Restructuring of configuration docset

windows/configuration/TOC.yml

@@ -22,6 +22,7 @@
           href: windows-10-start-layout-options-and-policies.md
         - name: Use XML
           items: 
+
           - name: Customize and export Start layout
             href: customize-and-export-start-layout.md
           - name: Customize the taskbar
@@ -94,6 +95,7 @@
           href: /troubleshoot/windows-client/shell-experience/kiosk-mode-issues-troubleshooting 
 
 - name: Configure multi-user and guest devices 
+
   items:
     - name: Shared devices concepts
       href: shared-devices-concepts.md
@@ -196,106 +198,149 @@
           href: wcd/wcd-accountmanagement.md
         - name: Accounts
           href: wcd/wcd-accounts.md 
+
         - name: ADMXIngestion
           href: wcd/wcd-admxingestion.md 
+
         - name: AssignedAccess
           href: wcd/wcd-assignedaccess.md 
+
         - name: Browser
           href: wcd/wcd-browser.md 
+
         - name: CellCore
           href: wcd/wcd-cellcore.md
         - name: Cellular
           href: wcd/wcd-cellular.md     
+
         - name: Certificates
           href: wcd/wcd-certificates.md 
+
         - name: CleanPC
           href: wcd/wcd-cleanpc.md     
+
         - name: Connections
           href: wcd/wcd-connections.md 
+
         - name: ConnectivityProfiles
           href: wcd/wcd-connectivityprofiles.md 
+
         - name: CountryAndRegion
           href: wcd/wcd-countryandregion.md 
+
         - name: DesktopBackgroundAndColors
           href: wcd/wcd-desktopbackgroundandcolors.md     
+
         - name: DeveloperSetup
           href: wcd/wcd-developersetup.md     
+
         - name: DeviceFormFactor
           href: wcd/wcd-deviceformfactor.md  
+
         - name: DeviceManagement
           href: wcd/wcd-devicemanagement.md  
+
         - name: DeviceUpdateCenter
           href: wcd/wcd-deviceupdatecenter.md
         - name: DMClient
           href: wcd/wcd-dmclient.md 
+
         - name: EditionUpgrade
           href: wcd/wcd-editionupgrade.md    
+
         - name: FirewallConfiguration
           href: wcd/wcd-firewallconfiguration.md     
+
         - name: FirstExperience
           href: wcd/wcd-firstexperience.md     
+
         - name: Folders
           href: wcd/wcd-folders.md  
+
         - name: HotSpot
           href: wcd/wcd-hotspot.md
         - name: KioskBrowser
           href: wcd/wcd-kioskbrowser.md      
+
         - name: Licensing
           href: wcd/wcd-licensing.md 
+
         - name: Location
           href: wcd/wcd-location.md      
+
         - name: Maps
           href: wcd/wcd-maps.md 
+
         - name: NetworkProxy
           href: wcd/wcd-networkproxy.md     
+
         - name: NetworkQOSPolicy
           href: wcd/wcd-networkqospolicy.md 
+
         - name: OOBE
           href: wcd/wcd-oobe.md 
+
         - name: Personalization
           href: wcd/wcd-personalization.md     
+
         - name: Policies
           href: wcd/wcd-policies.md 
+
         - name: Privacy
           href: wcd/wcd-privacy.md  
+
         - name: ProvisioningCommands
           href: wcd/wcd-provisioningcommands.md
         - name: SharedPC
           href: wcd/wcd-sharedpc.md 
+
         - name: SMISettings
           href: wcd/wcd-smisettings.md     
+
         - name: Start
           href: wcd/wcd-start.md    
+
         - name: StartupApp
           href: wcd/wcd-startupapp.md     
+
         - name: StartupBackgroundTasks
           href: wcd/wcd-startupbackgroundtasks.md 
+
         - name: StorageD3InModernStandby
           href: wcd/wcd-storaged3inmodernstandby.md
         - name: SurfaceHubManagement
           href: wcd/wcd-surfacehubmanagement.md    
+
         - name: TabletMode
           href: wcd/wcd-tabletmode.md  
+
         - name: TakeATest
           href: wcd/wcd-takeatest.md
         - name: Time
           href: wcd/wcd-time.md    
+
         - name: UnifiedWriteFilter
           href: wcd/wcd-unifiedwritefilter.md     
+
         - name: UniversalAppInstall
           href: wcd/wcd-universalappinstall.md 
+
         - name: UniversalAppUninstall
           href: wcd/wcd-universalappuninstall.md 
+
         - name: UsbErrorsOEMOverride
           href: wcd/wcd-usberrorsoemoverride.md
         - name: WeakCharger
           href: wcd/wcd-weakcharger.md  
+
         - name: WindowsHelloForBusiness
           href: wcd/wcd-windowshelloforbusiness.md
         - name: WindowsTeamSettings
           href: wcd/wcd-windowsteamsettings.md     
+
         - name: WLAN
           href: wcd/wcd-wlan.md     
+
         - name: Workplace
           href: wcd/wcd-workplace.md   
 

windows/configuration/accessibility/index.md

@@ -1,19 +1,9 @@
 ---
 title: Windows accessibility information for IT Pros
 description: Lists the various accessibility features available in Windows client with links to detailed guidance on how to set them.
-ms.prod: windows-client
-ms.technology: itpro-configure
-ms.author: lizlong
-author: lizgt2000
 ms.date: 08/11/2023
-ms.reviewer: 
-manager: aaroncz
-ms.localizationpriority: medium
 ms.topic: conceptual
 ms.collection: tier1
-appliesto: 
-  - ✅ <b>Windows 10</b>
-  - ✅ <b>Windows 11</b>
 --- 
 
 <!-- MAXADO-8138357 -->

windows/configuration/cellular/provisioning-apn.md

@@ -1,61 +1,38 @@
 ---
-title: Configure cellular settings for tablets and PCs (Windows 10)
+title: Configure cellular settings for tablets and PCs
 description: Enterprises can provision cellular settings for tablets and PC with built-in cellular modems or plug-in USB modem dongles.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
-ms.topic: article
-ms.localizationpriority: medium
+ms.topic: concept-article
 ms.date: 04/13/2018
-ms.technology: itpro-configure
 --- 
 
 # Configure cellular settings for tablets and PCs 
 
-
-**Applies to**
-
-- Windows 10
-
 >**Looking for consumer information?** See [Cellular settings in Windows 10](https://support.microsoft.com/help/10739/windows-10-cellular-settings) 
 
 Enterprises can configure cellular settings for tablets and PC that have built-in cellular modems or plug-in USB modem dongles and apply the settings in a [provisioning package](provisioning-packages/provisioning-packages.md). After the devices are configured, users are automatically connected using the access point name (APN) defined by the enterprise without needing to manually connect. 
 
