deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updated

Browse Source
This commit is contained in:
Nimisha Satapathy 2022-03-29 00:23:03 +05:30
parent ccb8b6b269
commit 205bbef7b8
8 changed files with 91 additions and 59 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
windows/client-management/mdm/bitlocker-csp.md
View File

@ -69,7 +69,6 @@ Defines the root node for the BitLocker configuration service provider.
Allows the administrator to require encryption to be turned on by using BitLocker\Device Encryption. Allows the administrator to require encryption to be turned on by using BitLocker\Device Encryption.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
|Edition|Windows 10|Windows 11| |Edition|Windows 10|Windows 11|
|--- |--- |--- | |--- |--- |--- |
|Home|No|No| |Home|No|No|

24
windows/client-management/mdm/cmpolicyenterprise-csp.md
View File

@ -14,19 +14,24 @@ ms.date: 06/26/2017
# CMPolicyEnterprise CSP # CMPolicyEnterprise CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|Yes|Yes|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|No|No|
|Education|Yes|Yes|
The CMPolicyEnterprise configuration service provider is used by the enterprise to define rules that the Connection Manager uses to identify the correct connection for a connection request. The CMPolicyEnterprise configuration service provider is used by the enterprise to define rules that the Connection Manager uses to identify the correct connection for a connection request.
> [!NOTE] > [!NOTE]
> This configuration service provider requires the ID\_CAP\_CSP\_FOUNDATION and ID\_CAP\_NETWORKING\_ADMIN capabilities to be accessed from a network configuration application. > This configuration service provider requires the ID\_CAP\_CSP\_FOUNDATION and ID\_CAP\_NETWORKING\_ADMIN capabilities to be accessed from a network configuration application.
ach policy entry identifies one or more applications in combination with a host pattern. The policy entry is assigned a list of connection details that Connection Manager uses to satisfy connection requests matching the application and host patterns. CMPolicyEnterprise configuration service provider can have multiple policies
Each policy entry identifies one or more applications in combination with a host pattern. The policy entry is assigned a list of connection details that Connection Manager uses to satisfy connection requests matching the application and host patterns. CMPolicyEnterprise configuration service provider can have multiple policies
**Policy Ordering**: There is no explicit ordering of policies. The general rule is that the most concrete or specific policy mappings take a higher precedence. **Policy Ordering**: There is no explicit ordering of policies. The general rule is that the most concrete or specific policy mappings take a higher precedence.
**Default Policies**: Policies are applied in order of their scope with the most specific policies considered before the more general policies. The phone’s default behavior applies to all applications and all domains and is only used when no other, more specific policy is available. The default policy is to use any available Wi-Fi network first and then any available APN. **Default Policies**: Policies are applied in the order of their scope with the most specific policies considered before the more general policies. The phone’s default behavior applies to all applications and all domains and is only used when no other, more specific policy is available. The default policy is to use any available WiFi network first and then any available APN.
The following shows the CMPolicyEnterprise configuration service provider management object in tree format as used by both Open Mobile Alliance (OMA) Client Provisioning and OMA Device Management. The following shows the CMPolicyEnterprise configuration service provider management object in tree format as used by both Open Mobile Alliance (OMA) Client Provisioning and OMA Device Management.
@ -75,7 +80,7 @@ Specifies whether the list of connections is in preference order.
A value of "0" specifies that the connections are not listed in order of preference. A value of "1" indicates that the listed connections are in order of preference. A value of "0" specifies that the connections are not listed in order of preference. A value of "1" indicates that the listed connections are in order of preference.
<a href="" id="connxxx"></a>**Conn**<strong>*XXX*</strong> <a href="" id="connxxx"></a>**Conn**<strong>*XXX*</strong>
Enumerates the connections associated with the policy. Element names begin with "Conn" followed by three digits which increment starting from "000". For example, a policy which applied to five connections would have element entries named "Conn000", "Conn001", "Conn002", "Conn003", and "Conn004". Enumerates the connections associated with the policy. Element names begin with "Conn" followed by three-digits, which increment starting from "000". For example, a policy which applied to five connections would have element entries named "Conn000", "Conn001", "Conn002", "Conn003", and "Conn004".
<a href="" id="connectionid"></a>**ConnectionID** <a href="" id="connectionid"></a>**ConnectionID**
Specifies a unique identifier for a connection within a group of connections. The exact value is based on the Type parameter. Specifies a unique identifier for a connection within a group of connections. The exact value is based on the Type parameter.
