deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge branch 'master' into aljupudi-560146-systempolciesmissingentries

Browse Source
This commit is contained in:
Diana Hanson 2021-12-10 11:51:44 -07:00 committed by GitHub
commit 2bed7ed667
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
665 changed files with 3024 additions and 6247 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
browsers/internet-explorer/ie11-faq/faq-for-it-pros-ie11.yml
View File

@ -24,9 +24,6 @@ summary: |
sections: sections:
- name: Ignored - name: Ignored
questions: questions:
- question: |
Frequently Asked Questions
answer: |
- question: | - question: |
What operating system does IE11 run on? What operating system does IE11 run on?
answer: | answer: |
@ -250,4 +247,4 @@ additionalContent: |
- [Microsoft Edge - Deployment Guide for IT Pros](/microsoft-edge/deploy/) - [Microsoft Edge - Deployment Guide for IT Pros](/microsoft-edge/deploy/)
- [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](../ie11-deploy-guide/index.md) - [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](../ie11-deploy-guide/index.md)
- [Internet Explorer Administration Kit 11 (IEAK 11) - Administrator's Guide](../ie11-ieak/index.md) - [Internet Explorer Administration Kit 11 (IEAK 11) - Administrator's Guide](../ie11-ieak/index.md)

19
education/includes/education-content-updates.md
View File

@ -2,6 +2,15 @@
## Week of November 29, 2021
| Published On |Topic title | Change |
|------|------------|--------|
| 11/29/2021 | [What is Windows 11 SE](/education/windows/windows-11-se-overview) | added |
| 11/29/2021 | [Windows 11 SE settings list](/education/windows/windows-11-se-settings-list) | added |
## Week of November 15, 2021 ## Week of November 15, 2021
@ -12,13 +21,3 @@
| 11/18/2021 | [Deploy Windows 10 in a school district (Windows 10)](/education/windows/deploy-windows-10-in-a-school-district) | modified | | 11/18/2021 | [Deploy Windows 10 in a school district (Windows 10)](/education/windows/deploy-windows-10-in-a-school-district) | modified |
| 11/18/2021 | [Deploy Windows 10 in a school (Windows 10)](/education/windows/deploy-windows-10-in-a-school) | modified | | 11/18/2021 | [Deploy Windows 10 in a school (Windows 10)](/education/windows/deploy-windows-10-in-a-school) | modified |
| 11/18/2021 | [For IT administrators get Minecraft Education Edition](/education/windows/school-get-minecraft) | modified | | 11/18/2021 | [For IT administrators get Minecraft Education Edition](/education/windows/school-get-minecraft) | modified |
## Week of October 25, 2021
| Published On |Topic title | Change |
|------|------------|--------|
| 10/28/2021 | [Deploy Windows 10 in a school district (Windows 10)](/education/windows/deploy-windows-10-in-a-school-district) | modified |
| 10/28/2021 | [Deploy Windows 10 in a school (Windows 10)](/education/windows/deploy-windows-10-in-a-school) | modified |
| 10/28/2021 | [Windows 10 for Education (Windows 10)](/education/windows/index) | modified |

159
windows/application-management/app-v/appv-release-notes-for-appv-for-windows-1703.md
View File