 For users who work in different locations, you can configure one APN to connect when the users are at work and a different APN when the users are traveling. 
 
-
 ## Prerequisites 
 
 - Windows 10, version 1703, desktop editions (Home, Pro, Enterprise, Education)
-
 - Tablet or PC with built-in cellular modem or plug-in USB modem dongle
-
 - [Windows Configuration Designer](provisioning-packages/provisioning-install-icd.md)
-
 - APN (the address that your PC uses to connect to the Internet when using the cellular data connection) 
 
-    >[!NOTE]
-    >You can get the APN from your mobile operator.
-    
 ## How to configure cellular settings in a provisioning package 
 
 1. In Windows Configuration Designer, [start a new project](provisioning-packages/provisioning-create-package.md) using the **Advanced provisioning** option.
-
 2. Enter a name for your project, and then click **Next**.
-
 3. Select **All Windows desktop editions**, click **Next**, and then click **Finish**.
-
 4. Go to **Runtime settings > Connections > EnterpriseAPN**.
-
 5. Enter a name for the connection, and then click **Add**. 
 
-    ![Example of APN connection name.](images/apn-add.png)
+![Example of APN connection name.](images/apn-add.png) 
 
 6. The connection appears in the **Available customizations** pane. Select it to view the settings that you can configure for the connection. 
 
-    ![settings for new connection.](images/apn-add-details.png)
+![settings for new connection.](images/apn-add-details.png) 
 
 7. The following table describes the settings available for the connection. 
 
@@ -74,16 +51,13 @@ For users who work in different locations, you can configure one APN to connect
     | UserName | If you select PAP, CHAP, or MSCHAPv2 authentication, enter a user name.  | 
 
 8. After you configure the connection settings, [build the provisioning package](provisioning-packages/provisioning-create-package.md#build-package).
-
 9. [Apply the package to devices.](provisioning-packages/provisioning-apply-package.md) 
 
-
 ## Confirm the settings 
 
 After you apply the provisioning package, you can confirm that the settings have been applied. 
 
 1. On the configured device, open a command prompt as an administrator.
-
 2. Run the following command: 
 
     ```
@@ -98,7 +72,6 @@ After you apply the provisioning package, you can confirm that the settings have
 
     This command will list details for that profile, including Access Point Name. 
 
-
 Alternatively, you can also use the command: 
 
 ```
@@ -112,5 +85,3 @@ netsh mbn show connection interface="name"
 ``` 
 
 The result of that command will show details for the cellular interface, including Access Point Name.
-
-

windows/configuration/cortana-at-work/cortana-at-work-feedback.md

@@ -1,15 +1,8 @@
 ---
 title: Send feedback about Cortana at work back to Microsoft
 description: Learn how to send feedback to Microsoft about Cortana at work so you can provide more information to help diagnose reported issues.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Send feedback about Cortana back to Microsoft

windows/configuration/cortana-at-work/cortana-at-work-o365.md

@@ -1,17 +1,8 @@
 ---
 title: Set up and test Cortana in Windows 10, versions 1909 and earlier, with Microsoft 365 in your organization
 description: Learn how to connect Cortana to Office 365 so employees are notified about regular meetings and unusual events. You can even set an alarm for early meetings.
-ms.prod: windows-client
-ms.collection: tier3
-ms.mktglfcycl: manage
-ms.sitesec: library
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Set up and test Cortana in Windows 10, versions 1909 and earlier, with Microsoft 365 in your organization 

windows/configuration/cortana-at-work/cortana-at-work-overview.md

@@ -1,14 +1,6 @@
 ---
 title: Configure Cortana in Windows 10 and Windows 11
-ms.reviewer: 
-manager: aaroncz
 description: Cortana includes powerful configuration options specifically to optimize for unique small to medium-sized business and for enterprise environments.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 ms.topic: article
 --- 

windows/configuration/cortana-at-work/cortana-at-work-policy-settings.md

@@ -1,14 +1,6 @@
 ---
 title: Configure Cortana with Group Policy and MDM settings (Windows)
 description: The list of Group Policy and mobile device management (MDM) policy settings that apply to Cortana at work.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 ms.topic: article
 --- 
@@ -24,7 +16,7 @@ For specific info about how to set, manage, and use each of these MDM policies t
   - **MDM policy CSP**: [Experience/AllowCortana](/windows/client-management/mdm/policy-csp-experience#experience-allowcortana)
   - **Description**: Specifies if users can use Cortana. 
 
-    Cortana won’t work if this setting is turned off (disabled). On Windows 10, version 1809 and below, users can still do local searches, even with Cortana turned off.
+    Cortana won't work if this setting is turned off (disabled). On Windows 10, version 1809 and below, users can still do local searches, even with Cortana turned off. 
 
 - **AllowCortanaAboveLock**
   - **Group policy**: `Computer Configuration\Administrative Templates\Windows Components\Search\AllowCortanaAboveLock`
@@ -39,7 +31,7 @@ For specific info about how to set, manage, and use each of these MDM policies t
 - **LetAppsActivateWithVoice**
   - **Group policy**: `Computer Configuration\Administrative Templates\Windows Components\App Privacy\LetAppsActivateWithVoice`
   - **MDM policy CSP**: [Privacy/LetAppsActivateWithVoice](/windows/client-management/mdm/policy-csp-privacy#privacy-letappsactivatewithvoice)
-  - **Description**: Specifies if apps, like Cortana or other voice assistants, can activate using a wake word, like “Hey Cortana”.
+  - **Description**: Specifies if apps, like Cortana or other voice assistants, can activate using a wake word, like "Hey Cortana". 
 