@ -90,10 +95,9 @@ For `CMST_CONNECTION_TYPE`, specify the GUID for the desired connection type. Th
|CDMA|{274AD55A-4A70-4E35-93B3-AE2D2E6727FC}| |CDMA|{274AD55A-4A70-4E35-93B3-AE2D2E6727FC}|
|Legacy 3GPP|{6DE4C04B-B74E-47FA-99E5-8F2097C06A92}| |Legacy 3GPP|{6DE4C04B-B74E-47FA-99E5-8F2097C06A92}|
|LTE|{2378E547-8312-46A5-905E-5C581E92693B}| |LTE|{2378E547-8312-46A5-905E-5C581E92693B}|
|Wi-Fi|{8568B401-858E-4B7B-B3DF-0FD4927F131B}| |WiFi|{8568B401-858E-4B7B-B3DF-0FD4927F131B}|
|Wi-Fi hotspot|{072FC7DC-1D93-40D1-9BB0-2114D7D73434}| |WiFi hotspot|{072FC7DC-1D93-40D1-9BB0-2114D7D73434}|
For `CMST_CONNECTION_NETWORK_TYPE`, specify the GUID for the desired network type. The curly brackets {} around the GUID are required. The following network types are available: For `CMST_CONNECTION_NETWORK_TYPE`, specify the GUID for the desired network type. The curly brackets {} around the GUID are required. The following network types are available:
@ -136,7 +140,6 @@ Specifies the type of connection being referenced. The following list describes
## OMA client provisioning examples ## OMA client provisioning examples
Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider. Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider.
```xml ```xml
@ -230,7 +233,6 @@ Adding a host-based mapping policy. In this example, the ConnectionId for type C
## OMA DM examples ## OMA DM examples
Adding an application-based mapping policy: Adding an application-based mapping policy:
```xml ```xml
@ -367,7 +369,6 @@ Adding a host-based mapping policy:
## Microsoft Custom Elements ## Microsoft Custom Elements
|Element|Available| |Element|Available|
|--- |--- | |--- |--- |
|parm-query|Yes| |parm-query|Yes|
@ -376,7 +377,6 @@ Adding a host-based mapping policy:
## Related topics ## Related topics
[Configuration service provider reference](configuration-service-provider-reference.md) [Configuration service provider reference](configuration-service-provider-reference.md)

9
windows/client-management/mdm/customdeviceui-csp.md
View File

@ -14,6 +14,14 @@ ms.date: 06/26/2017
# CustomDeviceUI CSP # CustomDeviceUI CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|Yes|Yes|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|No|No|
|Education|Yes|Yes|
The CustomDeviceUI configuration service provider allows OEMs to implement their custom foreground application, as well as the background tasks to run on an IoT device running IoT Core. Only one foreground application is supported per device. Multiple background tasks are supported. The CustomDeviceUI configuration service provider allows OEMs to implement their custom foreground application, as well as the background tasks to run on an IoT device running IoT Core. Only one foreground application is supported per device. Multiple background tasks are supported.
The following shows the CustomDeviceUI configuration service provider in tree format as used by both the Open Mobile Alliance (OMA) Device Management (DM) and OMA Client Provisioning. The following shows the CustomDeviceUI configuration service provider in tree format as used by both the Open Mobile Alliance (OMA) Device Management (DM) and OMA Client Provisioning.
@ -42,7 +50,6 @@ Package Full Name of the App that needs be launched in the background. This can
## SyncML examples ## SyncML examples
**Set StartupAppID** **Set StartupAppID**
```xml ```xml

67
windows/client-management/mdm/defender-csp.md
View File

@ -15,6 +15,15 @@ ms.date: 10/04/2021
# Defender CSP # Defender CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
> [!WARNING] > [!WARNING]
> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. > Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
@ -177,7 +186,7 @@ The following table describes the supported values:
| 48 | Policy | | 48 | Policy |
| 49 | EUS (Enterprise Unwanted Software)| | 49 | EUS (Enterprise Unwanted Software)|
| 50 | Ransomware | | 50 | Ransomware |
| 51 | ASR Rule | | 51 | Azure Site Recovery Rule |
Supported operation is Get. Supported operation is Get.
