diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md index 03cd9ba0ba..955e447800 100644 --- a/store-for-business/TOC.md +++ b/store-for-business/TOC.md @@ -29,4 +29,5 @@ ### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) ## [Troubleshoot Microsoft Store for Business](troubleshoot-windows-store-for-business.md) ## [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md) +## [Change history for Microsoft Store for Business and Education](sfb-change-history.md) diff --git a/store-for-business/sfb-change-history.md b/store-for-business/sfb-change-history.md index 668514a725..569f5fa986 100644 --- a/store-for-business/sfb-change-history.md +++ b/store-for-business/sfb-change-history.md @@ -21,6 +21,7 @@ localizationpriority: high ## June 2017 | New or changed topic | Description | | -------------------- | ----------- | +| [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md) | New. Information about notification model in Microsoft Store for Business and Education. | | [Get Minecraft: Education Edition with Windows 10 device promotion](https://docs.microsoft.com/education/windows/get-minecraft-device-promotion) | New. Information about redeeming Minecraft: Education Edition licenses with qualifying purchases of Windows 10 devices. | | [Microsoft Store for Business and Education overview - supported markets](https://docs.microsoft.com/en-us/microsoft-store/windows-store-for-business-overview#supported-markets) | Updates for added market support. | @@ -29,6 +30,7 @@ localizationpriority: high | New or changed topic | Description | | -------------------- | ----------- | | [Manage Windows device deployment with Windows AutoPilot Deployment](add-profile-to-devices.md) | New. Information about Windows AutoPilot Deployment Program and how it is used in Microsoft Store for Business and Education. | +| [Microsoft Store for Business and Education overview - supported markets](https://docs.microsoft.com/en-us/microsoft-store/windows-store-for-business-overview#supported-markets) | Updates for added market support. |   diff --git a/store-for-business/update-windows-store-for-business-account-settings.md b/store-for-business/update-windows-store-for-business-account-settings.md index f559f6b1b4..cfaaf12048 100644 --- a/store-for-business/update-windows-store-for-business-account-settings.md +++ b/store-for-business/update-windows-store-for-business-account-settings.md @@ -56,6 +56,7 @@ Taxes for Microsoft Store for Business purchases are determined by your business - Lithuania - Luxembourg - Malta +- Monaco - Netherlands - Norway - Poland @@ -76,6 +77,7 @@ These countries can provide their VAT number or local equivalent in **Payments & | Brazil | CNPJ (required) | | India | GSTIN (optional), PAN ID (required) | | New Zealand | GST Registration number (optional) | +| Monaco | VAT ID (optional) | | Taiwan | VAT ID (optional) | ### Tax-exempt status diff --git a/store-for-business/windows-store-for-business-overview.md b/store-for-business/windows-store-for-business-overview.md index 7dcb8615a4..64b75d1cac 100644 --- a/store-for-business/windows-store-for-business-overview.md +++ b/store-for-business/windows-store-for-business-overview.md @@ -157,16 +157,20 @@ For more information, see [Manage settings in the Store for Business](manage-set Microsoft Store for Business and Education is currently available in these markets. -### Support for free and paid apps +### Support for free and paid products - + - + - + - @@ -319,6 +355,7 @@ Customers in these markets can use Microsoft Store for Business and Education to - India - Kazakhstan - Korea +- Monaco - Republic of Moldova - Taiwan - Tajikistan diff --git a/windows/application-management/TOC.md b/windows/application-management/TOC.md index 7f815bfe0e..9ba9efbd7d 100644 --- a/windows/application-management/TOC.md +++ b/windows/application-management/TOC.md @@ -99,3 +99,4 @@ #### [Application Publishing and Client Interaction](app-v/appv-application-publishing-and-client-interaction.md) #### [Viewing App-V Server Publishing Metadata](app-v/appv-viewing-appv-server-publishing-metadata.md) #### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md) +## [Service Host process refactoring](svchost-service-refactoring.md) diff --git a/windows/application-management/media/svchost-grouped-processes.png b/windows/application-management/media/svchost-grouped-processes.png new file mode 100644 index 0000000000..d85f8e8951 Binary files /dev/null and b/windows/application-management/media/svchost-grouped-processes.png differ diff --git a/windows/application-management/media/svchost-grouped-utilization.png b/windows/application-management/media/svchost-grouped-utilization.png new file mode 100644 index 0000000000..cd46b0d4b4 Binary files /dev/null and b/windows/application-management/media/svchost-grouped-utilization.png differ diff --git a/windows/application-management/media/svchost-separated-processes.png b/windows/application-management/media/svchost-separated-processes.png new file mode 100644 index 0000000000..83df0fe580 Binary files /dev/null and b/windows/application-management/media/svchost-separated-processes.png differ diff --git a/windows/application-management/media/svchost-separated-utilization.png b/windows/application-management/media/svchost-separated-utilization.png new file mode 100644 index 0000000000..5c5834cc44 Binary files /dev/null and