     This setting applies to: 
 
@@ -51,13 +43,13 @@ For specific info about how to set, manage, and use each of these MDM policies t
 - **LetAppsAccessMicrophone**
   - **Group policy**: `Computer Configuration\Administrative Templates\Windows Components\App Privacy\LetAppsAccessMicrophone`
   - **MDM policy CSP**: [Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps](/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessmicrophone-forcedenytheseapps)
-  - **Description**: Disables Cortana’s access to the microphone. To use this setting, enter Cortana’s Package Family Name: `Microsoft.549981C3F5F10_8wekyb3d8bbwe`. Users can still type queries to Cortana.
+  - **Description**: Disables Cortana's access to the microphone. To use this setting, enter Cortana's Package Family Name: `Microsoft.549981C3F5F10_8wekyb3d8bbwe`. Users can still type queries to Cortana. 
 
 - **Allow users to enable online speech recognition services**
   - **Group policy**: `Computer Configuration\Administrative Templates\Control Panel\Regional and Language Options\Allow users to enable online speech recognition services`
   - **MDM policy CSP**: [Privacy/AllowInputPersonalization](/windows/client-management/mdm/policy-csp-privacy#privacy-allowinputpersonalization)
   - **Description**: Specifies whether users can use voice commands with Cortana in your organization.
-    - **Windows 10, version 1511**: Cortana won’t work if this setting is turned off (disabled).
+    - **Windows 10, version 1511**: Cortana won't work if this setting is turned off (disabled).
     - **Windows 10, version 1607 and later**: Non-speech aspects of Cortana will still work if this setting is turned off (disabled).
     - **Windows 10, version 2004 and later**: Cortana will work, but voice input will be disabled. 
 
@@ -65,7 +57,7 @@ For specific info about how to set, manage, and use each of these MDM policies t
   - **Group policy**: None
   - **MDM policy CSP**: [System/AllowLocation](/windows/client-management/mdm/policy-csp-system#system-allowlocation)
   - **Description**: Specifies whether to allow app access to the Location service.
-    - **Windows 10, version 1511**: Cortana won’t work if this setting is turned off (disabled).
+    - **Windows 10, version 1511**: Cortana won't work if this setting is turned off (disabled).
     - **Windows 10, version 1607 and later**: Cortana still works if this setting is turned off (disabled).
     - **Windows 10, version 2004 and later**: Cortana still works if this setting is turned off (disabled). Cortana in Windows 10, versions 2004 and later, or Windows 11 don't use the Location service. 
 
@@ -83,6 +75,6 @@ For specific info about how to set, manage, and use each of these MDM policies t
   - **Group policy**: `Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results`
   - **MDM policy CSP**: [Search/DoNotUseWebResults](/windows/client-management/mdm/policy-csp-search#search-donotusewebresults)
   - **Description**: Specifies if search can do queries on the web, and if the web results are shown in search.
-    - **Windows 10 Pro edition**: This setting can’t be managed.
+    - **Windows 10 Pro edition**: This setting can't be managed.
     - **Windows 10 Enterprise edition**: Cortana won't work if this setting is turned off (disabled).
     - **Windows 10, version 2004 and later**: This setting no longer impacts Cortana.

windows/configuration/cortana-at-work/cortana-at-work-scenario-1.md

@@ -1,19 +1,11 @@
 ---
 title: Sign into Microsoft Entra ID, enable the wake word, and try a voice query
 description: A test scenario walking you through signing in and managing the notebook.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 ms.topic: article
 --- 
 
-# Test scenario 1 – Sign into Microsoft Entra ID, enable the wake word, and try a voice query
+# Test scenario 1 - Sign into Microsoft Entra ID, enable the wake word, and try a voice query
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 

windows/configuration/cortana-at-work/cortana-at-work-scenario-2.md

@@ -1,18 +1,11 @@
 ---
 title: Perform a quick search with Cortana at work (Windows)
 description: This scenario is a test scenario about how to perform a quick search with Cortana at work.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 2 – Perform a Bing search with Cortana
+# Test scenario 2 - Perform a Bing search with Cortana
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 

windows/configuration/cortana-at-work/cortana-at-work-scenario-3.md

@@ -1,15 +1,8 @@
 ---
 title: Set a reminder for a location with Cortana at work (Windows)
 description: A test scenario about how to set a location-based reminder using Cortana at work.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Test scenario 3 - Set a reminder

windows/configuration/cortana-at-work/cortana-at-work-scenario-4.md

@@ -1,15 +1,8 @@
 ---
 title: Use Cortana at work to find your upcoming meetings (Windows)
 description: A test scenario on how to use Cortana at work to find your upcoming meetings.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Test scenario 4 - Use Cortana to find free time on your calendar for your upcoming meetings. 

windows/configuration/cortana-at-work/cortana-at-work-scenario-5.md

@@ -1,18 +1,11 @@
 ---
 title: Use Cortana to send email to a coworker (Windows)
 description: A test scenario about how to use Cortana at work to send email to a coworker.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 5 - Test scenario 5 – Find out about a person
+# Test scenario 5 - Test scenario 5 - Find out about a person
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 

windows/configuration/cortana-at-work/cortana-at-work-scenario-6.md

@@ -1,18 +1,11 @@
 ---
 title: Review a reminder suggested by Cortana (Windows)
 description: A test scenario on how to use Cortana with the Suggested reminders feature.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 6 – Change your language and perform a quick search with Cortana
+# Test scenario 6 - Change your language and perform a quick search with Cortana
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 

windows/configuration/cortana-at-work/cortana-at-work-scenario-7.md

@@ -1,38 +1,31 @@
 ---
 title: Help protect data with Cortana and WIP (Windows)
 description: An optional test scenario about how to use Cortana at work with Windows Information Protection (WIP).
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization’s data on a device
+# Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization's data on a device
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!IMPORTANT]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering.
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. 
 
-This optional scenario helps you to protect your organization’s data on a device, based on an inspection by Cortana.
+This optional scenario helps you to protect your organization's data on a device, based on an inspection by Cortana. 
 