@ -255,9 +264,9 @@ Supported operation is Get.
The Network Protection Service is a network filter that helps to protect you against web-based malicious threats, including phishing and malware. The Network Protection service contacts the SmartScreen URL reputation service to validate the safety of connections to web resources. The Network Protection Service is a network filter that helps to protect you against web-based malicious threats, including phishing and malware. The Network Protection service contacts the SmartScreen URL reputation service to validate the safety of connections to web resources.
The acceptable values for this parameter are: The acceptable values for this parameter are:
- 0: Disabled. The Network Protection service will not block navigation to malicious websites, or contact the SmartScreen URL reputation service. It will still send connection metadata to the antimalware engine if behavior monitoring is enabled, to enhance AV Detections. - 0: Disabled. The Network Protection service won't block navigation to malicious websites, or contact the SmartScreen URL reputation service. It will still send connection metadata to the antimalware engine if behavior monitoring is enabled, to enhance AV Detections.
- 1: Enabled. The Network Protection service will block connections to malicious websites based on URL Reputation from the SmartScreen URL reputation service. - 1: Enabled. The Network Protection service will block connections to malicious websites based on URL Reputation from the SmartScreen URL reputation service.
- 2: AuditMode. As above, but the Network Protection service will not block connections to malicious websites, but will instead log the access to the event log. - 2: AuditMode. As above, but the Network Protection service won't block connections to malicious websites, but will instead log the access to the event log.
Accepted values: Disabled, Enabled, and AuditMode Accepted values: Disabled, Enabled, and AuditMode
Position: Named Position: Named
@ -276,7 +285,7 @@ By default, network protection is not allowed to be enabled on Windows versions
<a href="" id="enablenetworkprotection-allownetworkprotectiononwinserver"></a>**EnableNetworkProtection/AllowNetworkProtectionOnWinServer** <a href="" id="enablenetworkprotection-allownetworkprotectiononwinserver"></a>**EnableNetworkProtection/AllowNetworkProtectionOnWinServer**
By default, network protection is not allowed to be enabled on Windows Server, regardless of the setting of the EnableNetworkProtection configuration. Set this configuration to "$true" to override that behavior and allow Network Protection to be set to Enabled or Audit Mode. By default, network protection isn't allowed to be enabled on Windows Server, regardless of the setting of the EnableNetworkProtection configuration. Set this configuration to "$true" to override that behavior and allow Network Protection to be set to Enabled or Audit Mode.
- Type: Boolean - Type: Boolean
- Position: Named - Position: Named
@ -585,11 +594,11 @@ An interior node to group Windows Defender configuration information.
Supported operation is Get. Supported operation is Get.
<a href="" id="configuration-tamperprotection"></a>**Configuration/TamperProtection** <a href="" id="configuration-tamperprotection"></a>**Configuration/TamperProtection**
Tamper protection helps protect important security features from unwanted changes and interference. This includes real-time protection, behavior monitoring, and more. Accepts signed string to turn the feature on or off. Settings are configured with an MDM solution, such as Intune and is available in Windows 10 Enterprise E5 or equivalent subscriptions. Tamper protection helps protect important security features from unwanted changes and interference. This includes real-time protection, behavior monitoring, and more. Accepts signed string to turn the feature on or off. Settings are configured with an MDM solution, such as Intune and is available in Windows 10 Enterprise E5 or equivalent subscriptions.
Send off blob to device to reset tamper protection state before setting this configuration to "not configured" or "unassigned" in Intune. Send off blob to device to reset tamper protection state before setting this configuration to "not configured" or "unassigned" in Intune.
The data type is a Signed blob. The data type is a Signed BLOB.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, Replace.
@ -603,7 +612,7 @@ When enabled or disabled exists on the client and admin moves the setting to not
<a href="" id="configuration-disablelocaladminmerge"></a>**Configuration/DisableLocalAdminMerge**<br> <a href="" id="configuration-disablelocaladminmerge"></a>**Configuration/DisableLocalAdminMerge**<br>
This policy setting controls whether or not complex list settings configured by a local administrator are merged with managed settings. This setting applies to lists such as threats and exclusions. This policy setting controls whether or not complex list settings configured by a local administrator are merged with managed settings. This setting applies to lists such as threats and exclusions.
If you disable or do not configure this setting, unique items defined in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, management settings will override preference settings. If you disable or don't configure this setting, unique items defined in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, management settings will override preference settings.