@ -19,90 +19,81 @@ ms.author: greglin
The following are known issues and workarounds for Application Virtualization (App-V) running on Windows 10 version 1703 and later The following are known issues and workarounds for Application Virtualization (App-V) running on Windows 10 version 1703 and later
<table border="1"> - **Problem**: Unable to manually create a system-owned folder needed for the `set-AppVClientConfiguration` PowerShell cmdlet when using the PackageInstallationRoot, IntegrationRootUser, or IntegrationRootGlobal parameters.
<thead>
<th>Problem</th>
<th>Workaround</th>
</thead>
<tbody>
<tr>
<td>Unable to manually create a system-owned folder needed for the <code>set-AppVClientConfiguration</code> PowerShell cmdlet when using the <i>PackageInstallationRoot</i>, <i>IntegrationRootUser</i>, or <i>IntegrationRootGlobal</i> parameters.</td>
<td>Don&#39;t create this file manually, instead let the <code>Add-AppVClientPackage</code> cmdlet auto-generate it.</td>
</tr>
<tr>
<td>Failure to update an App-V package from App-V 5.x to the latest in-box version, by using the PowerShell sequencing commands.</td>
<td>Make sure you have the complete App-V package or the MSI file from the original app.</td>
</tr>
<tr>
<td>Unable to modify the locale for auto-sequencing.</td>
<td>Open the <code>C:\Program Files (x86)\Windows Kits\10\Microsoft Application Virtualization\AutoSequencer\Unattend_Sequencer_User_Setup_Template.xml</code> file and include the language code for your locale. For example, if you wanted Spanish (Spain), you&#39;d use: <strong>es-ES</strong>.</td>
</tr>
<tr>
<td>Filetype and protocol handlers aren&#39;t registering properly with the Google Chrome browser, causing you to not see App-V packages as an option for default apps from the <strong>Settings &gt; Apps&gt; Default Apps</strong> area.</td>
<td>The recommended workaround is to add the following code to the AppXManifest.xml file, underneath the <strong>&lt;appv:Extensions&gt;</strong> tag:
<pre><code>
&lt;appv:Extension Category="AppV.URLProtocol"&gt;
&lt;appv:URLProtocol&gt;
&lt;appv:Name&gt;ftp&lt;/appv:Name&gt;
&lt;appv:ApplicationURLProtocol&gt;
&lt;appv:DefaultIcon&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0&lt;/appv:DefaultIcon&gt;
&lt;appv:ShellCommands&gt;
&lt;appv:DefaultCommand&gt;open&lt;/appv:DefaultCommand&gt;
&lt;appv:ShellCommand&gt;
&lt;appv:ApplicationId&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe&lt;/appv:ApplicationId&gt;
&lt;appv:Name&gt;open&lt;/appv:Name&gt;
&lt;appv:CommandLine&gt;"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"&lt;/appv:CommandLine&gt;
&lt;appv:DdeExec&gt;
&lt;appv:DdeCommand /&gt;
&lt;/appv:DdeExec&gt;
&lt;/appv:ShellCommand&gt;
&lt;/appv:ShellCommands&gt;
&lt;/appv:ApplicationURLProtocol&gt;
&lt;/appv:URLProtocol&gt;
&lt;/appv:Extension&gt;
&lt;appv:Extension Category="AppV.URLProtocol"&gt;
&lt;appv:URLProtocol&gt;
&lt;appv:Name&gt;http&lt;/appv:Name&gt;
&lt;appv:ApplicationURLProtocol&gt;
&lt;appv:DefaultIcon&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0&lt;/appv:DefaultIcon&gt;
&lt;appv:ShellCommands&gt;
&lt;appv:DefaultCommand&gt;open&lt;/appv:DefaultCommand&gt;
&lt;appv:ShellCommand&gt;
&lt;appv:ApplicationId&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe&lt;/appv:ApplicationId&gt;
&lt;appv:Name&gt;open&lt;/appv:Name&gt;
&lt;appv:CommandLine&gt;"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"&lt;/appv:CommandLine&gt;
&lt;appv:DdeExec&gt;
&lt;appv:DdeCommand /&gt;
&lt;/appv:DdeExec&gt;
&lt;/appv:ShellCommand&gt;
&lt;/appv:ShellCommands&gt;
&lt;/appv:ApplicationURLProtocol&gt;
&lt;/appv:URLProtocol&gt;
&lt;/appv:Extension&gt;
&lt;appv:Extension Category="AppV.URLProtocol"&gt;
&lt;appv:URLProtocol&gt;
&lt;appv:Name&gt;https&lt;/appv:Name&gt;
&lt;appv:ApplicationURLProtocol&gt;
&lt;appv:DefaultIcon&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0&lt;/appv:DefaultIcon&gt;
&lt;appv:ShellCommands&gt;
&lt;appv:DefaultCommand&gt;open&lt;/appv:DefaultCommand&gt;
&lt;appv:ShellCommand&gt;
&lt;appv:ApplicationId&gt;[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe&lt;/appv:ApplicationId&gt;
&lt;appv:Name&gt;open&lt;/appv:Name&gt;
&lt;appv:CommandLine&gt;"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"&lt;/appv:CommandLine&gt;
&lt;appv:DdeExec&gt;
&lt;appv:DdeCommand /&gt;
&lt;/appv:DdeExec&gt;
&lt;/appv:ShellCommand&gt;
&lt;/appv:ShellCommands&gt;
&lt;/appv:ApplicationURLProtocol&gt;
&lt;/appv:URLProtocol&gt;
&lt;/appv:Extension&gt;
</code></pre><br/> </td>
</tr>
</tbody>
</table>
**Workaround**: Don't create this file manually, instead let the `Add-AppVClientPackage` cmdlet auto-generate it.
- **Problem**: Failure to update an App-V package from App-V 5.x to the latest in-box version, by using the PowerShell sequencing commands.
**Workaround**: Make sure you have the complete App-V package or the MSI file from the original app.
- **Problem**: Unable to modify the locale for auto-sequencing.
**Workaround**: Open the `C:\Program Files (x86)\Windows Kits\10\Microsoft Application Virtualization\AutoSequencer\Unattend_Sequencer_User_Setup_Template.xml` file and include the language code for your locale. For example, if you wanted Spanish (Spain), you'd use: es-ES.
- **Problem**: Filetype and protocol handlers aren't registering properly with the Google Chrome browser, causing you to not see App-V packages as an option for default apps from the Settings > Apps> Default Apps area.
**Workaround**: The recommended workaround is to add the following code to the AppXManifest.xml file, underneath the `<appv:Extensions>` tag:
```xml
<appv:Extension Category="AppV.URLProtocol">
<appv:URLProtocol>
<appv:Name>ftp</appv:Name>
<appv:ApplicationURLProtocol>
<appv:DefaultIcon>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0</appv:DefaultIcon>
<appv:ShellCommands>
<appv:DefaultCommand>open</appv:DefaultCommand>
<appv:ShellCommand>
<appv:ApplicationId>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe</appv:ApplicationId>
<appv:Name>open</appv:Name>
<appv:CommandLine>"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"</appv:CommandLine>
<appv:DdeExec>
<appv:DdeCommand />
</appv:DdeExec>
</appv:ShellCommand>
</appv:ShellCommands>
</appv:ApplicationURLProtocol>
</appv:URLProtocol>
</appv:Extension>
<appv:Extension Category="AppV.URLProtocol">
<appv:URLProtocol>
<appv:Name>http</appv:Name>
<appv:ApplicationURLProtocol>
<appv:DefaultIcon>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0</appv:DefaultIcon>
<appv:ShellCommands>
<appv:DefaultCommand>open</appv:DefaultCommand>
<appv:ShellCommand>
<appv:ApplicationId>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe</appv:ApplicationId>
<appv:Name>open</appv:Name>
<appv:CommandLine>"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"</appv:CommandLine>
<appv:DdeExec>
<appv:DdeCommand />
</appv:DdeExec>
</appv:ShellCommand>
</appv:ShellCommands>
</appv:ApplicationURLProtocol>
</appv:URLProtocol>
</appv:Extension>
<appv:Extension Category="AppV.URLProtocol">
<appv:URLProtocol>
<appv:Name>https</appv:Name>
<appv:ApplicationURLProtocol>
<appv:DefaultIcon>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe,0</appv:DefaultIcon>
<appv:ShellCommands>
<appv:DefaultCommand>open</appv:DefaultCommand>
<appv:ShellCommand>
<appv:ApplicationId>[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe</appv:ApplicationId>
<appv:Name>open</appv:Name>
<appv:CommandLine>"[{ProgramFilesX86}]\Google\Chrome\Application\chrome.exe" -- "%1"</appv:CommandLine>
<appv:DdeExec>
<appv:DdeCommand />
</appv:DdeExec>
</appv:ShellCommand>
</appv:ShellCommands>
</appv:ApplicationURLProtocol>
</appv:URLProtocol>
</appv:Extension>
```
## Related resources list ## Related resources list
For information that can help with troubleshooting App-V for Windows client, see: For information that can help with troubleshooting App-V for Windows client, see:
@ -120,4 +111,4 @@ For information that can help with troubleshooting App-V for Windows client, see
## Related topics ## Related topics
- [What's new in App-V for Windows client](appv-about-appv.md) - [What's new in App-V for Windows client](appv-about-appv.md)
- [Release Notes for App-V for Windows 10, version 1607](appv-release-notes-for-appv-for-windows-1703.md) - [Release Notes for App-V for Windows 10, version 1607](appv-release-notes-for-appv-for-windows-1703.md)

2
windows/client-management/determine-appropriate-page-file-size.md
View File

@ -67,7 +67,7 @@ Kernel memory crash dumps require enough page file space or dedicated dump file
Computers that are running Microsoft Windows or Microsoft Windows Server usually must have a page file to support a system crash dump. System administrators now have the option to create a dedicated dump file instead. Computers that are running Microsoft Windows or Microsoft Windows Server usually must have a page file to support a system crash dump. System administrators now have the option to create a dedicated dump file instead.
A dedicated dump file is a page file that is not used for paging. Instead, it is “dedicated” to back a system crash dump file (Memory.dmp) when a system crash occurs. Dedicated dump files can be put on any disk volume that can support a page file. We recommend that you use a dedicated dump file if you want a system crash dump but you do not want a page file. A dedicated dump file is a page file that is not used for paging. Instead, it is “dedicated” to back a system crash dump file (Memory.dmp) when a system crash occurs. Dedicated dump files can be put on any disk volume that can support a page file. We recommend that you use a dedicated dump file if you want a system crash dump but you do not want a page file. To learn how to create it, see [Overview of memory dump file options for Windows](/troubleshoot/windows-server/performance/memory-dump-file-options).
## System-managed page files ## System-managed page files

16
windows/client-management/mdm/add-an-azure-ad-tenant-and-azure-ad-subscription.md
View File

