Merge branch 'master' into vs-win10gdproverview

devices/surface/deploy-surface-app-with-windows-store-for-business.md

@@ -1,6 +1,6 @@
 ---
 title: Deploy Surface app with Microsoft Store for Business or Microsoft Store for Education (Surface)
-description: Find out how to add and download Surface app with Windows Store for Business or Microsoft Store for Education, as well as install Surface app with PowerShell and MDT.
+description: Find out how to add and download Surface app with Microsoft Store for Business or Microsoft Store for Education, as well as install Surface app with PowerShell and MDT.
 keywords: surface app, app, deployment, customize
 ms.prod: w10
 ms.mktglfcycl: deploy
@@ -31,7 +31,7 @@ The Surface app is a lightweight Windows Store app that provides control of many
 
 * Quick access to support documentation and information for your device 
 
-If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Windows Store or your Windows Store for Business. 
+If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Windows Store or your Microsoft Store for Business. 
 
 ##Surface app overview
 
@@ -45,11 +45,11 @@ Before users can install or deploy an app from a company’s Microsoft Store for
 
 2. Log on to the portal. 
 
-3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).<br/> <br/>
+3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).<br/> <br/>
    ![Show offline licenses apps checkbox](images/deploysurfapp-figure1-enablingapps.png "Show offline licenses apps checkbox")<br/>
    *Figure 1. Enable apps for offline use*
 
-4.	Add Surface app to your Micrososft Store for Business account by following this procedure:
+4.	Add Surface app to your Microsoft Store for Business account by following this procedure:
     * Click the **Shop** menu.
     * In the search box, type **Surface app**, and then click the search icon.
     * After the Surface app is presented in the search results, click the app’s icon.
@@ -68,9 +68,9 @@ Before users can install or deploy an app from a company’s Microsoft Store for
     * Click **OK**.
 
 ##Download Surface app from a Microsoft Store for Business account
-After you add an app to the Windows Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share.
+After you add an app to the Microsoft Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share.
 1. Log on to the Microsoft Store for Business account at https://businessstore.microsoft.com.
-2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Windows Store for Business account](#add-surface-app-to-a-windows-store-for-business-account) section of this article.
+2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Microsoft Store for Business account](#add-surface-app-to-a-microsoft-store-for-business-account) section of this article.
 3. Under **Actions**, click the ellipsis (**…**), and then click **Download for offline use** for the Surface app.
 4. Select the desired **Platform** and **Architecture** options from the available selections for the selected app, as shown in Figure 4.
 
@@ -78,7 +78,7 @@ After you add an app to the Windows Store for Business account in Offline mode,
 
     *Figure 4. Download the AppxBundle package for an app*
 5. Click **Download**. The AppxBundle package will be downloaded. Make sure you note the path of the downloaded file because you’ll need that later in this article.
-6. Click either the **Encoded license** or **Unencoded license** option. Use the Encoded license option with management tools like System Center Configuration Manager or when you use Windows Imaging and Configuration Designer (Windows ICD). Select the Unencoded license option when you use Deployment Image Servicing and Management (DISM) or deployment solutions based on imaging, including the Microsoft Deployment Toolkit (MDT).
+6. Click either the **Encoded license** or **Unencoded license** option. Use the Encoded license option with management tools like System Center Configuration Manager or when you use Windows Configuration Designer to create a provisioning package. Select the Unencoded license option when you use Deployment Image Servicing and Management (DISM) or deployment solutions based on imaging, including the Microsoft Deployment Toolkit (MDT).
 7. Click **Generate** to generate and download the license for the app. Make sure you note the path of the license file because you’ll need that later in this article.
 
 >[!NOTE]
@@ -102,9 +102,12 @@ To download the required frameworks for the Surface app, follow these steps:
 
 ##Install Surface app on your computer with PowerShell
 The following procedure provisions the Surface app onto your computer and makes it available for any user accounts created on the computer afterwards.
-1.	Using the procedure described in the [How to download Surface app from a Windows Store for Business account](#download-surface-app-from-a-windows-store-for-business-account) section of this article, download the Surface app AppxBundle and license file. 
+1.	Using the procedure described in the [How to download Surface app from a Microsoft Store for Business account](#download-surface-app-from-a-microsoft-store-for-business-account) section of this article, download the Surface app AppxBundle and license file. 
 2.	Begin an elevated PowerShell session.
->**Note:**&nbsp;&nbsp;If you don’t run PowerShell as an Administrator, the session won’t have the required permissions to install the app.
+
+    >[!NOTE]
+    >If you don’t run PowerShell as an Administrator, the session won’t have the required permissions to install the app.
+    
 3.	In the elevated PowerShell session, copy and paste the following command:
     ```
     Add-AppxProvisionedPackage –Online –PackagePath <DownloadPath>\ Microsoft.SurfaceHub_10.0.342.0_neutral_~_8wekyb3d8bbwe.AppxBundle –LicensePath <DownloadPath>\ Microsoft.SurfaceHub_8wekyb3d8bbwe_a53ef8ab-9dbd-dec1-46c5-7b664d4dd003.xml
@@ -118,7 +121,9 @@ The following procedure provisions the Surface app onto your computer and makes
     ```
 