If you enable this setting, only items defined by management will be used in the resulting effective policy. Managed settings will override preference settings configured by the local administrator. If you enable this setting, only items defined by management will be used in the resulting effective policy. Managed settings will override preference settings configured by the local administrator.
@ -621,31 +630,31 @@ Valid values are:
- 0 (default) – Disable. - 0 (default) – Disable.
<a href="" id="configuration-hideexclusionsfromlocaladmins"></a>**Configuration/HideExclusionsFromLocalAdmins**<br> <a href="" id="configuration-hideexclusionsfromlocaladmins"></a>**Configuration/HideExclusionsFromLocalAdmins**<br>
This policy setting controls whether or not exclusions are visible to Local Admins. For end users (that are not Local Admins) exclusions are not visible, whether or not this setting is enabled. This policy setting controls whether or not exclusions are visible to Local Admins. For end users (that aren't Local Admins) exclusions aren't visible, whether or not this setting is enabled.
If you disable or do not configure this setting, Local Admins will be able to see exclusions in the Windows Security App and via PowerShell. - If you enable this setting, Local Admins will no longer be able to see the exclusion list in the Windows Security app or via PowerShell.
If you enable this setting, Local Admins will no longer be able to see the exclusion list in the Windows Security app or via PowerShell. - If you disable or don't configure this setting, Local Admins will be able to see exclusions in the Windows Security App and via PowerShell.
> [!NOTE] > [!NOTE]
> Applying this setting will not remove exclusions, it will only prevent them from being visible to Local Admins. This is reflected in **Get-MpPreference**. > Applying this setting will not remove exclusions, it will only prevent them from being visible to Local Admins. This is reflected in **Get-MpPreference**.
Supported OS versions: Windows 10 Supported OS versions: Windows 10
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 – Enable. - 1 – Enable.
- 0 (default) – Disable. - 0 (default) – Disable.
<a href="" id="configuration-disablecputhrottleonidlescans"></a>**Configuration/DisableCpuThrottleOnIdleScans**<br> <a href="" id="configuration-disablecputhrottleonidlescans"></a>**Configuration/DisableCpuThrottleOnIdleScans**<br>
Indicates whether the CPU will be throttled for scheduled scans while the device is idle. This feature is enabled by default and will not throttle the CPU for scheduled scans performed when the device is otherwise idle, regardless of what ScanAvgCPULoadFactor is set to. For all other scheduled scans this flag will have no impact and normal throttling will occur. Indicates whether the CPU will be throttled for scheduled scans while the device is idle. This feature is enabled by default and won't throttle the CPU for scheduled scans performed when the device is otherwise idle, regardless of what ScanAvgCPULoadFactor is set to. For all other scheduled scans this flag will have no impact and normal throttling will occur.
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 (default) – Enable. - 1 (default) – Enable.
@ -656,7 +665,7 @@ Allow managed devices to update through metered connections. Data charges may ap
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 – Enable. - 1 – Enable.
@ -667,7 +676,7 @@ This settings controls whether Network Protection is allowed to be configured in
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 – Enable. - 1 – Enable.
@ -678,7 +687,7 @@ Allows an administrator to explicitly disable network packet inspection made by
The data type is string. The data type is string.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
<a href="" id="configuration-enablefilehashcomputation"></a>**Configuration/EnableFileHashComputation** <a href="" id="configuration-enablefilehashcomputation"></a>**Configuration/EnableFileHashComputation**
Enables or disables file hash computation feature. Enables or disables file hash computation feature.
@ -686,7 +695,7 @@ When this feature is enabled Windows Defender will compute hashes for files it s
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 – Enable. - 1 – Enable.
@ -697,15 +706,15 @@ The support log location setting allows the administrator to specify where the M
Data type is string. Data type is string.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Intune Support log location setting UX supports three states: Intune Support log location setting UX supports three states:
- Not configured (default) - Does not have any impact on the default state of the device. - Not configured (default) - Doesn't have any impact on the default state of the device.
- 1 - Enabled. Enables the Support log location feature. Requires admin to set custom file path. - 1 - Enabled. Enables the Support log location feature. Requires admin to set custom file path.
- 0 - Disabled. Turns off the Support log location feature. - 0 - Disabled. Turns off the Support log location feature.