@ -39,11 +39,11 @@ Here's a step-by-step guide to adding an Azure Active Directory tenant, adding a
If you don't have a paid subscription to any Microsoft service, you can purchase an Azure AD premium subscription. Go to the Office 356 portal at https://portal.office.com/, and then sign in using the admin account that you created in Step 4 (for example, user1@contosoltd.onmicrosoftcom). If you don't have a paid subscription to any Microsoft service, you can purchase an Azure AD premium subscription. Go to the Office 356 portal at https://portal.office.com/, and then sign in using the admin account that you created in Step 4 (for example, user1@contosoltd.onmicrosoftcom).
![login to office 365.](images/azure-ad-add-tenant4.png) ![login to office 365](images/azure-ad-add-tenant4.png)
6. Select **Install software**. 6. Select **Install software**.
![login to office 365.](images/azure-ad-add-tenant5.png) ![login to office 365 portal](images/azure-ad-add-tenant5.png)
7. In the Microsoft 365 admin center, select **Purchase Services** from the left navigation. 7. In the Microsoft 365 admin center, select **Purchase Services** from the left navigation.
@ -69,27 +69,27 @@ If you have paid subscriptions to Office 365, Microsoft Dynamics CRM Online, Ent
1. Sign in to the Microsoft 365 admin center at <https://portal.office.com> using your organization's account. 1. Sign in to the Microsoft 365 admin center at <https://portal.office.com> using your organization's account.
![register azuread.](images/azure-ad-add-tenant10.png) ![register in azuread.](images/azure-ad-add-tenant10.png)
2. On the **Home** page, select on the Admin tools icon. 2. On the **Home** page, select on the Admin tools icon.
![register azuread.](images/azure-ad-add-tenant11.png) ![register in azure-ad.](images/azure-ad-add-tenant11.png)
3. On the **Admin center** page, hover your mouse over the Admin tools icon on the left and then click **Azure AD**. This will take you to the Azure Active Directory sign-up page and brings up your existing Office 365 organization account information. 3. On the **Admin center** page, hover your mouse over the Admin tools icon on the left and then click **Azure AD**. This will take you to the Azure Active Directory sign-up page and brings up your existing Office 365 organization account information.
![register azuread.](images/azure-ad-add-tenant12.png) ![register azuread](images/azure-ad-add-tenant12.png)
4. On the **Sign up** page, make sure to enter a valid phone number and then click **Sign up**. 4. On the **Sign up** page, make sure to enter a valid phone number and then click **Sign up**.
![register azuread.](images/azure-ad-add-tenant13.png) ![registration in azure-ad](images/azure-ad-add-tenant13.png)
5. It may take a few minutes to process the request. 5. It may take a few minutes to process the request.
![register azuread.](images/azure-ad-add-tenant14.png) ![registration in azuread.](images/azure-ad-add-tenant14.png)
6. You will see a welcome page when the process completes. 6. You will see a welcome page when the process completes.
![register azuread.](images/azure-ad-add-tenant15.png) ![register screen of azuread](images/azure-ad-add-tenant15.png)

2
windows/client-management/mdm/applicationcontrol-csp-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: ManikaDhiman author: dansimp
ms.date: 07/10/2019 ms.date: 07/10/2019
--- ---

2
windows/client-management/mdm/applicationcontrol-csp.md
View File

@ -6,7 +6,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: ManikaDhiman author: dansimp
ms.reviewer: jsuther1974 ms.reviewer: jsuther1974
ms.date: 09/10/2020 ms.date: 09/10/2020
--- ---