 4.	The Surface app will now be available on your current Windows computer. 
+
 Before the Surface app is functional on the computer where it has been provisioned, you must also provision the frameworks described earlier in this article. To provision these frameworks, use the following procedure in the elevated PowerShell session you used to provision the Surface app.
+
 5.	In the elevated PowerShell session, copy and paste the following command:
 ```
     Add-AppxProvisionedPackage –Online –SkipLicense –PackagePath <DownloadPath>\Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe.Appx
@@ -130,7 +135,7 @@ Before the Surface app is functional on the computer where it has been provision
 
 ##Install Surface app with MDT
 The following procedure uses MDT to automate installation of the Surface app at the time of deployment. The application is provisioned automatically by MDT during deployment and thus you can use this process with existing images. This is the recommended process to deploy the Surface app as part of a Windows deployment to Surface devices because it does not reduce the cross platform compatibility of the Windows image.
-1.	Using the procedure described [earlier in this article](#download-surface-app-from-a-windows-store-for-business-account), download the Surface app AppxBundle and license file. 
+1.	Using the procedure described [earlier in this article](#download-surface-app-from-a-microsoft-store-for-business-account), download the Surface app AppxBundle and license file. 
 2.	Using the New Application Wizard in the MDT Deployment Workbench, import the downloaded files as a new **Application with source files**.
 3.	On the **Command Details** page of the New Application Wizard, specify the default **Working Directory** and for the **Command** specify the file name of the AppxBundle, as follows:
 

education/windows/change-history-edu.md

@@ -15,6 +15,12 @@ ms.date: 08/01/2017
 
 This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation.
 
+## September 2017
+
+| New or changed topic | Description |
+| --- | ---- |
+| [Use the Set up School PCs app ](use-set-up-school-pcs-app.md) | Updated the prerequisites to provide more clarification. |
+
 ## August 2017
 
 | New or changed topic | Description |

education/windows/use-set-up-school-pcs-app.md

@@ -9,7 +9,7 @@ ms.pagetype: edu
 ms.localizationpriority: high
 author: CelesteDG
 ms.author: celested
-ms.date: 08/01/2017
+ms.date: 09/18/2017
 ---
 
 # Use the Set up School PCs app 
@@ -103,7 +103,10 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the
 
 - [Download the latest Set up School PCs app from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4ls40).
 - Install the app on your work PC and make sure you're connected to your school's network. 
-- You must be an administrator on Office 365 and Azure Active Directory, and have Microsoft Store for Education configured. It's best if you sign up for and configure Intune for Education before using the Set up School PCs app.
+- You must have Office 365 and Azure Active Directory.
+- You must have the Microsoft Store for Education configured.
+- You must be a global admin, store admin, or purchaser in the Microsoft Store for Education.
+- It's best if you sign up for and [configure Intune for Education](../get-started/use-intune-for-education.md) before using the Set up School PCs app.
 - Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office.
 
 ## Set up School PCs step-by-step

store-for-business/add-profile-to-devices.md

@@ -7,21 +7,21 @@ ms.sitesec: library
 ms.pagetype: store
 author: TrudyHa
 ms.author: TrudyHa
-ms.date: 07/05/2107
+ms.date: 09/12/2017
 ms.localizationpriority: high
 ---
 
 # Manage Windows device deployment with Windows AutoPilot Deployment
 
 **Applies to**
-
 -   Windows 10
 
-> [!IMPORTANT]
-> This topic has been updated to reflect the latest functionality, which we are releasing to customers in stages. You may not see all of the options described here until you receive the update.
-
 Windows AutoPilot Deployment Program simplifies device set up for IT Admins. For an overview of benefits, scenarios, and prerequisites, see [Overview of Windows AutoPilot](https://docs.microsoft.com/windows/deployment/windows-10-auto-pilot). 
 
+Watch this video to learn more about Windows AutoPilot in Micrsoft Store for Business. 
+
+<iframe width="560" height="315" src="https://www.youtube.com/embed/IpLIZU_j7Z0" frameborder="0" allowfullscreen></iframe>
+
 ## What is Windows AutoPilot Deployment Program?
 In Microsoft Store for Business, you can manage devices for your organization and apply an *AutoPilot deployment profile* to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows based on the AutoPilot deployment profile you applied to the device. 
 
@@ -54,9 +54,13 @@ To manage devices through Microsoft Store for Business and Education, you'll nee
 
 ### Device information file format
 Columns in the device information file need to use this naming and be in this order:
-- Column 1: Device Serial Number
+- Column A: Device Serial Number
-- Column 2: Windows Product ID 
+- Column B: Windows Product ID 
-- Column 3: Hardware Hash
+- Column C: Hardware Hash
+
+Here's a sample device information file:
+
+![Notepad file showing example entries for Column A (Device Serial Number), Column B (Windows Product ID), and Column C (Hardware Hash).](images/msfb-autopilot-csv.png)
 
 When you add devices, you need to add them to an *AutoPilot deployment group*. Use these groups to apply AutoPilot deployment profiles to a group of devices. The first time you add devices to a group, you'll need to create an AutoPilot deployment group. 
 

windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md

@@ -1,7 +1,6 @@
 ---
 title: Windows Defender Firewall with Advanced Security Design Guide (Windows 10)
-description: Windows Defender Firewall with Advanced Security
+description: Windows Defender Firewall with Advanced Security Design Guide
-Design Guide
 ms.assetid: 5c631389-f232-4b95-9e48-ec02b8677d51
 ms.prod: w10
 ms.mktglfcycl: deploy

windows/application-management/TOC.md

@@ -101,5 +101,6 @@
 #### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md)
 ## [Service Host process refactoring](svchost-service-refactoring.md)
 ## [Per-user services in Windows](per-user-services-in-windows.md)
+## [Understand apps in Windows 10](apps-in-windows-10.md)
 ## [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md)
 ## [Change history for Application management](change-history-for-application-management.md)

windows/application-management/apps-in-windows-10.md

@@ -0,0 +1,153 @@
+---
+title: Windows 10 - Apps
+description: What are Windows, UWP, and Win32 apps
+ms.prod: w10
+ms.mktglfcycl: deploy
+ms.sitesec: library
+ms.pagetype: mobile
+ms.author: elizapo
+author: lizap
+ms.localizationpriority: low
+ms.date: 09/15/2017
+---
+# Understand the different apps included in Windows 10
+
+The following types of apps run on Windows 10:
+- Windows apps - introduced in Windows 8, primarily installed from the Store app.
+- Universal Windows Platform (UWP) apps - designed to work across platforms, can be installed on multiple platforms including Windows client, Windows Phone, and Xbox. All UWP apps are also Windows apps, but not all Windows apps are UWP apps.
+- "Win32" apps - traditional Windows applications, built for 32-bit systems.
+
+Digging into the Windows apps, there are two categories:
+- System apps - Apps that are installed in the c:\Windows\* directory. These apps are integral to the OS.
+- Apps - All other apps, installed in c:\Program Files\WindowsApps. There are two classes of apps:
+   - Provisioned: Installed the first time you sign into Windows. You'll see a tile or Start menu item for these apps, but they aren't installed until the first sign-in.
+   - Installed: Installed as part of the OS.
+
+The following tables list the system apps, installed Windows apps, and provisioned Windows apps in a standard Windows 10 Enterprise installation. (If you have a custom image, your specific apps might differ.) The tables list the app, the full name, show the app's status in Windows 10 version 1511, 1607, and 1703, and indicate whether an app can be uninstalled through the UI. 
+
+Some of the apps show up in multiple tables - that's because their status changed between versions. Make sure to check the version column for the version you are currently running.
+
+> [!TIP]
+> Want to see a list of the apps installed on your specific image? You can run the following PowerShell cmdlet:
+> ```powershell
+> Get-AppxPackage |Select Name,PackageFamilyName
+> Get-AppsProvisionedPackage -Online | select DisplayName,PackageName
+> ``` 
+
+
+## System apps
+System apps are integral to the operating system. Here are the typical system apps in Windows 10 versions 1511, 1607, and 1703. 
+
+| Name             | Full name                                 | 1511 | 1607 | 1703 | Uninstall through UI?                                  |
+|------------------|-------------------------------------------|------|------|------|--------------------------------------------------------|
+| Cortana UI       | CortanaListenUIApp                        |      |      |  x   | No                                                     |
+|                  | Desktop Learning                          |      |      | x    | No                                                     |
+|                  | DesktopView                               |      |      | x    | No                                                     |
+|                  | EnvironmentsApp                           |      |      | x    | No                                                     |
+| Mixed Reality +  | HoloCamera                                |      |      | x    | No                                                     |
+| Mixed Reality +  | HoloItemPlayerApp                         |      |      | x    | No                                                     |
+| Mixed Reality +  | HoloShell                                 |      |      | x    | No                                                     |
+|                  | Microsoft.AAD.Broker.Plugin               | x    | x    | x    | No                                                     |
+|                  | Microsoft.AccountsControl                 | x    | x    | x    | No                                                     |
+| Hello setup UI   | Microsoft.BioEnrollment                   | x    | x    | x    | No                                                     |
+|                  | Microsoft.CredDialogHost                  |      |      | x    | No                                                     |
+|                  | Microsoft.LockApp                         | x    | x    | x    | No                                                     |
+| Microsoft Edge   | Microsoft.Microsoft.Edge                  | x    | x    | x    | No                                                     |
+|                  | Microsoft.PPIProjection                   |      | x    | x    | No                                                     |
+|                  | Microsoft.Windows. Apprep.ChxApp           |      | x    | x    | No                                                     |
+|                  | Microsoft.Windows. AssignedAccessLockApp   | x    | x    | x    | No                                                     |
+|                  | Microsoft.Windows. CloudExperienceHost     | x    | x    | x    | No                                                     |
+|                  | Microsoft.Windows. ContentDeliveryManager  | x    | x    | x    | No                                                     |
+| Cortana          | Microsoft.Windows.Cortana                 | x    | x    | x    | No                                                     |
+|                  | Microsoft.Windows. Holographic.FirstRun    |      |      | x    | No                                                     |
+|                  | Microsoft.Windows. ModalSharePickerHost    |      |      | x    | No                                                     |
+|                  | Microsoft.Windows. OOBENetworkCaptivePort  |      |      | x    | No                                                     |
+|                  | Microsoft.Windows. OOBENetworkConnection   |      |      | x    | No                                                     |
+|                  | Microsoft.Windows. ParentalControls        | x    | x    | x    | No                                                     |
+|                  | Microsoft.Windows. SecHealthUI             |      |      | x    | No                                                     |
+|                  | Microsoft.Windows. SecondaryTileExperience | x    | x    | x    | No                                                     |
+|                  | Microsoft.Windows. SecureAssessmentBrowser |      | x    | x    | No                                                     |
+| Start            | Microsoft.Windows. ShellExperienceHost     | x    | x    | x    | No                                                     |
+| Windows Feedback | Microsoft.WindowsFeedback                 | x    | *    | *    | No                                                     |
+|                  | Microsoft.XboxGameCallableUI              | x    | x    | x    | No                                                     |
