mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
Merge pull request #5683 from MandiOhlinger/ado5389314-prov
ADO 5389314: Updated to include Win11, and removed win10 mobile references
This commit is contained in:
commit
26cdb8ccdf
@ -90,9 +90,9 @@
|
|||||||
|
|
||||||
- name: Use provisioning packages
|
- name: Use provisioning packages
|
||||||
items:
|
items:
|
||||||
- name: Provisioning packages for Windows 10
|
- name: Provisioning packages for Windows client
|
||||||
href: provisioning-packages/provisioning-packages.md
|
href: provisioning-packages/provisioning-packages.md
|
||||||
- name: How provisioning works in Windows 10
|
- name: How provisioning works in Windows client
|
||||||
href: provisioning-packages/provisioning-how-it-works.md
|
href: provisioning-packages/provisioning-how-it-works.md
|
||||||
- name: Introduction to configuration service providers (CSPs)
|
- name: Introduction to configuration service providers (CSPs)
|
||||||
href: provisioning-packages/how-it-pros-can-use-configuration-service-providers.md
|
href: provisioning-packages/how-it-pros-can-use-configuration-service-providers.md
|
||||||
@ -112,7 +112,7 @@
|
|||||||
href: provisioning-packages/provisioning-script-to-install-app.md
|
href: provisioning-packages/provisioning-script-to-install-app.md
|
||||||
- name: Create a provisioning package with multivariant settings
|
- name: Create a provisioning package with multivariant settings
|
||||||
href: provisioning-packages/provisioning-multivariant.md
|
href: provisioning-packages/provisioning-multivariant.md
|
||||||
- name: PowerShell cmdlets for provisioning Windows 10 (reference)
|
- name: PowerShell cmdlets for provisioning Windows client (reference)
|
||||||
href: provisioning-packages/provisioning-powershell.md
|
href: provisioning-packages/provisioning-powershell.md
|
||||||
- name: Windows Configuration Designer command-line interface (reference)
|
- name: Windows Configuration Designer command-line interface (reference)
|
||||||
href: provisioning-packages/provisioning-command-line.md
|
href: provisioning-packages/provisioning-command-line.md
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Customize Windows 10 Start and tasbkar with provisioning packages (Windows 10)
|
title: Customize Windows 10 Start and taskbar with provisioning packages (Windows 10)
|
||||||
description: In Windows 10, you can use a provisioning package to deploy a customized Start layout to users.
|
description: In Windows 10, you can use a provisioning package to deploy a customized Start layout to users.
|
||||||
ms.assetid: AC952899-86A0-42FC-9E3C-C25F45B1ACAC
|
ms.assetid: AC952899-86A0-42FC-9E3C-C25F45B1ACAC
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,9 +21,11 @@ ms.localizationpriority: medium
|
|||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
|
|
||||||
|
|
||||||
> **Looking for consumer information?** [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630)
|
> **Looking for consumer information?** [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630)
|
||||||
|
|
||||||
|
> [!NOTE]
|
||||||
|
> Currently, using provisioning packages to customize the Start menu layout is supported on Windows 10. It's not supported on Windows 11.
|
||||||
|
|
||||||
In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, version 1703, you can use a provisioning package that you create with Windows Configuration Designer to deploy a customized Start and taskbar layout to users. No reimaging is required, and the Start and taskbar layout can be updated simply by overwriting the .xml file that contains the layout. The provisioning package can be applied to a running device. This enables you to customize Start and taskbar layouts for different departments or organizations, with minimal management overhead.
|
In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, version 1703, you can use a provisioning package that you create with Windows Configuration Designer to deploy a customized Start and taskbar layout to users. No reimaging is required, and the Start and taskbar layout can be updated simply by overwriting the .xml file that contains the layout. The provisioning package can be applied to a running device. This enables you to customize Start and taskbar layouts for different departments or organizations, with minimal management overhead.
|
||||||
|
|
||||||
> [!IMPORTANT]
|
> [!IMPORTANT]
|
||||||
@ -136,5 +138,5 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
|||||||
- [Add image for secondary tiles](start-secondary-tiles.md)
|
- [Add image for secondary tiles](start-secondary-tiles.md)
|
||||||
- [Start layout XML for desktop editions of Windows 10 (reference)](start-layout-xml-desktop.md)
|
- [Start layout XML for desktop editions of Windows 10 (reference)](start-layout-xml-desktop.md)
|
||||||
- [Customize Windows 10 Start and taskbar with Group Policy](customize-windows-10-start-screens-by-using-group-policy.md)
|
- [Customize Windows 10 Start and taskbar with Group Policy](customize-windows-10-start-screens-by-using-group-policy.md)
|
||||||
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
- [Customize Windows 10 Start and taskbar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
||||||
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
title: Configuration service providers for IT pros (Windows 10)
|
title: Configuration service providers for IT pros (Windows 10/11)
|
||||||
description: Describes how IT pros and system administrators can use configuration service providers (CSPs) to configure devices.
|
description: Describes how IT pros and system administrators can use configuration service providers (CSPs) to configure devices.
|
||||||
ms.assetid: 25C1FDCA-0E10-42A1-A368-984FFDB2B7B6
|
ms.assetid: 25C1FDCA-0E10-42A1-A368-984FFDB2B7B6
|
||||||
ms.reviewer:
|
ms.reviewer: gkomatsu
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -11,7 +11,6 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Configuration service providers for IT pros
|
# Configuration service providers for IT pros
|
||||||
@ -19,26 +18,21 @@ ms.date: 07/27/2017
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](/windows/client-management/mdm/configuration-service-provider-reference).
|
This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows client in their organizations. CSPs expose device configuration settings in Windows client. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](/windows/client-management/mdm/configuration-service-provider-reference).
|
||||||
|
|
||||||
> [!NOTE]
|
|
||||||
> The information provided here about CSPs and CSP documentation also applies to Windows Mobile 5, Windows Mobile 6, Windows Phone 7, and Windows Phone 8, but links to current CSPs are for Windows 10 and Windows 10 Mobile.
|
|
||||||
|
|
||||||
[See what's new for CSPs in Windows 10, version 1809.](/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1809)
|
|
||||||
|
|
||||||
## What is a CSP?
|
## What is a CSP?
|
||||||
|
|
||||||
In the client operating system, a CSP is the interface between configuration settings that are specified in a provisioning document and configuration settings that are on the device. CSPs are similar to Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files, or permissions. Some of these settings are configurable, and some are read-only.
|
In the client operating system, a CSP is the interface between configuration settings that are specified in a provisioning document and configuration settings that are on the device. CSPs are similar to Group Policy client-side extensions in that they provide an interface to read, set, modify, or delete configuration settings for a given feature. Typically, these settings map to registry keys, files, or permissions. Some of these settings are configurable, and some are read-only.
|
||||||
|
|
||||||
Starting with Windows Mobile 5.0, CSPs were used to manage Windows mobile devices. On the Windows 10 platform, the management approach for both desktop and mobile devices converges, taking advantage of the same CSPs to configure and manage all devices running Windows 10.
|
On the Windows client platform, the management approach for desktop uses CSPs to configure and manage all devices running Windows client.
|
||||||
|
|
||||||
Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) contains the settings to create a Wi-Fi profile.
|
Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) contains the settings to create a Wi-Fi profile.
|
||||||
|
|
||||||
CSPs are behind many of the management tasks and policies for Windows 10, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider).
|
CSPs are behind many of the management tasks and policies for Windows client, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider).
|
||||||
|
|
||||||

|
:::image type="content" source="../images/policytocsp.png" alt-text="How intune maps to CSP":::
|
||||||
|
|
||||||
CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Endpoint Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge.
|
CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Endpoint Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge.
|
||||||
|
|
||||||
@ -48,7 +42,7 @@ The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based
|
|||||||
|
|
||||||
### The WMI-to-CSP Bridge
|
### The WMI-to-CSP Bridge
|
||||||
|
|
||||||
The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs using scripts and traditional enterprise management software, such as Configuration Manager using WMI. The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device.
|
The WMI-to-CSP Bridge is a component allowing configuration of Windows client CSPs using scripts and traditional enterprise management software, such as Configuration Manager using WMI. The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device.
|
||||||
|
|
||||||
[Learn how to use the WMI Bridge Provider with PowerShell.](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider)
|
[Learn how to use the WMI Bridge Provider with PowerShell.](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider)
|
||||||
|
|
||||||
@ -56,9 +50,7 @@ The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs u
|
|||||||
|
|
||||||
Generally, enterprises rely on Group Policy or MDM to configure and manage devices. For devices running Windows, MDM services use CSPs to configure your devices.
|
Generally, enterprises rely on Group Policy or MDM to configure and manage devices. For devices running Windows, MDM services use CSPs to configure your devices.
|
||||||
|
|
||||||
In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried.
|
In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried. You can also learn about all of the available configuration settings.
|
||||||
|
|
||||||
Some of the articles in the [Windows 10 and Windows 10 Mobile](/windows/windows-10) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](../cortana-at-work/cortana-at-work-overview.md), which links to the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider). In the CSP topics, you can learn about all of the available configuration settings.
|
|
||||||
|
|
||||||
### CSPs in Windows Configuration Designer
|
### CSPs in Windows Configuration Designer
|
||||||
|
|
||||||
@ -66,9 +58,9 @@ You can use Windows Configuration Designer to create [provisioning packages](./p
|
|||||||
|
|
||||||
Many settings in Windows Configuration Designer will display documentation for that setting in the center pane, and will include a reference to the CSP if the setting uses one, as shown in the following image.
|
Many settings in Windows Configuration Designer will display documentation for that setting in the center pane, and will include a reference to the CSP if the setting uses one, as shown in the following image.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/cspinicd.png" alt-text="In Windows Configuration Designer, how help content appears in icd.":::
|
||||||
|
|
||||||
[Provisioning packages in Windows 10](provisioning-packages.md) explains how to use the Windows Configuration Designer tool to create a runtime provisioning package.
|
[Provisioning packages in Windows client](provisioning-packages.md) explains how to use the Windows Configuration Designer tool to create a runtime provisioning package.
|
||||||
|
|
||||||
### CSPs in MDM
|
### CSPs in MDM
|
||||||
|
|
||||||
@ -78,15 +70,15 @@ When a CSP is available but is not explicitly included in your MDM solution, you
|
|||||||
|
|
||||||
### CSPs in Lockdown XML
|
### CSPs in Lockdown XML
|
||||||
|
|
||||||
Lockdown XML can be used to configure devices running Windows 10 Mobile. You can manually author a [Lockdown XML file](../mobile-devices/lockdown-xml.md) to make use of the configuration settings available through the [EnterpriseAssignedAccess configuration service provider (CSP)](/windows/client-management/mdm/enterpriseassignedaccess-csp). In Windows 10, version 1703, you can also use the new [Lockdown Designer app](../mobile-devices/mobile-lockdown-designer.md) to configure your Lockdown XML.
|
Starting with Windows 10 version 1703, you can use the [Lockdown Designer app](../mobile-devices/mobile-lockdown-designer.md) to configure your Lockdown XML.
|
||||||
|
|
||||||
## <a href="" id="bkmk-csp-doc"></a>How do you use the CSP documentation?
|
## <a href="" id="bkmk-csp-doc"></a>How do you use the CSP documentation?
|
||||||
|
|
||||||
All CSPs in Windows 10 are documented in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference).
|
All CSPs are documented in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference).
|
||||||
|
|
||||||
The [main CSP topic](/windows/client-management/mdm/configuration-service-provider-reference) tells you which CSPs are supported on each edition of Windows 10, and links to the documentation for each individual CSP.
|
The [CSP reference](/windows/client-management/mdm/configuration-service-provider-reference) tells you which CSPs are supported on each edition of Windows, and links to the documentation for each individual CSP.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/csptable.png" alt-text="The CSP reference shows the supported Windows editions":::
|
||||||
|
|
||||||
The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format.
|
The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format.
|
||||||
|
|
||||||
@ -94,7 +86,7 @@ The full path to a specific configuration setting is represented by its Open Mob
|
|||||||
|
|
||||||
The following example shows the diagram for the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied.
|
The following example shows the diagram for the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/provisioning-csp-assignedaccess.png" alt-text="The CSP reference shows the assigned access csp tree.":::
|
||||||
|
|
||||||
The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp).
|
The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp).
|
||||||
|
|
||||||
@ -104,7 +96,7 @@ The element in the tree diagram after the root node tells you the name of the CS
|
|||||||
|
|
||||||
When an element in the diagram uses _italic_ font, it indicates a placeholder for specific information, such as the tenant ID in the following example.
|
When an element in the diagram uses _italic_ font, it indicates a placeholder for specific information, such as the tenant ID in the following example.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/csp-placeholder.png" alt-text="The placeholder in the CSP tree":::
|
||||||
|
|
||||||
After the diagram, the documentation describes each element. For each policy or setting, the valid values are listed.
|
After the diagram, the documentation describes each element. For each policy or setting, the valid values are listed.
|
||||||
|
|
||||||
@ -114,26 +106,11 @@ The documentation for most CSPs will also include an XML example.
|
|||||||
|
|
||||||
## CSP examples
|
## CSP examples
|
||||||
|
|
||||||
CSPs provide access to a number of settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful.
|
CSPs provide access to many settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful.
|
||||||
|
|
||||||
- [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp)
|
|
||||||
|
|
||||||
The EnterpriseAssignedAccess CSP lets IT administrators configure settings on a Windows 10 Mobile device. An enterprise can make use of this CSP to create single-use or limited-use mobile devices, such as a handheld device that only runs a price-checking app.
|
|
||||||
|
|
||||||
In addition to lock screen wallpaper, theme, time zone, and language, the EnterpriseAssignedAccess CSP includes AssignedAccessXml that can be used to lock down the device through the following settings:
|
|
||||||
|
|
||||||
- Enabling or disabling the Action Center.
|
|
||||||
- Configuring the number of tile columns in the Start layout.
|
|
||||||
- Restricting the apps that will be available on the device.
|
|
||||||
- Restricting the settings that the user can access.
|
|
||||||
- Restricting the hardware buttons that will be operable.
|
|
||||||
- Restricting access to the context menu.
|
|
||||||
- Enabling or disabling tile manipulation.
|
|
||||||
- Creating role-specific configurations.
|
|
||||||
|
|
||||||
- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
|
- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
|
||||||
|
|
||||||
The Policy CSP enables the enterprise to configure policies on Windows 10 and Windows 10 Mobile. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings.
|
The Policy CSP enables the enterprise to configure policies on Windows client. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings.
|
||||||
|
|
||||||
Some of the settings available in the Policy CSP include the following:
|
Some of the settings available in the Policy CSP include the following:
|
||||||
|
|
||||||
@ -153,7 +130,7 @@ CSPs provide access to a number of settings useful to enterprises. This section
|
|||||||
- **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store.
|
- **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store.
|
||||||
- **WiFi**, such as whether Internet sharing is enabled.
|
- **WiFi**, such as whether Internet sharing is enabled.
|
||||||
|
|
||||||
Here is a list of CSPs supported on Windows 10 Enterprise, Windows 10 Mobile Enterprise, or both:
|
Here is a list of CSPs supported on Windows 10 Enterprise:
|
||||||
|
|
||||||
- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
|
- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
|
||||||
- [Application CSP](/windows/client-management/mdm/application-csp)
|
- [Application CSP](/windows/client-management/mdm/application-csp)
|
||||||
|
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
title: Provision PCs with common settings (Windows 10)
|
title: Provision PCs with common settings (Windows 10/11)
|
||||||
description: Create a provisioning package to apply common settings to a PC running Windows 10.