-## Use Cortana and WIP to protect your organization’s data 
+## Use Cortana and WIP to protect your organization's data  
 
 1. Create and deploy a WIP policy to your organization. For information about how to do this step, see [Protect your enterprise data using Windows Information Protection (WIP)](/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip). 
 
-2. Create a new email from a non-protected or personal mailbox, including the text _I’ll send you that presentation tomorrow_.
+2. Create a new email from a non-protected or personal mailbox, including the text _I'll send you that presentation tomorrow_. 
 
 3. Wait up to 2 hours to make sure everything has updated, click the **Cortana** icon in the taskbar, and then click in the **Search** bar. 
 
     Cortana automatically pulls your commitment to sending the presentation out of your email, showing it to you. 
 
-4. Create a new email from a protected mailbox, including the same text as above, _I’ll send you that presentation tomorrow_.
+4. Create a new email from a protected mailbox, including the same text as above, _I'll send you that presentation tomorrow_. 
 
 5. Wait until everything has updated again, click the **Cortana** icon in the taskbar, and then click in the **Search** bar. 
 
-    Because it was in an WIP-protected email, the presentation info isn’t pulled out and it isn’t shown to you.
+    Because it was in an WIP-protected email, the presentation info isn't pulled out and it isn't shown to you.

windows/configuration/cortana-at-work/cortana-at-work-testing-scenarios.md

@@ -1,15 +1,8 @@
 ---
 title: Cortana at work testing scenarios
 description: Suggested testing scenarios that you can use to test Cortana in your organization.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 06/28/2021
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Cortana at work testing scenarios 
@@ -25,4 +18,4 @@ We've come up with a list of suggested testing scenarios that you can use to tes
 - [Use Cortana to find free time on your calendar](cortana-at-work-scenario-4.md)
 - [Find out about a person](cortana-at-work-scenario-5.md)
 - [Change your language and perform a quick search with Cortana](cortana-at-work-scenario-6.md)
-- [Use Windows Information Protection (WIP) to secure content on a device and then try to manage your organization’s entries in the notebook](cortana-at-work-scenario-7.md)
+- [Use Windows Information Protection (WIP) to secure content on a device and then try to manage your organization's entries in the notebook](cortana-at-work-scenario-7.md)

windows/configuration/cortana-at-work/cortana-at-work-voice-commands.md

@@ -1,15 +1,8 @@
 ---
 title: Set up and test custom voice commands in Cortana for your organization (Windows)
 description: How to create voice commands that use Cortana to perform voice-enabled actions in your line-of-business (LOB) Universal Windows Platform (UWP) apps.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Set up and test custom voice commands in Cortana for your organization
@@ -28,13 +21,13 @@ To enable voice commands in Cortana
 
 1. **Extend your LOB app.** Add a custom VCD file to your app package. This file defines what capabilities are available to Cortana from the app, letting you tell Cortana what vocal commands should be understood and handled by your app and how the app should start when the command is vocalized. 
 
-    Cortana can perform actions on apps in the foreground (taking focus from Cortana) or in the background (allowing Cortana to keep focus). We recommend that you decide where an action should happen, based on what your voice command is intended to do. For example, if your voice command requires employee input, it’s best for that to happen in the foreground. However, if the app only uses basic commands and doesn’t require interaction, it can happen in the background.
+    Cortana can perform actions on apps in the foreground (taking focus from Cortana) or in the background (allowing Cortana to keep focus). We recommend that you decide where an action should happen, based on what your voice command is intended to do. For example, if your voice command requires employee input, it's best for that to happen in the foreground. However, if the app only uses basic commands and doesn't require interaction, it can happen in the background. 
 
     - **Start Cortana with focus on your app, using specific voice-enabled statements.** [Activate a foreground app with voice commands through Cortana](/cortana/voice-commands/launch-a-foreground-app-with-voice-commands-in-cortana). 
 
     - **Start Cortana removing focus from your app, using specific voice-enabled statements.** [Activate a background app in Cortana using voice commands](/cortana/voice-commands/launch-a-background-app-with-voice-commands-in-cortana). 
 
-2.	**Install the VCD file on employees' devices**. You can use Configuration Manager or Microsoft Intune to deploy and install the VCD file on your employees' devices, the same way you deploy and install any other package in your organization.
+2.    **Install the VCD file on employees' devices**. You can use Configuration Manager or Microsoft Intune to deploy and install the VCD file on your employees' devices, the same way you deploy and install any other package in your organization. 
 
 ## Test scenario: Use voice commands in a Microsoft Store app
 While these apps aren't line-of-business apps, we've worked to make sure to implement a VCD file, allowing you to test how the functionality works with Cortana in your organization. 

windows/configuration/cortana-at-work/includes/cortana-deprecation.md

@@ -1,14 +1,12 @@
 ---
 author: mestew
 ms.author: mstewart
-manager: aaroncz
-ms.technology: itpro-updates
-ms.prod: windows-client
 ms.topic: include
 ms.date: 06/08/2023 
-ms.localizationpriority: medium
+
 ---
 <!--This file is shared by all Cortana in Windows (standalone app) articles under /windows/configuration. 7987543 --> 
 
 > [!Important]
 > Cortana in Windows as a standalone app is [deprecated](/windows/whats-new/deprecated-features). This change only impacts Cortana in Windows, and your productivity assistant, Cortana, will continue to be available in Outlook mobile, Teams mobile, Microsoft Teams display, and Microsoft Teams rooms. 
+

windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md

@@ -1,14 +1,6 @@
 ---
 title: Set up and test Cortana in Windows 10, version 2004 and later
-ms.reviewer: 
-manager: aaroncz
 description: Cortana includes powerful configuration options specifically to optimize unique small to medium-sized business and enterprise environments.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 ms.topic: article
 --- 

windows/configuration/cortana-at-work/test-scenario-1.md

@@ -1,18 +1,11 @@
 ---
-title: Test scenario 1 – Sign in with your work or school account and use Cortana to manage the notebook
+title: Test scenario 1 - Sign in with your work or school account and use Cortana to manage the notebook
 description: A test scenario about how to sign in with your work or school account and use Cortana to manage the notebook.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 1 – Sign in with your work or school account and use Cortana to manage the notebook
+# Test scenario 1 - Sign in with your work or school account and use Cortana to manage the notebook
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 

windows/configuration/cortana-at-work/test-scenario-2.md

@@ -1,23 +1,16 @@
 ---
 title: Test scenario 2 - Perform a quick search with Cortana at work
 description: A test scenario about how to perform a quick search with Cortana at work.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 2 – Perform a quick search with Cortana at work
+# Test scenario 2 - Perform a quick search with Cortana at work
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!Important]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering.
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. 
 