+| Xbox logon UI    | Microsoft.XboxIdentityProvider            | x    |      |      | No                                                     |
+| Contact Support  | Windows.ContactSupport                    | x    | x*    | x*    | In 1511, no.* |
+|                  | Windows.Devicesflow                       | x    |      |      | No                                                     |
+| Settings         | Windows.ImmersiveControlPanel             | x    | x    | x    | No                                                     |
+| Connect          | Windows.MiracastView                      | x    | x    | x    | No                                                     |
+| Print UI         | Windows.PrintDialog                       | x    | x    | x    | No                                                     |
+| Purchase UI      | Windows.PurchaseDialog                    | x    |      |      | No                                                     |
+
+> [!NOTE] 
+> - The Windows Feedback app changed to the Windows Feedback Hub in version 1607. It's listed in the installed apps table below.
+> - As of Windows 10 version 1607, you can use the Optional Features app to uninstall the Contact Support app.
+
+## Installed Windows apps
+Here are the typical installed Windows apps in Windows 10 versions 1511, 1607, and 1703.
+
+| Name               | Full name                               | 1511 | 1607 | 1703 | Uninstall through UI? |
+|--------------------|-----------------------------------------|------|------|------|---------------------------|
+| Remote Desktop     | Microsoft.RemoteDesktop                 |      | x    | x    | Yes                       |
+| PowerBI            | Microsoft.Microsoft PowerBIforWindows    |      | x    | x    | Yes                       |
+| Candy Crush        | king.com.CandyCrushSodaSaga             | x    |      |      | Yes                       |
+| Code Writer        | ActiproSoftwareLLC.562882FEEB491        |      | x    | x    | Yes                       |
+| Eclipse Manager    | 46928bounde.EclipseManager              |      | x    | x    | Yes                       |
+| Pandora            | PandoraMediaInc.29680B314EFC2           |      | x    | x    | Yes                       |
+| Photoshop Express  | AdobeSystemIncorporated. AdobePhotoshop  |      | x    | x    | Yes                       |
+| Duolingo           | D5EA27B7.Duolingo- LearnLanguagesforFree |      |      | x    | Yes                       |
+| Network Speed Test | Microsoft.NetworkSpeedTest              |      | x    | x    | Yes                       |
+| Paid Wi-FI         |                                         | x    |      |      | Yes                       |
+| Skype Video        |                                         | x    |      |      | Yes                       |
+| Twitter            |                                         | x    |      |      | Yes                       |
+| PicArts            |                                         | x    |      |      | Yes                       |
+| Minecraft          |                                         | x    |      |      | Yes                       |
+| Flipboard          |                                         | x    |      |      | Yes                       |
+
+## Provisioned Windows apps
+Here are the typical provisioned Windows apps in Windows 10 versions 1511, 1607, and 1703.
+
+| Name                            | Full name                              | 1511 | 1607 | 1703 | Uninstall through UI?     |
+|---------------------------------|----------------------------------------|------|------|------|---------------------------|
+| 3D Builder                      | Microsoft.3DBuilder                    | x    |      | x    | Yes                       |
+| App Connector                   | Microsoft.Appconnector                 | x    |      |      | Yes, through Settings app |
+| Money                           | Microsoft.BingFinance                  | x    |      |      | Yes                       |
+| News                            | Microsoft.BingNews                     | x    | *    | *    | Yes                       |
+| Sports                          | Microsoft.BingSports                   | x    |      |      | Yes                       |
+| Weather                         | Microsoft.BingWeather                  | x    | x    | x    | No                        |
+| Phone Companion                 | Microsoft.CommsPhone                   | x    |      |      | Yes                       |
+|                                 | Microsoft.ConnectivityStore            | x    |      |      | No                        |
+|                                 | Microsoft.DesktopAppInstaller          |      | x    | x    | Yes, through Settings app |
+| Get Started/Tips                | Microsoft.Getstarted                   | x    | x    | x    | Yes                       |
+| Messaging                       | Microsoft.Messaging                    | x    | x    | x    | No                        |
+| Microsoft 3D Viewer             | Microsoft.Microsoft3DViewer            |      |      | x    | No                        |
+| Get Office                      | Microsoft.MicrosoftOfficeHub           | x    | x    | x    | Yes                       |
+| Solitaire                       | Microsoft.Microsoft SolitaireCollection | x    | x    | x    | Yes                       |
+| Sticky Notes                    | Microsoft.MicrosoftStickyNotes         |      | x    | x    | No                        |
+| OneNote                         | Microsoft.Office.OneNote               | x    | x    | x    | No                        |
+| Sway                            | Microsoft.Office.Sway                  | x    | *    | *    | Yes                       |
+|                                 | Microsoft.OneConnect                   |      | x    | x    | No                        |
+| Paint 3D                        | Microsoft.MSPaint                      |      |      | x    | No                        |
+| People                          | Microsoft.People                       | x    | x    | x    | No                        |
+| Get Skype/Skype (preview)/Skype | Microsoft.SkypeApp                     | x    | x    | x    | Yes                       |
+|                                 | Microsoft.StorePurchaseApp             |      | x    | x    | No                        |
+|                                 | Microsoft.Wallet                       |      |      | x    | No                        |
+| Photos                          | Microsoft.Windows.Photos               | x    | x    | x    | No                        |
+| Alarms & Clock                  | Microsoft.WindowsAlarms                | x    | x    | x    | No                        |
+| Calculator                      | Microsoft.WindowsCalculator            | x    | x    | x    | No                        |
+| Camera                          | Microsoft.WindowsCamera                | x    | x    | x    | No                        |
+| Mail and Calendar               | Microsoft.windows communicationsapps    | x    | x    | x    | No                        |
+| Feedback Hub                    | Microsoft.WindowsFeedbackHub           | *    | x    | x    | Yes                       |
+| Maps                            | Microsoft.WindowsMaps                  | x    | x    | x    | No                        |
+| Phone                           | Microsoft.WindowsPhone                 | x    |      |      | No                        |
+| Voice Recorder                  | Microsoft.SoundRecorder                | x    | x    | x    | No                        |
+| Store                           | Microsoft.WindowsStore                 | x    | x    | x    | No                        |
+| Xbox                            | Microsoft.XboxApp                      | x    | x    | x    | No                        |
+|                                 | Microsoft.XboxGameOverlay              |      |      | x    | No                        |
+|                                 | Microsoft.XboxIdentityProvider         | *    | x    | x    | No                        |
+| Groove                          | Microsoft.ZuneMusic                    | x    | x    | x    | No                        |
+| Movies & TV                     | Microsoft.ZuneVideo                    | x    | x    | x    | No                        |
+|                                 | Microsoft.XboxSpeech ToTextOverlay      |      |      | x    | No                        |
+
+> [!NOTE]
+> - As of Windows 10, version 1607, News and Sway are installed apps.
+> - Both Feedback Hub and Microsoft.XboxIdentityProvider were installed apps in version 1511 and provisioned apps in versions 1607 and later.

windows/application-management/change-history-for-application-management.md

@@ -8,6 +8,7 @@ ms.sitesec: library
 ms.pagetype: security
 ms.localizationpriority: high
 author: jdeckerms
+ms.date: 09/15/2017
 ---
 
 # Change history for Configure Windows 10
@@ -17,7 +18,8 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md)
 ## September 2017
 | New or changed topic | Description |
 | --- | --- |
-| [Per-user services in Windows](per-user-services-in-windows.md) | New |
+| [Per-user services in Windows 10](per-user-services-in-windows.md) | New |
+| [Understand the different apps included in Windows 10](apps-in-windows-10.md) | New |
 
 ## July 2017
 | New or changed topic | Description |

windows/application-management/index.md

@@ -6,6 +6,7 @@ ms.mktglfcycl: manage
 ms.sitesec: library
 author: jdeckerms
 ms.localizationpriority: medium
+ms.date: 09/15/2017
 ---
 
 # Windows 10 application management
@@ -20,5 +21,7 @@ Learn about managing applications in Windows 10 and Windows 10 Mobile clients.
 |---|---|
 |[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications|
 |[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients|
+|[Per User services in Windows 10](sideload-apps-in-windows-10.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016|
+|[Understand apps in Windows 10](apps-in-windows-10.md)| Overview of the different apps included by default in Windows 10 Enterprise|
 | [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10  |
 | [Deploy app updgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | How to upgrade apps on Windows 10 Mobile  |

windows/client-management/mdm/TOC.md

@@ -17,9 +17,9 @@
 ## [Enterprise app management](enterprise-app-management.md)
 ## [Device update management](device-update-management.md)
 ## [Bulk enrollment](bulk-enrollment-using-windows-provisioning-tool.md)
-## [Management tool for the Windows Store for Business](management-tool-for-windows-store-for-business.md)
+## [Management tool for the Micosoft Store for Business](management-tool-for-windows-store-for-business.md)
-### [REST API reference for Windows Store for Business](rest-api-reference-windows-store-for-business.md)
+### [REST API reference for Micosoft Store for Business](rest-api-reference-windows-store-for-business.md)
-#### [Data structures for Windows Store for Business](data-structures-windows-store-for-business.md)
+#### [Data structures for Micosoft Store for Business](data-structures-windows-store-for-business.md)
 #### [Get Inventory](get-inventory.md)
 #### [Get product details](get-product-details.md)
 #### [Get localized product details](get-localized-product-details.md)

windows/client-management/mdm/applocker-csp.md

@@ -266,9 +266,9 @@ FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corp
 
 You can get the publisher name and product name of apps using a web API.
 
-**To find publisher and product name for Microsoft apps in Windows Store for Business**
+**To find publisher and product name for Microsoft apps in Microsoft Store for Business**
 
-1.  Go to the Windows Store for Business website, and find your app. For example, Microsoft OneNote.
+1.  Go to the Microsoft Store for Business website, and find your app. For example, Microsoft OneNote.
 2.  Copy the ID value from the app URL. For example, Microsoft OneNote's ID URL is https:<span><\span>//www.microsoft.com/store/apps/onenote/9wzdncrfhvjl, and you'd copy the ID value, **9wzdncrfhvjl**.
 3.  In your browser, run the Store for Business portal web API, to return a JavaScript Object Notation (JSON) file that includes the publisher and product name values.
 

windows/client-management/mdm/assign-seats.md

@@ -1,6 +1,6 @@
 ---
 title: Assign seat
-description: The Assign seat operation assigns seat for a specified user in the Windows Store for Business.
+description: The Assign seat operation assigns seat for a specified user in the Microsoft Store for Business.
 ms.assetid: B42BF490-35C9-405C-B5D6-0D9F0E377552
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Assign seat
 
-The **Assign seat** operation assigns seat for a specified user in the Windows Store for Business.
+The **Assign seat** operation assigns seat for a specified user in the Microsoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md

@@ -1,6 +1,6 @@
 ---
 title: Bulk assign and reclaim seats from users
-description: The Bulk assign and reclaim seats from users operation returns reclaimed or assigned seats in the Windows Store for Business.