|
description: Create a provisioning package to apply common settings to a PC running Windows 10.
|
||||||
ms.assetid: 66D14E97-E116-4218-8924-E2A326C9367E
|
ms.assetid: 66D14E97-E116-4218-8924-E2A326C9367E
|
||||||
ms.reviewer:
|
ms.reviewer: gkomatsu
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
keywords: ["runtime provisioning", "provisioning package"]
|
keywords: ["runtime provisioning", "provisioning package"]
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
@ -12,7 +12,6 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Provision PCs with common settings for initial deployment (desktop wizard)
|
# Provision PCs with common settings for initial deployment (desktop wizard)
|
||||||
@ -21,15 +20,16 @@ ms.date: 07/27/2017
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
|
||||||
This topic explains how to create and apply a provisioning package that contains common enterprise settings to a device running all desktop editions of Windows 10 except Windows 10 Home.
|
This topic explains how to create and apply a provisioning package that contains common enterprise settings to a device running all desktop editions of Windows client except Home.
|
||||||
|
|
||||||
You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices.
|
You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices.
|
||||||
|
|
||||||
## Advantages
|
## Advantages
|
||||||
- You can configure new devices without reimaging.
|
- You can configure new devices without reimaging.
|
||||||
|
|
||||||
- Works on both mobile and desktop devices.
|
- Works on desktop devices.
|
||||||
|
|
||||||
- No network connectivity required.
|
- No network connectivity required.
|
||||||
|
|
||||||
@ -51,14 +51,14 @@ The desktop wizard helps you configure the following settings in a provisioning
|
|||||||
- Add applications and certificates
|
- Add applications and certificates
|
||||||
|
|
||||||
>[!WARNING]
|
>[!WARNING]
|
||||||
>You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.
|
>You must run Windows Configuration Designer on Windows client to configure Azure Active Directory enrollment using any of the wizards.
|
||||||
|
|
||||||
Provisioning packages can include management instructions and policies, installation of specific apps, customization of network connections and policies, and more.
|
Provisioning packages can include management instructions and policies, installation of specific apps, customization of network connections and policies, and more.
|
||||||
|
|
||||||
> [!TIP]
|
> [!TIP]
|
||||||
> Use the desktop wizard to create a package with the common settings, then switch to the advanced editor to add other settings, apps, policies, etc.
|
> Use the desktop wizard to create a package with the common settings, then switch to the advanced editor to add other settings, apps, policies, etc.
|
||||||
>
|
>
|
||||||
>
|
> :::image type="content" source="../images/icd-simple-edit.png" alt-text="In the desktop wizard, open the advanced editor.":::
|
||||||
|
|
||||||
## Create the provisioning package
|
## Create the provisioning package
|
||||||
|
|
||||||
@ -68,26 +68,76 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
|||||||
|
|
||||||
2. Click **Provision desktop devices**.
|
2. Click **Provision desktop devices**.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/icd-create-options-1703.png" alt-text="In Windows Configuration Designer, see the ICD start options.":::
|
||||||
|
|
||||||
3. Name your project and click **Finish**. The pages for desktop provisioning will walk you through the following steps.
|
3. Name your project and click **Finish**. The pages for desktop provisioning will walk you through the following steps.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/icd-desktop-1703.png" alt-text="In Windows Configuration Designer, select Finish, and see the ICD desktop provisioning.":::
|
||||||
|
|
||||||
> [!IMPORTANT]
|
> [!IMPORTANT]
|
||||||
> When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
|
> When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
|
||||||
|
|
||||||
## Configure settings
|
## Configure settings
|
||||||
|
|
||||||
|
1. Enable device setup:
|
||||||
|
|
||||||
<table>
|
:::image type="content" source="../images/set-up-device-details-desktop.png" alt-text="In Windows Configuration Designer, enable device setup, enter the device name, the product key to upgrade, turn off shared use, and remove preinstalled software.":::
|
||||||
<tr><td valign="top"><img src="../images/one.png" alt="step one"/><img src="../images/set-up-device.png" alt="set up device"/></br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. <a href="/windows/deployment/upgrade/windows-10-edition-upgrades" data-raw-source="[See the permitted upgrades.](/windows/deployment/upgrade/windows-10-edition-upgrades)">See the permitted upgrades.</a></br></br>Toggle <strong>Yes</strong> or <strong>No</strong> to <strong>Configure devices for shared use</strong>. This setting optimizes Windows 10 for shared use scenarios. <a href="../set-up-shared-or-guest-pc.md" data-raw-source="[Learn more about shared PC configuration.](../set-up-shared-or-guest-pc.md)">Learn more about shared PC configuration.</a></br></br>You can also select to remove pre-installed software from the device. </td><td><img src="../images/set-up-device-details-desktop.png" alt="device name, upgrade to enterprise, shared use, remove pre-installed software"/></td></tr>
|
|
||||||
<tr><td valign="top"><img src="../images/two.png" alt="step two"/> <img src="../images/set-up-network.png" alt="set up network"/></br></br>Toggle <strong>On</strong> or <strong>Off</strong> for wireless network connectivity. If you select <strong>On</strong>, enter the SSID, the network type (<strong>Open</strong> or <strong>WPA2-Personal</strong>), and (if <strong>WPA2-Personal</strong>) the password for the wireless network.</td><td><img src="../images/set-up-network-details-desktop.png" alt="Enter network SSID and type"/></td></tr>
|
If you want to enable device setup, select **Set up device**, and configure the following settings:
|
||||||
<tr><td valign="top"><img src="../images/three.png" alt="step three"/> <img src="../images/account-management.png" alt="account management"/></br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>. The <strong>maximum number of devices per user</strong> setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click <strong>Get bulk token</strong>. In the <strong>Let's get you signed in</strong> window, enter an account that has permissions to join a device to Azure AD, and then the password. Click <strong>Accept</strong> to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br><strong>Important:</strong> If you create a local account in the provisioning package, you must change the password using the <strong>Settings</strong> app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td><img src="../images/account-management-details.png" alt="join Active Directory, Azure AD, or create a local admin account"/></td></tr>
|
|
||||||
<tr><td valign="top"><img src="../images/four.png" alt="step four"/> <img src="../images/add-applications.png" alt="add applications"/></br></br>You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see <a href="provision-pcs-with-apps.md" data-raw-source="[Provision PCs with apps](provision-pcs-with-apps.md)">Provision PCs with apps</a>. </td><td><img src="../images/add-applications-details.png" alt="add an application"/></td></tr>
|
- **Device name**: Required. Enter a unique 15-character name for the device. You can use variables to add unique characters to the name, such as `Contoso-%SERIAL%` and `Contoso-%RAND:5%`.
|
||||||
<tr><td valign="top"><img src="../images/five.png" alt="step five"/> <img src="../images/add-certificates.png" alt="add certificates"/></br></br>To provision the device with a certificate, click <strong>Add a certificate</strong>. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td><img src="../images/add-certificates-details.png" alt="add a certificate"/></td></tr>
|
- **Enter product key**: Optional. Select a license file to upgrade Windows client to a different edition. For more information, see [the permitted upgrades](/windows/deployment/upgrade/windows-10-edition-upgrades).
|
||||||
<tr><td valign="top"> <img src="../images/finish.png" alt="The 'finish' button as displayed when provisioning a desktop device in Windows Configuration Designer."/></br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td><img src="../images/finish-details.png" alt="Protect your package"/></td></tr>
|
- **Configure devices for shared use**: Select **Yes** or **No** to optimize the Windows client for shared use scenarios.
|
||||||
</table>
|
- **Remove pre-installed software**: Optional. Select **Yes** if you want to remove preinstalled software.
|
||||||
|
|
||||||
|
2. Set up the network:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/set-up-network-details-desktop.png" alt-text="In Windows Configuration Designer, turn on wireless connectivity, enter the network SSID, and network type.":::
|
||||||
|
|
||||||
|
If you want to enable network setup, select **Set up network**, and configure the following settings:
|
||||||
|
|
||||||
|
- **Set up network**: To enable wireless connectivity, select **On**.
|
||||||
|
- **Network SSID**: Enter the Service Set IDentifier (SSID) of the network.
|
||||||
|
- **Network type**: Select **Open** or **WPA2-Personal**. If you select **WPA2-Personal**, enter the password for the wireless network.
|
||||||
|
|
||||||
|
3. Enable account management:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/account-management-details.png" alt-text="In Windows Configuration Designer, join Active Directory, Azure AD, or create a local admin account.":::
|
||||||
|
|
||||||
|
If you want to enable account management, select **Account Management**, and configure the following settings:
|
||||||
|
|
||||||
|
- **Manage organization/school accounts**: Choose how devices are enrolled. Your options:
|
||||||
|
- **Active Directory**: Enter the credentials for a least-privileged user account to join the device to the domain.
|
||||||
|
- **Azure Active Directory**: Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup). In your Azure AD tenant, the **maximum number of devices per user** setting determines how many times the bulk token in the wizard can be used.
|
||||||
|
|
||||||
|
If you select this option, enter a friendly name for the bulk token you get using the wizard. Set an expiration date for the token. The maximum is 180 days from the date you get the token. Select **Get bulk token**. In **Let's get you signed in**, enter an account that has permissions to join a device to Azure AD, and then the password. Select **Accept** to give Windows Configuration Designer the necessary permissions.
|
||||||
|
|
||||||
|
You must run Windows Configuration Designer on Windows client to configure Azure AD enrollment using any of the wizards.
|
||||||
|
|
||||||
|
- **Local administrator**: If you select this option, enter a user name and password. If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password isn't changed during that period, the account might be locked out, and unable to sign in.
|
||||||
|
|
||||||
|
4. Add applications:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/add-applications-details.png" alt-text="In Windows Configuration Designer, add an application.":::
|
||||||
|
|
||||||
|
To add applications to the devices, select **Add applications**. You can install multiple applications, including Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps. The settings in this step vary depending on the application you select. For help with the settings, see [Provision PCs with apps](provision-pcs-with-apps.md).
|
||||||
|
|
||||||
|
5. Add certificates:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/add-certificates-details.png" alt-text="In Windows Configuration Designer, add a certificate.":::
|
||||||
|
|
||||||
|
To add a certificate to the devices, select **Add certificates**, and configure the following settings:
|
||||||
|
|
||||||
|
- **Certificate name**: Enter a name for the certificate.
|
||||||
|
- **Certificate path**: Browse and select the certificate you want to add.
|
||||||
|
|
||||||
|
6. Finish:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/finish-details.png" alt-text="In Windows Configuration Designer, protect your package with a password.":::
|
||||||
|
|
||||||
|
To complete the wizard, select **Finish**, and configure the following setting:
|
||||||
|
|
||||||
|
- **Protect your package**: Select **Yes** or **No** to password protect your provisioning package. When you apply the provisioning package to a device, you must enter this password.
|
||||||
|
|
||||||
After you're done, click **Create**. It only takes a few seconds. When the package is built, the location where the package is stored is displayed as a hyperlink at the bottom of the page.
|
After you're done, click **Create**. It only takes a few seconds. When the package is built, the location where the package is stored is displayed as a hyperlink at the bottom of the page.
|
||||||
|
|
||||||
@ -98,19 +148,17 @@ After you're done, click **Create**. It only takes a few seconds. When the packa
|
|||||||
|
|
||||||
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
|
||||||
|
|
||||||
|
## Related articles
|
||||||
|
|
||||||
## Related topics
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
||||||
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Provision PCs with apps (Windows 10)
|
title: Provision PCs with apps (Windows 10/11)
|
||||||
description: Learn how to install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package.
|
description: Learn how to install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package.
|
||||||
keywords: ["runtime provisioning", "provisioning package"]
|
keywords: ["runtime provisioning", "provisioning package"]
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
@ -9,8 +9,7 @@ author: greg-lindsay
|
|||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.date: 09/06/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -20,9 +19,10 @@ manager: dansimp
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
|
||||||
|
|
||||||
In Windows 10, version 1703, you can install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package. This topic explains the various settings in [Windows Configuration Designer](provisioning-install-icd.md) for app install.
|
You can install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package. This article explains the various settings in [Windows Configuration Designer](provisioning-install-icd.md) for app install.
|
||||||
|
|
||||||
When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#adv).
|
When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#adv).
|
||||||
|
|
||||||
@ -33,7 +33,7 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate
|
|||||||
|
|
||||||
- **License Path**: Specify the license file if it is an app from the Microsoft Store. This is optional if you have a certificate for the app.
|
- **License Path**: Specify the license file if it is an app from the Microsoft Store. This is optional if you have a certificate for the app.
|
||||||
|
|
||||||
- **Package family name**: Specify the package family name if you don’t specify a license. This field will be auto-populated after you specify a license.
|
- **Package family name**: Specify the package family name if you don’t specify a license. This field will be autopopulated after you specify a license.
|
||||||
|
|
||||||
- **Required appx dependencies**: Specify the appx dependency packages that are required for the installation of the app
|
- **Required appx dependencies**: Specify the appx dependency packages that are required for the installation of the app
|
||||||
|
|
||||||
@ -44,25 +44,25 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> You can find more information about command-line options for Msiexec.exe [here](/windows/win32/msi/command-line-options).
|
> You can find more information about command-line options for Msiexec.exe [here](/windows/win32/msi/command-line-options).
|
||||||
|
|
||||||
- **Command line arguments**: Optionally, append additional command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE
|
- **Command line arguments**: Optionally, append more command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE
|
||||||
|
|
||||||
- **Continue installations after failure**: Optionally, specify if you want to continue installing additional apps if this app fails to install
|
- **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install
|
||||||
|
|
||||||
- **Restart required**: Optionally, specify if you want to initiate a reboot after a successful install of this app
|
- **Restart required**: Optionally, specify if you want to reboot after a successful install of this app
|
||||||
|
|
||||||
- **Required win32 app dependencies**: Optionally, specify additional files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract).
|
- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract).
|
||||||
|
|
||||||
### Exe or other installer
|
### Exe or other installer
|
||||||
|
|
||||||
- **Command line arguments**: Append the command line arguments with a silent flag (required). Optionally, append additional flags
|
- **Command line arguments**: Append the command line arguments with a silent flag (required). Optionally, append more flags
|
||||||
|
|
||||||
- **Return Codes**: Specify the return codes for success and success with restart (0 and 3010 by default respectively) Any return code that is not listed will be interpreted as failure. The text boxes are space delimited.
|
- **Return Codes**: Specify the return codes for success and success with restart (0 and 3010 by default respectively) Any return code that is not listed will be interpreted as failure. The text boxes are space delimited.
|
||||||
|
|
||||||
- **Continue installations after failure**: Optionally, specify if you want to continue installing additional apps if this app fails to install
|
- **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install
|
||||||
|
|
||||||
- **Restart required**: Optionally, specify if you want to initiate a reboot after a successful install of this app
|
- **Restart required**: Optionally, specify if you want to reboot after a successful install of this app
|
||||||
|
|
||||||
- **Required win32 app dependencies**: Optionally, specify additional files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract).
|
- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract).
|
||||||
|
|
||||||
|
|
||||||
<span id="adv" />
|
<span id="adv" />
|
||||||
@ -72,7 +72,7 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate
|
|||||||
|
|
||||||
1. In the **Available customizations** pane, go to **Runtime settings** > **ProvisioningCommands** > **PrimaryContext** > **Command**.
|
1. In the **Available customizations** pane, go to **Runtime settings** > **ProvisioningCommands** > **PrimaryContext** > **Command**.
