From 1b55c24bd040d51bbbd22732d79a0891ea1f4cb6 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Thu, 7 Jul 2016 09:27:53 -0700 Subject: [PATCH 1/3] tech review feedback --- windows/keep-secure/windows-security-baselines.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/windows-security-baselines.md b/windows/keep-secure/windows-security-baselines.md index 6570271f0a..3a4beedd20 100644 --- a/windows/keep-secure/windows-security-baselines.md +++ b/windows/keep-secure/windows-security-baselines.md @@ -54,7 +54,9 @@ To help faster deployments and increase the ease of managing Windows, Microsoft - [Windows Server 2012 R2 security baseline](http://go.microsoft.com/fwlink/p/?LinkID=799382) -## How can I monitor the security baseline deployment on my servers? +## How can I monitor security baseline deployments? - Microsoft’s Operation Management Services (OMS) helps you monitor security baseline deployments across your servers. To find out more, check out [Operations Management Suite](https://aka.ms/omssecscm). +Microsoft’s Operation Management Services (OMS) helps you monitor security baseline deployments across your servers. To find out more, check out [Operations Management Suite](https://aka.ms/omssecscm). + +You can use [System Center Configuration Manager](https://www.microsoft.com/cloud-platform/system-center-configuration-manager) to monitor security baseline deployments on client devices within your organization. \ No newline at end of file From 9bf467f887464832378dfeb2bb707f612d6f8bce Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Thu, 7 Jul 2016 09:45:03 -0700 Subject: [PATCH 2/3] add procedure for reset device; fix typo; add alt text to provisioning pkg topic --- devices/surface-hub/device-reset-surface-hub.md | 7 ++++++- .../prepare-your-environment-for-surface-hub.md | 4 ++-- .../provisioning-packages-for-certificates-surface-hub.md | 6 +++--- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index e630d1f23b..f5b26ffc1a 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -29,10 +29,15 @@ Initiating a reset will return the device to the last cumulative Windows update, - Local admins on the device - Configurations from MDM or the Settings app +**To reset a Surface Hub** +1. On your Surface Hub, open **Settings**. +2. Click **Update & Security**. +3. Click **Recovery**, and then click **Reset Device**. + **Important Note**
Performing a device reset may take up to 6 hours. Do not interrupt the reset process. Interrupting the process will render the device inoperable, requiring warranty service to return to normal functionality. -After the reset, you'll be taken through the [first run program](first-run-program-surface-hub.md) again. +After the reset, Surface Hub restarts the [first run program](first-run-program-surface-hub.md) again. ## Related topics diff --git a/devices/surface-hub/prepare-your-environment-for-surface-hub.md b/devices/surface-hub/prepare-your-environment-for-surface-hub.md index 8656c33064..d4af065b4b 100644 --- a/devices/surface-hub/prepare-your-environment-for-surface-hub.md +++ b/devices/surface-hub/prepare-your-environment-for-surface-hub.md @@ -29,7 +29,7 @@ In order to function properly, the Surface Hub must have access to a wired or wi - Can receive an IP address using DHCP - Open ports: - HTTPS: 443 - - HTTP: 8080 + - HTTP: 80 A wired connection is preferred. @@ -79,7 +79,7 @@ In order to ensure that your environment is ready for the Surface Hub, verify th - It must have these ports open: - HTTPS: 443 - - HTTP: 8080 + - HTTP: 80 If your network runs through a proxy, you'll need the proxy address or script information as well. diff --git a/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md b/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md index 8dbaf9a681..0d7c350af6 100644 --- a/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md +++ b/devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md @@ -236,15 +236,15 @@ The following two methods for deploying provisioning packages apply to any kind 3. Navigate to **System > Work Access**. Under the header **Related settings**, click on **Add or remove a management package**. 4. Here, click the button for **Add a package**. - ![](images/provisioningpackagesettings-01.png) + ![Image showing provisioining packages page in Settings.](images/provisioningpackagesettings-01.png) 5. Click **Removable media** from the dropdown list. You will see a list of available provisioning packages on the **Settings** page. - ![](images/provisioningpackagesettings-02.png) + ![Image showing add a package page in Settings.](images/provisioningpackagesettings-02.png) 6. Choose your package and click **Add**. - ![](images/provisioningpackagesettings-03.png) + ![Image showing select a package box.](images/provisioningpackagesettings-03.png) 7. You may have to re-enter the admin credentials if User Access Control (UAC) asks for them. 8. You’ll see a confirmation dialog box. Click **Yes, add it**. The certificate will be installed. From 58e7db12c653ad69a437176d5c954498f224064f Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Thu, 7 Jul 2016 10:08:50 -0700 Subject: [PATCH 3/3] remove (Surface) from displayed title --- devices/surface/unenroll-surface-devices-from-semm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devices/surface/unenroll-surface-devices-from-semm.md b/devices/surface/unenroll-surface-devices-from-semm.md index 87ff7292a0..5e31091376 100644 --- a/devices/surface/unenroll-surface-devices-from-semm.md +++ b/devices/surface/unenroll-surface-devices-from-semm.md @@ -9,7 +9,7 @@ ms.sitesec: library author: jobotto --- -# Unenroll Surface devices from SEMM (Surface) +# Unenroll Surface devices from SEMM When a Surface device is enrolled in Surface Enterprise Management Mode (SEMM), a certificate is stored in the firmware of that device. The presence of that certificate and the enrollment in SEMM prevent any unauthorized changes to Surface UEFI settings or options while the device is enrolled in SEMM. To restore control of Surface UEFI settings to the user, the Surface device must be unenrolled from SEMM, a process sometimes described as reset or recovery. There are two methods you can use to unenroll a device from SEMM—a Surface UEFI reset package and a Recovery Request.