+description: The Bulk assign and reclaim seats from users operation returns reclaimed or assigned seats in the Microsoft Store for Business.
 ms.assetid: 99E2F37D-1FF3-4511-8969-19571656780A
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Bulk assign and reclaim seats from users
 
-The **Bulk assign and reclaim seats from users** operation returns reclaimed or assigned seats in the Windows Store for Business.
+The **Bulk assign and reclaim seats from users** operation returns reclaimed or assigned seats in the Microsoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/data-structures-windows-store-for-business.md

@@ -1,5 +1,5 @@
 ---
-title: Data structures for Windows Store for Business
+title: Data structures for Microsoft Store for Business
 MS-HAID:
 - 'p\_phdevicemgmt.business\_store\_data\_structures'
 - 'p\_phDeviceMgmt.data\_structures\_windows\_store\_for\_business'
@@ -13,10 +13,10 @@ author: nickbrower
 ms.date: 06/19/2017
 ---
 
-# Data structures for Windows Store for Business
+# Data structures for Microsoft Store for Business
 
 
-Here's the list of data structures used in the Windows Store for Business REST APIs:
+Here's the list of data structures used in the Microsoft Store for Business REST APIs:
 
 -   [AlternateIdentifier](#alternateidentifier)
 -   [BulkSeatOperationResultSet](#bulkseatoperationresultset)

windows/client-management/mdm/enterprise-app-management.md

@@ -18,7 +18,7 @@ This topic covers one of the key mobile device management (MDM) features in Wind
 
 Windows 10 offers the ability for management servers to:
 
--   Install apps directly from the Windows Store for Business
+-   Install apps directly from the Microsoft Store for Business
 -   Deploy offline Store apps and licenses
 -   Deploy line-of-business (LOB) apps (non-Store apps)
 -   Inventory all apps for a user (Store and non-Store apps)

windows/client-management/mdm/enterprisemodernappmanagement-csp.md

@@ -68,7 +68,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic
     -   PackageDetails - returns all inventory attributes of the package. This includes all information from PackageNames parameter, but does not validate RequiresReinstall.
     -   RequiredReinstall - Validates the app status of the apps in the inventory query to determine if they require a reinstallation. This attribute may impact system performance depending on the number of apps installed. Requiring reinstall occurs when resource package updates or when the app is in a tampered state.
 -   Source - specifies the app classification that aligns to the existing inventory nodes. You can use a specific filter or if no filter is specified then all sources will be returned. If no value is specified, all classifications are returned. Valid values are:
-    -   AppStore - This classification is for apps that were acquired from Windows Store. These were apps directly installed from Windows Store or enterprise apps from Windows Store for Business.
+    -   AppStore - This classification is for apps that were acquired from Windows Store. These were apps directly installed from Windows Store or enterprise apps from Microsoft Store for Business.
     -   nonStore - This classification is for apps that were not acquired from the Windows Store.
     -   System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried.
 -   PackageTypeFilter - Specifies one or multiple types of packages you can use to query the user or device. Multiple values must be separated by |. Valid values are:

windows/client-management/mdm/get-inventory.md

@@ -1,6 +1,6 @@
 ---
 title: Get Inventory
-description: The Get Inventory operation retrieves information from the Windows Store for Business to determine if new or updated applications are available.
+description: The Get Inventory operation retrieves information from the Microsoft Store for Business to determine if new or updated applications are available.
 MS-HAID:
 - 'p\_phdevicemgmt.get\_seatblock'
 - 'p\_phDeviceMgmt.get\_inventory'
@@ -15,7 +15,7 @@ ms.date: 06/19/2017
 
 # Get Inventory
 
-The **Get Inventory** operation retrieves information from the Windows Store for Business to determine if new or updated applications are available.
+The **Get Inventory** operation retrieves information from the Microsoft Store for Business to determine if new or updated applications are available.
 
 ## Request
 

windows/client-management/mdm/get-localized-product-details.md

@@ -1,6 +1,6 @@
 ---
 title: Get localized product details
-description: The Get localized product details operation retrieves the localization information of a product from the Windows Store for Business.
+description: The Get localized product details operation retrieves the localization information of a product from the Micosoft Store for Business.
 ms.assetid: EF6AFCA9-8699-46C9-A3BB-CD2750C07901
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get localized product details
 
-The **Get localized product details** operation retrieves the localization information of a product from the Windows Store for Business.
+The **Get localized product details** operation retrieves the localization information of a product from the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-offline-license.md

@@ -1,6 +1,6 @@
 ---
 title: Get offline license
-description: The Get offline license operation retrieves the offline license information of a product from the Windows Store for Business.
+description: The Get offline license operation retrieves the offline license information of a product from the Micosoft Store for Business.
 ms.assetid: 08DAD813-CF4D-42D6-A783-994A03AEE051
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get offline license
 
-The **Get offline license** operation retrieves the offline license information of a product from the Windows Store for Business.
+The **Get offline license** operation retrieves the offline license information of a product from the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-product-details.md

@@ -1,6 +1,6 @@
 ---
 title: Get product details
-description: The Get product details operation retrieves the product information from the Windows Store for Business for a specific application.
+description: The Get product details operation retrieves the product information from the Micosoft Store for Business for a specific application.
 ms.assetid: BC432EBA-CE5E-43BD-BD54-942774767286
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get product details
 
-The **Get product details** operation retrieves the product information from the Windows Store for Business for a specific application.
+The **Get product details** operation retrieves the product information from the Micosoft Store for Business for a specific application.
 
 ## Request
 

windows/client-management/mdm/get-product-package.md

@@ -1,6 +1,6 @@
 ---
 title: Get product package
-description: The Get product package operation retrieves the information about a specific application in the Windows Store for Business.
+description: The Get product package operation retrieves the information about a specific application in the Micosoft Store for Business.
 ms.assetid: 4314C65E-6DDC-405C-A591-D66F799A341F
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get product package
 
-The **Get product package** operation retrieves the information about a specific application in the Windows Store for Business.
+The **Get product package** operation retrieves the information about a specific application in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-product-packages.md

@@ -1,6 +1,6 @@
 ---
 title: Get product packages
-description: The Get product packages operation retrieves the information about applications in the Windows Store for Business.
+description: The Get product packages operation retrieves the information about applications in the Micosoft Store for Business.
 ms.assetid: 039468BF-B9EE-4E1C-810C-9ACDD55C0835
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get product packages
 
-The **Get product packages** operation retrieves the information about applications in the Windows Store for Business.
+The **Get product packages** operation retrieves the information about applications in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-seat.md

@@ -1,6 +1,6 @@
 ---
 title: Get seat
-description: The Get seat operation retrieves the information about an active seat for a specified user in the Windows Store for Business.
+description: The Get seat operation retrieves the information about an active seat for a specified user in the Micosoft Store for Business.
 ms.assetid: 715BAEB2-79FD-4945-A57F-482F9E7D07C6
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get seat
 
-The **Get seat** operation retrieves the information about an active seat for a specified user in the Windows Store for Business.
+The **Get seat** operation retrieves the information about an active seat for a specified user in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-seats-assigned-to-a-user.md

@@ -1,6 +1,6 @@
 ---
 title: Get seats assigned to a user
-description: The Get seats assigned to a user operation retrieves information about assigned seats in the Windows Store for Business.
+description: The Get seats assigned to a user operation retrieves information about assigned seats in the Micosoft Store for Business.
 ms.assetid: CB963E44-8C7C-46F9-A979-89BBB376172B
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get seats assigned to a user
 
-The **Get seats assigned to a user** operation retrieves information about assigned seats in the Windows Store for Business.
+The **Get seats assigned to a user** operation retrieves information about assigned seats in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/get-seats.md

@@ -1,6 +1,6 @@
 ---
 title: Get seats
-description: The Get seats operation retrieves the information about active seats in the Windows Store for Business.
+description: The Get seats operation retrieves the information about active seats in the Micosoft Store for Business.
 ms.assetid: 32945788-47AC-4259-B616-F359D48F4F2F
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Get seats
 
-The **Get seats** operation retrieves the information about active seats in the Windows Store for Business.
+The **Get seats** operation retrieves the information about active seats in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/management-tool-for-windows-store-for-business.md

@@ -1,6 +1,6 @@
 ---
-title: Management tool for the Windows Store for Business
+title: Management tool for the Micosoft Store for Business
-description: The Windows Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk.
+description: The Micosoft Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk.
 MS-HAID:
 - 'p\_phdevicemgmt.business\_store\_portal\_management\_tool'
 - 'p\_phDeviceMgmt.management\_tool\_for\_windows\_store\_for\_business'
@@ -13,9 +13,9 @@ author: nickbrower
 ms.date: 06/19/2017
 ---
 
-# Management tool for the Windows Store for Business
+# Management tool for the Micosoft Store for Business
 
-The Windows Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. The Store for Business enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates.
+The Micosoft Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. The Store for Business enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates.
 
 Here's the list of the available capabilities:
 
@@ -26,7 +26,7 @@ Here's the list of the available capabilities:
 -   Custom Line of Business app support –Enables management and distribution of enterprise applications through the Store for Business.
 -   Support for Windows desktop and mobile devices - The Store for Business supports both desktop and mobile devices.
 
-For additional information about Store for Business, see the TechNet topics in [Windows Store for Business](https://technet.microsoft.com/library/mt606951.aspx).
+For additional information about Store for Business, see the TechNet topics in [Micosoft Store for Business](https://technet.microsoft.com/library/mt606951.aspx).
 
 ## Management services
 

windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md

@@ -102,7 +102,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
 </ul></td>
 </tr>
 <tr class="odd">
-<td style="vertical-align:top"><p>Management tool for the Windows Store for Business</p></td>
+<td style="vertical-align:top"><p>Management tool for the Micosoft Store for Business</p></td>
 <td style="vertical-align:top"><p>New topics. The Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. It enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates.</p></td>
 </tr>
 <tr class="even">
@@ -929,6 +929,16 @@ For details about Microsoft mobile device management protocols for Windows 10 s
 </thead>
 <tbody>
 <tr class="even">
+<td style="vertical-align:top">The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/en-us/library/mt221945.aspx)</td>
+<td style="vertical-align:top"><p>The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:</p>
+<ul>
+<li>UXInitiated - boolean value that indicates whether the enrollment is user initiated from the Settings page. </li>
+<li>ExternalMgmtAgentHint - a string the agent uses to give hints the enrollment server may need.</li>
+<li>DomainName - fully qualified domain name if the device is domain-joined.</li>
+</ul>
+<p>For examples, see section 4.3.1 RequestSecurityToken of the the MS-MDE2 protocol documentation.</p>
+</td></tr>
+<tr class="even">