b/windows/application-management/media/svchost-separated-utilization.png differ diff --git a/windows/application-management/media/svchost-separation-disabled.png b/windows/application-management/media/svchost-separation-disabled.png new file mode 100644 index 0000000000..5e0e57da92 Binary files /dev/null and b/windows/application-management/media/svchost-separation-disabled.png differ diff --git a/windows/application-management/svchost-service-refactoring.md b/windows/application-management/svchost-service-refactoring.md new file mode 100644 index 0000000000..e2f00263db --- /dev/null +++ b/windows/application-management/svchost-service-refactoring.md @@ -0,0 +1,91 @@ +--- +title: Service Host service refactoring in Windows 10 version 1703 +description: Learn about the SvcHost Service Refactoring introduced in Windows 10 version 1703. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: mobile +ms.author: kaushika-ainapure +author: kaushika-msft +ms.date: 07/19/2017 +--- + +# Changes to Service Host grouping in Windows 10 + +> Applies to: Windows 10 + +The **Service Host (svchost.exe)** is a shared-service process that serves as a shell for loading services from DLL files. Services are organized into related host groups, and each group runs inside a different instance of the Service Host process. In this way, a problem in one instance does not affect other instances. Service Host groups are determined by combining the services with matching security requirements. For example: + +* Local Service +* Local Service No Network +* Local Service Network Restricted +* Local System +* Local System Network Restricted +* Network Service + +## Separating SvcHost services + +Beginning with Windows 10 Creators Update (version 1703), services that were previously grouped will instead be separated - each will run in its own SvcHost process. This change is automatic for systems with **more than 3.5 GB** of RAM running the Client Desktop SKU. On systems with 3.5 GB or less RAM, we'll continue to group services into a shared SvcHost process. + +Benefits of this design change include: + +* Increased reliability by insulating critical network services from the failure of another non-network service in the host, and adding the ability to restore networking connectivity seamlessly when networking components crash. +* Reduced support costs by eliminating the troubleshooting overhead associated with isolating misbehaving services in the shared host. +* Increased security by providing additional inter-service isolation +* Increased scalability by allowing per-service settings and privileges +* Improved resource management through per-service CPU, I/O and memory management and increase clear telemetry (report CPU, I/O and network usage per service). + +>**Try This** +> +> To see the refactoring behavior, create a Windows 10 version 1703 VM and configure the memory settings as follows: +> 1. To see grouped processes, set the RAM to 3484 MB or less. Restart the VM and then open Task Manager. +> 2. To see separated processes, set the RAM to 3486 MB or greater. Restart the VM and then open Task Manager. + + +Refactoring also makes it easier to view running processes in Task Manager. You can look at Task Manager and know exactly which service is using what resources, without having to expand many separate host groups. + +For example, here are the running processes displayed in Task Manager in Windows 10 version 1607: + +![Running processes in Task Manager, version 1607](media/svchost-grouped-processes.png) + +Compare that to the same view of running processes in Windows 10 version 1703: + +![Running processes in Task Manager, version 1703](media/svchost-separated-processes.png) + + + + +## Exceptions +Some services will continue to be grouped on PCs running with 3.5GB or higher RAM. For example, the Base Filtering Engine (BFE) and the Windows Firewall (Mpssvc) will be grouped together in a single host group, as will the RPC Endpoint Mapper and Remote Procedure Call services. + +If you need to identify services that will continue to be grouped, in addition to seeing them in Task Manager and using command line tools, you can look for the *SvcHostSplitDisable* value in their respective service keys under +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. + +The default value of **1** prevents the service from being split. + +For example, this is the registry key configuration for BFE: +![Example of a service that cannot be separated](media/svchost-separation-disabled.png) + +## Memory footprint + +Be aware that separating services increases the total number of SvcHost instances, which increases memory utlization. (Service grouping provided a modest reduction to the overall resource footprint of the services involved.) + +Consider the following: + + +|Grouped Services (< 3.5GB) | Split Services (3.5GB+) +|--------------------------------------- | ------------------------------------------ | +|![Memory utilization for grouped services](media/svchost-grouped-utilization.png) |![Memory utilization for separated services](media/svchost-separated-utilization.png) | + +> [!NOTE] +> The above represents the peak observed values. + +The total number of service instances and the resulting memory utilization varies depending on activity. Instance counts can typically range from approximately 17-21 for grouped services, and 67-74 for separated services. + +> **Try This** +> +>To