777
windows/client-management/mdm/bitlocker-csp.md
View File

@ -28,7 +28,7 @@ For RequireDeviceEncryption and RequireStorageCardEncryption, the Get operation
The following shows the BitLocker configuration service provider in tree format. The following shows the BitLocker configuration service provider in tree format.
``` ```console
./Device/Vendor/MSFT ./Device/Vendor/MSFT
BitLocker BitLocker
----RequireStorageCardEncryption ----RequireStorageCardEncryption
@ -63,85 +63,21 @@ BitLocker
<a href="" id="--device-vendor-msft-bitlocker"></a>**./Device/Vendor/MSFT/BitLocker** <a href="" id="--device-vendor-msft-bitlocker"></a>**./Device/Vendor/MSFT/BitLocker**
Defines the root node for the BitLocker configuration service provider. Defines the root node for the BitLocker configuration service provider.
<!--Policy--> <!--Policy-->
<a href="" id="requirestoragecardencryption"></a>**RequireStorageCardEncryption**
<!--Description-->
Allows the administrator to require storage card encryption on the device. This policy is valid only for a mobile SKU.
<!--/Description-->
<!--SupportedSKUs-->
<table>
<tr>
<th>Home</th>
<th>Pro</th>
<th>Business</th>
<th>Enterprise</th>
<th>Education</th>
<th>Mobile</th>
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
</tr>
</table>
<!--/SupportedSKUs-->
Data type is integer. Sample value for this node to enable this policy: 1. Disabling this policy will not turn off the encryption on the storage card, but the user will no longer be prompted to turn it on.
<!--SupportedValues-->
- 0 (default) – Storage cards do not need to be encrypted.
- 1 – Require storage cards to be encrypted.
<!--/SupportedValues-->
Disabling this policy will not turn off the encryption on the system card, but the user will no longer be prompted to turn it on.
If you want to disable this policy use the following SyncML:
```xml
<SyncML>
<SyncBody>
<Replace>
<CmdID>$CmdID$</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/BitLocker/RequireStorageCardEncryption</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>0</Data>
</Item>
</Replace>
</SyncBody>
</SyncML>
```
Data type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Policy-->
<!--Policy-->
<a href="" id="requiredeviceencryption"></a>**RequireDeviceEncryption** <a href="" id="requiredeviceencryption"></a>**RequireDeviceEncryption**
<!--Description--> <!--Description-->
Allows the administrator to require encryption to be turned on by using BitLocker\Device Encryption. Allows the administrator to require encryption to be turned on by using BitLocker\Device Encryption.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
Data type is integer. Sample value for this node to enable this policy: 1. Data type is integer. Sample value for this node to enable this policy: 1.
Supported operations are Add, Get, Replace, and Delete. Supported operations are Add, Get, Replace, and Delete.
@ -193,24 +129,15 @@ If you want to disable this policy, use the following SyncML:
Allows you to set the default encryption method for each of the different drive types: operating system drives, fixed data drives, and removable data drives. Hidden, system, and recovery partitions are skipped from encryption. This setting is a direct mapping to the BitLocker Group Policy "Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)". Allows you to set the default encryption method for each of the different drive types: operating system drives, fixed data drives, and removable data drives. Hidden, system, and recovery partitions are skipped from encryption. This setting is a direct mapping to the BitLocker Group Policy "Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)".
<!--/Description--> <!--/Description-->
<!--SupportedValues--> <!--SupportedValues-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedValues--> <!--/SupportedValues-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -276,26 +203,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
Allows you to associate unique organizational identifiers to a new drive that is enabled with BitLocker. Allows you to associate unique organizational identifiers to a new drive that is enabled with BitLocker.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -347,26 +263,15 @@ If you disable or do not configure this setting, the identification field is not
Allows users on devices that are compliant with InstantGo or the Microsoft Hardware Security Test Interface (HSTI) to not have a PIN for preboot authentication. Allows users on devices that are compliant with InstantGo or the Microsoft Hardware Security Test Interface (HSTI) to not have a PIN for preboot authentication.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -400,26 +305,15 @@ If this policy is disabled, the options of "Require additional authentication at
Allows users to configure whether or not enhanced startup PINs are used with BitLocker. Allows users to configure whether or not enhanced startup PINs are used with BitLocker.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -456,26 +350,15 @@ If you disable or do not configure this policy setting, enhanced PINs will not b
Allows you to configure whether standard users are allowed to change BitLocker PIN or password that is used to protect the operating system drive. Allows you to configure whether standard users are allowed to change BitLocker PIN or password that is used to protect the operating system drive.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -512,26 +395,15 @@ Sample value for this node to disable this policy is:
Allows users to enable authentication options that require user input from the preboot environment, even if the platform indicates a lack of preboot input capability. Allows users to enable authentication options that require user input from the preboot environment, even if the platform indicates a lack of preboot input capability.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -574,26 +446,15 @@ When the Windows Recovery Environment is not enabled and this policy is not enab
Allows you to configure the encryption type that is used by BitLocker. Allows you to configure the encryption type that is used by BitLocker.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -633,26 +494,15 @@ For more information about the tool to manage BitLocker, see [Manage-bde](/windo
This setting is a direct mapping to the BitLocker Group Policy "Require additional authentication at startup". This setting is a direct mapping to the BitLocker Group Policy "Require additional authentication at startup".
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -741,26 +591,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
This setting is a direct mapping to the BitLocker Group Policy "Configure minimum PIN length for startup". This setting is a direct mapping to the BitLocker Group Policy "Configure minimum PIN length for startup".
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -818,26 +657,15 @@ This setting is a direct mapping to the BitLocker Group Policy "Configure pre-bo
(PrebootRecoveryInfo_Name). (PrebootRecoveryInfo_Name).
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -907,26 +735,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
This setting is a direct mapping to the BitLocker Group Policy "Choose how BitLocker-protected operating system drives can be recovered" (OSRecoveryUsage_Name). This setting is a direct mapping to the BitLocker Group Policy "Choose how BitLocker-protected operating system drives can be recovered" (OSRecoveryUsage_Name).
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1004,26 +821,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
This setting is a direct mapping to the BitLocker Group Policy "Choose how BitLocker-protected fixed drives can be recovered" (). This setting is a direct mapping to the BitLocker Group Policy "Choose how BitLocker-protected fixed drives can be recovered" ().
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1110,26 +916,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
This setting is a direct mapping to the BitLocker Group Policy "Deny write access to fixed drives not protected by BitLocker" (FDVDenyWriteAccess_Name). This setting is a direct mapping to the BitLocker Group Policy "Deny write access to fixed drives not protected by BitLocker" (FDVDenyWriteAccess_Name).
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1179,26 +974,15 @@ Data type is string. Supported operations are Add, Get, Replace, and Delete.
Allows you to configure the encryption type on fixed data drives that is used by BitLocker. Allows you to configure the encryption type on fixed data drives that is used by BitLocker.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1240,26 +1024,15 @@ For more information about the tool to manage BitLocker, see [Manage-bde](/windo
This setting is a direct mapping to the BitLocker Group Policy "Deny write access to removable drives not protected by BitLocker" (RDVDenyWriteAccess_Name). This setting is a direct mapping to the BitLocker Group Policy "Deny write access to removable drives not protected by BitLocker" (RDVDenyWriteAccess_Name).
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1320,26 +1093,15 @@ Disabling the policy will let the system choose the default behaviors. If you wa
Allows you to configure the encryption type that is used by BitLocker. Allows you to configure the encryption type that is used by BitLocker.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1375,26 +1137,15 @@ If this policy is disabled or not configured, the BitLocker Setup Wizard asks th
Allows you to control the use of BitLocker on removable data drives. Allows you to control the use of BitLocker on removable data drives.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--ADMXMapped--> <!--ADMXMapped-->
ADMX Info: ADMX Info:
@ -1445,26 +1196,15 @@ Allows the admin to disable the warning prompt for other disk encryption on the
> [!Warning] > [!Warning]
> When you enable BitLocker on a device with third-party encryption, it may render the device unusable and require you to reinstall Windows. > When you enable BitLocker on a device with third-party encryption, it may render the device unusable and require you to reinstall Windows.
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--SupportedValues--> <!--SupportedValues-->
The following list shows the supported values: The following list shows the supported values:
@ -1509,26 +1249,15 @@ Allows Admin to enforce "RequireDeviceEncryption" policy for scenarios where pol
If "AllowWarningForOtherDiskEncryption" is not set, or is set to "1", "RequireDeviceEncryption" policy will not try to encrypt drive(s) if a standard user is the current logged on user in the system. If "AllowWarningForOtherDiskEncryption" is not set, or is set to "1", "RequireDeviceEncryption" policy will not try to encrypt drive(s) if a standard user is the current logged on user in the system.
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--SupportedValues--> <!--SupportedValues-->
The expected values for this policy are: The expected values for this policy are:
@ -1564,26 +1293,15 @@ This setting initiates a client-driven recovery password refresh after an OS dri
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
Value type is int. Supported operations are Add, Delete, Get, and Replace. Value type is int. Supported operations are Add, Delete, Get, and Replace.
@ -1619,26 +1337,15 @@ Each server-side recovery key rotation is represented by a request ID. The serve
- RotateRecoveryPasswordsRequestID: Returns request ID of last request processed. - RotateRecoveryPasswordsRequestID: Returns request ID of last request processed.
- RotateRecoveryPasswordsRotationStatus: Returns status of last request processed. - RotateRecoveryPasswordsRotationStatus: Returns status of last request processed.