 <td style="vertical-align:top">[Firewall CSP](firewall-csp.md)</td>
 <td style="vertical-align:top"><p>Added new CSP in Windows 10, version 1709.</p>
 </td></tr>
@@ -989,6 +999,10 @@ For details about Microsoft mobile device management protocols for Windows 10 s
 <td style="vertical-align:top"><p>Added new policies.</p>
 </td></tr>
 <tr class="odd">
+<td style="vertical-align:top">Microsoft Store for Business</td>
+<td style="vertical-align:top"><p>Windows Store for Business name changed to Microsoft Store for Business.</p>
+</td></tr>
+<tr class="odd">
 <td style="vertical-align:top">[Policy CSP](policy-configuration-service-provider.md)</td>
 <td style="vertical-align:top"><p>Added the following new policies for Windows 10, version 1709:</p> 
 <ul>
@@ -1360,6 +1374,21 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
 <li>Search/AllowCloudSearch</li>
 <li>System/LimitEnhancedDiagnosticDataWindowsAnalytics</li>
 </ul>
+<p>Added new settings to Update/BranchReadinessLevel policy in Windows 10 version 1709.</p>
+</td></tr>
+<tr class="odd">
+<td style="vertical-align:top">Microsoft Store for Business</td>
+<td style="vertical-align:top"><p>Windows Store for Business name changed to Microsoft Store for Business.</p>
+</td></tr>
+<tr class="even">
+<td style="vertical-align:top">The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/en-us/library/mt221945.aspx)</td>
+<td style="vertical-align:top"><p>The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message:</p>
+<ul>
+<li>UXInitiated - boolean value that indicates whether the enrollment is user initiated from the Settings page. </li>
+<li>ExternalMgmtAgentHint - a string the agent uses to give hints the enrollment server may need.</li>
+<li>DomainName - fully qualified domain name if the device is domain-joined.</li>
+</ul>
+<p>For examples, see section 4.3.1 RequestSecurityToken of the the MS-MDE2 protocol documentation.</p>
 </td></tr>
 </tbody>
 </table>

windows/client-management/mdm/policy-csp-update.md

@@ -471,8 +471,12 @@ This policy is accessible through the Update setting in the user interface or Gr
 
 <p style="margin-left: 20px">The following list shows the supported values:
 
--   16 (default) – User gets all applicable upgrades from Current Branch (CB).
+-  2  {0x2}  - Windows Insider build - Fast (added in Windows 10, version 1709)
--   32 – User gets upgrades from Current Branch for Business (CBB).
+-  4  {0x4}  - Windows Insider build - Slow (added in Windows 10, version 1709)
+-  8  {0x8}  - Release Windows Insider build (added in Windows 10, version 1709)
+-  16 {0x10} - (default) Semi-annual Channel (Targeted). Device gets all applicable feature updates from Semi-annual Channel (Targeted).
+-  32 {0x20} - Semi-annual Channel. Device gets feature updates from Semi-annual Channel.
+
 
 <!--EndDescription-->
 <!--EndPolicy-->
@@ -1253,12 +1257,12 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
 > Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices.
 
 
-<p style="margin-left: 20px">Allows the IT admin to set a device to CBB train.
+<p style="margin-left: 20px">Allows the IT admin to set a device to Semi-Annual Channel train.
 
 <p style="margin-left: 20px">The following list shows the supported values:
 
--   0 (default) – User gets upgrades from Current Branch.
+-   0 (default) – User gets upgrades from Semi-Annual Channel (Targeted).
--   1 – User gets upgrades from Current Branch for Business.
+-   1 – User gets upgrades from Semi-Annual Channel.
 
 <!--EndDescription-->
 <!--EndPolicy-->

windows/client-management/mdm/reclaim-seat-from-user.md

@@ -1,6 +1,6 @@
 ---
 title: Reclaim seat from user
-description: The Reclaim seat from user operation returns reclaimed seats for a user in the Windows Store for Business.
+description: The Reclaim seat from user operation returns reclaimed seats for a user in the Micosoft Store for Business.
 ms.assetid: E2C3C899-D0AD-469A-A319-31A420472A4C
 ms.author: maricia
 ms.topic: article
@@ -12,7 +12,7 @@ ms.date: 06/19/2017
 
 # Reclaim seat from user
 
-The **Reclaim seat from user** operation returns reclaimed seats for a user in the Windows Store for Business.
+The **Reclaim seat from user** operation returns reclaimed seats for a user in the Micosoft Store for Business.
 
 ## Request
 

windows/client-management/mdm/rest-api-reference-windows-store-for-business.md

@@ -1,6 +1,6 @@
 ---
-title: REST API reference for Windows Store for Business
+title: REST API reference for Micosoft Store for Business
-description: REST API reference for Windows Store for Business
+description: REST API reference for Micosoft Store for Business
 MS-HAID:
 - 'p\_phdevicemgmt.business\_store\_portal\_management\_rest\_api\_reference'
 - 'p\_phDeviceMgmt.rest\_api\_reference\_windows\_store\_for\_Business'
@@ -13,7 +13,7 @@ author: nickbrower
 ms.date: 06/19/2017
 ---
 
-# REST API reference for Windows Store for Business
+# REST API reference for Micosoft Store for Business
 
 Here's the list of available operations:
 

windows/configuration/change-history-for-configure-windows-10.md

@@ -30,6 +30,7 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md)
 ## July 2017
 | New or changed topic | Description |
 | --- | --- |
+|[Windows 10, version 1703 Diagnostic Data](windows-diagnostic-data.md)|Updated categories and included diagnostic data.|
 |[Add image for secondary tiles](start-secondary-tiles.md) | Added XML example for Edge secondary tiles and **ImportEdgeAssets** |
 |[Customize and export Start layout](customize-and-export-start-layout.md) | Added explanation for tile behavior when the app is not installed |
 |[Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md) | Added that Microsoft Edge is not supported for assigned access |

windows/configuration/start-layout-xml-desktop.md

@@ -32,8 +32,7 @@ On Windows 10 for desktop editions, the customized Start works by:
 >[!NOTE]
 >Using the layout modification XML to configure Start is not supported with roaming user profiles. For more information, see [Deploy Roaming User Profiles](https://technet.microsoft.com/en-US/library/jj649079.aspx).
 
->[!NOTE]
+
->Using the layout modification XML to configure Start is not supported with roaming user profiles. For more information, see [Deploy Roaming User Profiles](https://technet.microsoft.com/library/jj649079.aspx).
 
 ## LayoutModification XML
 

windows/configuration/windows-diagnostic-data.md

@@ -6,12 +6,14 @@ ms.prod: w10
 ms.mktglfcycl: manage
 ms.sitesec: library
 ms.localizationpriority: high
-author: brianlic-msft
+author: eross-msft
+ms.author: lizross
+ms.date: 09/14/2017
 ---
 
 # Windows 10, version 1703 Diagnostic Data
 
-Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide relevant tips and recommendations to tailor Microsoft products to the user’s needs.   This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md).
+Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide more relevant tips and recommendations to tailor Microsoft products to the user’s needs.   This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md).
 
 
 The data covered in this article is grouped into the following categories:
@@ -21,10 +23,8 @@ The data covered in this article is grouped into the following categories:
 -   Product and Service Usage data
 -   Product and Service Performance data
 -   Software Setup and Inventory data
--   Content Consumption data
+-   Browsing History data
--   Browsing, Search and Query data
 -   Inking, Typing, and Speech Utterance data
--   Licensing and Purchase data
 
 > [!NOTE]  
 > The majority of diagnostic data falls into the first four categories.
@@ -67,7 +67,14 @@ This type of data includes details about the health of the device, operating sys
 | Category Name | Description and Examples |
 | - | - |
 |Device health and crash data | Information about the device and software health such as:<br><ul><li>Error codes and error messages, name and ID of the app, and process reporting the error</li><li>DLL library predicted to be the source of the error -- xyz.dll</li><li>System generated files -- app or product logs and trace files to help diagnose a crash or hang</li><li>System settings such as registry keys</li><li>User generated files – .doc, .ppt, .csv files where they are indicated as a potential cause for a crash or hang</li><li>Details and counts of abnormal shutdowns, hangs, and crashes</li><li>Crash failure data – OS, OS component, driver, device, 1st and 3rd party app data</li><li>Crash and Hang dumps<ul><li>The recorded state of the working memory at the point of the crash.</li><li>Memory in use by the kernel at the point of the crash.</li><li>Memory in use by the application at the point of the crash.</li><li>All the physical memory used by Windows at the point of the crash.</li><li>Class and function name within the module that failed.</li></li></ul> |
-| Device performance and reliability data | Information about the device and software performance such as:<br><ul><li>User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.</li><li>Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).</li><li>In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.</li><li>User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.</li><li>UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance</li><li>Disk footprint -- Free disk space, out of memory conditions, and disk score.</li><li>Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states</li><li>Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results</li><li>Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times</li><li>Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.</li><li>Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions</li><li>Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.</li><li>Diagnostic heartbeat – regular signal to validate the health of the diagnostics system</li></ul>
+|Device performance and reliability data | Information about the device and software performance such as:<br><ul><li>User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.</li><li>Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).</li><li>In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.</li><li>User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.</li><li>UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance</li><li>Disk footprint -- Free disk space, out of memory conditions, and disk score.</li><li>Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states</li><li>Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results</li><li>Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times</li><li>Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.</li><li>Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions</li><li>Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.</li><li>Diagnostic heartbeat – regular signal to validate the health of the diagnostics system</li></ul>|
+|Movies|Information about movie consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.<br><ul><li>Video Width, height, color pallet, encoding (compression) type, and encryption type</li><li>Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth</li><li>URL for a specific two second chunk of content if there is an error</li><li>Full screen viewing mode details|
+|Music & TV|Information about music and TV consumption on the device. This isn't intended to capture user viewing, listening or habits.<br><ul><li>Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service</li><li>Content type (video, audio, surround audio)</li><li>Local media library collection statistics -- number of purchased tracks, number of playlists</li><li>Region mismatch -- User OS Region, and Xbox Live region</li></ul>|
+|Reading|Information about reading consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.<br><ul><li>App accessing content and status and options used to open a Microsoft Store book</li><li>Language of the book</li><li>Time spent reading content</li><li>Content type and size details</li></ul>|
+|Photos App|Information about photos usage on the device. This isn't intended to capture user viewing, listening or habits.<br><ul><li>File source data -- local, SD card, network device, and OneDrive</li><li>Image &amp; video resolution, video length, file sizes types and encoding</li><li>Collection view or full screen viewer use and duration of view</li></ul></ul>|
+|On-device file query | Information about local search activity on the device such as: <ul><li>Kind of query issued and index type (ConstraintIndex, SystemIndex)</li><li>Number of items requested and retrieved</li><li>File extension of search result user interacted with</li><li>Launched item kind, file extension, index of origin, and the App ID of the opening app.</li><li>Name of process calling the indexer and time to service the query.</li><li>A hash of the search scope (file, Outlook, OneNote, IE history) </li><li>The state of the indices (fully optimized, partially optimized, being built)</li></ul> |
+|Purchasing| Information about purchases made on the device such as:<br><ul><li>Product ID, edition ID and product URI</li><li>Offer details -- price</li><li>Order requested date/time</li><li>Store client type -- web or native client</li><li>Purchase quantity and price</li><li>Payment type -- credit card type and PayPal</li></ul> |