|
||||||
|
|
||||||
2. Enter a name for the first app, and then click **Add**.
|
2. Enter a name for the first app, and then select **Add**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -90,9 +90,9 @@ Universal apps that you can distribute in the provisioning package can be line-o
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. For **ApplicationFile**, click **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
3. For **ApplicationFile**, select **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
||||||
|
|
||||||
4. For **DependencyAppxFiles**, click **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
4. For **DependencyAppxFiles**, select **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -102,11 +102,11 @@ Universal apps that you can distribute in the provisioning package can be line-o
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
- Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and click **Add**.
|
- Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and select **Add**.
|
||||||
|
|
||||||
6. In the **Available customizations** pane, click the **LicenseProductId** that you just added.
|
6. In the **Available customizations** pane, select the **LicenseProductId** that you just added.
|
||||||
|
|
||||||
7. For **LicenseInstall**, click **Browse**, navigate to the license file that you renamed *\<file name>*.**ms-windows-store-license**, and select the license file.
|
7. For **LicenseInstall**, select **Browse**, navigate to the license file that you renamed *\<file name>*.**ms-windows-store-license**, and select the license file.
|
||||||
|
|
||||||
[Learn more about distributing offline apps from the Microsoft Store for Business.](/microsoft-store/distribute-offline-apps)
|
[Learn more about distributing offline apps from the Microsoft Store for Business.](/microsoft-store/distribute-offline-apps)
|
||||||
|
|
||||||
@ -119,7 +119,7 @@ Universal apps that you can distribute in the provisioning package can be line-o
|
|||||||
|
|
||||||
1. In the **Available customizations** pane, go to **Runtime settings** > **Certificates** > **ClientCertificates**.
|
1. In the **Available customizations** pane, go to **Runtime settings** > **Certificates** > **ClientCertificates**.
|
||||||
|
|
||||||
2. Enter a **CertificateName** and then click **Add**.
|
2. Enter a **CertificateName** and then select **Add**.
|
||||||
|
|
||||||
2. Enter the **CertificatePassword**.
|
2. Enter the **CertificatePassword**.
|
||||||
|
|
||||||
@ -136,12 +136,12 @@ For details about the settings you can customize in provisioning packages, see [
|
|||||||
|
|
||||||
## Build your package
|
## Build your package
|
||||||
|
|
||||||
1. When you are done configuring the provisioning package, on the **File** menu, click **Save**.
|
1. When you are done configuring the provisioning package, on the **File** menu, select **Save**.
|
||||||
|
|
||||||
2. Read the warning that project files may contain sensitive information, and click **OK**.
|
2. Read the warning that project files may contain sensitive information, and select **OK**.
|
||||||
> **Important** When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
|
> **Important** When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
|
||||||
|
|
||||||
3. On the **Export** menu, click **Provisioning package**.
|
3. On the **Export** menu, select **Provisioning package**.
|
||||||
|
|
||||||
4. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.**
|
4. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.**
|
||||||
|
|
||||||
@ -154,25 +154,25 @@ For details about the settings you can customize in provisioning packages, see [
|
|||||||
|
|
||||||
- **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
|
- **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
|
||||||
|
|
||||||
- **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package.
|
- **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select...** and choosing the certificate you want to use to sign the package.
|
||||||
|
|
||||||
**Important**
|
**Important**
|
||||||
We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store and any package signed with that certificate thereafter can be applied silently.
|
We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store and any package signed with that certificate thereafter can be applied silently.
|
||||||
|
|
||||||
7. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.<p>
|
7. Select **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.<p>
|
||||||
Optionally, you can click **Browse** to change the default output location.
|
Optionally, you can select **Browse** to change the default output location.
|
||||||
|
|
||||||
8. Click **Next**.
|
8. Select **Next**.
|
||||||
|
|
||||||
9. Click **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.<p>
|
9. Select **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.<p>
|
||||||
If you need to cancel the build, click **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**.
|
If you need to cancel the build, select **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**.
|
||||||
|
|
||||||
10. If your build fails, an error message will show up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again.<p>
|
10. If your build fails, an error message will show up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again.<p>
|
||||||
If your build is successful, the name of the provisioning package, output directory, and project directory will be shown.
|
If your build is successful, the name of the provisioning package, output directory, and project directory will be shown.
|
||||||
|
|
||||||
- If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, click **Back** to change the output package name and path, and then click **Next** to start another build.
|
- If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select **Back** to change the output package name and path, and then select **Next** to start another build.
|
||||||
|
|
||||||
- If you are done, click **Finish** to close the wizard and go back to the **Customizations Page**.
|
- If you are done, select **Finish** to close the wizard and go back to the **Customizations Page**.
|
||||||
|
|
||||||
11. Select the **output location** link to go to the location of the package. You can provide that .ppkg to others through any of the following methods:
|
11. Select the **output location** link to go to the location of the package. You can provide that .ppkg to others through any of the following methods:
|
||||||
|
|
||||||
@ -184,32 +184,24 @@ For details about the settings you can customize in provisioning packages, see [
|
|||||||
|
|
||||||
- Email
|
- Email
|
||||||
|
|
||||||
- USB tether (mobile only)
|
|
||||||
|
|
||||||
- NFC (mobile only)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
**Next step**: [How to apply a provisioning package](provisioning-apply-package.md)
|
**Next step**: [How to apply a provisioning package](provisioning-apply-package.md)
|
||||||
|
|
||||||
## Learn more
|
## Learn more
|
||||||
|
|
||||||
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
|
||||||
|
|
||||||
|
## Related articles
|
||||||
|
|
||||||
## Related topics
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
||||||
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Apply a provisioning package (Windows 10)
|
title: Apply a provisioning package (Windows 10/11)
|
||||||
description: Provisioning packages can be applied to a device during the first-run experience (OOBE) and after ("runtime").
|
description: Provisioning packages can be applied to a device during the first-run experience (OOBE) and after ("runtime").
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
@ -8,8 +8,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 08/22/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -19,19 +18,16 @@ manager: dansimp
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
Provisioning packages can be applied to a device during the first-run experience (out-of-box experience or "OOBE") and after ("runtime").
|
Provisioning packages can be applied to client devices during the first-run experience (out-of-box experience or "OOBE") and after ("runtime").
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>Applying a provisioning package to a desktop device requires administrator privileges on the device.
|
>
|
||||||
|
> - Applying a provisioning package to a desktop device requires administrator privileges on the device.
|
||||||
|
> - You can interrupt a long-running provisioning process by pressing ESC.
|
||||||
|
|
||||||
## Desktop editions
|
## During initial setup, from a USB drive
|
||||||
|
|
||||||
>[!NOTE]
|
|
||||||
>In Windows 10, version 1709, you can interrupt a long-running provisioning process by pressing ESC.
|
|
||||||
|
|
||||||
### During initial setup, from a USB drive
|
|
||||||
|
|
||||||
1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**.
|
1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**.
|
||||||
|
|
||||||
@ -41,11 +37,11 @@ Provisioning packages can be applied to a device during the first-run experience
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. The next screen asks you to select a provisioning source. Select **Removable Media** and tap **Next**.
|
3. The next screen asks you to select a provisioning source. Select **Removable Media** and select **Next**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
4. Select the provisioning package (\*.ppkg) that you want to apply, and tap **Next**.
|
4. Select the provisioning package (`.ppkg`) that you want to apply, and select **Next**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -53,54 +49,21 @@ Provisioning packages can be applied to a device during the first-run experience
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
|
## After setup, from a USB drive, network folder, or SharePoint site
|
||||||
|
|
||||||
### After setup, from a USB drive, network folder, or SharePoint site
|
|
||||||
|
|
||||||
Insert the USB drive to a desktop computer, navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install. For a provisioning package stored on a network folder or on a SharePoint site, navigate to the provisioning package and double-click it to begin installation.
|
Insert the USB drive to a desktop computer, navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install. For a provisioning package stored on a network folder or on a SharePoint site, navigate to the provisioning package and double-click it to begin installation.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
## Mobile editions
|
## Related articles
|
||||||
|
|
||||||
### Using removable media
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
1. Insert an SD card containing the provisioning package into the device.
|
|
||||||
2. Navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
3. Click **Add**.
|
|
||||||
|
|
||||||
4. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
### Copying the provisioning package to the device
|
|
||||||
|
|
||||||
1. Connect the device to your PC through USB.
|
|
||||||
|
|
||||||
2. On the PC, select the provisioning package that you want to use to provision the device and then drag and drop the file to your device.
|
|
||||||
|
|
||||||
3. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Related topics
|
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Windows Configuration Designer command-line interface (Windows 10)
|
title: Windows Configuration Designer command-line interface (Windows 10/11)
|
||||||
description:
|
description: Learn more about the ICD syntax, switches, and arguments that you can use in the Windows Configuration Designer command-line interface for Windows10/11 client devices.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,8 +8,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -19,11 +18,11 @@ manager: dansimp
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
You can use the Windows Configuration Designer command-line interface (CLI) to automate the building of provisioning packages.
|
You can use the Windows Configuration Designer command-line interface (CLI) to automate the building of provisioning packages.
|
||||||
|
|
||||||
- IT pros can use the Windows Configuration Designer CLI to require less re-tooling of existing processes. You must run the Windows Configuration Designer CLI from a command window with administrator privileges.
|
- IT pros can use the Windows Configuration Designer CLI to require less retooling of existing processes. You must run the Windows Configuration Designer CLI from a command window with administrator privileges.
|
||||||
|
|
||||||
- You must use the Windows Configuration Designer CLI and edit the customizations.xml sources to create a provisioning package with multivariant support. You need the customizations.xml file as one of the inputs to the Windows Configuration Designer CLI to build a provisioning package. For more information, see [Create a provisioning package with multivariant settings](provisioning-multivariant.md).
|
- You must use the Windows Configuration Designer CLI and edit the customizations.xml sources to create a provisioning package with multivariant support. You need the customizations.xml file as one of the inputs to the Windows Configuration Designer CLI to build a provisioning package. For more information, see [Create a provisioning package with multivariant settings](provisioning-multivariant.md).
|
||||||
|
|
||||||
@ -31,7 +30,7 @@ You can use the Windows Configuration Designer command-line interface (CLI) to a
|
|||||||
|
|
||||||
## Syntax
|
## Syntax
|
||||||
|
|
||||||
```
|
``` cmd
|
||||||
icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:<path_to_ppkg>
|
icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:<path_to_ppkg>
|
||||||
[/StoreFile:<path_to_storefile>] [/MSPackageRoot:<path_to_mspackage_directory>] [/OEMInputXML:<path_to_xml>]
|
[/StoreFile:<path_to_storefile>] [/MSPackageRoot:<path_to_mspackage_directory>] [/OEMInputXML:<path_to_xml>]
|
||||||
[/ProductName:<product_name>] [/Variables:<name>:<value>] [[+|-]Encrypted] [[+|-]Overwrite] [/?]
|
[/ProductName:<product_name>] [/Variables:<name>:<value>] [[+|-]Encrypted] [[+|-]Overwrite] [/?]
|
||||||
@ -45,28 +44,20 @@ icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:
|
|||||||
| /PackagePath | Yes | Specifies the path and the package name where the built provisioning package will be saved. |
|
| /PackagePath | Yes | Specifies the path and the package name where the built provisioning package will be saved. |
|
||||||
| /StoreFile | No</br></br></br>See Important note. | For partners using a settings store other than the default store(s) used by Windows Configuration Designer, use this parameter to specify the path to one or more comma-separated Windows settings store file. By default, if you don't specify a settings store file, the settings store that's common to all Windows editions will be loaded by Windows Configuration Designer.</br></br></br>**Important** If you use this parameter, you must not use /MSPackageRoot or /OEMInputXML. |
|
| /StoreFile | No</br></br></br>See Important note. | For partners using a settings store other than the default store(s) used by Windows Configuration Designer, use this parameter to specify the path to one or more comma-separated Windows settings store file. By default, if you don't specify a settings store file, the settings store that's common to all Windows editions will be loaded by Windows Configuration Designer.</br></br></br>**Important** If you use this parameter, you must not use /MSPackageRoot or /OEMInputXML. |
|
||||||
| /Variables | No | Specifies a semicolon separated `<name>` and `<value>` macro pair. The format for the argument must be `<name>=<value>`. |
|
| /Variables | No | Specifies a semicolon separated `<name>` and `<value>` macro pair. The format for the argument must be `<name>=<value>`. |
|
||||||
| Encrypted | No | Denotes whether the provisioning package should be built with encryption. Windows Configuration Designer auto-generates the decryption password and includes this information in the output.</br></br></br>Precede with + for encryption or - for no encryption. The default is no encryption. |
|
| Encrypted | No | Denotes whether the provisioning package should be built with encryption. Windows Configuration Designer autogenerates the decryption password and includes this information in the output.</br></br></br>Precede with `+` for encryption, or `-` for no encryption. The default is no encryption. |
|
||||||
| Overwrite | No | Denotes whether to overwrite an existing provisioning package.</br></br></br>Precede with + to overwrite an existing package or - if you don't want to overwrite an existing package. The default is false (don't overwrite). |
|
| Overwrite | No | Denotes whether to overwrite an existing provisioning package.</br></br></br>Precede with + to overwrite an existing package or - if you don't want to overwrite an existing package. The default is false (don't overwrite). |
|
||||||
| /? | No | Lists the switches and their descriptions for the command-line tool or for certain commands. |
|
| /? | No | Lists the switches and their descriptions for the command-line tool or for certain commands. |
|
||||||
|
|
||||||
|
## Related articles
|
||||||
|
|
||||||
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
## Related topics
|
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Create a provisioning package (Windows 10)
|
title: Create a provisioning package (Windows 10/11)
|
||||||
description: Learn how to create a provisioning package for Windows 10, which lets you quickly configure a device without having to install a new image.
|
description: Learn how to create a provisioning package for Windows 10/11, which lets you quickly configure a device without having to install a new image.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,20 +8,19 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
# Create a provisioning package for Windows 10
|
# Create a provisioning package
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
You can use Windows Configuration Designer to create a provisioning package (.ppkg) that contains customization settings, and then apply the provisioning package to a device running Windows 10 or Windows 10 Mobile.
|
You can use Windows Configuration Designer to create a provisioning package (`.ppkg`) that contains customization settings, and then apply the provisioning package to a device running Windows client.
|
||||||
|
|
||||||
>[Learn how to install Windows Configuration Designer.](provisioning-install-icd.md)
|
>[Learn how to install Windows Configuration Designer.](provisioning-install-icd.md)
|
||||||
|
|
||||||
@ -30,26 +29,20 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
|||||||
|
|
||||||
## Start a new project
|
## Start a new project
|
||||||
|
|
||||||
1. Open Windows Configuration Designer:
|
1. Open Windows Configuration Designer: From either the Start menu or Start menu search, type **Windows Configuration Designer**, and then select the **Windows Configuration Designer** shortcut.
|
||||||
- From either the Start screen or Start menu search, type **Windows Configuration Designer**, and then select the **Windows Configuration Designer** shortcut.
|
|
||||||
|
|
||||||
or
|
|
||||||
|
|
||||||
- If you installed Windows Configuration Designer from the ADK, navigate to `C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Imaging and Configuration Designer\x86` (on an x64 computer) or `C:\Program Files\Windows Kits\10\Assessment and Deployment Kit\Imaging and Configuration Designer\x86\ICD.exe` (on an x86 computer), and then select **ICD.exe**.
