From efe00ecfc8b96a62d3d61455cc759a12945adced Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 27 Jun 2019 11:13:44 -0700 Subject: [PATCH 01/26] Update control-usb-devices-using-intune.md changing author --- .../device-control/control-usb-devices-using-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index 910939ae7e..8f8f0e0f18 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -6,8 +6,8 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -ms.author: dansimp -author: dansimp +ms.author: daniha +author: danihalfin ms.date: 02/22/2019 ms.reviewer: manager: dansimp From c2550a66bae219fb4d5cde443899b130d18140e4 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 5 Jul 2019 09:04:22 +0500 Subject: [PATCH 02/26] Update windows-10-upgrade-paths.md --- .../upgrade/windows-10-upgrade-paths.md | 41 +++++-------------- 1 file changed, 10 insertions(+), 31 deletions(-) diff --git a/windows/deployment/upgrade/windows-10-upgrade-paths.md b/windows/deployment/upgrade/windows-10-upgrade-paths.md index fb67b1f826..42361c65c9 100644 --- a/windows/deployment/upgrade/windows-10-upgrade-paths.md +++ b/windows/deployment/upgrade/windows-10-upgrade-paths.md @@ -27,9 +27,9 @@ This topic provides a summary of available upgrade paths to Windows 10. You can > > **Windows 10 LTSC/LTSB**: Due to [naming changes](https://docs.microsoft.com/windows/deployment/update/waas-overview#naming-changes), product versions that display Windows 10 LTSB will be replaced with Windows 10 LTSC in subsequent feature updates. The term LTSC is used here to refer to all long term servicing versions. > -> In-place upgrade from Windows 7, Windows 8.1, or Windows 10 semi-annual channel to Windows 10 LTSC is not supported. **Note**: Windows 10 LTSC 2015 did not block this upgrade path. This was corrected in the Windows 10 LTSC 2016 release, which will now only allow data-only and clean install options. You can upgrade from Windows 10 LTSC to Windows 10 semi-annual channel, provided that you upgrade to the same or a newer build version. For example, Windows 10 Enterprise 2016 LTSB can be upgraded to Windows 10 Enterprise version 1607 or later. Upgrade is supported using the in-place upgrade process (using Windows setup). +> In-place upgrade from Windows 7, Windows 8.1, or [Windows 10 semi-annual channel](https://docs.microsoft.com/windows/release-information/) to Windows 10 LTSC is not supported. **Note**: Windows 10 LTSC 2015 did not block this upgrade path. This was corrected in the Windows 10 LTSC 2016 release, which will now only allow data-only and clean install options. You can upgrade from Windows 10 LTSC to Windows 10 semi-annual channel, provided that you upgrade to the same or a newer build version. For example, Windows 10 Enterprise 2016 LTSB can be upgraded to Windows 10 Enterprise version 1607 or later. Upgrade is supported using the in-place upgrade process (using Windows setup). > -> **Windows N/KN**: Windows "N" and "KN" SKUs follow the same upgrade paths shown below. If the pre-upgrade and post-upgrade editions are not the same type (e.g. Windows 8.1 Pro N to Windows 10 Pro), personal data will be kept but applications and settings will be removed during the upgrade process. +> **Windows N/KN**: Windows "N" and "KN" SKUs (editions without media-related functionality) follow the same upgrade paths shown below. If the pre-upgrade and post-upgrade editions are not the same type (e.g. Windows 8.1 Pro N to Windows 10 Pro), personal data will be kept but applications and settings will be removed during the upgrade process. > > **Windows 8.0**: You cannot upgrade directly from Windows 8.0 to Windows 10. To upgrade from Windows 8.0, you must first install the [Windows 8.1 update](https://support.microsoft.com/help/15356/windows-8-install-update-kb-2919355). @@ -61,7 +61,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Home Basic @@ -72,7 +71,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Home Premium @@ -83,7 +81,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Professional @@ -94,7 +91,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Ultimate @@ -105,7 +101,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Enterprise @@ -116,7 +111,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Windows 8.1 @@ -130,7 +124,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Connected @@ -141,7 +134,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Pro @@ -152,7 +144,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Pro Student @@ -163,7 +154,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Pro WMC @@ -174,7 +164,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Enterprise @@ -185,7 +174,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Embedded Industry @@ -196,7 +184,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Windows RT @@ -207,7 +194,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - Windows Phone 8.1 @@ -218,18 +204,16 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - Windows 10 Home - ✔ - ✔ - ✔ - ✔ + ✔ + ✔ + ✔ @@ -237,11 +221,10 @@ D = Edition downgrade; personal data is maintained, applications and settings ar Pro D - ✔ - ✔ - ✔ - ✔ + ✔ + ✔ + ✔ @@ -250,9 +233,8 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - ✔ - D + D @@ -262,7 +244,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - ✔ @@ -276,7 +257,6 @@ D = Edition downgrade; personal data is maintained, applications and settings ar ✔ - ✔ Mobile Enterprise @@ -285,9 +265,8 @@ D = Edition downgrade; personal data is maintained, applications and settings ar - D - ✔ + From 9638f458a04e9419425afa0990370e3c09e85747 Mon Sep 17 00:00:00 2001 From: Oliver Kieselbach Date: Sat, 13 Jul 2019 00:29:27 +0200 Subject: [PATCH 03/26] Update windows-autopilot-scenarios.md markup links are broken because they are inline of the tag.... changed them to html now they are functional --- .../windows-autopilot/windows-autopilot-scenarios.