determine the impact of splitting hosted services on a Windows 10 version 1703 PC, run the following Windows PowerShell cmdlet, before and after toggling the memory settings: +> +> ```powershell +> Get-Process SvcHost | Group-Object -Property ProcessName | Format-Table Name, Count, @{n='Mem (KB)';e={'{0:N0}' -f (($_.Group|Measure-Object WorkingSet -Sum).Sum / 1KB)};a='right'} -AutoSize +>``` diff --git a/windows/client-management/mdm/understanding-admx-backed-policies.md b/windows/client-management/mdm/understanding-admx-backed-policies.md index d905d434f9..f4b6271552 100644 --- a/windows/client-management/mdm/understanding-admx-backed-policies.md +++ b/windows/client-management/mdm/understanding-admx-backed-policies.md @@ -45,7 +45,7 @@ In a domain controller/Group Policy ecosystem, Group Policies are automatically An ADMX file can either be shipped with Windows (located at `%SystemRoot%\policydefinitions`) or it can be ingested to a device through the Policy CSP URI (`./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall`). Inbox ADMX files are processed into MDM policies at OS-build time. ADMX files that are ingested are processed into MDM policies post-OS shipment through the Policy CSP. Because the Policy CSP does not rely upon any aspect of the Group Policy client stack, including the PC’s Group Policy Service (GPSvc), the policy handlers that are ingested to the device are able to react to policies that are set by the MDM. -Windows maps the name and category path of a Group Policy to a MDM policy area and policy name by parsing the associated ADMX file, finding the specified Group Policy, and storing the definition (metadata) in the MDM Policy CSP client store. When the MDM policy is referenced by a SyncML command and the Policy CSP URI, `.\[device|user]\vendor\msft\policy\[config|result]\\`, this metadata is referenced and determines which registry keys are set or removed. For a list of ADMX-backed policies supported by MDM, see [Policy CSP - ADMX-backed policies](https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/policy-admx-backed). +Windows maps the name and category path of a Group Policy to a MDM policy area and policy name by parsing the associated ADMX file, finding the specified Group Policy, and storing the definition (metadata) in the MDM Policy CSP client store. When the MDM policy is referenced by a SyncML command and the Policy CSP URI, `.\[device|user]\vendor\msft\policy\[config|result]\\`, this metadata is referenced and determines which registry keys are set or removed. For a list of ADMX-backed policies supported by MDM, see [Policy CSP - ADMX-backed policies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider#admx-backed-policies). ## ADMX files and the Group Policy Editor diff --git a/windows/deployment/change-history-for-deploy-windows-10.md b/windows/deployment/change-history-for-deploy-windows-10.md index c9b44a991f..5444fceb44 100644 --- a/windows/deployment/change-history-for-deploy-windows-10.md +++ b/windows/deployment/change-history-for-deploy-windows-10.md @@ -135,5 +135,5 @@ The topics in this library have been updated for Windows 10, version 1607 (also ## Related topics - [Change history for Plan for Windows 10 deployment](/windows/deployment/planning/change-history-for-plan-for-windows-10-deployment) - [Change history for Access Protection](/windows/access-protection/change-history-for-access-protection) -- [Change history for Access Protection](/windows/device-security/change-history-for-device-security) -- [Change history for Access Protection](/windows/threat-protection/change-history-for-threat-protection) +- [Change history for Device Security](/windows/device-security/change-history-for-device-security) +- [Change history for Threat Protection](/windows/threat-protection/change-history-for-threat-protection) diff --git a/windows/deployment/planning/change-history-for-plan-for-windows-10-deployment.md b/windows/deployment/planning/change-history-for-plan-for-windows-10-deployment.md index ec9afa1603..a86caa380f 100644 --- a/windows/deployment/planning/change-history-for-plan-for-windows-10-deployment.md +++ b/windows/deployment/planning/change-history-for-plan-for-windows-10-deployment.md @@ -75,7 +75,7 @@ The topics in this library have been updated for Windows 10, version 1607 (also ## Related topics -[Change history for What's new in Windows 10](/windows/whats-new/change-history-for-what-s-new-in-windows-10.md) +[Change history for What's new in Windows 10](/windows/whats-new/change-history-for-what-s-new-in-windows-10) [Change history for Deploy Windows 10](../change-history-for-deploy-windows-10.md) diff --git a/windows/deployment/update/waas-optimize-windows-10-updates.md b/windows/deployment/update/waas-optimize-windows-10-updates.md index f6ff84324d..7c50e4ed0e 100644 --- a/windows/deployment/update/waas-optimize-windows-10-updates.md +++ b/windows/deployment/update/waas-optimize-windows-10-updates.md @@ -47,7 +47,10 @@ Two methods of peer-to-peer content distribution are available in Windows 10. ## Express update delivery -Windows 10 update downloads can be large because every package contains all previously released fixes to ensure consistency and simplicity. Windows has been able to reduce the size of Windows Update downloads with a feature called Express. +Windows 10 quality update downloads can be large because every package contains all