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
Value type is string. Supported operation is Execute. Request ID is expected as a parameter. Value type is string. Supported operation is Execute. Request ID is expected as a parameter.
@ -1664,26 +1371,15 @@ Interior node. Supported operation is Get.
This node reports compliance state of device encryption on the system. This node reports compliance state of device encryption on the system.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
<!--SupportedValues--> <!--SupportedValues-->
@ -1732,26 +1428,15 @@ Status code can be one of the following:
- 0 - Pass - 0 - Pass
- Any other code - Failure HRESULT - Any other code - Failure HRESULT
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
Value type is int. Supported operation is Get. Value type is int. Supported operation is Get.
@ -1767,26 +1452,14 @@ This node reports the RequestID corresponding to RotateRecoveryPasswordsStatus.
This node needs to be queried in synchronization with RotateRecoveryPasswordsStatus to ensure the status is correctly matched to the request ID. This node needs to be queried in synchronization with RotateRecoveryPasswordsStatus to ensure the status is correctly matched to the request ID.
<!--/Description--> <!--/Description-->
<!--SupportedSKUs--> <!--SupportedSKUs-->
<table>
<tr> |Edition|Windows 10|Windows 11|
<th>Home</th> |--- |--- |--- |
<th>Pro</th> |Home|No|No|
<th>Business</th> |Pro|Yes|Yes|
<th>Enterprise</th> |Business|Yes|Yes|
<th>Education</th> |Enterprise|Yes|Yes|
<th>Mobile</th> |Education|Yes|Yes|
</tr>
<tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr>
</table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->

2
windows/client-management/mdm/browserfavorite-csp.md
View File

@ -9,7 +9,7 @@ ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: dansimp author: dansimp
ms.date: 06/26/2017 ms.date: 10/25/2021
--- ---
# BrowserFavorite CSP # BrowserFavorite CSP

972
windows/client-management/mdm/change-history-for-mdm-documentation.md
View File

File diff suppressed because one or more lines are too long

2
windows/client-management/mdm/cleanpc-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/cleanpc-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/clientcertificateinstall-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 07/30/2021 ms.date: 07/30/2021
--- ---

2
windows/client-management/mdm/clientcertificateinstall-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/cm-cellularentries-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 08/02/2017 ms.date: 08/02/2017
--- ---

2
windows/client-management/mdm/cmpolicy-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/cmpolicyenterprise-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/cmpolicyenterprise-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/configuration-service-provider-reference.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2020 ms.date: 09/18/2020
ms.collection: highpri ms.collection: highpri
--- ---

2
windows/client-management/mdm/customdeviceui-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/customdeviceui-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

21
windows/client-management/mdm/data-structures-windows-store-for-business.md
View File

@ -1,17 +1,17 @@
--- ---
title: Data structures for Microsoft Store for Business title: Data structures for Microsoft Store for Business
description: Learn about the various data structures for Microsoft Store for Business.
MS-HAID: MS-HAID:
- 'p\_phdevicemgmt.business\_store\_data\_structures' - 'p\_phdevicemgmt.business\_store\_data\_structures'
- 'p\_phDeviceMgmt.data\_structures\_windows\_store\_for\_business' - 'p\_phDeviceMgmt.data\_structures\_windows\_store\_for\_business'
ms.assetid: ABE44EC8-CBE5-4775-BA8A-4564CB73531B ms.assetid: ABE44EC8-CBE5-4775-BA8A-4564CB73531B
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp
description: Learn about data structures for Microsoft Store for Business.
ms.author: dansimp ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---
@ -105,7 +105,7 @@ Specifies the properties of the alternate identifier.
|lastModified|dateTime|Specifies the last modified date for an application. Modifications for an application include updated product details, updates to an application, and updates to the quantity of an application.| |lastModified|dateTime|Specifies the last modified date for an application. Modifications for an application include updated product details, updates to an application, and updates to the quantity of an application.|
|licenseType|[LicenseType](#licensetype)|Indicates whether the set of seats for a given application supports online or offline licensing.| |licenseType|[LicenseType](#licensetype)|Indicates whether the set of seats for a given application supports online or offline licensing.|
|distributionPolicy|[InventoryDistributionPolicy](#inventorydistributionpolicy)|| |distributionPolicy|[InventoryDistributionPolicy](#inventorydistributionpolicy)||
|Status|[InventoryStatus](#inventorystatus)|| |status|[InventoryStatus](#inventorystatus)||
## InventoryResultSet ## InventoryResultSet
@ -191,20 +191,19 @@ Specifies the properties of the localized product.
|packageFamilyName|String|| |packageFamilyName|String||
|supportedPlatforms|Collection of [ProductPlatform](#productplatform)|| |supportedPlatforms|Collection of [ProductPlatform](#productplatform)||
## ProductImage ## ProductImage
Specifies the properties of the product image. Specifies the properties of the product image.
|Name|Type|Description| |Name|Type|Description|
|--- |--- |--- | |--- |--- |--- |
|Location|URI|Location of the download image.| |location|URI|Location of the download image.|
|Purpose|String|Tag for the purpose of the image, for example "screenshot" or "logo".| |purpose|string|Tag for the image, for example "screenshot" or "logo".|
|Height|String|Height of the image in pixels.| |height|string|Height of the image in pixels.|
|Width|String|Width of the image in pixels.| |width|string|Width of the image in pixels.|
|Caption|String|Unlimited length.| |caption|string|Unlimited length.|
|backgroundColor|String|Format "#RRGGBB"| |backgroundColor|string|Format "#RRGGBB"|
|foregroundColor|String|Format "#RRGGBB"| |foregroundColor|string|Format "#RRGGBB"|
|fileSize|integer-64|Size of the file.| |fileSize|integer-64|Size of the file.|
## ProductKey ## ProductKey

2
windows/client-management/mdm/defender-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 07/23/2021 ms.date: 07/23/2021
--- ---

2
windows/client-management/mdm/devdetail-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 03/27/2020 ms.date: 03/27/2020
--- ---

2
windows/client-management/mdm/devdetail-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/03/2020 ms.date: 06/03/2020
--- ---

2
windows/client-management/mdm/developersetup-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2018 ms.date: 06/26/2018
--- ---

2
windows/client-management/mdm/developersetup-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/device-update-management.md
View File

@ -9,7 +9,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 11/15/2017 ms.date: 11/15/2017
ms.collection: highpri ms.collection: highpri
--- ---

2
windows/client-management/mdm/devicelock-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/devicelock-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/devicemanageability-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 11/01/2017 ms.date: 11/01/2017
--- ---

2
windows/client-management/mdm/devicemanageability-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/devicestatus-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/25/2021 ms.date: 06/25/2021
--- ---

2
windows/client-management/mdm/devicestatus-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 03/12/2018 ms.date: 03/12/2018
--- ---

2
windows/client-management/mdm/devinfo-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/devinfo-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

8
windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/25/2018 ms.date: 06/25/2018
ms.collection: highpri ms.collection: highpri
--- ---
@ -36,12 +36,12 @@ To help diagnose enrollment or device management issues in Windows 10 devices m
You can also collect the MDM Diagnostic Information logs using the following command: You can also collect the MDM Diagnostic Information logs using the following command:
```xml ```xml
mdmdiagnosticstool.exe -area DeviceEnrollment;DeviceProvisioning;Autopilot -cab c:\users\public\documents\MDMDiagReport.cab mdmdiagnosticstool.exe -area DeviceEnrollment;DeviceProvisioning;Autopilot -zip c:\users\public\documents\MDMDiagReport.zip
``` ```
- In File Explorer, navigate to c:\Users\Public\Documents\MDMDiagnostics to see the report. - In File Explorer, navigate to c:\Users\Public\Documents\MDMDiagnostics to see the report.
### Understanding cab structure ### Understanding zip structure
The cab file will have logs according to the areas that were used in the command. This explanation is based on DeviceEnrollment, DeviceProvisioning and Autopilot areas. It applies to the cab files collected via command line or Feedback Hub The zip file will have logs according to the areas that were used in the command. This explanation is based on DeviceEnrollment, DeviceProvisioning and Autopilot areas. It applies to the zip files collected via command line or Feedback Hub
- DiagnosticLogCSP_Collector_Autopilot_*: Autopilot etls - DiagnosticLogCSP_Collector_Autopilot_*: Autopilot etls
- DiagnosticLogCSP_Collector_DeviceProvisioning_*: Provisioning etls (Microsoft-Windows-Provisioning-Diagnostics-Provider) - DiagnosticLogCSP_Collector_DeviceProvisioning_*: Provisioning etls (Microsoft-Windows-Provisioning-Diagnostics-Provider)

12
windows/client-management/mdm/diagnosticlog-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 11/19/2019 ms.date: 11/19/2019
--- ---
@ -246,7 +246,15 @@ la--- 1/4/2021 2:45 PM 1
la--- 1/4/2021 2:45 PM 2 la--- 1/4/2021 2:45 PM 2
la--- 12/2/2020 6:27 PM 2701 results.xml la--- 12/2/2020 6:27 PM 2701 results.xml
``` ```
Each data gathering directive from the original `Collection` XML corresponds to a folder in the output. For example, if the first directive was <RegistryKey HRESULT="0">HKLM\Software\Policies</RegistryKey> then folder `1` will contain the corresponding `export.reg` file. Each data gathering directive from the original `Collection` XML corresponds to a folder in the output.
For example, the first directive was:
```xml
<Collection HRESULT="0">
<RegistryKey HRESULT="0">HKLM\Software\Policies</RegistryKey>
</Collection>
```
then folder `1` will contain the corresponding `export.reg` file.
The `results.xml` file is the authoritative map to the output. It includes a status code for each directive. The order of the directives in the file corresponds to the order of the output folders. Using `results.xml` the administrator can see what data was gathered, what failures may have occurred, and which folders contain which output. For example, the following `results.xml` content indicates that registry export of HKLM\Software\Policies was successful and the data can be found in folder `1`. It also indicates that `netsh.exe wlan show profiles` command failed. The `results.xml` file is the authoritative map to the output. It includes a status code for each directive. The order of the directives in the file corresponds to the order of the output folders. Using `results.xml` the administrator can see what data was gathered, what failures may have occurred, and which folders contain which output. For example, the following `results.xml` content indicates that registry export of HKLM\Software\Policies was successful and the data can be found in folder `1`. It also indicates that `netsh.exe wlan show profiles` command failed.

