diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 5b232fca9e..b0b0610178 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -68,6 +68,8 @@ ### [ICSPValidate](icspvalidate.md) ### [Samples for writing a custom configuration service provider](samples-for-writing-a-custom-configuration-service-provider.md) ## [Configuration service provider reference](configuration-service-provider-reference.md) +### [AccountManagement CSP](accountmanagement-csp.md) +#### [AccountManagement DDF file](accountmanagement-ddf.md) ### [ActiveSync CSP](activesync-csp.md) #### [ActiveSync DDF file](activesync-ddf-file.md) ### [AllJoynManagement CSP](alljoynmanagement-csp.md) diff --git a/windows/client-management/mdm/accountmanagement-csp.md b/windows/client-management/mdm/accountmanagement-csp.md new file mode 100644 index 0000000000..f43068ab86 --- /dev/null +++ b/windows/client-management/mdm/accountmanagement-csp.md @@ -0,0 +1,62 @@ +--- +title: AccountManagement CSP +description: Used to configure settings in the Account Manager service +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/23/2018 +--- + +# AccountManagement CSP + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +AccountManagement CSP is used to configure setting in the Account Manager service in Windows Holographic for Business edition. Added in Windows 10, version 1803. + +> [!Note] +> The AccountManagement CSP is only supported in Windows Holographic for Business edition. + + +The following diagram shows the AccountManagement configuration service provider in tree format. + +![accountmanagement csp](images/provisioning-csp-accountmanagement.png) + +**./Vendor/MSFT/AccountManagement** +Root node for the AccountManagement configuration service provider. + +**UserProfileManagement** +Interior node. + +**UserProfileManagement/EnableProfileManager** +Enable profile lifetime mangement for shared or communal device scenarios. Default value is false. + +Supported operations are Add, Get,Replace, and Delete. Value type is bool. + +**UserProfileManagement/DeletionPolicy** +Configures when profiles will be deleted. Default value is 1. + +Valid values: + +- 0 - delete immediately when the device returns to a state with no currently active users +- 1 - delete at storage capacity threshold +- 2 - delete at both storage capacity threshold and profile inactivity threshold + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/StorageCapacityStartDeletion** +Start deleting profiles when available storage capacity falls below this threshold, given as percent of total storage available for profiles. Profiles that have been inactive the longest will be deleted first. Default value is 25. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/StorageCapacityStopDeletion** +Stop deleting profiles when available storage capacity is brought up to this threshold, given as percent of total storage available for profiles. Default value is 50. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. + +**UserProfileManagement/ProfileInactivityThreshold** +Start deleting profiles when they have not been logged on during the specified period, given as number of days. Default value is 30. + +Supported operations are Add, Get,Replace, and Delete. Value type is integer. \ No newline at end of file diff --git a/windows/client-management/mdm/accountmanagement-ddf.md b/windows/client-management/mdm/accountmanagement-ddf.md new file mode 100644 index 0000000000..eddb5ce0ba --- /dev/null +++ b/windows/client-management/mdm/accountmanagement-ddf.md @@ -0,0 +1,201 @@ +--- +title: AccountManagement DDF file +description: Used to configure settings in the Account Manager service +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 03/23/2018 +--- + +# AccountManagement DDF file + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +This topic shows the OMA DM device description framework (DDF) for the **AccountManagement** configuration service provider. + +The XML below is for Windows 10, version 1803. + +``` syntax + +]> + + 1.2 + + AccountManagement + ./Device/Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.0/MDM/AccountManagement + + + + UserProfileManagement + + + + + + + + + + + + + + + + + + + EnableProfileManager + + + + + + + + false + Enable profile lifetime mangement for shared or communal device scenarios. + + + + + + + + + + Enable profile manager + + text/plain + + + + + DeletionPolicy + + + + + + + + 1 + Configures when profiles will be deleted. Allowed values: 0 (delete immediately upon device returning to a state with no currently active users); 1 (delete at storage capacity threshold); 2 (delete at both storage capacity threshold and profile inactivity threshold). + + + + + + + + + + Profile deletion policy + + text/plain + + + + + StorageCapacityStartDeletion + + + + + + + + 25 + Start deleting profiles when available storage capacity falls below this threshold, given as percent of total storage available for profiles. Profiles