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md index 3422c91127..280bd8b3aa 100644 --- a/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md +++ b/windows/deployment/windows-autopilot/windows-autopilot-scenarios.md @@ -28,11 +28,11 @@ The following Windows Autopilot scenarios are described in this guide:
ScenarioMore information -
Deploy devices that will be set up by a member of the organization and configured for that person[Windows Autopilot user-driven mode](user-driven.md) -
Deploy devices that will be automatically configured for shared use, as a kiosk, or as a digital signage device.[Windows Autopilot self-deploying mode](self-deploying.md) -
Re-deploy a device in a business-ready state.[Windows Autopilot Reset](windows-autopilot-reset.md) -
Pre-provision a device with up-to-date applications, policies and settings.[White glove](white-glove.md) -
Deploy Windows 10 on an existing Windows 7 or 8.1 device[Windows Autopilot for existing devices](existing-devices.md) +
Deploy devices that will be set up by a member of the organization and configured for that personWindows Autopilot user-driven mode +
Deploy devices that will be automatically configured for shared use, as a kiosk, or as a digital signage device.Windows Autopilot self-deploying mode +
Re-deploy a device in a business-ready state.Windows Autopilot Reset +
Pre-provision a device with up-to-date applications, policies and settings.White glove +
Deploy Windows 10 on an existing Windows 7 or 8.1 deviceWindows Autopilot for existing devices
## Windows Autopilot capabilities From f8cdfac40ccc86fa018970642e759af12ed8ff38 Mon Sep 17 00:00:00 2001 From: Lindsay <45809756+lindspea@users.noreply.github.com> Date: Tue, 16 Jul 2019 10:51:09 +0200 Subject: [PATCH 04/26] Update hello-hybrid-cert-trust-prereqs.md Added note. --- .../hello-for-business/hello-hybrid-cert-trust-prereqs.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md index 36316a2a44..63f44ceff6 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md @@ -112,6 +112,9 @@ Organizations wanting to deploy hybrid certificate trust need their domain joine Hybrid certificate trust deployments need the device write back feature. Authentication to the Windows Server 2016 Active Directory Federation Services needs both the user and the computer to authenticate. Typically the users are synchronized, but not devices. This prevents AD FS from authenticating the computer and results in Windows Hello for Business certificate enrollment failures. For this reason, Windows Hello for Business deployments need device writeback, which is an Azure Active Directory premium feature. +> [!NOTE] +> Windows Hello for Business is tied between a user and a device. Both the user and device need to be synchronized between Azure Active Directory and Active Directory, and therefore the device write back is used to update the msDS-KeyCredentialLink on the computer object. + ### Section Checklist ### > [!div class="checklist"] > * Azure Active Directory Device writeback From 3861108c1802a5bfbd399948296f69809ecb9faa Mon Sep 17 00:00:00 2001 From: "H. Poulsen" Date: Tue, 16 Jul 2019 06:05:14 -0700 Subject: [PATCH 05/26] Update windows-as-a-service.md --- windows/deployment/update/windows-as-a-service.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-as-a-service.md b/windows/deployment/update/windows-as-a-service.md index 3dba405f93..6254ed3b81 100644 --- a/windows/deployment/update/windows-as-a-service.md +++ b/windows/deployment/update/windows-as-a-service.md @@ -27,13 +27,13 @@ Everyone wins when transparency is a top priority. We want you to know when upda The latest news: [See more news](waas-morenews.md). You can also check out the [Windows 10 blog](https://techcommunity.microsoft.com/t5/Windows-10-Blog/bg-p/Windows10Blog). @@ -43,7 +43,11 @@ Written by IT pros for IT pros, sharing real world examples and scenarios for Wi -**NEW** Deployment rings: The hidden [strategic] gem of Windows as a service +**NEW** Tactical considerations for creating Windows deployment rings + +**NEW** Windows 10 Enterprise vs. Windows 10 Pro: Modern management considerations for your organization + +Deployment rings: The hidden [strategic] gem of Windows as a service Classifying Windows updates in common deployment tools From 88f1c5821b599401b32d3e0ba1e8e7e55ec1e229 Mon Sep 17 00:00:00 2001 From: "H. Poulsen" Date: Tue, 16 Jul 2019 06:07:55 -0700 Subject: [PATCH 06/26] Update waas-morenews.md --- windows/deployment/update/waas-morenews.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/update/waas-morenews.md b/windows/deployment/update/waas-morenews.md index 2d91a632b5..454491e609 100644 --- a/windows/deployment/update/waas-morenews.md +++ b/windows/deployment/update/waas-morenews.md @@ -16,6 +16,8 @@ ms.topic: article Here's more news about [Windows as a service](windows-as-a-service.md):