From 2dc998fa8daa3543a495e336fb14770f1a82c26b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Sat, 8 Jun 2019 15:25:18 -0700 Subject: [PATCH] New pages --- devices/surface-hub/TOC.md | 3 +- .../surface-hub-2s-deploy-checklist.md | 73 +++++++++++++++++++ .../surface-hub-2s-phone-authenticate.md | 35 +++++++++ 3 files changed, 110 insertions(+), 1 deletion(-) create mode 100644 devices/surface-hub/surface-hub-2s-deploy-checklist.md create mode 100644 devices/surface-hub/surface-hub-2s-phone-authenticate.md diff --git a/devices/surface-hub/TOC.md b/devices/surface-hub/TOC.md index 35164ad88c..19ca61030d 100644 --- a/devices/surface-hub/TOC.md +++ b/devices/surface-hub/TOC.md @@ -13,6 +13,8 @@ ### [Physically installing and mounting Surface Hub 2S](surface-hub-2s-install-mount.md) ### [Connecting to Surface Hub 2S](surface-hub-2s-connect.md) ### [Prepare your environment for Microsoft Surface Hub 2S](surface-hub-2s-prepare-environment.md) +### [Configure phone authentication for Surface Hub 2S](surface-hub-2s-phone-authenticate.md) +### [Surface Hub 2S deployment checklist](surface-hub-2s-deploy-checklist.md) ## Deploy ### [Create Surface Hub 2S device account](surface-hub-2s-account.md) @@ -21,7 +23,6 @@ ### [Configure Surface Hub 2S on-premises accounts with PowerShell](surface-hub-2s-onprem-powershell.md) - ## Manage ### [Managing Surface Hub 2S with Microsoft Intune](surface-hub-2s-manage-intune.md) ### [Managing Surface Hub 2S with Surface app](surface-hub-2s-manage-surface-app.md) diff --git a/devices/surface-hub/surface-hub-2s-deploy-checklist.md b/devices/surface-hub/surface-hub-2s-deploy-checklist.md new file mode 100644 index 0000000000..0198218e3f --- /dev/null +++ b/devices/surface-hub/surface-hub-2s-deploy-checklist.md @@ -0,0 +1,73 @@ +--- +title: "Surface Hub 2S deployment checklist" +description: "Verify your deployment of Surface Hub 2S using pre- and post-deployment checklists." +keywords: separate values with commas +ms.prod: surface-hub +ms.sitesec: library +author: robmazz +ms.author: robmazz +audience: Admin +ms.topic: article +ms.localizationpriority: Normal +--- + +# Surface Hub 2S deployment checklist + +# +## Surface Hub 2S pre-deployment checklist +| **Item** | **Response** | **Learn more** | +| ----------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Device account name** | | | +| **Device account UPN** | | | +| **ActiveSync Policy** | | | +| **Calendar processing configuration completed** | - Yes
- No | | +| **Device friendly name** | | | +| **Device host name** | | | +| **Affiliation** | - None
- Active Directory affiliation
- Azure Active Directory | | +| **Microsoft Teams Mode** | - Mode 0
- Mode 1
- Mode 2 | | +| **Device Management** | - Yes, Microsoft Intune
- Yes, other mobile device manager [MDM]
- None | | +| **Proxy** | - Automatic configuration
- Proxy server
- Proxy auto-config (PAC) file | | +| **Proxy authentication** | - Device account credentials
- Prompt for credentials | | +| **Password rotation** | - On
- Off | | +| **Skype for Business additional domain names (on-premises only)** | | | +| **Session timeout time** | | | +| **Session timeout action** | - End session
- Allow resume | | +| **My meetings and files** | - Enabled
- Disabled | | +| **Lock screen timeout** | | | +| **Sleep idle timeout** | | | +| **Bluetooth** | - On
- Off | | +| **Use only BitLocker USB drives** | - On
- Off | | +| **Install additional certificates (on-premises only)** | | [Using certificates for AADJ on-premises single-sign on](https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert) | +| **Windows update** | - Windows Update for Business
- Windows Server Update Services [WSUS] | [Deploy updates using Windows Update for Business](https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb)



[Get Started with Windows Server Update Services (WSUS)](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) | +| **Surface app speaker setting** | - Rolling stand
- Wall-mounted | | +| **IP Address** | - Wired - DHCP
- Wired - DHCP reservation
- Wireless – DHCP
- Wireless – DHCP reservation | | + + + +## Surface Hub 2S post-deployment checklist + + + +| **Item** | **Response** | **Learn more** | +| ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------- | +| **Device account syncing** | - Yes