|
|
||||||
|
|
||||||
2. Select your desired option on the **Start** page, which offers multiple options for creating a provisioning package, as shown in the following image:
|
2. Select your desired option on the **Start** page, which offers multiple options for creating a provisioning package, as shown in the following image:
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
- The following wizard options provide a simple interface for configuring common settings for desktop, mobile, and kiosk devices:
|
- The following wizard options provide a simple interface for configuring common settings for desktop and kiosk devices:
|
||||||
|
|
||||||
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
||||||
- [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md)
|
|
||||||
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
||||||
- [Instructions for HoloLens wizard](/hololens/hololens-provisioning)
|
- [Instructions for HoloLens wizard](/hololens/hololens-provisioning)
|
||||||
- [Instructions for Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub)
|
- [Instructions for Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub)
|
||||||
|
|
||||||
Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop, mobile, and kiosk devices, see [What you can configure using Configuration Designer wizards](provisioning-packages.md#configuration-designer-wizards).
|
Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop and kiosk devices, see [What you can configure using Configuration Designer wizards](provisioning-packages.md#configuration-designer-wizards).
|
||||||
|
|
||||||
- The **Advanced provisioning** option opens a new project with all the runtime settings available. (The rest of this procedure uses advanced provisioning.)
|
- The **Advanced provisioning** option opens a new project with all the runtime settings available. (The rest of this procedure uses advanced provisioning.)
|
||||||
|
|
||||||
@ -64,10 +57,9 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
|||||||
|
|
||||||
|
|
||||||
| Windows edition | Settings available for customization | Provisioning package can apply to |
|
| Windows edition | Settings available for customization | Provisioning package can apply to |
|
||||||
|-----------------------------------|-----------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------|
|
|---|---|---|
|
||||||
| All Windows editions | Common settings | All Windows 10 devices |
|
| All Windows editions | Common settings | All Windows client devices |
|
||||||
| All Windows desktop editions | Common settings and settings specific to desktop devices | All Windows 10 desktop editions (Home, Pro, Enterprise, Pro Education, Enterprise Education) |
|
| All Windows desktop editions | Common settings and settings specific to desktop devices | All Windows client desktop editions (Home, Pro, Enterprise, Pro Education, Enterprise Education) |
|
||||||
| All Windows mobile editions | Common settings and settings specific to mobile devices | All Windows 10 Mobile devices |
|
|
||||||
| Windows 10 IoT Core | Common settings and settings specific to Windows 10 IoT Core | All Windows 10 IoT Core devices |
|
| Windows 10 IoT Core | Common settings and settings specific to Windows 10 IoT Core | All Windows 10 IoT Core devices |
|
||||||
| Windows 10 Holographic | Common settings and settings specific to Windows 10 Holographic | [Microsoft HoloLens](/hololens/hololens-provisioning) |
|
| Windows 10 Holographic | Common settings and settings specific to Windows 10 Holographic | [Microsoft HoloLens](/hololens/hololens-provisioning) |
|
||||||
| Common to Windows 10 Team edition | Common settings and settings specific to Windows 10 Team | [Microsoft Surface Hub](/surface-hub/provisioning-packages-for-surface-hub) |
|
| Common to Windows 10 Team edition | Common settings and settings specific to Windows 10 Team | [Microsoft Surface Hub](/surface-hub/provisioning-packages-for-surface-hub) |
|
||||||
@ -80,28 +72,37 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
|||||||
|
|
||||||
6. In the **Available customizations** pane, you can now configure settings for the package.
|
6. In the **Available customizations** pane, you can now configure settings for the package.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Configure settings
|
## Configure settings
|
||||||
|
|
||||||
For an advanced provisioning project, Windows Configuration Designer opens the **Available customizations** pane. The example in the following image is based on **All Windows desktop editions** settings.
|
For an advanced provisioning project, Windows Configuration Designer opens the **Available customizations** pane. The example in the following image is based on **All Windows desktop editions** settings.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
The settings in Windows Configuration Designer are based on Windows 10 configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](./how-it-pros-can-use-configuration-service-providers.md).
|
The settings in Windows Configuration Designer are based on Windows client configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](./how-it-pros-can-use-configuration-service-providers.md).
|
||||||
|
|
||||||
The process for configuring settings is similar for all settings. The following table shows an example.
|
The process for configuring settings is similar for all settings. The following table shows an example.
|
||||||
|
|
||||||
<table>
|
1. Expand a category:
|
||||||
<tr><td><img src="../images/one.png" alt="step one"/></br>Expand a category.</td><td><img src="../images/icd-step1.png" alt="Expand Certificates category"/></td></tr>
|
|
||||||
<tr><td><img src="../images/two.png" alt="step two"/></br>Select a setting.</td><td><img src="../images/icd-step2.png" alt="Select ClientCertificates"/></td></tr>
|
|
||||||
<tr><td><img src="../images/three.png" alt="step three"/></br>Enter a value for the setting. Select <strong>Add</strong> if the button is displayed.</td><td><img src="../images/icd-step3.png" alt="Enter a name for the certificate"/></td></tr>
|
|
||||||
<tr><td><img src="../images/four.png" alt="step four"/></br>Some settings, such as this example, require additional information. In <strong>Available customizations</strong>, select the value you just created, and additional settings are displayed.</td><td><img src="../images/icd-step4.png" alt="Additional settings for client certificate"/></td></tr>
|
|
||||||
<tr><td><img src="../images/five.png" alt="step five"/></br>When the setting is configured, it is displayed in the <strong>Selected customizations</strong> pane.</td><td><img src="../images/icd-step5.png" alt="Selected customizations pane"/></td></tr>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
For details on each specific setting, see [Windows Provisioning settings reference](../wcd/wcd.md). The reference topic for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
|
:::image type="content" source="../images/icd-step1.png" alt-text="In Windows Configuration Designer, expand the Certificates category.":::
|
||||||
|
|
||||||
|
2. Select a setting:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/icd-step2.png" alt-text="In Windows Configuration Designer, select ClientCertificates.":::
|
||||||
|
|
||||||
|
3. Enter a value for the setting. Select **Add** if the button is displayed:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/icd-step3.png" alt-text="In Windows Configuration Designer, enter a name for the certificate.":::
|
||||||
|
|
||||||
|
4. Some settings, such as this example, require additional information. In **Available customizations**, select the value you just created, and more settings are displayed:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/icd-step4.png" alt-text="In Windows Configuration Designer, additional settings for client certificate are available.":::
|
||||||
|
|
||||||
|
5. When the setting is configured, it is displayed in the **Selected customizations** pane:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/icd-step5.png" alt-text="In Windows Configuration Designer, the selected customizations pane shows your settings.":::
|
||||||
|
|
||||||
|
For details on each specific setting, see [Windows Provisioning settings reference](../wcd/wcd.md). The reference article for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -120,7 +121,7 @@ For details on each specific setting, see [Windows Provisioning settings referen
|
|||||||
|
|
||||||
3. In the **Select security details for the provisioning package** window, you can select to encrypt and/or sign a provisioning package with a selected certificate, and then select **Next**. Both selections are optional:
|
3. In the **Select security details for the provisioning package** window, you can select to encrypt and/or sign a provisioning package with a selected certificate, and then select **Next**. Both selections are optional:
|
||||||
|
|
||||||
- **Encrypt package** - If you select this option, an auto-generated password will be shown on the screen.
|
- **Encrypt package** - If you select this option, an autogenerated password will be shown on the screen.
|
||||||
- **Sign package** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select** and choosing the certificate you want to use to sign the package.
|
- **Sign package** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select** and choosing the certificate you want to use to sign the package.
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
@ -148,19 +149,17 @@ For details on each specific setting, see [Windows Provisioning settings referen
|
|||||||
|
|
||||||
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
|
||||||
|
|
||||||
- [How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Endpoint Configuration Manager](/configmgr/mdm/deploy-use/bulk-enroll-devices-on-premises-mdm)
|
- [How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Endpoint Configuration Manager](/configmgr/mdm/deploy-use/bulk-enroll-devices-on-premises-mdm)
|
||||||
|
|
||||||
## Related topics
|
## Related articles
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: How provisioning works in Windows
|
title: How provisioning works in Windows 10/11
|
||||||
description: A provisioning package (.ppkg) is a container for a collection of configuration settings.
|
description: Learn more about how provisioning package work on Windows client devices. A provisioning package (.ppkg) is a container for a collection of configuration settings.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,8 +8,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 09/03/2021
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -21,11 +20,11 @@ manager: dansimp
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 11
|
- Windows 11
|
||||||
|
|
||||||
Provisioning packages in Windows 10 provide IT administrators with a simplified way to apply configuration settings to Windows 10 and 11 devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from <!-- the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) or through the --> Microsoft Store.
|
Provisioning packages in Windows client provide IT administrators with a simplified way to apply configuration settings to Windows client devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from <!-- the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) or through the --> Microsoft Store.
|
||||||
|
|
||||||
## Provisioning packages
|
## Provisioning packages
|
||||||
|
|
||||||
A provisioning package contains specific configurations/settings and assets that can be provided through a removable media or simply downloaded to the device.
|
A provisioning package contains specific configurations/settings and assets that can be provided through a removable media or downloaded to the device.
|
||||||
|
|
||||||
To enable adding multiple sets of settings or configurations, the configuration data used by the provisioning engine is built out of multiple configuration sources that consist of separate provisioning packages. Each provisioning package contains the provisioning data from a different source.
|
To enable adding multiple sets of settings or configurations, the configuration data used by the provisioning engine is built out of multiple configuration sources that consist of separate provisioning packages. Each provisioning package contains the provisioning data from a different source.
|
||||||
|
|
||||||
@ -69,7 +68,7 @@ When the provisioning engine selects a configuration, the Windows provisioning X
|
|||||||
|
|
||||||
## Provisioning engine
|
## Provisioning engine
|
||||||
|
|
||||||
The provisioning engine is the core component for managing provisioning and configuration at runtime in a device running Windows 10 or 11.
|
The provisioning engine is the core component for managing provisioning and configuration at runtime in a device running Windows 10/11.
|
||||||
|
|
||||||
The provisioning engine provides the following functionality:
|
The provisioning engine provides the following functionality:
|
||||||
|
|
||||||
@ -82,7 +81,7 @@ The provisioning engine provides the following functionality:
|
|||||||
|
|
||||||
## Configuration manager
|
## Configuration manager
|
||||||
|
|
||||||
The configuration manager provides the unified way of managing Windows 10 and 11 devices. Configuration is mainly done through the Open Mobile Alliance (OMA) Device Management (DM) and Client Provisioning (CP) protocols. The configuration manager handles and parses these protocol requests from different channels and passes them down to [Configuration Service Providers (CSPs)](/windows/client-management/mdm/configuration-service-provider-reference) to perform the specific management requests and settings.
|
The configuration manager provides the unified way of managing Windows 10/11 devices. Configuration is mainly done through the Open Mobile Alliance (OMA) Device Management (DM) and Client Provisioning (CP) protocols. The configuration manager handles and parses these protocol requests from different channels and passes them down to [Configuration Service Providers (CSPs)](/windows/client-management/mdm/configuration-service-provider-reference) to perform the specific management requests and settings.
|
||||||
|
|
||||||
The provisioning engine relies on configuration manager for all of the actual processing and application of a chosen configuration. The provisioning engine determines the stage of provisioning and, based on a set of keys, determines the set of configuration to send to the configuration manager. The configuration manager in turn parses and calls into the CSPs for the setting to be applied.
|
The provisioning engine relies on configuration manager for all of the actual processing and application of a chosen configuration. The provisioning engine determines the stage of provisioning and, based on a set of keys, determines the set of configuration to send to the configuration manager. The configuration manager in turn parses and calls into the CSPs for the setting to be applied.
|
||||||
|
|
||||||
@ -110,14 +109,6 @@ When a trigger occurs, provisioning is initiated for a particular provisioning s
|
|||||||
- **Update**: Runs after an update to apply potential updated settings changes.
|
- **Update**: Runs after an update to apply potential updated settings changes.
|
||||||
- **User**: runs during a user account first run to configure per-user settings.
|
- **User**: runs during a user account first run to configure per-user settings.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Device provisioning during OOBE
|
## Device provisioning during OOBE
|
||||||
|
|
||||||
The provisioning engine always applies provisioning packages persisted in the `C:\Recovery\Customizations` folder on the OS partition. When the provisioning engine applies provisioning packages in the `%ProgramData%\Microsoft\Provisioning` folder, certain runtime setting applications, such as the setting to install and configure Windows apps, may be extended past the OOBE pass and continually be processed in the background when the device gets to the desktop. Settings for configuring policies and certain crucial system configurations are always be completed before the first point at which they must take effect.
|
The provisioning engine always applies provisioning packages persisted in the `C:\Recovery\Customizations` folder on the OS partition. When the provisioning engine applies provisioning packages in the `%ProgramData%\Microsoft\Provisioning` folder, certain runtime setting applications, such as the setting to install and configure Windows apps, may be extended past the OOBE pass and continually be processed in the background when the device gets to the desktop. Settings for configuring policies and certain crucial system configurations are always be completed before the first point at which they must take effect.
|
||||||
@ -129,8 +120,8 @@ The following table shows how device provisioning can be initiated when a user f
|
|||||||
|
|
||||||
| Package delivery | Initiation method | Supported device |
|
| Package delivery | Initiation method | Supported device |
|
||||||
| --- | --- | --- |
|
| --- | --- | --- |
|
||||||
| Removable media - USB drive or SD card</br> (Packages must be placed at media root) | 5 fast taps on the Windows key to launch the provisioning UI |All Windows devices |
|
| Removable media - USB drive or SD card</br> (Packages must be placed at media root) | Five fast taps on the Windows key to launch the provisioning UI |All Windows devices |
|
||||||
| From an administrator device through machine-to-machine NFC or NFC tag</br>(The administrator device must run an app that can transfer the package over NFC) | 5 fast taps on the Windows key to launch the provisioning UI | Windows <!-- 10 Mobile devices and -->IoT Core devices |
|
| From an administrator device through machine-to-machine NFC or NFC tag</br>(The administrator device must run an app that can transfer the package over NFC) | Five fast taps on the Windows key to launch the provisioning UI | Windows IoT Core devices |
|
||||||
|
|
||||||
The provisioning engine always copies the acquired provisioning packages to the `%ProgramData%\Microsoft\Provisioning` folder before processing them during OOBE. The provisioning engine always applies provisioning packages embedded in the installed Windows image during Windows Setup OOBE pass regardless of whether the package is signed and trusted. When the provisioning engine applies an encrypted provisioning package on an end-user device during OOBE, users must first provide a valid password to decrypt the package. The provisioning engine also checks whether a provisioning package is signed and trusted; if it's not, the user must provide consent before the package is applied to the device.
|
The provisioning engine always copies the acquired provisioning packages to the `%ProgramData%\Microsoft\Provisioning` folder before processing them during OOBE. The provisioning engine always applies provisioning packages embedded in the installed Windows image during Windows Setup OOBE pass regardless of whether the package is signed and trusted. When the provisioning engine applies an encrypted provisioning package on an end-user device during OOBE, users must first provide a valid password to decrypt the package. The provisioning engine also checks whether a provisioning package is signed and trusted; if it's not, the user must provide consent before the package is applied to the device.