When enabled or disabled exists on the client and admin moves the setting to not configured, it will not have any impact on the device state. To change the state to either enabled or disabled would require to be set explicitly. When enabled or disabled exists on the client and admin moves the setting to not configure, it will not have any impact on the device state. To change the state to either enabled or disabled would require to be set explicitly.
More details: More details:
@ -725,11 +734,11 @@ Current Channel (Broad): Devices will be offered updates only after the gradual
Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only
If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices. If you disable or don't configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices.
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 0: Not configured (Default) - 0: Not configured (Default)
@ -758,11 +767,11 @@ Current Channel (Broad): Devices will be offered updates only after the gradual
Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only
If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices. If you disable or don't configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices.
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 0: Not configured (Default) - 0: Not configured (Default)
@ -784,10 +793,10 @@ Current Channel (Staged): Devices will be offered updates after the release cycl
Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).
If you disable or do not configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices. If you disable or don't configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices.
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid Values are: Valid Values are:
- 0: Not configured (Default) - 0: Not configured (Default)
@ -806,11 +815,11 @@ Devices will be offered all Microsoft Defender updates after the gradual release
> [!NOTE] > [!NOTE]
> This setting applies to both monthly as well as daily Microsoft Defender updates and will override any previously configured channel selections for platform and engine updates. > This setting applies to both monthly as well as daily Microsoft Defender updates and will override any previously configured channel selections for platform and engine updates.
If you disable or do not configure this policy, the device will remain in Current Channel (Default) unless specified otherwise in specific channels for platform and engine updates. Stay up to date automatically during the gradual release cycle. Suitable for most devices. If you disable or don't configure this policy, the device will remain in Current Channel (Default) unless specified otherwise in specific channels for platform and engine updates. Stay up to date automatically during the gradual release cycle. Suitable for most devices.
The data type is integer. The data type is integer.
Supported operations are Add, Delete, Get, Replace. Supported operations are Add, Delete, Get, and Replace.
Valid values are: Valid values are:
- 1 – Enabled. - 1 – Enabled.

17
windows/client-management/mdm/devdetail-csp.md
View File

@ -14,6 +14,15 @@ ms.date: 03/27/2020
# DevDetail CSP # DevDetail CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
The DevDetail configuration service provider handles the management object that provides device-specific parameters to the OMA DM server. These device parameters can be queried by servers using OMA DM commands. They aren't sent from the client to the server automatically. The DevDetail configuration service provider handles the management object that provides device-specific parameters to the OMA DM server. These device parameters can be queried by servers using OMA DM commands. They aren't sent from the client to the server automatically.
> [!NOTE] > [!NOTE]
@ -210,22 +219,22 @@ Returns the VoLTE service to on or off. This setting is only exposed to mobile o
Supported operation is Get. Supported operation is Get.
<a href="" id="wlanipv4address"></a>**Ext/WlanIPv4Address** <a href="" id="wlanipv4address"></a>**Ext/WlanIPv4Address**
Returns the IPv4 address of the active Wi-Fi connection. This address is only exposed to enterprise OMA DM servers. Returns the IPv4 address of the active WiFi connection. This address is only exposed to enterprise OMA DM servers.
Supported operation is Get. Supported operation is Get.
<a href="" id="wlanipv6address"></a>**Ext/WlanIPv6Address** <a href="" id="wlanipv6address"></a>**Ext/WlanIPv6Address**
Returns the IPv6 address of the active Wi-Fi connection. This address is only exposed to enterprise OMA-DM servers. Returns the IPv6 address of the active WiFi connection. This address is only exposed to enterprise OMA-DM servers.
Supported operation is Get. Supported operation is Get.
<a href="" id="wlandnssuffix"></a>**Ext/WlanDnsSuffix** <a href="" id="wlandnssuffix"></a>**Ext/WlanDnsSuffix**
Returns the DNS suffix of the active Wi-Fi connection. This suffix is only exposed to enterprise OMA-DM servers. Returns the DNS suffix of the active WiFi connection. This suffix is only exposed to enterprise OMA-DM servers.
Supported operation is Get. Supported operation is Get.
<a href="" id="wlansubnetmask"></a>**Ext/WlanSubnetMask** <a href="" id="wlansubnetmask"></a>**Ext/WlanSubnetMask**
Returns the subnet mask for the active Wi-Fi connection. This subnet mask is only exposed to enterprise OMA-DM servers. Returns the subnet mask for the active WiFi connection. This subnet mask is only exposed to enterprise OMA-DM servers.