+|Entitlements | Information about entitlements on the device such as:<br><ul><li>Service subscription status and errors</li><li>DRM and license rights details -- Groove subscription or OS volume license</li><li>Entitlement ID, lease ID, and package ID of the install package</li><li>Entitlement revocation</li><li>License type (trial, offline vs online) and duration</li><li>License usage session</li></ul> |
 
 ## Software Setup and Inventory data
 
@@ -78,25 +85,13 @@ This type of data includes software installation and update information on the d
 | Installed Applications and Install History | Information about apps, drivers, update packages, or OS components installed on the device such as:<br><ul><li>App, driver, update package, or component’s Name, ID, or Package Family Name</li><li>Product, SKU, availability, catalog, content, and Bundle IDs</li><li>OS component, app or driver publisher, language, version and type (Win32 or UWP)</li><li>Install date, method, and install directory, count of install attempts</li><li>MSI package code and product code</li><li>Original OS version at install time</li><li>User or administrator or mandatory installation/update</li><li>Installation type – clean install, repair, restore, OEM, retail, upgrade, and update</li></ul> |
 | Device update information | Information about Windows Update such as:<br><ul><li>Update Readiness analysis of device hardware, OS components, apps, and drivers (progress, status, and results)</li><li>Number of applicable updates, importance, type</li><li>Update download size and source -- CDN or LAN peers</li><li>Delay upgrade status and configuration</li><li>OS uninstall and rollback status and count</li><li>Windows Update server and service URL</li><li>Windows Update machine ID</li><li>Windows Insider build details</li></ul>
 
-## Content Consumption data
+## Browsing History data
 
-This type of data includes diagnostic details about Microsoft applications that provide media consumption functionality (such as Groove Music), and is not intended to capture user viewing, listening or reading habits.
+This type of data includes details about web browsing in the Microsoft browsers.
-
-| Category Name | Examples |
-| - | - |
-| Movies | Information about movie consumption functionality on the device such as:<br><ul><li>Video Width, height, color pallet, encoding (compression) type, and encryption type</li><li>Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth</li><li>URL for a specific two second chunk of content if there is an error</li><li>Full screen viewing mode details</li></ul> |
-| Music & TV | Information about music and TV consumption on the device such as:<br><ul><li>Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service</li><li>Content type (video, audio, surround audio)</li><li>Local media library collection statistics -- number of purchased tracks, number of playlists</li><li>Region mismatch -- User OS Region, and Xbox Live region</li></ul> |
-| Reading | Information about reading consumption functionality on the device such as:<br><ul><li>App accessing content and status and options used to open a Microsoft Store book</li><li>Language of the book</li><li>Time spent reading content</li><li>Content type and size details</li></ul> |
-| Photos App | Information about photos usage on the device such as:<br><ul><li>File source data -- local, SD card, network device, and OneDrive</li><li>Image &amp; video resolution, video length, file sizes types and encoding</li><li>Collection view or full screen viewer use and duration of view</li></ul>
-
-## Browsing, Search and Query  data
-
-This type of data includes details about web browsing, search and query activity in the Microsoft browsers and Cortana, and local file searches on the device. 
 
 | Category Name | Description and Examples |
 | - | - |
 | Microsoft browser data | Information about Address bar and search box performance on the device such as:<ul><li>Text typed in address bar and search box</li><li>Text selected for Ask Cortana search</li><li>Service response time </li><li>Auto-completed text if there was an auto-complete</li><li>Navigation suggestions provided based on local history and favorites</li><li>Browser ID</li><li>URLs (which may include search terms)</li><li>Page title</li></ul>|
-| On-device file query | Information about local search activity on the device such as: <ul><li>Kind of query issued and index type (ConstraintIndex, SystemIndex)</li><li>Number of items requested and retrieved</li><li>File extension of search result user interacted with</li><li>Launched item kind, file extension, index of origin, and the App ID of the opening app.</li><li>Name of process calling the indexer and time to service the query.</li><li>A hash of the search scope (file, Outlook, OneNote, IE history) </li><li>The state of the indices (fully optimized, partially optimized, being built)</li></ul> |
 
 
 ## Inking Typing and Speech Utterance data
@@ -105,13 +100,4 @@ This type of data gathers details about the voice, inking, and typing input feat
 
 | Category Name | Description and Examples |
 | - | - |
-| Voice, inking, and typing | Information about voice, inking and typing features such as:<br><ul><li>Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used</li><li>Pen gestures (click, double click, pan, zoom, rotate)</li><li>Palm Touch x,y coordinates</li><li>Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate</li><li>Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as names, email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.</li><li>Text of speech recognition results -- result codes and recognized text</li><li>Language and model of the recognizer, System Speech language</li><li>App ID using speech features</li><li>Whether user is known to be a child</li><li>Confidence and Success/Failure of speech recognition</li></ul> |
+| Voice, inking, and typing | Information about voice, inking and typing features such as:<br><ul><li>Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used</li><li>Pen gestures (click, double click, pan, zoom, rotate)</li><li>Palm Touch x,y coordinates</li><li>Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate</li><li>Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as email addresses and numeric values) which could be used to reconstruct the original content or associate the input to the user.</li><li>Text input from Windows Mobile on-screen keyboards except from password fields and private sessions - processed to remove identifiers, sequencing information, and other data (such as email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.</li><li>Text of speech recognition results -- result codes and recognized text</li><li>Language and model of the recognizer, System Speech language</li><li>App ID using speech features</li><li>Whether user is known to be a child</li><li>Confidence and Success/Failure of speech recognition</li></ul> |
-
-## ​​​​​​​Licensing and Purchase data
-
-This type of data includes diagnostic details about the purchase and entitlement activity on the device.
-
-| Category Name | Data Examples |
-| - | - |
-| Purchase history | Information about purchases made on the device such as:<br><ul><li>Product ID, edition ID and product URI</li><li>Offer details -- price</li><li>Order requested date/time</li><li>Store client type -- web or native client</li><li>Purchase quantity and price</li><li>Payment type -- credit card type and PayPal</li></ul> |
-| Entitlements | Information about entitlements on the device such as:<br><ul><li>Service subscription status and errors</li><li>DRM and license rights details -- Groove subscription or OS volume license</li><li>Entitlement ID, lease ID, and package ID of the install package</li><li>Entitlement revocation</li><li>License type (trial, offline vs online) and duration</li><li>License usage session</li></ul> |

windows/deployment/TOC.md

@@ -222,8 +222,6 @@
 #### [Windows Insider Program for Business using Azure Active Directory](update/waas-windows-insider-for-business-aad.md)
 #### [Windows Insider Program for Business Frequently Asked Questions](update/waas-windows-insider-for-business-faq.md)
 #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md)
-##### [Keep your current Windows 10 edition](update/olympia/enrollment-keep-current-edition.md)
-##### [Upgrade your Windows 10 edition from Pro to Enterprise](update/olympia/enrollment-upgrade-to-enterprise.md)
 ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md)
 
 ## Windows Analytics

windows/deployment/update/olympia/enrollment-keep-current-edition.md

@@ -1,44 +0,0 @@
----
-title: Keep your current Windows 10 edition
-description: Olympia Corp enrollment - Keep your current Windows 10 edition
-ms.author: nibr
-ms.topic: article
-ms.prod: w10
-ms.technology: windows
-author: nickbrower
-ms.date: 09/01/2017
----
-
-# Olympia Corp enrollment
-
-## Keep your current Windows 10 edition
-
-1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)).
-
-    ![Settings -> Accounts](images/1-1.png)
-
-2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**.
-
-3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**.
-
-    ![Set up a work or school account](images/1-3.png)
-
-4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password.
-
-    > [!NOTE]
-    > Passwords should contain 8-16 characters, including at least one special character or number.
-
-    ![Update your password](images/1-4.png)
-
-5. Read the **Terms and Conditions**. Click **Accept** to participate in the program.
-
-6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details.
-
-7. Create a PIN for signing into your Olympia corporate account.
-
-8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**.
-
-    > [!NOTE]
-    > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness).
-
-9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**.

windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md

@@ -1,57 +0,0 @@
----
-title: Upgrade your Windows 10 edition from Pro to Enterprise
-description: Olympia Corp enrollment - Upgrade your Windows 10 edition from Pro to Enterprise
-ms.author: nibr
-ms.topic: article
-ms.prod: w10
-ms.technology: windows
-author: nickbrower
-ms.date: 09/01/2017
----
-
-# Olympia Corp enrollment
-
-## Upgrade your Windows 10 edition from Pro to Enterprise
-
-1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)).
-
-    ![Settings -> Accounts](images/1-1.png)
-
-2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**.
-	
-3. Click **Connect**, then click **Join this device to Azure Active Directory**.
-
-    ![Update your password](images/2-3.png)
-
-4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**.
-
-    ![Set up a work or school account](images/2-4.png)
-
-5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password.
-
-    > [!NOTE]
-    > Passwords should contain 8-16 characters, including at least one special character or number.
-
-    ![Update your password](images/2-5.png)
-
-6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**.
-
-7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details.
-
-8. Create a PIN for signing into your Olympia corporate account.
-
-9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**.
-
-10. Restart your PC.
-
-11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*.
-
-12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**.
-
-    > [!NOTE]
-    > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness).
-
-13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**.
-
-\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia.
-

windows/deployment/update/olympia/olympia-enrollment-guidelines.md

@@ -6,7 +6,7 @@ ms.topic: article
 ms.prod: w10
 ms.technology: windows
 author: nickbrower
-ms.date: 09/01/2017
+ms.date: 09/14/2017
 ---
 
 # Olympia Corp enrollment guidelines
@@ -17,6 +17,87 @@ As part of Windows Insider Lab for Enterprise, you can upgrade to Windows 10 Ent
 
 Choose one of the following two enrollment options:
 
-1. [Keep your current Windows 10 edition](./enrollment-keep-current-edition.md)
+1. [Keep your current Windows 10 edition](#enrollment-keep-current-edition)
+
+2. [Upgrade your Windows 10 edition from Pro to Enterprise](#enrollment-upgrade-to-enterprise)
+
+<a id="enrollment-keep-current-edition"></a>
+
+## Keep your current Windows 10 edition
+
+1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)).
+
+    ![Settings -> Accounts](images/1-1.png)
+
+2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**.
+
+3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**.
+
+    ![Set up a work or school account](images/1-3.png)
+
+4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password.
+
+    > [!NOTE]
+    > Passwords should contain 8-16 characters, including at least one special character or number.
+
+    ![Update your password](images/1-4.png)
+
+5. Read the **Terms and Conditions**. Click **Accept** to participate in the program.
+
+6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details.
+
+7. Create a PIN for signing into your Olympia corporate account.
+
+8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**.
+
+    > [!NOTE]
+    > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness).
+
+9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**.
+
+<a id="enrollment-upgrade-to-enterprise"></a>
+
+## Upgrade your Windows 10 edition from Pro to Enterprise
+
+1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)).
+
+    ![Settings -> Accounts](images/1-1.png)
+
+2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**.
+	
+3. Click **Connect**, then click **Join this device to Azure Active Directory**.
+
+    ![Update your password](images/2-3.png)
+
+4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**.
+
+    ![Set up a work or school account](images/2-4.png)
+
+5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password.
+
+    > [!NOTE]
+    > Passwords should contain 8-16 characters, including at least one special character or number.
+
+    ![Update your password](images/2-5.png)
+
+6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**.
+
+7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details.
+
+8. Create a PIN for signing into your Olympia corporate account.
+
+9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**.
+
+10. Restart your PC.
+
+11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*.
+
+12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**.
+
+    > [!NOTE]
+    > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness).
+
+13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**.
+
+\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia.
 
-2. [Upgrade your Windows 10 edition from Pro to Enterprise](./enrollment-upgrade-to-enterprise.md)

windows/deployment/windows-10-enterprise-subscription-activation.md

@@ -102,7 +102,7 @@ changepk.exe /ProductKey %ProductKey%
 ### Obtaining an Azure AD licence
 
 Enterprise Agreement/Software Assurance (EA/SA):
-- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment).
+- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). For more information, see [Enabling Subscription Activation with an existing EA](https://docs.microsoft.com/en-us/windows/deployment/deploy-enterprise-licenses#enabling-subscription-activation-with-an-existing-ea).
 - The license administrator can assign seats to Azure AD users with the same process that is used for O365.
 - New EA/SA Windows Enterprise customers can acquire both an SA subscription and an associated $0 cloud subscription.
 

windows/device-security/device-guard/deploy-code-integrity-policies-steps.md

@@ -36,6 +36,8 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you
 - bginfo.exe<sup>[1]</sup> 
 - cdb.exe
 - csi.exe
+- dbghost.exe
+- dbgsvc.exe
 - dnx.exe
 - fsi.exe
 - fsiAnyCpu.exe
@@ -106,10 +108,13 @@ Microsoft recommends that you block the following Microsoft-signed applications
     <Deny  ID="ID_DENY_BGINFO"        FriendlyName="bginfo.exe"         FileName="BGINFO.Exe" MinimumFileVersion = "4.21.0.0" />
     <Deny  ID="ID_DENY_CBD"           FriendlyName="cdb.exe"            FileName="CDB.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_KD"            FriendlyName="kd.exe"             FileName="kd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
+    <Deny  ID="ID_DENY_KD_KMCI"       FriendlyName="kd.exe"             FileName="kd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_NTKD"          FriendlyName="ntkd.exe"           FileName="ntkd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_WINDBG"        FriendlyName="windbg.exe"         FileName="windbg.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_MSBUILD"       FriendlyName="MSBuild.exe"        FileName="MSBuild.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_CSI"           FriendlyName="csi.exe"            FileName="csi.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
+    <Deny  ID="ID_DENY_DBGHOST"       FriendlyName="dbghost.exe"       FileName="DBGHOST.Exe" MinimumFileVersion = "2.3.0.0" /> 
+    <Deny  ID="ID_DENY_DBGSVC"        FriendlyName="dbgsvc.exe"         FileName="DBGSVC.Exe" MinimumFileVersion = "2.3.0.0" />    
     <Deny  ID="ID_DENY_DNX"           FriendlyName="dnx.exe"            FileName="dnx.Exe" MinimumFileVersion = "65535.65535.65535.65535" />   
     <Deny  ID="ID_DENY_RCSI"          FriendlyName="rcsi.exe"           FileName="rcsi.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
     <Deny  ID="ID_DENY_NTSD"          FriendlyName="ntsd.exe"           FileName="ntsd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
@@ -163,7 +168,7 @@ Microsoft recommends that you block the following Microsoft-signed applications
     <SigningScenario Value="131" ID="ID_SIGNINGSCENARIO_DRIVERS_1" FriendlyName="Driver Signing Scenarios">
       <ProductSigners>
         <FileRulesRef>
-          <FileRuleRef RuleID="ID_DENY_KD" />
+          <FileRuleRef RuleID="ID_DENY_KD_KMCI" />
         </FileRulesRef>
       </ProductSigners>
     </SigningScenario>
@@ -177,6 +182,8 @@ Microsoft recommends that you block the following Microsoft-signed applications
           <FileRuleRef RuleID="ID_DENY_WINDBG"/>
           <FileRuleRef RuleID="ID_DENY_MSBUILD"/>
           <FileRuleRef RuleID="ID_DENY_CSI"/>
+          <FileRuleRef RuleID="ID_DENY_DBGHOST"/>
+          <FileRuleRef RuleID="ID_DENY_DBGSVC"/>
           <FileRuleRef RuleID="ID_DENY_DNX"/>
           <FileRuleRef RuleID="ID_DENY_RCSI"/>
           <FileRuleRef RuleID="ID_DENY_NTSD"/>

windows/threat-protection/windows-defender-atp/api-portal-mapping-windows-defender-advanced-threat-protection.md

@@ -36,240 +36,39 @@ The ArcSight field column contains the default mapping between the Windows Defen
 
 Field numbers match the numbers in the images below.
 
-<table style="table-layout:fixed;width:100%" >
+> [!div class="mx-tableFixed"]
-  <tr>
+| Portal   label   | SIEM field name           | ArcSight field      | Example value                                                                      | Description                                                                                                                                                                    |
-    <th class>Portal label</th>
+|------------------|---------------------------|---------------------|------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-    <th class>SIEM field name</th>
+| 1                | AlertTitle                | name                | A dll was unexpectedly loaded into   a high integrity process without a UAC prompt | Value available for every alert.                                                                                                                                               |
-    <th class>ArcSight field</th>
+| 2                | Severity                  | deviceSeverity      | Medium                                                                             | Value available for every alert.                                                                                                                                               |
-    <th class>Example value</th>
+| 3                | Category                  | deviceEventCategory | Privilege Escalation                                                               | Value available for every alert.                                                                                                                                               |
-    <th class>Description</th>
+| 4                | Source                    | sourceServiceName   | WindowsDefenderATP                                                                 | Windows Defender Antivirus or   Windows Defender ATP. Value available for every alert.                                                                                         |
-    <th class></th>
+| 5                | MachineName               | sourceHostName      | liz-bean                                                                           | Value available for every alert.                                                                                                                                               |
-  </tr>
+| 6                | FileName                  | fileName            | Robocopy.exe                                                                       | Available for alerts associated   with a file or process.                                                                                                                      |
-  <tr>
+| 7                | FilePath                  | filePath            | C:\Windows\System32\Robocopy.exe                                                   | Available for alerts associated   with a file or process.                                                                                                                     |
-    <td class>1</td>
+| 8                | UserDomain                | sourceNtDomain      | contoso                                                                            | The domain of the user context   running the activity, available for Windows Defender ATP behavioral based   alerts.                                                           |
-    <td class>AlertTitle</td>
+| 9                | UserName                  | sourceUserName      | liz-bean                                                                           | The user context running the   activity, available for Windows Defender ATP behavioral based alerts.                                                                           |
-    <td class>name</td>
+| 10               | Sha1                      | fileHash            | 5b4b3985339529be3151d331395f667e1d5b7f35                                           | Available for alerts associated   with a file or process.                                                                                                                      |
-    <td class>A dll was unexpectedly loaded into a high integrity process without a UAC prompt</td>
+| 11               | Md5                       | deviceCustomString5 | 55394b85cb5edddff551f6f3faa9d8eb                                                   | Available for Windows Defender AV   alerts.                                                                                                                                    |
-    <td class>Value available for every alert.</td>
+| 12               | Sha256                    | deviceCustomString6 | 9987474deb9f457ece2a9533a08ec173a0986fa3aa6ac355eeba5b622e4a43f5                   | Available for Windows Defender AV   alerts.                                                                                                                                    |
-    <td class></td>
+| 13               | ThreatName                | eviceCustomString1  | Trojan:Win32/Skeeyah.A!bit                                                         | Available for Windows Defender AV   alerts.                                                                                                                                    |
-  </tr>
+| 14               | IpAddress                 | sourceAddress       | 218.90.204.141                                                                     | Available for alerts associated   to network events. For example, 'Communication to a malicious network   destination'.                                                        |
-  <tr>
+| 15               | Url                       | requestUrl          | down.esales360.cn                                                                  | Available for alerts associated to   network events. For example, 'Communication to a malicious network   destination'.                                                         |
-    <td class>2</td>
+| 16               | RemediationIsSuccess      | deviceCustomNumber2 | TRUE                                                                               | Available for Windows Defender AV   alerts. ArcSight value is 1 when TRUE and 0 when FALSE.                                                                                    |
-    <td class>Severity</td>
+| 17               | WasExecutingWhileDetected | deviceCustomNumber1 | FALSE                                                                              | Available for Windows Defender AV   alerts. ArcSight value is 1 when TRUE and 0 when FALSE.                                                                                    |
-    <td class>deviceSeverity</td>
+| 18               | AlertId                   | externalId          | 636210704265059241_673569822                                                       | Value available for every alert.                                                                                                                                               |
-    <td class>Medium</td>
+| 19               | LinkToWDATP               | flexString1         | `https://securitycenter.windows.com/alert/636210704265059241_673569822`            | Value available for every alert.                                                                                                                                               |
-    <td class>Value available for every alert.</td>
+| 20               | AlertTime                 | deviceReceiptTime   | 2017-05-07T01:56:59.3191352Z                                                       | The time the activity relevant to   the alert occurred. Value available for every alert.                                                                                       |
-    <td class></td>
+| 21               | MachineDomain             | sourceDnsDomain     | contoso.com                                                                        | Domain name not relevant for AAD   joined machines. Value available for every alert.                                                                                           |
-  </tr>
+| 22               | Actor                     | deviceCustomString4 |                                                                                    | Available for alerts related to a   known actor group.                                                                                                                         |
-  <tr>
+| 21+5             | ComputerDnsName           | No mapping          | liz-bean.contoso.com                                                               | The machine fully qualified   domain name. Value available for every alert.                                                                                                    |
-    <td class>3</td>
+|                  | LogOnUsers                | sourceUserId        | contoso\liz-bean;   contoso\jay-hardee                                             | The domain and user of the   interactive logon user/s at the time of the event. Note: For machines on   Windows 10 version 1607, the domain information will not be available. |
-    <td class>Category</td>
+|                  | InternalIPv4List          | No mapping          | 192.168.1.7, 10.1.14.1                                                             | List of IPV4 internal IPs for active network interfaces.                                                                                                                                                                               |
-    <td class>deviceEventCategory</td>
+|                  | InternalIPv6List          | No mapping          | fd30:0000:0000:0001:ff4e:003e:0009:000e,   FE80:CD00:0000:0CDE:1257:0000:211E:729C | List of IPV6 internal IPs for active network interfaces.                                                                                                                                                                               |
-    <td class>Privilege Escalation</td>
+| Internal   field | LastProcessedTimeUtc      | No mapping          | 2017-05-07T01:56:58.9936648Z                                                       | Time when event arrived at the   backend. This field can be used when setting the request parameter for the   range of time that alerts are retrieved.                         |
-    <td class>Value available for every alert.</td>
+|                  | Not part of the schema    | deviceVendor        |                                                                                    | Static value in the ArcSight   mapping - 'Microsoft'.                                                                                                                          |
-    <td class></td>
+|                  | Not part of the schema    | deviceProduct       |                                                                                    | Static value in the ArcSight   mapping - 'Windows Defender ATP'.                                                                                                               |
-  </tr>
+|                  | Not part of the schema    | deviceVersion       |                                                                                    | Static value in the ArcSight   mapping - '2.0', used to identify the mapping versions.                                                                                         
-  <tr>
-    <td class>4</td>
-    <td class>Source</td>
-    <td class>sourceServiceName</td>
-    <td class>WindowsDefenderATP</td>
-    <td class>Windows Defender Antivirus or Windows Defender ATP. Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>5</td>
-    <td class>MachineName</td>
-    <td class>sourceHostName</td>
-    <td class>liz-bean</td>
-    <td class>Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>6</td>
-    <td class>FileName</td>
-    <td class>fileName</td>
-    <td class>Robocopy.exe</td>
-    <td class>Available for alerts associated with a file or process.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>7</td>
-    <td class>FilePath</td>
-    <td class>filePath</td>
-    <td class>C:\Windows\System32\Robocopy.exe</td>
-    <td class>Available for alerts associated with a file or process. \</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>8</td>
-    <td class>UserDomain</td>
-    <td class>sourceNtDomain</td>
-    <td class>contoso</td>
-    <td class>The domain of the user context running the activity, available for Windows Defender ATP behavioral based alerts.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>9</td>
-    <td class>UserName</td>
-    <td class>sourceUserName</td>
-    <td class>liz-bean</td>
-    <td class>The user context running the activity, available for Windows Defender ATP behavioral based alerts.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>10</td>
-    <td class>Sha1</td>
-    <td class>fileHash</td>
-    <td class>5b4b3985339529be3151d331395f667e1d5b7f35</td>
-    <td class>Available for alerts associated with a file or process.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>11</td>
-    <td class>Md5</td>
-    <td class>deviceCustomString5</td>
-    <td class>55394b85cb5edddff551f6f3faa9d8eb</td>
-    <td class>Available for Windows Defender AV alerts.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>12</td>
-    <td class>Sha256</td>
-    <td class>deviceCustomString6</td>
-    <td class>9987474deb9f457ece2a9533a08ec173a0986fa3aa6ac355eeba5b622e4a43f5</td>
-    <td class>Available for Windows Defender AV alerts.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>13</td>
-    <td class>ThreatName</td>
-    <td class>eviceCustomString1</td>
-    <td class>Trojan:Win32/Skeeyah.A!bit</td>
-    <td class>Available for Windows Defender AV alerts.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>14</td>
-    <td class>IpAddress</td>
-    <td class>sourceAddress</td>
-    <td class>218.90.204.141</td>
-    <td class>Available for alerts associated to network events. For example, 'Communication to a malicious network destination'.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>15</td>
-    <td class>Url</td>
-    <td class>requestUrl</td>
-    <td class>down.esales360.cn</td>
-    <td class>Availabe for alerts associated to network events. For example, 'Communication to a malicious network destination'.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>16</td>
-    <td class>RemediationIsSuccess</td>
-    <td class>deviceCustomNumber2</td>
-    <td class>TRUE</td>
-    <td class>Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>17</td>
-    <td class>WasExecutingWhileDetected</td>
-    <td class>deviceCustomNumber1</td>
-    <td class>FALSE</td>
-    <td class>Available for Windows Defender AV alerts. ArcSight value is 1 when TRUE and 0 when FALSE.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>18</td>
-    <td class>AlertId</td>
-    <td class>externalId</td>
-    <td class>636210704265059241_673569822</td>
-    <td class>Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>19</td>
-    <td class>LinkToWDATP</td>
-    <td class>flexString1</td>
-    <td class>`https://securitycenter.windows.com/alert/636210704265059241_673569822`</td>
-    <td class>Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>20</td>
-    <td class>AlertTime</td>
-    <td class>deviceReceiptTime</td>
-    <td class>2017-05-07T01:56:59.3191352Z</td>
-    <td class>The time the activity relevant to the alert occurred. Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>21</td>
-    <td class>MachineDomain</td>
-    <td class>sourceDnsDomain</td>
-    <td class>contoso.com</td>
-    <td class>Domain name not relevant for AAD joined machines. Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>22</td>
-    <td class>Actor</td>
-    <td class>deviceCustomString4</td>
-    <td class></td>
-    <td class>Available for alerts related to a known actor group.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>21+5</td>
-    <td class>ComputerDnsName</td>
-    <td class>No mapping</td>
-    <td class>liz-bean.contoso.com</td>
-    <td class>The machine fully qualified domain name. Value available for every alert.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class></td>
-    <td class>LogOnUsers</td>
-    <td class>sourceUserId</td>
-    <td class>contoso\liz-bean; contoso\jay-hardee</td>
-    <td class>The domain and user of the interactive logon user/s at the time of the event. Note: For machines on Windows 10 version 1607, the domain information will not be available.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class>Internal field</td>
-    <td class>LastProcessedTimeUtc</td>
-    <td class>No mapping</td>
-    <td class>2017-05-07T01:56:58.9936648Z</td>
-    <td class>Time when event arrived at the backend. This field can be used when setting the request parameter for the range of time that alerts are retrieved.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class></td>
-    <td class>Not part of the schema</td>
-    <td class>deviceVendor</td>
-    <td class></td>
-    <td class>Static value in the ArcSight mapping - 'Microsoft'.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class></td>
-    <td class>Not part of the schema</td>
-    <td class>deviceProduct</td>
-    <td class></td>
-    <td class>Static value in the ArcSight mapping - 'Windows Defender ATP'.</td>
-    <td class></td>
-  </tr>
-  <tr>
-    <td class></td>
-    <td class>Not part of the schema</td>
-    <td class>deviceVersion</td>
-    <td class></td>
-    <td class>Static value in the ArcSight mapping - '2.0', used to identify the mapping versions.</td>
-    <td class></td>
-  </tr>
-</table>
 
 
 ![Image of alert with numbers](images/atp-alert-page.png)

windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md

@@ -25,7 +25,7 @@ ms.date: 09/05/2017
 
 [!include[Prerelease information](prerelease.md)]
 
-Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone, suppression rules, and view license information.
+Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone and view license information.
 
 ## Time zone settings
 The aspect of time is important in the assessment and analysis of perceived and actual cyberattacks.
@@ -39,7 +39,7 @@ Your current time zone setting is shown in the Windows Defender ATP menu. You ca
 ### UTC time zone
 Windows Defender ATP uses UTC time by default.
 
-Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. Choosing this setting means that all users will see the same timestamps in Windows Defender ATP, regardless of their regional settings. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events.
+Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events.
 
 ### Local time zone
 You can choose to have Windows Defender ATP use local time zone settings. All alerts and events will be displayed using your local time zone.
@@ -55,10 +55,36 @@ To set the time zone:
 
 1.	Click the **Settings** menu ![Settings icon](images/settings.png).
 2.	Select the **Timezone UTC** indicator.
-3.	Select **Timezone Local** or **-8:00**. 
+3.	Select **Timezone UTC** or your local time zone, for example -7:00. 
 
-## Suppression rules
+### Regional settings
-The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts).
+To apply different date formats for Windows Defender ATP, use regional settings for IE and Edge. If you're using another browser such as Google Chrome, follow the required steps to change the time and date settings for that browser. 
+
+
+**Internet Explorer (IE) and Microsoft Edge (Edge)**
+
+IE and Edge use the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. 
+
+
+#### Known issues with regional formats
+
+**Date and time formats**<br>
+There are some known issues with the time and date formats. 
+
+The following date formats are supported:
+- MM/dd/yyyy
+- dd/MM/yyyy
+
+The following date and time formats are currently not supported:
+- Date format yyyy-MM-dd
+- Date format dd-MMM-yy
+- Date format dd/MM/yy
+- Date format MM/dd/yy
+- Date format with yy. Will only show yyyy.
+- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported.
+
+**Decimal symbol used in numbers**<br>
+Decimal symbol used is always a dot, even if a comma is selected in  the **Numbers** format settings in **Region** settings. For example, 15,5K is displayed as 15.5K.
 
 ## License
 Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP.

windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md

@@ -50,6 +50,24 @@ If onboarding endpoints successfully completes but Windows Defender ATP does not
 
 For more information, see [Ensure that Windows Defender is not disabled by policy](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md#ensure-that-windows-defender-is-not-disabled-by-a-policy).
 
+#### Known issues with regional formats
+
+**Date and time formats**<br>
+There are some known issues with the time and date formats. 
+
+The following date formats are supported:
+- MM/dd/yyyy
+- dd/MM/yyyy
+
+The following date and time formats are currently not supported:
+- Date format yyyy/MM/dd
+- Date format dd/MM/yy
+- Date format with yy. Will only show yyyy.
+- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported.
+
+**Use of comma to indicate thousand**<br>
+Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K.
+
 
 ### Related topic
 - [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md)