|
||||||
|
|
||||||
@ -143,8 +134,8 @@ At device runtime, stand-alone provisioning packages can be applied by user init
|
|||||||
| Package delivery | Initiation method | Supported device |
|
| Package delivery | Initiation method | Supported device |
|
||||||
| --- | --- | --- |
|
| --- | --- | --- |
|
||||||
| Removable media - USB drive or SD card</br>(Packages must be placed at media root) | **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** | All Windows devices |
|
| Removable media - USB drive or SD card</br>(Packages must be placed at media root) | **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** | All Windows devices |
|
||||||
| Downloaded from a network connection and copied to a local folder | Double-click the package file | Windows 10 for desktop editions devices |
|
| Downloaded from a network connection and copied to a local folder | Double-click the package file | Windows client for desktop editions devices |
|
||||||
| From an administrator device connected to the target device through USB tethering | Drag and drop the package file onto the target device | Windows <!--10 Mobile devices and -->IoT Core devices |
|
| From an administrator device connected to the target device through USB tethering | Drag and drop the package file onto the target device | Windows IoT Core devices |
|
||||||
|
|
||||||
When applying provisioning packages from a removable media attached to the device, the Settings UI allows viewing contents of a package before selecting the package for provisioning. To minimize the risk of the device being spammed by applying provisioning packages from unknown sources, a provisioning package can be signed and encrypted. Partners can also set policies to limit the application of provisioning packages at device runtime. Applying provisioning packages at device runtime requires administrator privilege. If the package is not signed or trusted, a user must provide consent before the package is applied to the device. If the package is encrypted, a valid password is needed to decrypt the package before it can be applied to the device.
|
When applying provisioning packages from a removable media attached to the device, the Settings UI allows viewing contents of a package before selecting the package for provisioning. To minimize the risk of the device being spammed by applying provisioning packages from unknown sources, a provisioning package can be signed and encrypted. Partners can also set policies to limit the application of provisioning packages at device runtime. Applying provisioning packages at device runtime requires administrator privilege. If the package is not signed or trusted, a user must provide consent before the package is applied to the device. If the package is encrypted, a valid password is needed to decrypt the package before it can be applied to the device.
|
||||||
|
|
||||||
@ -157,25 +148,16 @@ After a stand-alone provisioning package is applied to the device, the package i
|
|||||||
|
|
||||||
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
<!-- - Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922) -->
|
|
||||||
|
|
||||||
|
## Related articles
|
||||||
|
|
||||||
## Related topics
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Install Windows Configuration Designer (Windows 10)
|
title: Install Windows Configuration Designer (Windows 10/11)
|
||||||
description: Learn how to install and use Windows Configuration Designer so you can easily configure devices running Windows 10.
|
description: Learn how to install and use Windows Configuration Designer so you can easily configure devices running Windows 10/11.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,30 +8,35 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 10/16/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
# Install Windows Configuration Designer
|
# Install Windows Configuration Designer, and learn about any limitations
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
Use the Windows Configuration Designer tool to create provisioning packages to easily configure devices running Windows 10. Windows Configuration Designer is primarily designed for use by IT departments for business and educational institutions who need to provision bring-your-own-device (BYOD) and business-supplied devices.
|
Use the Windows Configuration Designer tool to create provisioning packages to easily configure devices running Windows client. Windows Configuration Designer is primarily used by IT departments for business and educational institutions who need to provision bring-your-own-device (BYOD) and business-supplied devices.
|
||||||
|
|
||||||
## Supported platforms
|
## Supported platforms
|
||||||
|
|
||||||
Windows Configuration Designer can create provisioning packages for Windows 10 desktop and mobile editions, including Windows 10 IoT Core, as well as Microsoft Surface Hub and Microsoft HoloLens. You can run Windows Configuration Designer on the following operating systems:
|
Windows Configuration Designer can create provisioning packages for Windows client desktop, including Windows IoT Core, Microsoft Surface Hub, and Microsoft HoloLens. You can run Windows Configuration Designer on the following operating systems:
|
||||||
|
|
||||||
|
**Client OS**:
|
||||||
|
|
||||||
|
- Windows 11
|
||||||
- Windows 10 - x86 and amd64
|
- Windows 10 - x86 and amd64
|
||||||
- Windows 8.1 Update - x86 and amd64
|
- Windows 8.1 Update - x86 and amd64
|
||||||
- Windows 8.1 - x86 and amd64
|
- Windows 8.1 - x86 and amd64
|
||||||
- Windows 8 - x86 and amd64
|
- Windows 8 - x86 and amd64
|
||||||
- Windows 7 - x86 and amd64
|
- Windows 7 - x86 and amd64
|
||||||
|
|
||||||
|
**Server OS**:
|
||||||
|
|
||||||
- Windows Server 2016
|
- Windows Server 2016
|
||||||
- Windows Server 2012 R2 Update
|
- Windows Server 2012 R2 Update
|
||||||
- Windows Server 2012 R2
|
- Windows Server 2012 R2
|
||||||
@ -39,54 +44,38 @@ Windows Configuration Designer can create provisioning packages for Windows 10 d
|
|||||||
- Windows Server 2008 R2
|
- Windows Server 2008 R2
|
||||||
|
|
||||||
>[!WARNING]
|
>[!WARNING]
|
||||||
>You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.
|
>You must run Windows Configuration Designer on Windows client to configure Azure Active Directory enrollment using any of the wizards.
|
||||||
|
|
||||||
## Install Windows Configuration Designer
|
## Install Windows Configuration Designer
|
||||||
|
|
||||||
On devices running Windows 10, you can install [the Windows Configuration Designer app from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22). To run Windows Configuration Designer on other operating systems or in languages other than English, install it from the [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit).
|
On devices running Windows client, you can install [the Windows Configuration Designer app](https://www.microsoft.com/store/apps/9nblggh4tx22) from the Microsoft Store.
|
||||||
|
|
||||||
>[!NOTE]
|
|
||||||
>If you install Windows Configuration Designer from both the ADK and Microsoft Store, the Store app will not open.
|
|
||||||
>
|
|
||||||
>The Windows Configuration Designer App from Microsoft Store currently supports only English. For a localized version of the Windows Configuration Designer, install it from the Windows ADK.
|
|
||||||
|
|
||||||
1. Go to [Download the Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) and select **Get Windows ADK** for the version of Windows 10 that you want to create provisioning packages for (version 1511, 1607, or 1703).
|
|
||||||
|
|
||||||
>[!NOTE]
|
|
||||||
>The rest of this procedure uses Windows ADK for Windows 10, version 1703 as an example.
|
|
||||||
|
|
||||||
2. Save **adksetup.exe** and then run it.
|
|
||||||
|
|
||||||
3. On the **Specify Location** page, select an installation path and then click **Next**.
|
|
||||||
>[!NOTE]
|
|
||||||
>The estimated disk space listed on this page applies to the full Windows ADK. If you only install Windows Configuration Designer, the space requirement is approximately 32 MB.
|
|
||||||
4. Make a selection on the **Windows Kits Privacy** page, and then click **Next**.
|
|
||||||
|
|
||||||
5. Accept the **License Agreement**, and then click **Next**.
|
|
||||||
|
|
||||||
6. On the **Select the features you want to install** page, clear all selections except **Configuration Designer**, and then click **Install**.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
## Current Windows Configuration Designer limitations
|
## Current Windows Configuration Designer limitations
|
||||||
|
|
||||||
- Windows Configuration Designer will not work properly if the Group Policy setting **Policies > Administrative Templates > Windows Components > Internet Explorer > Security Zones: Use only machine settings** is enabled. We recommend that you run Windows Configuration Designer on a different device, rather than change the security setting.
|
- Windows Configuration Designer doesn't work properly if the **Policies > Administrative Templates > Windows Components > Internet Explorer > Security Zones: Use only machine settings** Group Policy setting is enabled. Instead of changing the security setting, we recommend you run Windows Configuration Designer on a different device.
|
||||||
|
|
||||||
- You can only run one instance of Windows Configuration Designer on your computer at a time.
|
- You can only run one instance of Windows Configuration Designer on your computer at a time.
|
||||||
|
|
||||||
- Be aware that when adding apps and drivers, all files stored in the same folder will be imported and may cause errors during the build process.
|
- When adding apps and drivers, all files stored in the same folder are imported, and may cause errors during the build process.
|
||||||
|
|
||||||
- The Windows Configuration Designer UI does not support multivariant configurations. Instead, you must use the Windows Configuration Designer command-line interface to configure multivariant settings. For more information, see [Create a provisioning package with multivariant settings](provisioning-multivariant.md).
|
- The Windows Configuration Designer UI doesn't support multivariant configurations. Instead, you must use the Windows Configuration Designer command-line interface to configure multivariant settings. For more information, see [Create a provisioning package with multivariant settings](provisioning-multivariant.md).
|
||||||
|
|
||||||
- While you can open multiple projects at the same time within Windows Configuration Designer, you can only build one project at a time.
|
- In Windows Configuration Designer, you can only build one project at a time. You can open multiple projects at the same time, but you can only build one at a time.
|
||||||
|
|
||||||
- In order to enable the simplified authoring jscripts to work on a server SKU running Windows Configuration Designer, you need to explicitly enable **Allow websites to prompt for information using scripted windows**. Do this by opening Internet Explorer and then navigating to **Settings** > **Internet Options** > **Security** -> **Custom level** > **Allow websites to prompt for information using scripted windows**, and then choose **Enable**.
|
- To enable the simplified authoring jscripts to work on a server SKU running Windows Configuration Designer, you must enable **Allow websites to prompt for information using scripted windows**:
|
||||||
|
|
||||||
- If you copy a Windows Configuration Designer project from one PC to another PC, make sure that all the associated files for the deployment assets, such as apps and drivers, are copied along with the project to the same path as it was on the original PC.
|
1. Open Internet Explorer.
|
||||||
|
2. Go to **Settings** > **Internet Options** > **Security** > **Custom level**.
|
||||||
|
3. Select **Allow websites to prompt for information using scripted windows** > **Enable**.
|
||||||
|
|
||||||
For example, when you add a driver to a provisioned package, you must copy the .INF file to a local directory on the PC that is running Windows Configuration Designer. If you don't do this, and attempt to use a copied version of this project on a different PC, Windows Configuration Designer might attempt to resolve the path to the files that point to the original PC.
|
- If you copy a Windows Configuration Designer project from one PC to another PC, then:
|
||||||
|
|
||||||
- **Recommended**: Before starting, copy all source files to the PC running Windows Configuration Designer, rather than using external sources like network shares or removable drives. This reduces the risk of interrupting the build process from a temporary network issue or from disconnecting the USB device.
|
- Copy all the associated files for the deployment assets with the project, including apps and drivers.
|
||||||
|
- Copy all the files to the same path as the original PC.
|
||||||
|
|
||||||
|
For example, when you add a driver to a provisioned package, you must copy the `.INF` file to a local directory on the PC that's running Windows Configuration Designer. If you don't copy the `.INF` file, and use a copied version of this project on a different PC, then Windows Configuration Designer might resolve the file paths to the original PC.
|
||||||
|
|
||||||
|
- **Recommended**: Before starting, copy all source files to the PC running Windows Configuration Designer. Don't use external sources, like network shares or removable drives. Using local files reduces the risk of interrupting the build process from a network issue, or from disconnecting the USB device.
|
||||||
|
|
||||||
**Next step**: [How to create a provisioning package](provisioning-create-package.md)
|
**Next step**: [How to create a provisioning package](provisioning-create-package.md)
|
||||||
|
|
||||||
@ -94,27 +83,15 @@ On devices running Windows 10, you can install [the Windows Configuration Design
|
|||||||
|
|
||||||
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- Watch the video: [Provisioning Windows 10 Devices with New Tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
## Related articles
|
||||||
|
|
||||||
## Related topics
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a provisioning package with multivariant settings (Windows 10)
|
title: Create a provisioning package with multivariant settings (Windows 10/11)
|
||||||
description: Create a provisioning package with multivariant settings to customize the provisioned settings for defined conditions.
|
description: Create a provisioning package with multivariant settings to customize the provisioned settings for defined conditions.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
@ -7,8 +7,7 @@ ms.sitesec: library
|
|||||||
author: greg-lindsay
|
author: greg-lindsay
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 11/08/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
---
|
---
|
||||||
@ -19,7 +18,7 @@ ms.author: greglin
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
|
|
||||||
In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that will apply to devices set up for French and a different set of customization settings for devices set up for Japanese.
|
In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that will apply to devices set up for French and a different set of customization settings for devices set up for Japanese.
|
||||||
@ -37,38 +36,43 @@ A **Target** can have more than one **TargetState**, and a **TargetState** can h
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
The following table describes the logic for the target definition.
