user signs into a device for the very first time. The ESP will help users understand the progress of device provisioning and ensures the device has met the organizations desired state before the user can access the desktop for the first time.
The ESP will track the installation of applications, security policies, certificates and network connections. Within Intune, an administrator can deploy ESP profiles to a licensed Intune user and configure specific settings within the ESP profile; a few of these settings are: force the installation of specified applications, allow users to collect troubleshooting logs, specify what a user can do if device setup fails. For more information, see how to set up the [Enrollment Status Page in Intune](https://docs.microsoft.com/intune/windows-enrollment-status).
The ESP will track the installation of applications, security policies, certificates and network connections. Within Intune, an administrator can deploy ESP profiles to a licensed Intune user and configure specific settings within the ESP profile; a few of these settings are: force the installation of specified applications, allow users to collect troubleshooting logs, specify what a user can do if device setup fails. For more information, see how to set up the [Enrollment Status Page in Intune](https://docs.microsoft.com/intune/windows-enrollment-status).
![Enrollment Status Page](images/enrollment-status-page.png)
![Enrollment Status Page](images/enrollment-status-page.png)
## More information
## More information
For more information on configuring the Enrollment Status Page, see the [Microsoft Intune documentation](https://docs.microsoft.com/intune/windows-enrollment-status).<br>
For more information on configuring the Enrollment Status Page, see the [Microsoft Intune documentation](https://docs.microsoft.com/intune/windows-enrollment-status).<br> For details about the underlying implementation, see the [FirstSyncStatus details in the DMClient CSP documentation](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp).<br>
For details about the underlying implementation, see the [FirstSyncStatus details in the DMClient CSP documentation](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp).<br> For more information about blocking for app installation:
For more information about blocking for app installation: - [Blocking for app installation using Enrollment Status Page](https://blogs.technet.microsoft.com/mniehaus/2018/12/06/blocking-for-app-installation-using-enrollment-status-page/).
- [Blocking for app installation using Enrollment Status Page](https://blogs.technet.microsoft.com/mniehaus/2018/12/06/blocking-for-app-installation-using-enrollment-status-page/). - [Support Tip: Office C2R installation is now tracked during ESP](https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Office-C2R-installation-is-now-tracked-during-ESP/ba-p/295514).

View File

@ -7,9 +7,8 @@ ms.localizationpriority: high
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
ms.pagetype: security ms.pagetype: security
ms.date: 07/16/2019
ms.author: dansimp ms.author: dansimp
ms.date: 09/03/2018 author: dansimp
ms.reviewer: dansimp ms.reviewer: dansimp
manager: dansimp manager: dansimp
--- ---