2
windows/client-management/mdm/diagnosticlog-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md
View File

@ -11,7 +11,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/dmacc-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/dmacc-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/dmclient-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 11/01/2017 ms.date: 11/01/2017
--- ---

2
windows/client-management/mdm/dmclient-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/dmprocessconfigxmlfiltered.md
View File

@ -18,7 +18,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/dmsessionactions-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/dmsessionactions-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/dynamicmanagement-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/dynamicmanagement-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/eap-configuration.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/email2-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/email2-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 11/01/2017 ms.date: 11/01/2017
ms.reviewer: ms.reviewer:

16
windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md
View File

@ -6,7 +6,7 @@ ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: dansimp author: dansimp
ms.date: 10/14/2021 ms.date: 12/03/2021
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp
ms.collection: highpri ms.collection: highpri
@ -14,6 +14,10 @@ ms.collection: highpri
# Enroll a Windows 10 device automatically using Group Policy # Enroll a Windows 10 device automatically using Group Policy
**Applies to:**
- Windows 10
Starting in Windows 10, version 1709, you can use a Group Policy to trigger auto-enrollment to MDM for Active Directory (AD) domain-joined devices. Starting in Windows 10, version 1709, you can use a Group Policy to trigger auto-enrollment to MDM for Active Directory (AD) domain-joined devices.
The enrollment into Intune is triggered by a group policy created on your local AD and happens without any user interaction. This means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Azure AD account. The enrollment into Intune is triggered by a group policy created on your local AD and happens without any user interaction. This means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Azure AD account.
@ -191,6 +195,9 @@ Requirements:
- 21H1 --> [Administrative Templates (.admx) for Windows 10 May 2021 Update (21H1)](https://www.microsoft.com/download/details.aspx?id=103124) - 21H1 --> [Administrative Templates (.admx) for Windows 10 May 2021 Update (21H1)](https://www.microsoft.com/download/details.aspx?id=103124)
- 21H2 --> [Administrative Templates (.admx) for Windows 10 November 2021 Update (21H2)](https://www.microsoft.com/download/103667)
2. Install the package on the Domain Controller. 2. Install the package on the Domain Controller.
3. Navigate, depending on the version to the folder: 3. Navigate, depending on the version to the folder:
@ -209,9 +216,11 @@ Requirements:
- 21H1 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2021 Update (21H1)** - 21H1 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2021 Update (21H1)**
- 21H2 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 November 2021 Update (21H2)**
4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**. 4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**.
5. Copy PolicyDefinitions folder to **\\contoso.com\SYSVOL\contoso.com\policies\PolicyDefinitions**. 5. Copy PolicyDefinitions folder to **\\SYSVOL\contoso.com\policies\PolicyDefinitions**.
If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain. If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain.
@ -290,12 +299,13 @@ To collect Event Viewer logs:
- [Filter Using Security Groups](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc752992(v=ws.11)) - [Filter Using Security Groups](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc752992(v=ws.11))
- [Enforce a Group Policy Object Link](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753909(v=ws.11)) - [Enforce a Group Policy Object Link](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753909(v=ws.11))
- [Group Policy Central Store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) - [Group Policy Central Store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra)
- [Getting started with Cloud Native Windows Endpoints](https://docs.microsoft.com/mem/cloud-native-windows-endpoints) - [Getting started with Cloud Native Windows Endpoints](/mem/cloud-native-windows-endpoints)
- [A Framework for Windows endpoint management transformation](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/a-framework-for-windows-endpoint-management-transformation/ba-p/2460684) - [A Framework for Windows endpoint management transformation](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/a-framework-for-windows-endpoint-management-transformation/ba-p/2460684)
- [Success with remote Windows Autopilot and Hybrid Azure Active Director join](https://techcommunity.microsoft.com/t5/intune-customer-success/success-with-remote-windows-autopilot-and-hybrid-azure-active/ba-p/2749353) - [Success with remote Windows Autopilot and Hybrid Azure Active Director join](https://techcommunity.microsoft.com/t5/intune-customer-success/success-with-remote-windows-autopilot-and-hybrid-azure-active/ba-p/2749353)
### Useful Links ### Useful Links
- [Windows 10 Administrative Templates for Windows 10 November 2021 Update 21H2](https://www.microsoft.com/download/103667)
- [Windows 10 Administrative Templates for Windows 10 May 2021 Update 21H1](https://www.microsoft.com/download/details.aspx?id=103124) - [Windows 10 Administrative Templates for Windows 10 May 2021 Update 21H1](https://www.microsoft.com/download/details.aspx?id=103124)
- [Windows 10 Administrative Templates for Windows 10 November 2019 Update 1909](https://www.microsoft.com/download/details.aspx?id=100591) - [Windows 10 Administrative Templates for Windows 10 November 2019 Update 1909](https://www.microsoft.com/download/details.aspx?id=100591)
- [Windows 10 Administrative Templates for Windows 10 May 2019 Update 1903](https://www.microsoft.com/download/details.aspx?id=58495) - [Windows 10 Administrative Templates for Windows 10 May 2019 Update 1903](https://www.microsoft.com/download/details.aspx?id=58495)