Supported operation is Get. Supported operation is Get.

8
windows/client-management/mdm/developersetup-csp.md
View File

@ -14,6 +14,14 @@ ms.date: 06/26/2018
# DeveloperSetup CSP # DeveloperSetup CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
The DeveloperSetup configuration service provider (CSP) is used to configure Developer Mode on the device and connect to the Windows Device Portal. For more information about the Windows Device Portal, see [Windows Device Portal overview](/windows/uwp/debug-test-perf/device-portal). This CSP was added in Windows 10, version 1703. The DeveloperSetup configuration service provider (CSP) is used to configure Developer Mode on the device and connect to the Windows Device Portal. For more information about the Windows Device Portal, see [Windows Device Portal overview](/windows/uwp/debug-test-perf/device-portal). This CSP was added in Windows 10, version 1703.
> [!NOTE] > [!NOTE]

18
windows/client-management/mdm/supl-csp.md
View File

@ -14,6 +14,14 @@ ms.date: 09/12/2019
# SUPL CSP # SUPL CSP
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
The SUPL configuration service provider is used to configure the location client, as shown in the following table: The SUPL configuration service provider is used to configure the location client, as shown in the following table:
- **Location Service**: Connection type - **Location Service**: Connection type
@ -110,7 +118,6 @@ Optional. Specifies the positioning method that the SUPL client will use for mob
|4|OTDOA| |4|OTDOA|
|5|AFLT| |5|AFLT|
 
The default is 0. The default method in Windows devices provides high-quality assisted GNSS positioning for mobile originated position requests without loading the mobile operator’s network or location services. The default is 0. The default method in Windows devices provides high-quality assisted GNSS positioning for mobile originated position requests without loading the mobile operator’s network or location services.
@ -118,7 +125,6 @@ The default is 0. The default method in Windows devices provides high-quality as
> The Mobile Station Assisted, OTDOA, and AFLT positioning methods must only be configured for test purposes. > The Mobile Station Assisted, OTDOA, and AFLT positioning methods must only be configured for test purposes.
   
For OMA DM, if the format for this node is incorrect the entry will be ignored and an error will be returned, but the configuration service provider will continue processing the rest of the parameters. For OMA DM, if the format for this node is incorrect the entry will be ignored and an error will be returned, but the configuration service provider will continue processing the rest of the parameters.
<a href="" id="locmasterswitchdependencynii"></a>**LocMasterSwitchDependencyNII** <a href="" id="locmasterswitchdependencynii"></a>**LocMasterSwitchDependencyNII**
@ -133,7 +139,6 @@ This value manages the settings for both SUPL and v2 UPL. If a device is configu
|Off|0|Yes| |Off|0|Yes|
|Off|1|No (unless privacyOverride is set)| |Off|1|No (unless privacyOverride is set)|
When the location toggle is set to Off and this value is set to 1, the following application requests will fail: When the location toggle is set to Off and this value is set to 1, the following application requests will fail:
- `noNotificationNoVerification` - `noNotificationNoVerification`
@ -238,7 +243,6 @@ The default is 0. The default method provides high-quality assisted GNSS positio
> The Mobile Station Assisted and AFLT positioning methods must only be configured for test purposes. > The Mobile Station Assisted and AFLT positioning methods must only be configured for test purposes.
   
For OMA DM, if the format for this node is incorrect the entry will be ignored and an error will be returned, but the configuration service provider will continue processing the rest of the parameters. For OMA DM, if the format for this node is incorrect the entry will be ignored and an error will be returned, but the configuration service provider will continue processing the rest of the parameters.
<a href="" id="locmasterswitchdependencynii"></a>**LocMasterSwitchDependencyNII** <a href="" id="locmasterswitchdependencynii"></a>**LocMasterSwitchDependencyNII**
@ -282,7 +286,6 @@ Optional. Integer. Defines the minimum interval of time in seconds between mobil
## Unsupported Nodes ## Unsupported Nodes
The following optional nodes are not supported on Windows devices. The following optional nodes are not supported on Windows devices.
- ProviderID - ProviderID
@ -305,7 +308,6 @@ If a mobile operator requires the communication with the H-SLP to take place ove
## OMA Client Provisioning examples ## OMA Client Provisioning examples
Adding new configuration information for a H-SLP server for SUPL. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary blob must be included for the root certificate data value. Adding new configuration information for a H-SLP server for SUPL. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary blob must be included for the root certificate data value.