that have been inactive the longest will be deleted first. + + + + + + + + + + Storage capacity threshold to start profile deletion + + text/plain + + + + + StorageCapacityStopDeletion + + + + + + + + 50 + Stop deleting profiles when available storage capacity is brought up to this threshold, given as percent of total storage available for profiles. + + + + + + + + + + Storage capacity threshold to stop profile deletion + + text/plain + + + + + ProfileInactivityThreshold + + + + + + + + 30 + Start deleting profiles when they have not been logged on during the specified period, given as number of days. + + + + + + + + + + Profile inactive threshold + + text/plain + + + + + + +``` \ No newline at end of file diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 2ca9f64f6a..85c2515f2c 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 03/23/2018 --- # Configuration service provider reference @@ -29,6 +29,7 @@ Footnotes: - 1 - Added in Windows 10, version 1607 - 2 - Added in Windows 10, version 1703 - 3 - Added in Windows 10, version 1709 +- 4 - Added in Windows 10, version 1803
@@ -36,7 +37,7 @@ Footnotes: ## CSP support -[APPLICATION CSP](application-csp.md) +[AccountManagement CSP](accountmanagement-csp.md) @@ -50,13 +51,13 @@ Footnotes: - - - - - - - + + + + + + +
Mobile Enterprise
check markcheck markcheck markcheck markcheck markcheck markcross markcross markcross markcross markcross markcross markcross mark
@@ -119,6 +120,34 @@ Footnotes: + +[APPLICATION CSP](application-csp.md) + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
check markcheck markcheck markcheck markcheck markcheck mark
+ + + + [AppLocker CSP](applocker-csp.md) @@ -2509,7 +2538,8 @@ Footnotes:  Footnotes: - 1 - Added in Windows 10, version 1607 - 2 - Added in Windows 10, version 1703 -- 3 - Added in Windows 10, version 1803 +- 3 - Added in Windows 10, version 1709 +- 4 - Added in Windows 10, version 1803 ## CSP DDF files download @@ -2527,6 +2557,7 @@ The following list shows the configuration service providers supported in Window | Configuration service provider | Windows Holographic edition | Windows Holographic for Business edition | |--------|--------|------------| +| [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)3 | | [Application CSP](application-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [AppLocker CSP](applocker-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [CertificateStore CSP](certificatestore-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png)| @@ -2549,30 +2580,11 @@ The following list shows the configuration service providers supported in Window Footnotes: - 2 - Added in Windows 10, version 1703 - -## New CSPs added in Windows 10, version 1703 - -- [BitLocker CSP](bitlocker-csp.md) -- [CleanPC CSP](cleanpc-csp.md) -- [DeveloperSetup CSP](developersetup-csp.md) -- [DynamicManagement CSP](dynamicmanagement-csp.md) -- [EnterpriseAppVManagement CSP](enterpriseappvmanagement-csp.md) -- [Messaging CSP](messaging-csp.md) -- [NetworkProxy CSP](networkproxy-csp.md) -- [NetworkQoSPolicy CSP](networkqospolicy-csp.md) -- [Office CSP](office-csp.md) -- [Personalization CSP](personalization-csp.md) - -## New CSPs added in Windows 10, version 1511 - -- [AllJoynManagement CSP](alljoynmanagement-csp.md) -- [Maps CSP](maps-csp.md) -- [Reporting CSP](reporting-csp.md) -- [SurfaceHub CSP](surfacehub-csp.md) -- [WindowsSecurityAuditing CSP](windowssecurityauditing-csp.md) +- 3 - Added in Windows 10, version 1803 ## CSPs supported in Microsoft Surface Hub +- [AccountManagement CSP](accountmanagement-csp.md) - [APPLICATION CSP](application-csp.md) - [CertificateStore CSP](certificatestore-csp.md) - [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) diff --git a/windows/client-management/mdm/images/provisioning-csp-accountmanagement.png b/windows/client-management/mdm/images/provisioning-csp-accountmanagement.png new file mode 100644 index 0000000000..1475cb600f Binary files /dev/null and b/windows/client-management/mdm/images/provisioning-csp-accountmanagement.png differ diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index d7a8fb3533..80b89c5326 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/15/2018 +ms.date: 03/23/2018 --- # What's new in MDM enrollment and management @@ -1329,11 +1329,16 @@ For details about Microsoft mobile device management protocols for Windows 10 s +<<<<<<< HEAD +[AccountManagement CSP](accountmanagement-csp.md) +

Added a new CSP in Windows 10, version 1803.

+======= [RootCATrustedCertificates CSP](rootcacertificates-csp.md)

Added the following node in Windows 10, version 1803:

+>>>>>>> 2aa0839b99c52229c7cf43d58f467019b1284a6a @@ -1640,6 +1645,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware +[AccountManagement CSP](accountmanagement-csp.md) +

Added a new CSP in Windows 10, version 1803.

+ + [RootCATrustedCertificates CSP](rootcacertificates-csp.md)

Added the following node in Windows 10, version 1803: