diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index e630d1f23b..f5b26ffc1a 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -29,10 +29,15 @@ Initiating a reset will return the device to the last cumulative Windows update, - Local admins on the device - Configurations from MDM or the Settings app +**To reset a Surface Hub** +1. On your Surface Hub, open **Settings**. +2. Click **Update & Security**. +3. Click **Recovery**, and then click **Reset Device**. + **Important Note**
Performing a device reset may take up to 6 hours. Do not interrupt the reset process. Interrupting the process will render the device inoperable, requiring warranty service to return to normal functionality. -After the reset, you'll be taken through the [first run program](first-run-program-surface-hub.md) again. +After the reset, Surface Hub restarts the [first run program](first-run-program-surface-hub.md) again. ## Related topics diff --git a/devices/surface-hub/prepare-your-environment-for-surface-hub.md b/devices/surface-hub/prepare-your-environment-for-surface-hub.md index 8656c33064..d4af065b4b 100644 --- a/devices/surface-hub/prepare-your-environment-for-surface-hub.md +++ b/devices/surface-hub/prepare-your-environment-for-surface-hub.md @@ -29,7 +29,7 @@ In order to function properly, the Surface Hub must have access to a wired or wi - Can receive an IP address using DHCP - Open ports: - HTTPS: 443 - - HTTP: 8080 + - HTTP: 80 A wired connection is preferred. @@ -79,7 +79,7 @@ In order to ensure that your environment is ready for the Surface Hub, verify th - It must have these ports open: - HTTPS: 443 - - HTTP: 8080 + - HTTP: 80 If your network runs through a proxy, you'll need the proxy address or script information as well. diff --git a/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md b/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md index 8dbaf9a681..0d7c350af6 100644 --- a/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md +++ b/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md @@ -236,15 +236,15 @@ The following two methods for deploying provisioning packages apply to any kind 3. Navigate to **System > Work Access**. Under the header **Related settings**, click on **Add or remove a management package**. 4. Here, click the button for **Add a package**. - ![](images/provisioningpackagesettings-01.png) + ![Image showing provisioining packages page in Settings.](images/provisioningpackagesettings-01.png) 5. Click **Removable media** from the dropdown list. You will see a list of available provisioning packages on the **Settings** page. - ![](images/provisioningpackagesettings-02.png) + ![Image showing add a package page in Settings.](images/provisioningpackagesettings-02.png) 6. Choose your package and click **Add**. - ![](images/provisioningpackagesettings-03.png) + ![Image showing select a package box.](images/provisioningpackagesettings-03.png) 7. You may have to re-enter the admin credentials if User Access Control (UAC) asks for them. 8. You’ll see a confirmation dialog box. Click **Yes, add it**. The certificate will be installed. diff --git a/devices/surface/unenroll-surface-devices-from-semm.md b/devices/surface/unenroll-surface-devices-from-semm.md index 87ff7292a0..5e31091376 100644 --- a/devices/surface/unenroll-surface-devices-from-semm.md +++ b/devices/surface/unenroll-surface-devices-from-semm.md @@ -9,7 +9,7 @@ ms.sitesec: library author: jobotto --- -# Unenroll Surface devices from SEMM (Surface) +# Unenroll Surface devices from SEMM When a Surface device is enrolled in Surface Enterprise Management Mode (SEMM), a certificate is stored in the firmware of that device. The presence of that certificate and the enrollment in SEMM prevent any unauthorized changes to Surface UEFI settings or options while the device is enrolled in SEMM. To restore control of Surface UEFI settings to the user, the Surface device must be unenrolled from SEMM, a process sometimes described as reset or recovery. There are two methods you can use to unenroll a device from SEMM—a Surface UEFI reset package and a Recovery Request. diff --git a/windows/keep-secure/windows-security-baselines.md b/windows/keep-secure/windows-security-baselines.md index 6570271f0a..3a4beedd20 100644 --- a/windows/keep-secure/windows-security-baselines.md +++ b/windows/keep-secure/windows-security-baselines.md @@ -54,7 +54,9 @@ To help faster deployments and increase the ease of managing Windows, Microsoft - [Windows Server 2012 R2 security baseline](http://go.microsoft.com/fwlink/p/?LinkID=799382) -## How can I monitor the security baseline deployment on my servers? +## How can I monitor security baseline deployments? - Microsoft’s Operation Management Services (OMS) helps you monitor security baseline deployments across your servers. To find out more, check out [Operations Management Suite](https://aka.ms/omssecscm). +Microsoft’s Operation Management Services (OMS) helps you monitor security baseline deployments across your servers. To find out more, check out [Operations Management Suite](https://aka.ms/omssecscm). + +You can use [System Center Configuration Manager](https://www.microsoft.com/cloud-platform/system-center-configuration-manager) to monitor security baseline deployments on client devices within your organization. \ No newline at end of file