 This scenario helps you perform a quick search using Cortana, both by typing and through voice commands. 
 
@@ -28,6 +21,7 @@ This scenario helps you perform a quick search using Cortana, both by typing and
 2. Type **Type Weather in New York**. 
 
 You should see the weather in New York, New York at the top of the search results. 
+
 Insert screenshot 
 
 ## Search with Cortana, by using voice commands 

windows/configuration/cortana-at-work/test-scenario-3.md

@@ -1,15 +1,8 @@
 ---
 title: Test scenario 3 - Set a reminder for a specific location using Cortana at work
 description: A test scenario about how to set up, review, and edit a reminder based on a location.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Test scenario 3 - Set a reminder for a specific location using Cortana at work
@@ -17,14 +10,14 @@ ms.technology: itpro-configure
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!Important]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering.
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. 
 
 This scenario helps you set up, review, and edit a reminder based on a location. For example, reminding yourself to grab your expense report receipts before you leave the house. 
 
 >[!Note]
->You can set each reminder location individually as you create the reminders, or you can go into the About me screen and add both Work and Home addresses as favorites. Make sure that you use real addresses since you’ll need to go to these locations to complete your testing scenario.
+>You can set each reminder location individually as you create the reminders, or you can go into the About me screen and add both Work and Home addresses as favorites. Make sure that you use real addresses since you'll need to go to these locations to complete your testing scenario. 
 
-Additionally, if you’ve turned on the Meeting & reminder cards & notifications option (in the Meetings & reminders option of your Notebook), you’ll also see your pending reminders on the Cortana Home page.
+Additionally, if you've turned on the Meeting & reminder cards & notifications option (in the Meetings & reminders option of your Notebook), you'll also see your pending reminders on the Cortana Home page. 
 
 ## Create a reminder for a specific location 
 
@@ -39,7 +32,7 @@ This process helps you to create a reminder based on a specific location.
 4. Click **Done**. 
 
 >[!Note]
->If you’ve never used this location before, you’ll be asked to add a name for it so it can be added to the Favorites list in Windows Maps.
+>If you've never used this location before, you'll be asked to add a name for it so it can be added to the Favorites list in Windows Maps. 
 
 5. Choose to be reminded the Next time you arrive at the location or on a specific day of the week from the drop-down box. 
 

windows/configuration/cortana-at-work/test-scenario-4.md

@@ -1,15 +1,8 @@
 ---
 title: Use Cortana to find your upcoming meetings at work (Windows)
 description: A test scenario about how to use Cortana at work to find your upcoming meetings.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Test scenario 4 - Use Cortana to find your upcoming meetings at work
@@ -17,12 +10,12 @@ ms.technology: itpro-configure
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!Important]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering.
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. 
 
 This scenario helps you search for both general upcoming meetings, and specific meetings, both manually and verbally. 
 
 >[!Note]
->If you’ve turned on the Meeting & reminder cards & notifications option (in the Meetings & reminders option of your Notebook), you’ll also see your pending reminders on the Cortana Home page.
+>If you've turned on the Meeting & reminder cards & notifications option (in the Meetings & reminders option of your Notebook), you'll also see your pending reminders on the Cortana Home page. 
 
 ## Find out about upcoming meetings 
 
@@ -34,7 +27,7 @@ This process helps you find your upcoming meetings.
 
 3. Type **Show me my meetings for tomorrow**. 
 
-You’ll see all your meetings scheduled for the next day.
+You'll see all your meetings scheduled for the next day. 
 
 Cortana at work, showing all upcoming meetings
 screenshot 

windows/configuration/cortana-at-work/test-scenario-5.md

@@ -1,15 +1,8 @@
 ---
 title: Use Cortana to send an email to co-worker (Windows)
 description: A test scenario on how to use Cortana at work to send email to a co-worker.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Test scenario 5 - Use Cortana to send an email to co-worker
@@ -17,7 +10,7 @@ ms.technology: itpro-configure
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!Important]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering.
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. 
 
 This scenario helps you to send an email to a co-worker listed in your work address book, both manually and verbally. 
 
@@ -50,7 +43,7 @@ Where <contact_name> is the name of someone in your work address book.
 
 3. Add your email message by saying, **Hello this is a test email using Cortana at work**. 
 
-The message is added and you’re asked if you want to **Send it**, **Add more**, or **Make changes**.
+The message is added and you're asked if you want to **Send it**, **Add more**, or **Make changes**. 
 
 Cortana at work, showing the email text created from verbal commands
 screenshot 

windows/configuration/cortana-at-work/test-scenario-6.md

@@ -1,25 +1,18 @@
 ---
-title: Test scenario 6 - Review a reminder suggested by Cortana based on what you’ve promised in email
+title: Test scenario 6 - Review a reminder suggested by Cortana based on what you've promised in email
 description: A test scenario about how to use Cortana with the Suggested reminders feature.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
-# Test scenario 6 - Review a reminder suggested by Cortana based on what you’ve promised in email
+# Test scenario 6 - Review a reminder suggested by Cortana based on what you've promised in email
 <!--Using include for Cortana in Windows deprecation -->
 [!INCLUDE [Deprecation of Cortana in Windows](./includes/cortana-deprecation.md)] 
 
 >[!Important]
->The data created as part of these scenarios will be uploaded to Microsoft’s Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. For more info, see the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) and the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement).
+>The data created as part of these scenarios will be uploaded to Microsoft's Cloud to help Cortana learn and help your employees. This is the same info that Cortana uses in the consumer offering. For more info, see the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) and the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement). 
 