```xml ```xml
@ -330,7 +332,7 @@ Adding new configuration information for a H-SLP server for SUPL. Values in ital
</wap-provisioningdoc> </wap-provisioningdoc>
``` ```
Adding a SUPL and a V2 UPL account to the same device. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary blob must be included for the root certificate data value. Adding a SUPL and a V2 UPL account to the same device. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary BLOB must be included for the root certificate data value.
```xml ```xml
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
@ -361,7 +363,6 @@ Adding a SUPL and a V2 UPL account to the same device. Values in italic must be
## OMA DM examples ## OMA DM examples
Adding a SUPL account to a device. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary blob must be included for the root certificate data value. Adding a SUPL account to a device. Values in italic must be replaced with correct settings for the mobile operator network. A valid binary blob must be included for the root certificate data value.
```xml ```xml
@ -436,7 +437,6 @@ Adding a SUPL account to a device. Values in italic must be replaced with correc
## Microsoft Custom Elements ## Microsoft Custom Elements
The following table shows the Microsoft custom elements that this configuration service provider supports for OMA Client Provisioning. The following table shows the Microsoft custom elements that this configuration service provider supports for OMA Client Provisioning.
|Elements|Available| |Elements|Available|

6
windows/client-management/mdm/surfacehub-csp.md
View File

@ -14,7 +14,7 @@ ms.date: 07/28/2017
# SurfaceHub CSP # SurfaceHub CSP
The SurfaceHub configuration service provider (CSP) is used to configure Microsoft Surface Hub settings. This CSP was added in Windows 10, version 1511. The SurfaceHub configuration service provider (CSP) is used to configure Microsoft Surface Hub settings. This CSP was added in Windows 10, version 1511, and later.
The following shows the SurfaceHub CSP management objects in tree format. The following shows the SurfaceHub CSP management objects in tree format.
``` ```
@ -216,7 +216,7 @@ If there is an error calling ValidateAndCommit, there is additional context for
| 3 | Populating Exchange server address | Unable to auto-discover your Exchange server address. Try to manually specify the Exchange server address using the ExchangeServer field. | | 3 | Populating Exchange server address | Unable to auto-discover your Exchange server address. Try to manually specify the Exchange server address using the ExchangeServer field. |
| 4 | Validating Exchange server address | Unable to validate the Exchange server address. Ensure that the ExchangeServer field is valid. | | 4 | Validating Exchange server address | Unable to validate the Exchange server address. Ensure that the ExchangeServer field is valid. |
| 5 | Saving account information | Unable to save account details to the system. | | 5 | Saving account information | Unable to save account details to the system. |
| 6 | Validating EAS policies | The device account uses an unsupported EAS policy. Make sure the EAS policy is configured correctly according to the admin guide. | | 6 | Validating EAS policies | The device account uses an unsupported EAS policy. Ensure the EAS policy is configured correctly according to the admin guide. |
The data type is integer. Supported operation is Get. The data type is integer. Supported operation is Get.
@ -254,7 +254,7 @@ The data type is integer. Supported operation is Get.
<p>The data type is boolean. Supported operation is Get and Replace. <p>The data type is boolean. Supported operation is Get and Replace.
<a href="" id="inboxapps-welcome-currentbackgroundpath"></a>**InBoxApps/Welcome/CurrentBackgroundPath** <a href="" id="inboxapps-welcome-currentbackgroundpath"></a>**InBoxApps/Welcome/CurrentBackgroundPath**
<p>Download location for image to be used as the background during user sessions and on the welcome screen. To set this, specify an https URL to a 32-bit PNG file (only PNGs are supported for security reasons). If any certificate authorities need to be trusted in order to access the URL, please ensure they are valid and installed on the Hub, otherwise it may not be able to load the image. <p>Download location for image to be used as the background during user sessions and on the welcome screen. To set this, specify an https URL to a 32-bit PNG file (only PNGs are supported for security reasons). If any certificate authorities need to be trusted in order to access the URL, ensure they are valid and installed on the Hub, otherwise it may not be able to load the image.
<p>The data type is string. Supported operation is Get and Replace. <p>The data type is string. Supported operation is Get and Replace.