previously released fixes to ensure consistency and simplicity. Windows has been able to reduce the size of Windows Update downloads with a feature called Express. + +>[!NOTE] +>Currently, Express update delivery only applies to quality update downloads. ### How Microsoft supports Express - **Express on System Center Configuration Manager** starting with version 1702 of Configuration Manager and Windows 10, version 1703 or 1607 with the April 2017 cumulative update. diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md index 2a053cc803..fdb400611b 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md @@ -44,7 +44,7 @@ Settings that were previously part of the Windows Defender client and main Windo >This will significantly lower the protection of your device and could lead to malware infection. -See the [Windows Defender Security Center topic](/windows/threat-protection/windows-defender-security-center) for more information on other Windows security features that can be monitored in the app. +See the [Windows Defender Security Center topic](/windows/threat-protection/windows-defender-security-center/windows-defender-security-center) for more information on other Windows security features that can be monitored in the app. >[!NOTE] >The Windows Defender Security Center app is a client interface on Windows 10, version 1703. It is not the Windows Defender Security Center web portal that is used to review and manage [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md). diff --git a/windows/whats-new/whats-new-windows-10-version-1607.md b/windows/whats-new/whats-new-windows-10-version-1607.md index 07612029c5..5a2710015e 100644 --- a/windows/whats-new/whats-new-windows-10-version-1607.md +++ b/windows/whats-new/whats-new-windows-10-version-1607.md @@ -31,13 +31,13 @@ Windows ICD now includes simplified workflows for creating provisioning packages [Learn more about using provisioning packages in Windows 10.](/windows/configuration/provisioning-packages/provisioning-packages) -### Windows Upgrade Analytics +### Windows Upgrade Readiness -Microsoft developed Upgrade Analytics in response to demand from enterprise customers looking for additional direction and details about upgrading to Windows 10. Upgrade Analytics was built taking into account multiple channels of customer feedback, testing, and Microsoft’s experience upgrading millions of devices to Windows 10. +Microsoft developed Upgrade Readiness in response to demand from enterprise customers looking for additional direction and details about upgrading to Windows 10. Upgrade Readiness was built taking into account multiple channels of customer feedback, testing, and Microsoft’s experience upgrading millions of devices to Windows 10. -With Windows telemetry enabled, Upgrade Analytics collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. +With Windows telemetry enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. -Use Upgrade Analytics to get: +Use Upgrade Readiness to get: - A visual workflow that guides you from pilot to production - Detailed computer and application inventory @@ -47,9 +47,9 @@ Use Upgrade Analytics to get: - Application usage information, allowing targeted validation; workflow to track validation progress and decisions - Data export to commonly used software deployment tools -The Upgrade Analytics workflow steps you through the discovery and rationalization process until you have a list of computers that are upgrade-ready. +The Upgrade Readiness workflow steps you through the discovery and rationalization process until you have a list of computers that are upgrade-ready. -[Learn more about planning and managing Windows upgrades with Windows Upgrade Analytics.](/windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-analytics) +[Learn more about planning and managing Windows upgrades with Windows Upgrade Readiness.](/windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness) ## Windows updates @@ -102,7 +102,7 @@ Several new features and management options have been added to Windows Defender - [Windows Defender Offline in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-offline) can be run directly from within Windows, without having to create bootable media. - [Use PowerShell cmdlets for Windows Defender](/windows/threat-protection/windows-defender-antivirus/use-powershell-cmdlets-windows-defender-antivirus) to configure options and run scans. -- [Enable the Block at First Sight feature in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-block-at-first-sight) to leverage the Windows Defender cloud for near-instant protection against new malware. +- [Enable the Block at First Sight feature in Windows 10](/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus) to leverage the Windows Defender cloud for near-instant protection against new malware. - [Configure enhanced notifications for Windows Defender in Windows 10](/windows/threat-protection/windows-defender-antivirus/configure-notifications-windows-defender-antivirus) to see more informaiton about threat detections and removal. - [Run a Windows Defender scan from the command line](/windows/threat-protection/windows-defender-antivirus/command-line-arguments-windows-defender-antivirus). - [Detect and block Potentially Unwanted Applications with Windows Defender](/windows/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus) during download and install times.