-Cortana automatically finds patterns in your email, suggesting reminders based things that you said you would do so you don’t forget about them. For example, Cortana recognizes that if you include the text, I’ll get something to you by the end of the week in an email, you're making a commitment to provide something by a specific date. Cortana can now suggest that you be reminded about this event, letting you decide whether to keep it or to cancel it.
+Cortana automatically finds patterns in your email, suggesting reminders based things that you said you would do so you don't forget about them. For example, Cortana recognizes that if you include the text, I'll get something to you by the end of the week in an email, you're making a commitment to provide something by a specific date. Cortana can now suggest that you be reminded about this event, letting you decide whether to keep it or to cancel it. 
 
 >[!Important]
 >The Suggested reminders feature is currently only available in English (en-us). 
@@ -40,9 +33,9 @@ screenshot
 Suggested reminders options for Cortana at work
 screenshot 
 
-5. Create and send an email to yourself (so you can see the Suggested reminder), including the text, **I’ll finish this project by end of day today**.
+5. Create and send an email to yourself (so you can see the Suggested reminder), including the text, **I'll finish this project by end of day today**. 
 
-6. After you get the email, click on the Cortana **Home** icon, and scroll to today’s events.
+6. After you get the email, click on the Cortana **Home** icon, and scroll to today's events. 
 
 If the reminder has a specific date or time associated with it, like end of day, Cortana notifies you at the appropriate time and puts the reminder into the Action Center. Also from the Home screen, you can view the email where you made the promise, set aside time on your calendar, officially set the reminder, or mark the reminder as completed. 
 

windows/configuration/cortana-at-work/testing-scenarios-using-cortana-in-business-org.md

@@ -1,15 +1,8 @@
 ---
 title: Testing scenarios using Cortana in your business or organization
 description: A list of suggested testing scenarios that you can use to test Cortana in your organization.
-ms.prod: windows-client
-ms.collection: tier3
-author: aczechowski
-ms.localizationpriority: medium
-ms.author: aaroncz
 ms.date: 10/05/2017
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+ms.topic: article
 --- 
 
 # Testing scenarios using Cortana in your business or organization

windows/configuration/docfx.json

@@ -41,9 +41,8 @@
       "zone_pivot_group_filename": "resources/zone-pivot-groups.json",
       "breadcrumb_path": "/windows/resources/breadcrumb/toc.json",
       "uhfHeaderId": "MSDocsHeader-Windows",
-      "ms.technology": "itpro-configure",
-      "ms.topic": "article",
-      "ms.prod": "windows-client",
+      "ms.subservice": "itpro-configure",
+      "ms.service": "windows-client",
       "manager": "aaroncz",
       "feedback_system": "Standard",
             "feedback_product_url": "https://support.microsoft.com/windows/send-feedback-to-microsoft-with-the-feedback-hub-app-f59187f8-8739-22d6-ba93-f66612949332",
@@ -73,6 +72,41 @@
       "feedback_system": {
         "ue-v/**/*.*": "None",
         "cortana-at-work/**/*.*": "None"
+      },
+      "author":{
+        "*//**/*.md": "paolomatarazzo",
+        "*//**/*.yml": "paolomatarazzo",
+        "cortana-at-work//**/*.md": "aczechowski",
+        "cortana-at-work//**/*.yml": "aczechowski",
+        "wcd//**/*.md": "aczechowski",
+        "wcd//**/*.yml": "aczechowski",
+        "ue-v//**/*.md": "aczechowski",
+        "ue-v//**/*.yml": "aczechowski"
+      },
+      "ms.author":{
+        "*//**/*.md": "paoloma",
+        "*//**/*.yml": "paoloma",
+        "cortana-at-work//**/*.md": "aaroncz",
+        "cortana-at-work//**/*.yml": "aaroncz",
+        "wcd//**/*.md": "aaroncz",
+        "wcd//**/*.yml": "aaroncz",
+        "ue-v//**/*.md": "aaroncz",
+        "ue-v//**/*.yml": "aaroncz"
+      },
+      "ms.collection":{
+        "cortana-at-work//**/*.md": "tier3",
+        "wcd//**/*.md": "must-keep",
+        "ue-v//**/*.md": [
+          "must-keep",
+          "tier3"
+        ]
+      },
+      "appliesto": {
+        "*/**/*.md": [
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
+          "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>"
+        ],
+        "wcd//**/*.md": "✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>"
       }
     },
     "template": [],
@@ -80,3 +114,6 @@
     "markdownEngineName": "markdig"
   }
 } 
+
+
+

windows/configuration/includes/multi-app-kiosk-support-windows11.md

@@ -2,8 +2,6 @@
 author: aczechowski
 ms.author: aaroncz
 ms.date: 09/21/2021
-ms.reviewer: 
-manager: aaroncz
 ms.service: windows-client
 ms.topic: include
 --- 

windows/configuration/index.yml

@@ -16,6 +16,7 @@ metadata:
   ms.date: 12/20/2023
   localization_priority: medium
     
+
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new 
 
 landingContent:
@@ -87,6 +88,7 @@ landingContent:
           - text: Configure Cortana in Windows 10
             url: cortana-at-work/cortana-at-work-overview.md
           - text: Custom voice commands in Cortana 
+
             url: cortana-at-work/cortana-at-work-voice-commands.md 
 
   # Card (optional)

windows/configuration/kiosk/find-the-application-user-model-id-of-an-installed-app.md