2
windows/client-management/mdm/enrollmentstatustracking-csp-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: ManikaDhiman author: dansimp
ms.date: 05/17/2019 ms.date: 05/17/2019
--- ---

2
windows/client-management/mdm/enrollmentstatustracking-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: ManikaDhiman author: dansimp
ms.date: 05/21/2019 ms.date: 05/21/2019
--- ---

2
windows/client-management/mdm/enterpriseapn-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/22/2017 ms.date: 09/22/2017
--- ---

2
windows/client-management/mdm/enterpriseapn-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enterpriseappmanagement-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterpriseappvmanagement-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/enterpriseappvmanagement-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/enterpriseassignedaccess-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 07/12/2017 ms.date: 07/12/2017
--- ---

2
windows/client-management/mdm/enterpriseassignedaccess-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enterpriseassignedaccess-xsd.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterprisedataprotection-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 08/09/2017 ms.date: 08/09/2017
--- ---

2
windows/client-management/mdm/enterprisedataprotection-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enterprisedesktopappmanagement-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 07/11/2017 ms.date: 07/11/2017
--- ---

2
windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterprisedesktopappmanagement2-xsd.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterpriseext-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterpriseext-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enterpriseextfilessystem-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/enterpriseextfilesystem-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/enterprisemodernappmanagement-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 10/01/2019 ms.date: 10/01/2019
--- ---

2
windows/client-management/mdm/enterprisemodernappmanagement-xsd.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/euiccs-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 03/02/2018 ms.date: 03/02/2018
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/euiccs-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 03/02/2018 ms.date: 03/02/2018
--- ---

2
windows/client-management/mdm/federated-authentication-device-enrollment.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 07/28/2017 ms.date: 07/28/2017
--- ---

2
windows/client-management/mdm/filesystem-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/firewall-ddf-file.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/get-inventory.md
View File

@ -11,7 +11,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-localized-product-details.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/07/2020 ms.date: 12/07/2020
--- ---

2
windows/client-management/mdm/get-offline-license.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-product-details.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-product-package.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-product-packages.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-seat.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-seats-assigned-to-a-user.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/get-seats.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 09/18/2017 ms.date: 09/18/2017
--- ---

2
windows/client-management/mdm/healthattestation-ddf.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

2
windows/client-management/mdm/hotspot-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/management-tool-for-windows-store-for-business.md
View File

@ -11,7 +11,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 10/27/2017 ms.date: 10/27/2017
--- ---

2
windows/client-management/mdm/maps-csp.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
--- ---

2
windows/client-management/mdm/maps-ddf-file.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
--- ---