Support for free and paid appsSupports all free and paid products
    +
  • Afghanistan
  • Algeria
    • +
  • Andorra
  • Angola
    • +
  • Anguilla
    • +
  • Antigua and Barbuda
  • Argentina
  • Australia
  • Austria
    • @@ -177,41 +181,48 @@ Microsoft Store for Business and Education is currently available in these marke
  • Belgium
  • Belize
  • Bermuda
    • +
  • Benin
  • Bhutan
  • Bolivia
    • +
  • Bonaire
  • Botswana
  • Brunei Darussalam
  • Bulgaria
    • +
  • Burundi
  • Cambodia
  • Cameroon
  • Canada
    • -
  • Republic of Cabo Verde
  • Cayman Islands
  • Chile
  • Colombia
    • +
  • Comoros
  • Costa Rica
  • Côte D'ivoire
  • Croatia
  • Curçao
  • Cyprus
    • -
- 		-
  • Czech Republic
  • Denmark
  • Dominican Republic
  • Ecuador
    • +
+ 		+
  • Egypt
  • El Salvador
  • Estonia
    • +
  • Ethiopia
  • Faroe Islands
  • Fiji
  • Finland
  • France
    • +
  • French Guiana
    • +
  • French Polynesia
  • Germany
  • Ghana
  • Greece
    • +
  • Greenland
  • Guadeloupe
  • Guatemala
  • Honduras
    • @@ -225,29 +236,42 @@ Microsoft Store for Business and Education is currently available in these marke
  • Italy
  • Jamaica
  • Japan
    • +
  • Jersey
  • Jordan
    • -
  • Kenya
    • -
- 		-
    +
  • Kenya
  • Kuwait
    • +
  • Laos
  • Latvia
  • Lebanon
  • Libya
  • Liechtenstein
  • Lithuania
  • Luxembourg
    • +
  • Macedonia
    • +
  • Madagascar
    • +
+ 		+
    +
  • Malawi
  • Malaysia
    • +
  • Maldives
    • +
  • Mali
  • Malta
    • +
  • Marshall Islands
    • +
  • Martinique
  • Mauritius
    • +
  • Mayotte
  • Mexico
  • Mongolia
  • Montenegro
  • Morocco
  • Mozambique
    • +
  • Myanamar
  • Namibia
    • +
  • Nepal
  • Netherlands
    • +
  • New Caledonia
  • New Zealand
  • Nicaragua
  • Nigeria
    • @@ -256,48 +280,60 @@ Microsoft Store for Business and Education is currently available in these marke
  • Pakistan
  • Palestinian Authority
  • Panama
    • +
  • Papua New Guinea
  • Paraguay
  • Peru
  • Philippines
    • -
  • Poland
    • +
  • Poland
    • +
  • Portugal
    • +
  • Puerto Rico
    • +
  • Qatar
    • +
  • Republic of Cabo Verde
    • +
  • Reunion
    • +
  • Romania
    • +
  • Rwanda
    • +
  • Saint Kitts and Nevis
    -
  • Portugal
    • -
  • Puerto Rico
    • -
  • Qatar
    • -
  • Romania
    • -
  • Rwanda
    • -
  • Saint Kitts and Nevis
    • +
  • Saint Lucia
    • +
  • Saint Martin
    • +
  • Saint Vincent and the Grenadines
    • +
  • San marino
  • Saudi Arabia
  • Senegal
  • Serbia
    • +
  • Seychelles
  • Singapore
    • +
  • Sint Maarten
  • Slovakia
  • Slovenia
  • South Africa
  • Spain
    • +
  • Sri Lanka
    • +
  • Suriname
  • Sweden
  • Switzerland
  • Tanzania
  • Thailand
    • +
  • Timor-Leste
    • +
  • Togo
    • +
  • Tonga
  • Trinidad and Tobago
  • Tunisia
  • Turkey
    • +
  • Turks and Caicos Islands
  • Uganda
  • United Arab Emirates
  • United Kingdom
    • -
  • United States
    • -
- 		-
    +
  • United States
  • Uruguay
    • +
  • Vatican City
  • Viet Nam
  • Virgin Islands, U.S.
  • Zambia
    • -
  • Zimbabwe
                            
    • +
  • Zimbabwe