@@ -2,8 +2,6 @@
 title: Find the Application User Model ID of an installed app
 ms.reviewer: sybruckm
 description: To configure assigned access (kiosk mode), you need the Application User Model ID (AUMID) of apps installed on a device.
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.date: 12/31/2017
 ---

windows/configuration/kiosk/guidelines-for-assigned-access-app.md

@@ -1,11 +1,8 @@
 ---
 title: Guidelines for choosing an app for assigned access
 description: The following guidelines may help you choose an appropriate Windows app for your assigned access experience.
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.reviewer: sybruckm
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -75,14 +72,19 @@ Restart on Idle Time | Specify when Kiosk Browser should restart in a fresh stat
 > [!IMPORTANT]
 > To configure multiple URLs for **Blocked URL Exceptions** or **Blocked URLs** in Windows Configuration Designer:
 > 
+
 > 1. Create the provisioning package. When ready to export, close the project in Windows Configuration Designer.
 > 2. Open the customizations.xml file in the project folder (e.g C:\Users\name\Documents\Windows Imaging and Configuration Designer (WICD)\Project_18). 
+
 > 3. Insert the null character string in between each URL (e.g www.bing.com``www.contoso.com). 
+
 > 4. Save the XML file.
 > 5. Open the project again in Windows Configuration Designer.
 > 6. Export the package. Ensure you do not revisit the created policies under Kiosk Browser or else the null character will be removed.
 > 
+
 > 
+
 > [!TIP]
 > To enable the **End Session** button for Kiosk Browser in Intune, you must [create a custom OMA-URI policy](/intune/custom-settings-windows-10) with the following information:
 > - OMA-URI: ./Vendor/MSFT/Policy/Config/KioskBrowser/EnableEndSessionButton
@@ -141,6 +143,7 @@ The following table gives examples for blocked URLs.
 
 You can create your own web browser Windows app by using the WebView class. Learn more about developing your own web browser app:
 - [Creating your own browser with HTML and JavaScript](https://blogs.windows.com/msedgedev/2015/08/27/creating-your-own-browser-with-html-and-javascript/) 
+
 - [WebView class](/uwp/api/Windows.UI.Xaml.Controls.WebView)
 - [A web browser built with JavaScript as a Windows app](https://github.com/MicrosoftEdge/JSBrowser/tree/v1.0) 
 

windows/configuration/kiosk/kiosk-additional-reference.md

@@ -2,13 +2,8 @@
 title: More kiosk methods and reference information (Windows 10/11)
 description: Find more information for configuring, validating, and troubleshooting kiosk configuration.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.topic: reference
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10 Pro, Enterprise, and Education
+- Windows 10 Pro, Enterprise, and Education
 - Windows 11 
 
 

windows/configuration/kiosk/kiosk-mdm-bridge.md

@@ -2,13 +2,8 @@
 title: Use MDM Bridge WMI Provider to create a Windows 10/11 kiosk (Windows 10/11)
 description: Environments that use Windows Management Instrumentation (WMI) can use the MDM Bridge WMI Provider to configure the MDM_AssignedAccess class.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10 Pro, Enterprise, and Education
+- Windows 10 Pro, Enterprise, and Education
 - Windows 11 
 
 Environments that use [Windows Management Instrumentation (WMI)](/windows/win32/wmisdk/wmi-start-page) can use the [MDM Bridge WMI Provider](/windows/win32/dmwmibridgeprov/mdm-bridge-wmi-provider-portal) to configure the MDM_AssignedAccess class. For more information about using a PowerShell script to configure AssignedAccess, see [PowerShell Scripting with WMI Bridge Provider](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider).  
@@ -25,6 +20,7 @@ Environments that use [Windows Management Instrumentation (WMI)](/windows/win32/
 Here's an example to set AssignedAccess configuration: 
 
 1. Download the [psexec tool](/sysinternals/downloads/psexec).  
+
 2. Run `psexec.exe -i -s cmd.exe`.
 3. In the command prompt launched by psexec.exe, enter `powershell.exe` to open PowerShell. 
 
@@ -101,22 +97,35 @@ $obj.Configuration = [System.Web.HttpUtility]::HtmlEncode(@"
 
 <?xml version="1.0" encoding="utf-8" ?>
 <AssignedAccessConfiguration  
+
   xmlns=http://schemas.microsoft.com/AssignedAccess/2017/config xmlns:win11=http://schemas.microsoft.com/AssignedAccess/2022/config>
   <Profiles>
     <Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">       
+
       <AllAppsList>
         <AllowedApps> 
+
           <App AppUserModelId="Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic" /> 
+
           <App AppUserModelId="Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo" /> 
+
           <App AppUserModelId="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" /> 
+
           <App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" /> 
+
           <App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" /> 
+
           <App DesktopAppPath="%windir%\system32\mspaint.exe" /> 
+
           <App DesktopAppPath="C:\Windows\System32\notepad.exe" /> 
+
         </AllowedApps> 
+
       </AllAppsList> 
+
       <win11:StartPins>
         <![CDATA[  
+
           { "pinnedList":[
             {"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},
             {"packagedAppId":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App"},
@@ -130,6 +139,7 @@ $obj.Configuration = [System.Web.HttpUtility]::HtmlEncode(@"
       </win11:StartPins>
       <Taskbar ShowTaskbar="true"/>
     </Profile> 
+
   </Profiles>
   <Configs>
     <Config>
@@ -138,6 +148,7 @@ $obj.Configuration = [System.Web.HttpUtility]::HtmlEncode(@"
     </Config>
   </Configs>
 </AssignedAccessConfiguration>    
+
 "@) 
 
 Set-CimInstance -CimInstance $obj

windows/configuration/kiosk/kiosk-methods.md

@@ -1,14 +1,9 @@
 ---
 title: Configure kiosks and digital signs on Windows 10/11 desktop editions
 ms.reviewer: sybruckm
-manager: aaroncz
-ms.author: lizlong
 description: In this article, learn about the methods for configuring kiosks and digital signs on Windows 10 or Windows 11 desktop editions. 
-ms.prod: windows-client
-ms.localizationpriority: medium
-author: lizgt2000
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -26,6 +21,8 @@ Some desktop devices in an enterprise serve a special purpose. For example, a PC
 
 - **A single-app kiosk**: Runs a single Universal Windows Platform (UWP) app in full screen above the lock screen. People using the kiosk can see only that app. When the kiosk account (a local standard user account) signs in, the kiosk app launches automatically, and you can configure the kiosk account to sign in automatically as well. If the kiosk app is closed, it will automatically restart. 
 
+  
+
   A single-app kiosk is ideal for public use. Using [Shell Launcher](kiosk-shelllauncher.md), you can configure a kiosk device that runs a Windows desktop application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. This type of single-app kiosk doesn't run above the lock screen.  
 