- No | | +| **Bitlocker key** | - Saved to file (no affiliation)
- Saved in Active Directory (AD affiliation)
- Saved in Azure AD ( Azure AD affiliation) | | +| **Device OS updates** | - Completed | | +| **Windows Store updates** | - Automatic
- Manual | | +| **Microsoft Teams scheduled meeting** | - Confirmation email received
- Meeting appears on start screen
- One-touch join functions
- Able to join audio
- Able to join video
- Able to share screen | | +| **Skype for Business scheduled meeting** | - Confirmation email received
- Meeting appears on start screen
- One-touch join functions correctly
- Able to join audio
- Able to join video
- Able to share screen
- Able to send/receive IM | | +| **Scheduled meeting when already invited** | - Meeting declined | | +| **Microsoft Teams ad-hoc meeting** | - Invite other users work
- Able to join audio
- Able to join Video
- Able to share screen | | +| **Skype for Business scheduled meeting** | - Invite other users work
- Able to join audio
- Able to join video
- Able to share screen
- Able to send/receive IM | | +| **Microsoft Whiteboard** | - Launch from start / welcome screen
- Launch from Microsoft Teams | [Microsoft Whiteboard](https://whiteboard.microsoft.com/) | +| **Incoming Skype/Teams call** | - Able to join audio
- Able to join video
- Able to share screen
- Able to send/receive IM (Skype for Business only) | | +| **Incoming live video streams** | - Maximum 2 (Skype for Business)
- Maximum 4 (Microsoft Teams) | | +| **Microsoft Teams Mode 0 behavior** | - Skype for Business tile on Welcome/Start screen
- Can join scheduled Skype for Business meetings (Skype UI)
- Can join scheduled Teams meetings (Teams UI) | | +| **Microsoft Teams Mode 1 behavior** | - Teams tile on Welcome/Start screen
- Can join scheduled Skype for Business meetings (Skype UI)
- Can join scheduled Teams meetings (Teams UI) | | +| **Microsoft Teams Mode 2 behavior** | - Teams tile on welcome / start screen
- Can join scheduled Teams meetings
- Fail to join Skype for Business meetings | | + + + + + + diff --git a/devices/surface-hub/surface-hub-2s-phone-authenticate.md b/devices/surface-hub/surface-hub-2s-phone-authenticate.md new file mode 100644 index 0000000000..b40ad8bbfe --- /dev/null +++ b/devices/surface-hub/surface-hub-2s-phone-authenticate.md @@ -0,0 +1,35 @@ +--- +title: "Configure phone authentication for Surface Hub 2S" +description: "Learn how to simplify signing into Surface Hub 2S using phone authentication." +keywords: separate values with commas +ms.prod: surface-hub +ms.sitesec: library +author: robmazz +ms.author: robmazz +audience: Admin +ms.topic: article +ms.localizationpriority: Normal +--- + +# Configure phone authentication for Surface Hub + +Phone authentication for Surface Hub simplifies signing-in to your meetings and files on Surface Hub. + +**To set up phone authentication:** + +1. Download the [Microsoft Authenticator](https://www.microsoft.com/en-us/account/authenticator) app for iPhone or Android to your phone. +2. From your PC, go to [https://aka.ms/MFASetup](https://aka.ms/MFASetup) , sign in with your account, and click **Next.** +3. In the Additional security verification screen, select Mobile App and Use verification code, and then click Setup. + +**To configure mobile app:** + +1. In the Microsoft authenticator app on your phone, add an account, choose **Work or School Account**, and then scan the QR code displayed on your PC +2. Send a notification to your phone and then approve the sign-in request. +3. In the Authenticator app on your phone, use the drop-down menu next to your account and select **Enable phone sign-in**. +4. If required, register your device with your organization and follow the on-screen instructions. + +**To sign into Surface Hub:** + +1. On Surface Hub, sign into **My meetings and files** and click **Send notification** when prompted. +2. Match the number displayed on your phone with the number displayed on Surface Hub to approve your sign-in request. +3. If prompted, enter the PIN or biometric ID on your phone, to complete sign-in.