|
The following information describes the logic for the target definition:
|
||||||
|
|
||||||
<table><tr><td>When all <strong>Condition</strong> elements are TRUE, <strong>TargetState</strong> is TRUE.</td><td><img src="../images/icd-multi-targetstate-true.png" alt="Target state is true when all conditions are true"/></td></tr>
|
- When all **Condition** elements are TRUE, **TargetState** is TRUE:
|
||||||
<tr><td>If any of the <strong>TargetState</strong> elements is TRUE, <strong>Target</strong> is TRUE, and the <strong>Id</strong> can be used for setting customizations.</td><td><img src="../images/icd-multi-target-true.png" alt="Target is true if any target state is true"/></td></tr></table>
|
|
||||||
|
:::image type="content" source="../images/icd-multi-targetstate-true.png" alt-text="Target state is true when all conditions are true.":::
|
||||||
|
|
||||||
|
- If any of the **TargetState** elements is TRUE, **Target** is TRUE, and the **ID** can be used for setting customizations:
|
||||||
|
|
||||||
|
:::image type="content" source="../images/icd-multi-target-true.png" alt-text="Target is true if any target state is true":::
|
||||||
|
|
||||||
### Conditions
|
### Conditions
|
||||||
|
|
||||||
The following table shows the conditions supported in Windows 10 provisioning for a **TargetState**:
|
The following table shows the conditions supported in Windows client provisioning for a **TargetState**:
|
||||||
|
|
||||||
|
|
||||||
| Condition Name | Condition priority | Windows 10 Mobile | Windows 10 for desktop editions | Value type | Value description |
|
| Condition Name | Condition priority | Windows client for desktop editions | Value type | Value description |
|
||||||
| --- | --- | --- | --- | --- | --- |
|
| --- | --- | --- | --- | --- |
|
||||||
| MNC | P0 | Supported | Supported | Digit string | Use to target settings based on the Mobile Network Code (MNC) value. |
|
| MNC | P0 | Supported | Digit string | Use to target settings based on the Mobile Network Code (MNC) value. |
|
||||||
| MCC | P0 | Supported | Supported | Digit string | Use to target settings based on the Mobile Country Code (MCC) value. |
|
| MCC | P0 | Supported | Digit string | Use to target settings based on the Mobile Country Code (MCC) value. |
|
||||||
| SPN | P0 | Supported | Supported | String | Use to target settings based on the Service Provider Name (SPN) value. |
|
| SPN | P0 | Supported | String | Use to target settings based on the Service Provider Name (SPN) value. |
|
||||||
| PNN | P0 | Supported | Supported | String | Use to target settings based on public land mobile network (PLMN) Network Name value. |
|
| PNN | P0 | Supported | String | Use to target settings based on public land mobile network (PLMN) Network Name value. |
|
||||||
| GID1 | P0 | Supported | Supported | Digit string | Use to target settings based on the Group Identifier (level 1) value. |
|
| GID1 | P0 | Supported | Digit string | Use to target settings based on the Group Identifier (level 1) value. |
|
||||||
| ICCID | P0 | Supported | Supported | Digit string | Use to target settings based on the Integrated Circuit Card Identifier (ICCID) value. |
|
| ICCID | P0 | Supported | Digit string | Use to target settings based on the Integrated Circuit Card Identifier (ICCID) value. |
|
||||||
| Roaming | P0 | Supported | N/A | Boolean | Use to specify roaming. Set the value to **1** (roaming) or **0** (non-roaming). |
|
| Roaming | P0 | N/A | Boolean | Use to specify roaming. Set the value to **1** (roaming) or **0** (non-roaming). |
|
||||||
| UICC | P0 | Supported | N/A | Enumeration | Use to specify the Universal Integrated Circuit Card (UICC) state. Set the value to one of the following:</br></br></br>- 0 - Empty</br>- 1 - Ready</br>- 2 - Locked |
|
| UICC | P0 | N/A | Enumeration | Use to specify the Universal Integrated Circuit Card (UICC) state. Set the value to one of the following:</br></br></br>- 0 - Empty</br>- 1 - Ready</br>- 2 - Locked |
|
||||||
| UICCSLOT | P0 | Supported | N/A | Digit string | Use to specify the UICC slot. Set the value one of the following:</br></br></br>- 0 - Slot 0</br>- 1 - Slot 1 |
|
| UICCSLOT | P0 | N/A | Digit string | Use to specify the UICC slot. Set the value one of the following:</br></br></br>- 0 - Slot 0</br>- 1 - Slot 1 |
|
||||||
| ProcessorType | P1 | Supported | Supported | String | Use to target settings based on the processor type. |
|
| ProcessorType | P1 | Supported | String | Use to target settings based on the processor type. |
|
||||||
| ProcessorName | P1 | Supported | Supported | String | Use to target settings based on the processor name. |
|
| ProcessorName | P1 | Supported | String | Use to target settings based on the processor name. |
|
||||||
| AoAc ("Always On, Always Connected") | P1 | Supported | Supported | Boolean | Set the value to **0** (false) or **1** (true). If this condition is TRUE, the system supports the S0 low power idle model. |
|
| AoAc ("Always On, Always Connected") | P1 | Supported | Boolean | Set the value to **0** (false) or **1** (true). If this condition is TRUE, the system supports the S0 low power idle model. |
|
||||||
| PowerPlatformRole | P1 | Supported | Supported | Enumeration | Indicates the preferred power management profile. Set the value based on the [POWER_PLATFORM_ROLE enumeration](/windows/win32/api/winnt/ne-winnt-power_platform_role). |
|
| PowerPlatformRole | P1 | Supported | Enumeration | Indicates the preferred power management profile. Set the value based on the [POWER_PLATFORM_ROLE enumeration](/windows/win32/api/winnt/ne-winnt-power_platform_role). |
|
||||||
| Architecture | P1 | Supported | Supported | String | Matches the PROCESSOR_ARCHITECTURE environment variable. |
|
| Architecture | P1 | Supported | String | Matches the PROCESSOR_ARCHITECTURE environment variable. |
|
||||||
| Server | P1 | Supported | Supported | Boolean | Set the value to **0** (false) or **1** (true) to identify a server. |
|
| Server | P1 | Supported | Boolean | Set the value to **0** (false) or **1** (true) to identify a server. |
|
||||||
| Region | P1 | Supported | Supported | Enumeration | Use to target settings based on country/region, using the 2-digit alpha ISO code per [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2). |
|
| Region | P1 | Supported | Enumeration | Use to target settings based on country/region, using the 2-digit alpha ISO code per [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2). |
|
||||||
| Lang | P1 | Supported | Supported | Enumeration | Use to target settings based on language code, using the 2-digit [ISO 639 alpha-2 code](https://en.wikipedia.org/wiki/ISO_639). |
|
| Lang | P1 | Supported | Enumeration | Use to target settings based on language code, using the 2-digit [ISO 639 alpha-2 code](https://en.wikipedia.org/wiki/ISO_639). |
|
||||||
|
|
||||||
|
|
||||||
The matching types supported in Windows 10 are:
|
The matching types supported in Windows client are:
|
||||||
|
|
||||||
| Matching type | Syntax | Example |
|
| Matching type | Syntax | Example |
|
||||||
| --- | --- | --- |
|
| --- | --- | --- |
|
||||||
@ -79,7 +83,7 @@ The matching types supported in Windows 10 are:
|
|||||||
|
|
||||||
### TargetState priorities
|
### TargetState priorities
|
||||||
|
|
||||||
You can define more than one **TargetState** within a provisioning package to apply settings to devices that match device conditions. When the provisioning engine evalues each **TargetState**, more than one **TargetState** may fit current device conditions. To determine the order in which the settings are applied, the system assigns a priority to every **TargetState**.
|
You can define more than one **TargetState** within a provisioning package to apply settings to devices that match device conditions. When the provisioning engine evaluates each **TargetState**, more than one **TargetState** may fit current device conditions. To determine the order in which the settings are applied, the system assigns a priority to every **TargetState**.
|
||||||
|
|
||||||
A setting that matches a **TargetState** with a lower priority is applied before the setting that matches a **TargetState** with a higher priority. This means that a setting for the **TargetState** with the higher priority can overwrite a setting for the **TargetState** with the lower priority.
|
A setting that matches a **TargetState** with a lower priority is applied before the setting that matches a **TargetState** with a higher priority. This means that a setting for the **TargetState** with the higher priority can overwrite a setting for the **TargetState** with the lower priority.
|
||||||
|
|
||||||
@ -281,38 +285,29 @@ In this example, the **StoreFile** corresponds to the location of the settings s
|
|||||||
|
|
||||||
## Events that trigger provisioning
|
## Events that trigger provisioning
|
||||||
|
|
||||||
When you install the multivariant provisioning package on a Windows 10 device, the provisioning engine applies the matching condition settings at every event and triggers provisioning.
|
When you install the multivariant provisioning package on a Windows client device, the provisioning engine applies the matching condition settings at every event and triggers provisioning.
|
||||||
|
|
||||||
The following events trigger provisioning on Windows 10 devices:
|
The following events trigger provisioning on Windows client devices:
|
||||||
|
|
||||||
| Event | Windows 10 Mobile | Windows 10 for desktop editions |
|
| Event | Windows client for desktop editions |
|
||||||
| --- | --- | --- |
|
| --- | --- |
|
||||||
| System boot | Supported | Supported |
|
| System boot | Supported |
|
||||||
| Operating system update | Supported | Planned |
|
| Operating system update | Planned |
|
||||||
| Package installation during device first run experience | Supported | Supported |
|
| Package installation during device first run experience | Supported |
|
||||||
| Detection of SIM presence or update | Supported | Supported |
|
| Detection of SIM presence or update | Supported |
|
||||||
| Package installation at runtime | Supported | Supported |
|
| Package installation at runtime | Supported |
|
||||||
| Roaming detected | Supported | Not supported |
|
| Roaming detected | Not supported |
|
||||||
|
|
||||||
|
## Related articles
|
||||||
|
|
||||||
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Related topics
|
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
|
|
||||||
|
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
title: Provisioning packages (Windows)
|
title: Provisioning packages overview on Windows 10/11
|
||||||
description: With Windows 10 and Windows 11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
|
description: With Windows 10 and Windows 11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. Learn about what provisioning packages, are and what they do.
|
||||||
ms.assetid: 287706E5-063F-4AB5-902C-A0DF6D0730BC
|
ms.assetid: 287706E5-063F-4AB5-902C-A0DF6D0730BC
|
||||||
ms.reviewer:
|
ms.reviewer: gkomatsu
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
@ -11,7 +11,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 09/07/2021
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Provisioning packages for Windows
|
# Provisioning packages for Windows
|
||||||
@ -24,9 +24,9 @@ ms.date: 09/07/2021
|
|||||||
|
|
||||||
Windows provisioning makes it easy for IT administrators to configure end-user devices without imaging. Using Windows provisioning, an IT administrator can easily specify desired configuration and settings required to enroll the devices into management and then apply that configuration to target devices in a matter of minutes. It is best suited for small- to medium-sized businesses with deployments that range from tens to a few hundred computers.
|
Windows provisioning makes it easy for IT administrators to configure end-user devices without imaging. Using Windows provisioning, an IT administrator can easily specify desired configuration and settings required to enroll the devices into management and then apply that configuration to target devices in a matter of minutes. It is best suited for small- to medium-sized businesses with deployments that range from tens to a few hundred computers.
|
||||||
|
|
||||||
A provisioning package (.ppkg) is a container for a collection of configuration settings. With Windows 10 and 11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
|
A provisioning package (.ppkg) is a container for a collection of configuration settings. With Windows client, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
|
||||||
|
|
||||||
Provisioning packages are simple enough that with a short set of written instructions, a student or non-technical employee can use them to configure their device. This can result in a significant reduction in the time required to configure multiple devices in your organization.
|
Provisioning packages are simple enough that with a short set of written instructions, a student, or non-technical employee can use them to configure their device. This can result in a significant reduction in the time required to configure multiple devices in your organization.
|
||||||
|
|
||||||
<!-- The [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) includes the Windows Configuration Designer, a tool for configuring provisioning packages.-->
|
<!-- The [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) includes the Windows Configuration Designer, a tool for configuring provisioning packages.-->
|
||||||
Windows Configuration Designer is available as an [app in the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22).
|
Windows Configuration Designer is available as an [app in the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22).
|
||||||
@ -75,17 +75,18 @@ Provisioning packages can be:
|
|||||||
|
|
||||||
The following table describes settings that you can configure using the wizards in Windows Configuration Designer to create provisioning packages.
|
The following table describes settings that you can configure using the wizards in Windows Configuration Designer to create provisioning packages.
|
||||||
|
|
||||||
|
| Step | Description | Desktop wizard | Kiosk wizard | HoloLens wizard |
|
||||||
|
| --- | --- | --- | --- | --- |
|
||||||
|
| Set up device | Assign device name, enter product key to upgrade Windows, configure shared used, remove pre-installed software | ✔️ | ✔️ | ✔️ |
|
||||||
|
| Set up network | Connect to a Wi-Fi network | ✔️ | ✔️ | ✔️ |
|
||||||
|
| Account management | Enroll device in Active Directory, enroll device in Azure Active Directory, or create a local administrator account | ✔️ | ✔️ | ✔️ |
|
||||||
|
| Bulk Enrollment in Azure AD | Enroll device in Azure Active Directory</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup). | ❌ | ❌ | ❌ |
|
||||||
|
| Add applications | Install applications using the provisioning package. | ✔️ | ✔️ | ❌ |
|
||||||
|
| Add certificates | Include a certificate file in the provisioning package. | ✔️ | ✔️ | ✔️ |
|
||||||
|
| Configure kiosk account and app | Create local account to run the kiosk mode app, specify the app to run in kiosk mode | ❌ | ✔️ | ❌ |
|
||||||
|
| Configure kiosk common settings | Set tablet mode, configure welcome and shutdown screens, turn off timeout settings | ❌ | ✔️ | ❌ |
|
||||||
|
| Developer Setup | Enable Developer Mode | ❌ | ❌ | ✔️ |
|
||||||
|
|
||||||
<table><tr><td align="left"><strong>Step</strong></td><td align="left"><strong>Description</strong></td><td><strong>Desktop wizard</strong></td><td><strong>Kiosk wizard</strong></td><td><strong>HoloLens wizard</strong></td></tr>
|
|
||||||
<tr><td valign="top">Set up device</td><td valign="top">Assign device name,</br>enter product key to upgrade Windows,</br>configure shared used,</br>remove pre-installed software</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
|
||||||
<tr><td valign="top">Set up network</td><td valign="top">Connect to a Wi-Fi network</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
|
||||||
<tr><td valign="top">Account management</td><td valign="top">Enroll device in Active Directory,</br>enroll device in Azure Active Directory,</br>or create a local administrator account</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="no1"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
|
||||||
<tr><td valign="top">Bulk Enrollment in Azure AD</td><td valign="top">Enroll device in Azure Active Directory</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no5"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no4"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no2"/></td></tr>
|
|
||||||
<tr><td valign="top">Add applications</td><td valign="top">Install applications using the provisioning package.</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no3"/></td></tr>
|
|
||||||
<tr><td valign="top">Add certificates</td><td valign="top">Include a certificate file in the provisioning package.</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
|
||||||
<tr><td valign="top">Configure kiosk account and app</td><td valign="top">Create local account to run the kiosk mode app,</br>specify the app to run in kiosk mode</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no6"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no7"/></td></tr>
|
|
||||||
<tr><td valign="top">Configure kiosk common settings</td><td valign="top">Set tablet mode,</br>configure welcome and shutdown screens,</br>turn off timeout settings</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no8"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no9"/></td></tr>
|
|
||||||
<tr><td valign="top">Developer Setup</td><td valign="top">Enable Developer Mode.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no22"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no11"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr></table>
|
|
||||||
|
|
||||||
<!-- <table><tr><td align="left"><strong>Step</strong></td><td align="left"><strong>Description</strong></td><td><strong>Desktop wizard</strong></td><td align="center"><strong>Mobile wizard</strong></td><td><strong>Kiosk wizard</strong></td><td><strong>HoloLens wizard</strong></td></tr> -->
|
<!-- <table><tr><td align="left"><strong>Step</strong></td><td align="left"><strong>Description</strong></td><td><strong>Desktop wizard</strong></td><td align="center"><strong>Mobile wizard</strong></td><td><strong>Kiosk wizard</strong></td><td><strong>HoloLens wizard</strong></td></tr> -->
|
||||||
<!-- <tr><td valign="top">Set up device</td><td valign="top">Assign device name,</br>enter product key to upgrade Windows,</br>configure shared used,</br>remove pre-installed software</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></br>(Only device name and upgrade key)</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr> -->
|
<!-- <tr><td valign="top">Set up device</td><td valign="top">Assign device name,</br>enter product key to upgrade Windows,</br>configure shared used,</br>remove pre-installed software</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></br>(Only device name and upgrade key)</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr> -->
|
||||||
@ -99,7 +100,6 @@ The following table describes settings that you can configure using the wizards
|
|||||||
<!-- <tr><td valign="top">Developer Setup</td><td valign="top">Enable Developer Mode.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="n777o"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no444"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no888"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr></table> -->
|
<!-- <tr><td valign="top">Developer Setup</td><td valign="top">Enable Developer Mode.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="n777o"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no444"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no888"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr></table> -->
|
||||||
|
|
||||||
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
||||||
- [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md)
|
|
||||||
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
||||||
- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#wizard)
|
- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#wizard)
|
||||||
|
|
||||||
@ -113,10 +113,10 @@ The following table provides some examples of settings that you can configure us
|
|||||||
|
|
||||||
|
|
||||||
| Customization options | Examples |
|
| Customization options | Examples |
|
||||||
|--------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------|
|
|---|---|
|
||||||
| Bulk Active Directory join and device name | Join devices to Active Directory domain and assign device names using hardware-specific serial numbers or random characters |
|
| Bulk Active Directory join and device name | Join devices to Active Directory domain and assign device names using hardware-specific serial numbers or random characters |
|
||||||
| Applications | Windows apps, line-of-business applications |
|
| Applications | Windows apps, line-of-business applications |
|
||||||
| Bulk enrollment into MDM | Automatic enrollment into a third-party MDM service\* |
|
| Bulk enrollment into MDM | Automatic enrollment into a third-party MDM service <br/><br/>Using a provisioning package for auto-enrollment to Microsoft Endpoint Manager isn't supported. To enroll devices, use the Configuration Manager console. |
|
||||||
| Certificates | Root certification authority (CA), client certificates |
|
| Certificates | Root certification authority (CA), client certificates |
|
||||||
| Connectivity profiles | Wi-Fi, proxy settings, Email |
|
| Connectivity profiles | Wi-Fi, proxy settings, Email |
|
||||||
| Enterprise policies | Security restrictions (password, device lock, camera, and so on), encryption, update settings |
|
| Enterprise policies | Security restrictions (password, device lock, camera, and so on), encryption, update settings |
|
||||||
@ -124,9 +124,6 @@ The following table provides some examples of settings that you can configure us
|
|||||||
| Start menu customization | Start menu layout, application pinning |
|
| Start menu customization | Start menu layout, application pinning |
|
||||||
| Other | Home and lock screen wallpaper, computer name, domain join, DNS settings, and so on |
|
| Other | Home and lock screen wallpaper, computer name, domain join, DNS settings, and so on |
|
||||||
|
|
||||||
\* Using a provisioning package for auto-enrollment to Microsoft Endpoint Manager is not supported. Use the Configuration Manager console to enroll devices.