50
windows/client-management/mdm/mdm-enrollment-of-windows-devices.md
View File

@ -41,11 +41,11 @@ Joining your device to an Active Directory domain during the out-of-box-experien
1. On the **Who Owns this PC?** page, select **My work or school owns it**. 1. On the **Who Owns this PC?** page, select **My work or school owns it**.
![oobe local account creation.](images/unifiedenrollment-rs1-2.png) ![oobe creation of a local account](images/unifiedenrollment-rs1-2.png)
2. Next, select **Join a domain**. 2. Next, select **Join a domain**.
![select domain or azure ad.](images/unifiedenrollment-rs1-3.png) ![select domain or azure-ad](images/unifiedenrollment-rs1-3.png)
3. You'll see a prompt to set up a local account on the device. Enter your local account details, and then select **Next** to continue. 3. You'll see a prompt to set up a local account on the device. Enter your local account details, and then select **Next** to continue.
@ -57,19 +57,19 @@ To create a local account and connect the device:
1. Launch the Settings app. 1. Launch the Settings app.
![windows settings page.](images/unifiedenrollment-rs1-5.png) ![windows settings screen](images/unifiedenrollment-rs1-5.png)
2. Next, select **Accounts**. 2. Next, select **Accounts**.
![windows settings accounts select.](images/unifiedenrollment-rs1-6.png) ![windows settings accounts chosen](images/unifiedenrollment-rs1-6.png)
3. Navigate to **Access work or school**. 3. Navigate to **Access work or school**.
![select access work or school.](images/unifiedenrollment-rs1-7.png) ![choose access work or school](images/unifiedenrollment-rs1-7.png)
4. Select **Connect**. 4. Select **Connect**.
![connect to work or school.](images/unifiedenrollment-rs1-8.png) ![connect to work or to school](images/unifiedenrollment-rs1-8.png)
5. Under **Alternate actions**, select **Join this device to a local Active Directory domain**. 5. Under **Alternate actions**, select **Join this device to a local Active Directory domain**.
@ -102,11 +102,11 @@ To join a domain:
1. Select **My work or school owns it**, then select **Next.** 1. Select **My work or school owns it**, then select **Next.**
![oobe local account creation.](images/unifiedenrollment-rs1-11.png) ![oobe - local account creation](images/unifiedenrollment-rs1-11.png)
2. Select **Join Azure AD**, and then select **Next.** 2. Select **Join Azure AD**, and then select **Next.**
![select domain or azure ad.](images/unifiedenrollment-rs1-12.png) ![choose the domain or azure ad](images/unifiedenrollment-rs1-12.png)
3. Type in your Azure AD username. This is the email address you use to log into Microsoft Office 365 and similar services. 3. Type in your Azure AD username. This is the email address you use to log into Microsoft Office 365 and similar services.
@ -122,23 +122,23 @@ To create a local account and connect the device:
1. Launch the Settings app. 1. Launch the Settings app.
![windows settings page.](images/unifiedenrollment-rs1-14.png) ![screen displaying windows settings](images/unifiedenrollment-rs1-14.png)
2. Next, navigate to **Accounts**. 2. Next, navigate to **Accounts**.
![windows settings accounts select.](images/unifiedenrollment-rs1-15.png) ![choose windows settings accounts](images/unifiedenrollment-rs1-15.png)
3. Navigate to **Access work or school**. 3. Navigate to **Access work or school**.
![select access work or school.](images/unifiedenrollment-rs1-16.png) ![choose option of access work or school](images/unifiedenrollment-rs1-16.png)
4. Select **Connect**. 4. Select **Connect**.
![connect to work or school.](images/unifiedenrollment-rs1-17.png) ![Option of connect to work or school](images/unifiedenrollment-rs1-17.png)
5. Under **Alternate Actions**, selct **Join this device to Azure Active Directory**. 5. Under **Alternate Actions**, selct **Join this device to Azure Active Directory**.
![join work or school account to azure ad.](images/unifiedenrollment-rs1-18.png) ![option to join work or school account to azure ad](images/unifiedenrollment-rs1-18.png)
6. Type in your Azure AD username. This is the email address you use to log into Office 365 and similar services. 6. Type in your Azure AD username. This is the email address you use to log into Office 365 and similar services.
@ -152,7 +152,7 @@ To create a local account and connect the device:
After you reach the end of the flow, your device should be connected to your organization’s Azure AD domain. You may now log out of your current account and sign in using your Azure AD username. After you reach the end of the flow, your device should be connected to your organization’s Azure AD domain. You may now log out of your current account and sign in using your Azure AD username.
![corporate sign in.](images/unifiedenrollment-rs1-20.png) ![corporate sign in screen](images/unifiedenrollment-rs1-20.png)
### Help with connecting to an Azure AD domain ### Help with connecting to an Azure AD domain
@ -184,19 +184,19 @@ To create a local account and connect the device:
1. Launch the Settings app, and then select **Accounts** >**Start** > **Settings** > **Accounts**. 1. Launch the Settings app, and then select **Accounts** >**Start** > **Settings** > **Accounts**.
![windows settings page.](images/unifiedenrollment-rs1-21-b.png) ![screen of windows settings](images/unifiedenrollment-rs1-21-b.png)
2. Navigate to **Access work or school**. 2. Navigate to **Access work or school**.
![select access work or school.](images/unifiedenrollment-rs1-23-b.png) ![user's option of access work or school](images/unifiedenrollment-rs1-23-b.png)
3. Select **Connect**. 3. Select **Connect**.
![connect to work or school.](images/unifiedenrollment-rs1-24-b.png) ![connect button to access the option of work or school.](images/unifiedenrollment-rs1-24-b.png)
4. Type in your Azure AD username. This is the email address you use to log into Office 365 and similar services. 4. Type in your Azure AD username. This is the email address you use to log into Office 365 and similar services.
![join work or school account to azure ad.](images/unifiedenrollment-rs1-25-b.png) ![sync work or school account to azure ad.](images/unifiedenrollment-rs1-25-b.png)
5. If the tenant is a cloud-only, password hash sync, or pass-through authentication tenant, this page changes to show the organization's custom branding, and can enter your password directly into the page. If the tenant is part of a federated domain, you are redirected to the organization's on-premises federation server, such as AD FS, for authentication. 5. If the tenant is a cloud-only, password hash sync, or pass-through authentication tenant, this page changes to show the organization's custom branding, and can enter your password directly into the page. If the tenant is part of a federated domain, you are redirected to the organization's on-premises federation server, such as AD FS, for authentication.
@ -206,7 +206,7 @@ To create a local account and connect the device:
Starting in Windows 10, version 1709, you will see the status page that shows the progress of your device being set up. Starting in Windows 10, version 1709, you will see the status page that shows the progress of your device being set up.
![corporate sign in.](images/unifiedenrollment-rs1-26.png) ![corporate sign in - screen and option](images/unifiedenrollment-rs1-26.png)
6. After you complete the flow, your Microsoft account will be connected to your work or school account. 6. After you complete the flow, your Microsoft account will be connected to your work or school account.
@ -222,7 +222,7 @@ To create a local account and connect the device:
1. Launch the Settings app. 1. Launch the Settings app.
![windows settings page.](images/unifiedenrollment-rs1-28.png) ![screen that displays windows settings](images/unifiedenrollment-rs1-28.png)
2. Next, navigate to **Accounts**. 2. Next, navigate to **Accounts**.
@ -234,17 +234,17 @@ To create a local account and connect the device:
4. Select the **Enroll only in device management** link (available in servicing build 14393.82, KB3176934). For older builds, see [Connect your Windows 10-based device to work using a deep link](mdm-enrollment-of-windows-devices.md#connect-your-windows-10-based-device-to-work-using-a-deep-link). 4. Select the **Enroll only in device management** link (available in servicing build 14393.82, KB3176934). For older builds, see [Connect your Windows 10-based device to work using a deep link](mdm-enrollment-of-windows-devices.md#connect-your-windows-10-based-device-to-work-using-a-deep-link).
![connect to work or school.](images/unifiedenrollment-rs1-31.png) ![connect to work or school screen](images/unifiedenrollment-rs1-31.png)
5. Type in your work email address. 5. Type in your work email address.
![set up work or school account.](images/unifiedenrollment-rs1-32.png) ![set up work or school account screen](images/unifiedenrollment-rs1-32.png)
6. If the device finds an endpoint that only supports on-premises authentication, this page will change and ask you for your password. If the device finds an MDM endpoint that supports federated authentication, you’ll be presented with a new window that will ask you for additional authentication information. 6. If the device finds an endpoint that only supports on-premises authentication, this page will change and ask you for your password. If the device finds an MDM endpoint that supports federated authentication, you’ll be presented with a new window that will ask you for additional authentication information.
Based on IT policy, you may also be prompted to provide a second factor of authentication at this point. Starting in Windows 10, version 1709, you will see the enrollment progress on screen. Based on IT policy, you may also be prompted to provide a second factor of authentication at this point. Starting in Windows 10, version 1709, you will see the enrollment progress on screen.
![corporate sign in.](images/unifiedenrollment-rs1-33-b.png) ![screen to set up your device](images/unifiedenrollment-rs1-33-b.png)
After you complete the flow, your device will be connected to your organization’s MDM. After you complete the flow, your device will be connected to your organization’s MDM.
@ -309,13 +309,13 @@ To connect your devices to MDM using deep links:
Type in your work email address. Type in your work email address.
![set up work or school account.](images/deeplinkenrollment3.png) ![set up a work or school account screen](images/deeplinkenrollment3.png)
3. If the device finds an endpoint that only supports on-premises authentication, this page will change and ask you for your password. If the device finds an MDM endpoint that supports federated authentication, you’ll be presented with a new window that will ask you for additional authentication information. Based on IT policy, you may also be prompted to provide a second factor of authentication at this point. 3. If the device finds an endpoint that only supports on-premises authentication, this page will change and ask you for your password. If the device finds an MDM endpoint that supports federated authentication, you’ll be presented with a new window that will ask you for additional authentication information. Based on IT policy, you may also be prompted to provide a second factor of authentication at this point.
After you complete the flow, your device will be connected to your organization's MDM. After you complete the flow, your device will be connected to your organization's MDM.
![corporate sign in.](images/deeplinkenrollment4.png) ![corporate sign-in screen](images/deeplinkenrollment4.png)
## Manage connections ## Manage connections

2
windows/client-management/mdm/messaging-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 06/26/2017 ms.date: 06/26/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/messaging-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 12/05/2017 ms.date: 12/05/2017
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/mobile-device-enrollment.md
View File

@ -8,7 +8,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 08/11/2017 ms.date: 08/11/2017
ms.collection: highpri ms.collection: highpri
--- ---

2
windows/client-management/mdm/multisim-csp.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 03/22/2018 ms.date: 03/22/2018
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

2
windows/client-management/mdm/multisim-ddf.md
View File

@ -5,7 +5,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: manikadhiman author: dansimp
ms.date: 02/27/2018 ms.date: 02/27/2018
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp

Some files were not shown because too many files have changed in this diff Show More