|
|
||||||
|
|
||||||
|
|
||||||
For details about the settings you can customize in provisioning packages, see [Windows Provisioning settings reference]( https://go.microsoft.com/fwlink/p/?LinkId=619012).
|
For details about the settings you can customize in provisioning packages, see [Windows Provisioning settings reference]( https://go.microsoft.com/fwlink/p/?LinkId=619012).
|
||||||
|
|
||||||
<!-- ## Changes to provisioning in Windows 10, version 1607 -->
|
<!-- ## Changes to provisioning in Windows 10, version 1607 -->
|
||||||
@ -136,7 +133,7 @@ For details about the settings you can customize in provisioning packages, see [
|
|||||||
|
|
||||||
WCD, simplified common provisioning scenarios.
|
WCD, simplified common provisioning scenarios.
|
||||||
|
|
||||||

|
:::image type="content" source="../images/icd.png" alt-text="Configuration Designer options":::
|
||||||
|
|
||||||
WCD supports the following scenarios for IT administrators:
|
WCD supports the following scenarios for IT administrators:
|
||||||
|
|
||||||
@ -146,34 +143,31 @@ WCD supports the following scenarios for IT administrators:
|
|||||||
|
|
||||||
* **Advanced provisioning (deployment of classic (Win32) and Universal Windows Platform (UWP) apps, and certificates)** – Allows an IT administrator to use WCD to open provisioning packages in the advanced settings editor and include apps for deployment on end-user devices.
|
* **Advanced provisioning (deployment of classic (Win32) and Universal Windows Platform (UWP) apps, and certificates)** – Allows an IT administrator to use WCD to open provisioning packages in the advanced settings editor and include apps for deployment on end-user devices.
|
||||||
|
|
||||||
* **Mobile device enrollment into management** - Enables IT administrators to purchase off-the-shelf retail Windows devices and enroll them into mobile device management (MDM) before handing them to end-users in the organization. IT administrators can use WCD to specify the management end-point and apply the configuration on target devices by connecting them to a Windows PC (tethered deployment) or through an SD card. Supported management end-points include:
|
* **Mobile device enrollment into management** - Enables IT administrators to purchase off-the-shelf retail Windows devices and enroll them into mobile device management (MDM) before handing them to end users in the organization. IT administrators can use WCD to specify the management endpoint and apply the configuration on target devices by connecting them to a Windows PC (tethered deployment) or through an SD card. Supported management end-points include:
|
||||||
|
|
||||||
* Microsoft Intune (certificate-based enrollment)
|
- Microsoft Intune (certificate-based enrollment)
|
||||||
* AirWatch (password-string based enrollment)
|
- AirWatch (password-string based enrollment)
|
||||||
* Mobile Iron (password-string based enrollment)
|
- MobileIron (password-string based enrollment)
|
||||||
* Other MDMs (cert-based enrollment)
|
- Other MDMs (cert-based enrollment)
|
||||||
|
|
||||||
<!-- > [!NOTE] -->
|
<!-- > [!NOTE] -->
|
||||||
<!-- > Windows ICD in Windows 10, version 1607, also provided a wizard to create provisioning packages for school PCs. To learn more, see [Set up students' PCs to join domain](/education/windows/). -->
|
<!-- > Windows ICD in Windows 10, version 1607, also provided a wizard to create provisioning packages for school PCs. To learn more, see [Set up students' PCs to join domain](/education/windows/). -->
|
||||||
|
|
||||||
## Learn more
|
## Learn more
|
||||||
|
|
||||||
For more information about provisioning, watch the following videos:
|
For more information about provisioning, watch the following video:
|
||||||
|
|
||||||
- [Provisioning Windows 10 devices with new tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
- [Provisioning Windows client devices with new tools](https://go.microsoft.com/fwlink/p/?LinkId=615921)
|
||||||
|
|
||||||
- [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
## Related articles
|
||||||
|
|
||||||
## Related topics
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
- [Use Windows Configuration Designer to configure Windows 10 Mobile devices](../mobile-devices/provisioning-configure-mobile.md)
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: PowerShell cmdlets for provisioning Windows 10 (Windows 10)
|
title: PowerShell cmdlets for provisioning Windows 10/11 (Windows 10/11)
|
||||||
description:
|
description: Learn more about the Windows PowerShell cmdlets that you can use with Provisioning packages on Windows10/11 client desktop devices.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,32 +8,68 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
# PowerShell cmdlets for provisioning Windows 10 (reference)
|
# PowerShell cmdlets for provisioning Windows client (reference)
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
Windows 10, version 1703, ships with Windows Provisioning PowerShell cmdlets. These cmdlets make it easy to script the following functions.
|
Windows client includes Provisioning PowerShell cmdlets. These cmdlets make it easy to script the following functions.
|
||||||
|
|
||||||
|
## cmdlets
|
||||||
|
|
||||||
|
- **Add-ProvisioningPackage**: Applies a provisioning package.
|
||||||
|
|
||||||
<table><tr><th>Cmdlet</th><th>Use this cmdlet to</th><th>Syntax</th></tr>
|
Syntax:
|
||||||
<tr><td>Add-ProvisioningPackage</td><td> Apply a provisioning package</td><td><code>Add-ProvisioningPackage [-Path] <string> [-ForceInstall] [-LogsFolder <string>] [-QuietInstall] [-WprpFile <string>] [<CommonParameters>]</code></td></tr>
|
|
||||||
<tr><td rowspan="3">Remove-ProvisioningPackage</td><td rowspan="3">Remove a provisioning package</td><td> <code>Remove-ProvisioningPackage -PackageId <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr><tr><td> <code>Remove-ProvisioningPackage -Path <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr><tr><td> <code>Remove-ProvisioningPackage -AllInstalledPackages [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr>
|
- `Add-ProvisioningPackage [-Path] <string> [-ForceInstall] [-LogsFolder <string>] [-QuietInstall] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
<tr><td rowspan="3">Get-ProvisioningPackage </td><td rowspan="3"> Get information about an installed provisioning package </td><td> <code>Get-ProvisioningPackage -PackageId <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr><tr><td><code>Get-ProvisioningPackage -Path <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr><tr><td> <code>Get-ProvisioningPackage -AllInstalledPackages [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr>
|
|
||||||
<tr><td rowspan="2"> Export-ProvisioningPackage</td><td rowspan="2"> Extract the contents of a provisioning package</td><td> <code>Export-ProvisioningPackage -PackageId <string> -OutputFolder <string> [-Overwrite] [-AnswerFileOnly] [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr><tr><td> <code>Export-ProvisioningPackage -Path <string> -OutputFolder <string> [-Overwrite] [-AnswerFileOnly] [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]</code> </td></tr>
|
- **Remove-ProvisioningPackage**: Removes a provisioning package.
|
||||||
<tr><td> Install-TrustedProvisioningCertificate </td><td> Adds a certificate to the Trusted Certificate store </td><td><code>Install-TrustedProvisioningCertificate <path to local certificate file on disk></code> </td></tr>
|
|
||||||
<tr><td>Get-TrustedProvisioningCertificate</td><td> List all installed trusted provisioning certificates; use this cmdlet to get the certificate thumbprint to use with the <strong>Uninstall-TrustedProvisioningCertificate</strong> cmdlet</td><td><code>Get-TrustedProvisioningCertificate</code></td></tr>
|
Syntax:
|
||||||
<tr><td>Uninstall-TrustedProvisioningCertificate </td><td> Remove a previously installed provisioning certificate</td><td><code>Uninstall-TrustedProvisioningCertificate <thumbprint></code></td></tr>
|
|
||||||
</table>
|
- `Remove-ProvisioningPackage -PackageId <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
- `Remove-ProvisioningPackage -Path <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
- `Remove-ProvisioningPackage -AllInstalledPackages [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
|
||||||
|
- **Get-ProvisioningPackage**: Gets information about an installed provisioning package.
|
||||||
|
|
||||||
|
Syntax:
|
||||||
|
|
||||||
|
- `Get-ProvisioningPackage -PackageId <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
- `Get-ProvisioningPackage -Path <string> [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
- `Get-ProvisioningPackage -AllInstalledPackages [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
|
||||||
|
- **Export-ProvisioningPackage**: Extracts the contents of a provisioning package.
|
||||||
|
|
||||||
|
Syntax:
|
||||||
|
|
||||||
|
- `Export-ProvisioningPackage -PackageId <string> -OutputFolder <string> [-Overwrite] [-AnswerFileOnly] [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
- `Export-ProvisioningPackage -Path <string> -OutputFolder <string> [-Overwrite] [-AnswerFileOnly] [-LogsFolder <string>] [-WprpFile <string>] [<CommonParameters>]`
|
||||||
|
|
||||||
|
- **Install-TrustedProvisioningCertificate**: Adds a certificate to the Trusted Certificate store.
|
||||||
|
|
||||||
|
Syntax:
|
||||||
|
|
||||||
|
- `Install-TrustedProvisioningCertificate <path to local certificate file on disk>`
|
||||||
|
|
||||||
|
- **Get-TrustedProvisioningCertificate**: Lists all installed trusted provisioning certificates. Use this cmdlet to get the certificate thumbprint to use with the `Uninstall-TrustedProvisioningCertificate` cmdlet.
|
||||||
|
|
||||||
|
Syntax:
|
||||||
|
|
||||||
|
- `Get-TrustedProvisioningCertificate`
|
||||||
|
|
||||||
|
- **Uninstall-TrustedProvisioningCertificate**: Removes a previously installed provisioning certificate.
|
||||||
|
|
||||||
|
Syntax:
|
||||||
|
|
||||||
|
- `Uninstall-TrustedProvisioningCertificate <thumbprint>`
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
> You can use Get-Help to get usage help on any command. For example: `Get-Help Add-ProvisioningPackage`
|
> You can use Get-Help to get usage help on any command. For example: `Get-Help Add-ProvisioningPackage`
|
||||||
@ -51,9 +87,9 @@ Trace logs are captured when using cmdlets. The following logs are available in
|
|||||||
>When applying provisioning packages using Powershell cmdlets, the default behavior is to suppress the prompt that appears when applying an unsigned provisioning package. This is by design so that provisioning packages can be applied as part of existing scripts.
|
>When applying provisioning packages using Powershell cmdlets, the default behavior is to suppress the prompt that appears when applying an unsigned provisioning package. This is by design so that provisioning packages can be applied as part of existing scripts.
|
||||||
|
|
||||||
|
|
||||||
## Related topics
|
## Related articles
|
||||||
|
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
@ -63,15 +99,3 @@ Trace logs are captured when using cmdlets. The following logs are available in
|
|||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Use a script to install a desktop app in provisioning packages (Windows 10)
|
title: Use a script to install a desktop app in provisioning packages (Windows 10/11)
|
||||||
description: With Windows 10, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
|
description: With Windows 10/11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,8 +8,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -19,14 +18,9 @@ manager: dansimp
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
This walkthrough describes how to leverage the ability to include scripts in a Windows 10 provisioning package to install Win32 applications. Scripted operations other than installing apps can also be performed, however, some care is needed in order to avoid unintended behavior during script execution (see [Remarks](#remarks) below).
|
This walkthrough describes how to include scripts in a Windows client provisioning package to install Win32 applications. Scripted operations other than installing apps can also be performed. However, some care is needed to avoid unintended behavior during script execution (see [Remarks](#remarks) below).
|
||||||
|
|
||||||
>**Prerequisite**: [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit), version 1511 or higher
|
|
||||||
|
|
||||||
>[!NOTE]
|
|
||||||
>This scenario is only supported for installing applications on Windows 10 for desktop, version 1511 or higher.
|
|
||||||
|
|
||||||
## Assemble the application assets
|
## Assemble the application assets
|
||||||
|
|
||||||
@ -34,12 +28,11 @@ This walkthrough describes how to leverage the ability to include scripts in a W
|
|||||||
|
|
||||||
2. If you need to include a directory structure of files, you will need to cab the assets for easy inclusion in the provisioning packages.
|
2. If you need to include a directory structure of files, you will need to cab the assets for easy inclusion in the provisioning packages.
|
||||||
|
|
||||||
<span id="cab" />
|
|
||||||
## Cab the application assets
|
## Cab the application assets
|
||||||
|
|
||||||
1. Create a .DDF file as below, replacing *file1* and *file2* with the files you want to package, and adding the name of file/directory.
|
1. Create a `.DDF` file as below, replacing *file1* and *file2* with the files you want to package, and adding the name of file/directory.
|
||||||
|
|
||||||
```
|
```ddf
|
||||||
;*** MSDN Sample Source Code MakeCAB Directive file example
|
;*** MSDN Sample Source Code MakeCAB Directive file example
|
||||||
|
|
||||||
;
|
;
|
||||||
@ -89,15 +82,15 @@ This walkthrough describes how to leverage the ability to include scripts in a W
|
|||||||
|
|
||||||
2. Use makecab to create the cab files.
|
2. Use makecab to create the cab files.
|
||||||
|
|
||||||
```
|
```makecab
|
||||||
Makecab -f <path to DDF file>
|
Makecab -f <path to DDF file>
|
||||||
```
|
```
|
||||||
|
|
||||||
## Create the script to install the application
|
## Create the script to install the application
|
||||||
|
|
||||||
In Windows 10, version 1607 and earlier, create a script to perform whatever work is needed to install the application(s). The following examples are provided to help get started authoring the orchestrator script that will execute the required installers. In practice, the orchestrator script may reference many more assets than those in these examples.
|
Create a script to perform whatever work is needed to install the application(s). The following examples are provided to help get started authoring the orchestrator script that will execute the required installers. In practice, the orchestrator script may reference many more assets than those in these examples.
|
||||||
|
|
||||||
In Windows 10, version 1703, you don’t need to create an orchestrator script. You can have one command line per app. If necessary, you can create a script that logs the output per app, as mentioned below (rather than one orchestrator script for the entire provisioning package).
|
You don’t need to create an orchestrator script. You can have one command line per app. If necessary, you can create a script that logs the output per app, as mentioned below (rather than one orchestrator script for the entire provisioning package).
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>All actions performed by the script must happen silently, showing no UI and requiring no user interaction.
|
>All actions performed by the script must happen silently, showing no UI and requiring no user interaction.
|
||||||
@ -108,15 +101,16 @@ In Windows 10, version 1703, you don’t need to create an orchestrator script.
|
|||||||
|
|
||||||
Granular logging is not built in, so the logging must be built into the script itself. Here is an example script that logs ‘Hello World’ to a logfile. When run on the device, the logfile will be available after provisioning is completed. As you will see in the following examples, it’s recommended that you log each action that your script performs.
|
Granular logging is not built in, so the logging must be built into the script itself. Here is an example script that logs ‘Hello World’ to a logfile. When run on the device, the logfile will be available after provisioning is completed. As you will see in the following examples, it’s recommended that you log each action that your script performs.
|
||||||
|
|
||||||
```
|
```log
|
||||||
set LOGFILE=%SystemDrive%\HelloWorld.log
|
set LOGFILE=%SystemDrive%\HelloWorld.log
|
||||||
echo Hello, World >> %LOGFILE%
|
echo Hello, World >> %LOGFILE%
|
||||||
```
|
```
|
||||||
|
|
||||||
### .exe example
|
### .exe example
|
||||||
|
|
||||||
This example script shows how to create a log output file on the system drive, install an app from a .exe installer, and echo the results to the log file.
|
This example script shows how to create a log output file on the system drive, install an app from an `.exe` installer, and echo the results to the log file.
|
||||||
|
|
||||||
```
|
```exe
|
||||||
set LOGFILE=%SystemDrive%\Fiddler_install.log
|
set LOGFILE=%SystemDrive%\Fiddler_install.log
|
||||||
echo Installing Fiddler.exe >> %LOGFILE%
|
echo Installing Fiddler.exe >> %LOGFILE%
|
||||||
fiddler4setup.exe /S >> %LOGFILE%
|
fiddler4setup.exe /S >> %LOGFILE%
|
||||||
@ -127,7 +121,7 @@ echo result: %ERRORLEVEL% >> %LOGFILE%
|
|||||||
|
|
||||||
This is the same as the previous installer, but installs the app from an MSI installer. Notice that msiexec is called with the /quiet flag in order to meet the silent requirement of scripts run from within a provisioning package.
|
This is the same as the previous installer, but installs the app from an MSI installer. Notice that msiexec is called with the /quiet flag in order to meet the silent requirement of scripts run from within a provisioning package.
|
||||||
|
|
||||||
```
|
```msi
|
||||||
set LOGFILE=%SystemDrive%\IPOverUsb_install.log
|
set LOGFILE=%SystemDrive%\IPOverUsb_install.log
|
||||||
echo Installing IpOverUsbInstaller.msi >> %LOGFILE%
|
echo Installing IpOverUsbInstaller.msi >> %LOGFILE%
|
||||||
msiexec /i IpOverUsbInstaller.msi /quiet >> %LOGFILE%
|
msiexec /i IpOverUsbInstaller.msi /quiet >> %LOGFILE%
|
||||||
@ -136,9 +130,9 @@ echo result: %ERRORLEVEL% >> %LOGFILE%
|
|||||||
|
|
||||||
### PowerShell example
|
### PowerShell example
|
||||||
|
|
||||||
This is an example script with logging that shows how to run a powershell script from the provisioning commands setting. Note that the PowerShell script referenced from this example must also be included in the package, and obey the same requirements as all scripts run from within the provisioning package: it must execute silently, with no user interaction.
|
This is an example script with logging that shows how to run a PowerShell script from the provisioning commands setting. The PowerShell script referenced from this example must also be included in the package, and obey the same requirements as all scripts run from within the provisioning package: it must execute silently, with no user interaction.
|
||||||
|
|
||||||
```
|
```powershell
|
||||||
set LOGFILE=%SystemDrive%\my_powershell_script.log
|
set LOGFILE=%SystemDrive%\my_powershell_script.log
|
||||||
echo Running my_powershell_script.ps1 in system context >> %LOGFILE%
|
echo Running my_powershell_script.ps1 in system context >> %LOGFILE%
|
||||||
echo Executing "PsExec.exe -accepteula -i -s cmd.exe /c powershell.exe my_powershell_script.ps1" >> %LOGFILE%
|
echo Executing "PsExec.exe -accepteula -i -s cmd.exe /c powershell.exe my_powershell_script.ps1" >> %LOGFILE%
|
||||||
@ -147,11 +141,12 @@ echo result: %ERRORLEVEL% >> %LOGFILE%
|
|||||||
```
|
```
|
||||||
|
|
||||||
<span id="cab-extract" />
|
<span id="cab-extract" />
|
||||||
|
|
||||||
### Extract from a .CAB example
|
### Extract from a .CAB example
|
||||||
|
|
||||||
This example script shows expansion of a .cab from the provisioning commands script, as well as installation of the expanded setup.exe
|
This example script shows expansion of a .cab from the provisioning commands script, and installation of the expanded setup.exe
|
||||||
|
|
||||||
```
|
```cab
|
||||||
set LOGFILE=%SystemDrive%\install_my_app.log
|
set LOGFILE=%SystemDrive%\install_my_app.log
|
||||||
echo Expanding installer_assets.cab >> %LOGFILE%
|
echo Expanding installer_assets.cab >> %LOGFILE%
|
||||||
expand -r installer_assets.cab -F:* . >> %LOGFILE%
|
expand -r installer_assets.cab -F:* . >> %LOGFILE%
|
||||||
@ -163,9 +158,9 @@ echo result: %ERRORLEVEL% >> %LOGFILE%
|
|||||||
|
|
||||||
### Calling multiple scripts in the package
|
### Calling multiple scripts in the package
|
||||||
|
|
||||||
In Windows 10, version 1703, your provisioning package can include multiple CommandLines.
|
Your provisioning package can include multiple CommandLines.
|
||||||
|
|
||||||
In Windows 10, version 1607 and earlier, you are allowed one CommandLine per provisioning package. The batch files shown above are orchestrator scripts that manage the installation and call any other scripts included in the provisioning package. The orchestrator script is what should be invoked from the CommandLine specified in the package.
|
You are allowed one CommandLine per provisioning package. The batch files shown above are orchestrator scripts that manage the installation and call any other scripts included in the provisioning package. The orchestrator script is what should be invoked from the CommandLine specified in the package.
|
||||||
|
|
||||||
Here’s a table describing this relationship, using the PowerShell example from above:
|
Here’s a table describing this relationship, using the PowerShell example from above:
|
||||||
|
|
||||||
@ -174,16 +169,16 @@ Here’s a table describing this relationship, using the PowerShell example from
|
|||||||
| --- | --- | --- |
|
| --- | --- | --- |
|
||||||
| ProvisioningCommands/DeviceContext/CommandLine | cmd /c PowerShell_Example.bat | The command line needed to invoke the orchestrator script. |
|
| ProvisioningCommands/DeviceContext/CommandLine | cmd /c PowerShell_Example.bat | The command line needed to invoke the orchestrator script. |
|
||||||
| ProvisioningCommands/DeviceContext/CommandFiles | PowerShell_Example.bat | The single orchestrator script referenced by the command line that handles calling into the required installers or performing any other actions such as expanding cab files. This script must do the required logging. |
|
| ProvisioningCommands/DeviceContext/CommandFiles | PowerShell_Example.bat | The single orchestrator script referenced by the command line that handles calling into the required installers or performing any other actions such as expanding cab files. This script must do the required logging. |
|
||||||
| ProvisioningCommands/DeviceContext/CommandFiles | my_powershell_script.ps1 | Other assets referenced by the orchestrator script. In this example there is only one, but there could be many assets referenced here. One common use case is using the orchestrator to call a series of install.exe or setup.exe installers to install several applications. Each of those installers must be included as an asset here. |
|
| ProvisioningCommands/DeviceContext/CommandFiles | my_powershell_script.ps1 | Other assets referenced by the orchestrator script. In this example, there is only one, but there could be many assets referenced here. One common use case is using the orchestrator to call a series of install.exe or setup.exe installers to install several applications. Each of those installers must be included as an asset here. |
|
||||||
|
|
||||||
|
|
||||||
### Add script to provisioning package (Windows 10, version 1607)
|
### Add script to provisioning package
|
||||||
|
|
||||||
When you have the batch file written and the referenced assets ready to include, you can add them to a provisioning package in the Window Configuration Designer.
|
When you have the batch file written and the referenced assets ready to include, you can add them to a provisioning package in the Window Configuration Designer.
|
||||||
|
|
||||||
Using Windows Configuration Designer, specify the full details of how the script should be run in the CommandLine setting in the provisioning package. This includes flags or any other parameters that you would normally type on the command line. So for example if the package contained an app installer called install.exe and a script used to automate the install called InstallMyApp.bat, the `ProvisioningCommands/DeviceContext/CommandLine` setting should be configured to:
|
Using Windows Configuration Designer, specify the full details of how the script should be run in the CommandLine setting in the provisioning package. This includes flags or any other parameters that you would normally type on the command line. So for example if the package contained an app installer called install.exe and a script used to automate the install called InstallMyApp.bat, the `ProvisioningCommands/DeviceContext/CommandLine` setting should be configured to:
|
||||||
|
|
||||||
```
|
```bat
|
||||||
cmd /c InstallMyApp.bat
|
cmd /c InstallMyApp.bat
|
||||||
```
|
```
|
||||||
|
|
||||||
@ -201,20 +196,21 @@ When you are done, [build the package](provisioning-create-package.md#build-pack
|
|||||||
|
|
||||||
|
|
||||||
### Remarks
|
### Remarks
|
||||||
|
|
||||||
1. No user interaction or console output is supported via ProvisioningCommands. All work needs to be silent. If your script attempts to do any of the following it will cause undefined behavior, and could put the device in an unrecoverable state if executed during setup or the Out of Box Experience:
|
1. No user interaction or console output is supported via ProvisioningCommands. All work needs to be silent. If your script attempts to do any of the following it will cause undefined behavior, and could put the device in an unrecoverable state if executed during setup or the Out of Box Experience:
|
||||||
a. Echo to console
|
a. Echo to console
|
||||||
b. Display anything on the screen
|
b. Display anything on the screen
|
||||||
c. Prompt the user with a dialog or install wizard
|
c. Prompt the user with a dialog or install wizard
|
||||||
2. When applied at first boot, provisioning runs early in the boot sequence and before a user context has been established; care must be taken to only include installers that can run at this time. Other installers can be provisioned via a management tool.
|
2. When applied at first boot, provisioning runs early in the boot sequence and before a user context has been established; care must be taken to only include installers that can run at this time. Other installers can be provisioned via a management tool.
|
||||||
3. If the device is put into an unrecoverable state because of a bad script, you can reset it using [recovery options in Windows 10](https://support.microsoft.com/help/12415/windows-10-recovery-options).
|
3. If the device is put into an unrecoverable state because of a bad script, you can reset it using [recovery options in Windows client](https://support.microsoft.com/help/12415/windows-10-recovery-options).
|
||||||
4. The CommandFile assets are deployed on the device to a temporary folder unique to each package.
|
4. The CommandFile assets are deployed on the device to a temporary folder unique to each package.
|
||||||
- For Windows 10, version 1607 and earlier:
|
|
||||||
a. For packages added during the out of box experience, this is usually in `%WINDIR%\system32\config\systemprofile\appdata\local\Temp\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands`
|
1. For packages added during the out of box experience, this is usually in `%WINDIR%\system32\config\systemprofile\appdata\local\Temp\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands\0`
|
||||||
b. For packages added by double-clicking on an already deployed device, this will be in the temp folder for the user executing the PPKG: `%TMP%\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands`
|
|
||||||
- For Windows 10, version 1703:
|
|
||||||
a. For packages added during the out of box experience, this is usually in `%WINDIR%\system32\config\systemprofile\appdata\local\Temp\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands\0`
|
|
||||||
The `0` after `Commands\` refers to the installation order and indicates the first app to be installed. The number will increment for each app in the package.
|
The `0` after `Commands\` refers to the installation order and indicates the first app to be installed. The number will increment for each app in the package.
|
||||||
b. For packages added by double-clicking on an already deployed device, this will be in the temp folder for the user executing the provisioning package: `%TMP%\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands\0`
|
|
||||||
|
2. For packages added by double-clicking on an already deployed device, this will be in the temp folder for the user executing the provisioning package: `%TMP%\ProvisioningPkgTmp\<{PackageIdGuid}>\Commands\0`
|
||||||
|
|
||||||
5. The command line will be executed with the directory the CommandFiles were deployed to as the working directory. This means you do not need to specific the full path to assets in the command line or from within any script.
|
5. The command line will be executed with the directory the CommandFiles were deployed to as the working directory. This means you do not need to specific the full path to assets in the command line or from within any script.
|
||||||
6. The runtime provisioning component will attempt to run the scripts from the provisioning package at the earliest point possible, depending on the stage when the PPKG was added. For example, if the package was added during the Out-of-Box Experience, it will be run immediately after the package is applied, while the out of box experience is still happening. This is before the user account configuration options are presented to the user. A spinning progress dialog will appear and “please wait” will be displayed on the screen.
|
6. The runtime provisioning component will attempt to run the scripts from the provisioning package at the earliest point possible, depending on the stage when the PPKG was added. For example, if the package was added during the Out-of-Box Experience, it will be run immediately after the package is applied, while the out of box experience is still happening. This is before the user account configuration options are presented to the user. A spinning progress dialog will appear and “please wait” will be displayed on the screen.
|
||||||
|
|
||||||
@ -223,15 +219,15 @@ When you are done, [build the package](provisioning-create-package.md#build-pack
|
|||||||
7. The scripts are executed in the background as the rest of provisioning continues to run. For packages added on existing systems using the double-click to install, there is no notification that provisioning or script execution has completed
|
7. The scripts are executed in the background as the rest of provisioning continues to run. For packages added on existing systems using the double-click to install, there is no notification that provisioning or script execution has completed
|
||||||
|
|
||||||
|
|
||||||
## Related topics
|
## Related articles
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Uninstall a provisioning package - reverted settings (Windows 10)
|
title: Uninstall a provisioning package - reverted settings (Windows 10/11)
|
||||||
description: This topic lists the settings that are reverted when you uninstall a provisioning package.
|
description: This article lists the settings that are reverted when you uninstall a provisioning package on Windows 10/11 desktop client devices.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,8 +8,7 @@ author: greg-lindsay
|
|||||||
ms.author: greglin
|
ms.author: greglin
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 07/27/2017
|
ms.reviewer: gkomatsu
|
||||||
ms.reviewer:
|
|
||||||
manager: dansimp
|
manager: dansimp
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -19,9 +18,9 @@ manager: dansimp
|
|||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 11
|
||||||
|
|
||||||
When you uninstall a provisioning package, only certain settings are revertible. This topic lists the settings that are reverted when you uninstall a provisioning package.
|
When you uninstall a provisioning package, only certain settings are revertible. This article lists the settings that are reverted when you uninstall a provisioning package.
|
||||||
|
|
||||||
|
|
||||||
As an administrator, you can uninstall by using the **Add or remove a package for work or school** option available under **Settings** > **Accounts** > **Access work or school**.
|
As an administrator, you can uninstall by using the **Add or remove a package for work or school** option available under **Settings** > **Accounts** > **Access work or school**.
|
||||||
@ -79,19 +78,15 @@ Here is the list of revertible settings based on configuration service providers
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Related topics
|
## Related articles
|
||||||
|
|
||||||
- [Provisioning packages for Windows 10](provisioning-packages.md)
|
- [Provisioning packages for Windows client](provisioning-packages.md)
|
||||||
- [How provisioning works in Windows 10](provisioning-how-it-works.md)
|
- [How provisioning works in Windows client](provisioning-how-it-works.md)
|
||||||
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
- [Install Windows Configuration Designer](provisioning-install-icd.md)
|
||||||
- [Create a provisioning package](provisioning-create-package.md)
|
- [Create a provisioning package](provisioning-create-package.md)
|
||||||
- [Apply a provisioning package](provisioning-apply-package.md)
|
- [Apply a provisioning package](provisioning-apply-package.md)
|
||||||
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md)
|
||||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
|
||||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
x
Reference in New Issue
Block a user