   ![Illustration of a full-screen kiosk experience that runs one app on a Windows client device.](images/kiosk-fullscreen.png) 
@@ -73,10 +70,12 @@ There are several kiosk configuration methods that you can choose from, dependin
 ## Methods for a single-app kiosk running a UWP app 
 
 You can use this method | For this edition | For this kiosk account type 
+
 --- | --- | ---
 [Assigned access in Settings](kiosk-single-app.md#local) | Pro, Ent, Edu | Local standard user
 [Assigned access cmdlets](kiosk-single-app.md#powershell)  | Pro, Ent, Edu | Local standard user
 [The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard)  | Pro (version 1709), Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID 
+
 [Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID
 [Shell Launcher](kiosk-shelllauncher.md) v2 | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID 
 
@@ -85,8 +84,10 @@ You can use this method | For this edition | For this kiosk account type
 ## Methods for a single-app kiosk running a Windows desktop application 
 
 You can use this method | For this edition | For this kiosk account type 
+
 --- | --- | ---
 [The kiosk wizard in Windows Configuration Designer](kiosk-single-app.md#wizard) | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID 
+
 [Microsoft Intune or other mobile device management (MDM)](kiosk-single-app.md#mdm) | Pro (version 1709), Ent, Edu | Local standard user, Microsoft Entra ID
 [Shell Launcher](kiosk-shelllauncher.md) v1 and v2 | Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID 
 
@@ -95,6 +96,7 @@ You can use this method | For this edition | For this kiosk account type
 ## Methods for a multi-app kiosk 
 
 You can use this method | For this edition | For this kiosk account type 
+
 --- | --- | ---
 [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md) | Pro, Ent, Edu | Local standard user, Active Directory, Microsoft Entra ID
 [Microsoft Intune or other MDM](lock-down-windows-10-to-specific-apps.md) | Pro, Ent, Edu | Local standard user, Microsoft Entra ID
@@ -110,6 +112,7 @@ Method | App type | Account type | Single-app kiosk | Multi-app kiosk
 [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md)  | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✔️  | ✔️
 Microsoft Intune or other MDM [for full-screen single-app kiosk](kiosk-single-app.md#mdm) or [for multi-app kiosk with desktop](lock-down-windows-10-to-specific-apps.md) | UWP, Windows desktop app | Local standard user, Microsoft Entra ID | ✔️ | ✔️
 [Shell Launcher](kiosk-shelllauncher.md) |Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID | ✔️ | 
+
 [MDM Bridge WMI Provider](kiosk-mdm-bridge.md) | UWP, Windows desktop app | Local standard user, Active Directory, Microsoft Entra ID |  | ✔️ 
 
 

windows/configuration/kiosk/kiosk-policies.md

@@ -2,13 +2,8 @@
 title: Policies enforced on kiosk devices (Windows 10/11)
 description: Learn about the policies enforced on a device when you configure it as a kiosk.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
-ms.author: lizlong
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10 Pro, Enterprise, and Education
+- Windows 10 Pro, Enterprise, and Education
 - Windows 11 
 
  
@@ -56,7 +51,7 @@ Turn off toast notifications |		Enabled
 Remove Task Manager |		Enabled
 Remove Change Password option in Security Options UI |		Enabled
 Remove Sign Out option in Security Options UI	 |	Enabled
-Remove All Programs list from the Start Menu	 |	Enabled – Remove and disable setting
+Remove All Programs list from the Start Menu	 |	Enabled - Remove and disable setting
 Prevent access to drives from My Computer	 |	Enabled - Restrict all drives 
 
 >[!NOTE]

windows/configuration/kiosk/kiosk-prepare.md

@@ -2,13 +2,8 @@
 title: Prepare a device for kiosk configuration on Windows 10/11 | Microsoft Docs
 description: Learn how to prepare a device for kiosk configuration. Also, learn about the recommended kiosk configuration changes.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -140,6 +135,7 @@ For a more secure kiosk experience, we recommend that you make the following con
 - **Disable the camera**: To enable this feature, you have the following options: 
 
   - **Use the Settings app**: 
+
     1. Open the **Settings** app.
     2. Go to **Privacy** > **Camera**.
     3. Select **Allow apps use my camera** > **Off**. 
@@ -230,6 +226,8 @@ You may also want to set up **automatic logon** for your kiosk device. When your
    > If you are not familiar with Registry Editor, [learn how to modify the Windows registry](/troubleshoot/windows-server/performance/windows-registry-advanced-users).
   
 
+ 
+
 2. Go to 
 
    **HKEY\_LOCAL\_MACHINE\SOFTWARE\\Microsoft\Windows NT\CurrentVersion\Winlogon** 
@@ -263,6 +261,7 @@ The following table describes some features that have interoperability issues we
 
   | Key combination | Blocked behavior |
   | --- | --- | 
+
   | Left Alt + Left Shift + Print Screen | Open High Contrast dialog box. |
   | Left Alt + Left Shift + Num Lock | Open Mouse Keys dialog box. |
   | Windows logo key + U | Open Ease of Access Center. |  
@@ -277,6 +276,7 @@ The following table describes some features that have interoperability issues we
 
   | Key combination | Blocked behavior for assigned access users |
   | --- | --- | 
+
   | Alt + Esc | Cycle through items in the reverse order from which they were opened. |
   | Ctrl + Alt + Esc | Cycle through items in the reverse order from which they were opened. |
   | Ctrl + Esc | Open the Start screen. |

windows/configuration/kiosk/kiosk-shelllauncher.md

@@ -2,13 +2,8 @@
 title: Use Shell Launcher to create a Windows 10/11 kiosk (Windows 10/11)
 description: Shell Launcher lets you change the default shell that launches when a user signs in to a device.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -23,6 +18,7 @@ Using Shell Launcher, you can configure a device that runs an application as the
 
 >[!NOTE]
 >Shell Launcher controls which application the user sees as the shell after sign-in. It does not prevent the user from accessing other desktop applications and system components. 
+
 >
 >Methods of controlling access to other desktop applications and system components can be used in addition to using the Shell Launcher. These methods include, but are not limited to:
 >- [Group Policy](https://www.microsoft.com/download/details.aspx?id=25250) - example: Prevent access to registry editing tools
@@ -52,9 +48,9 @@ For sample XML configurations for the different app combinations, see [Samples f
 >
 >- Shell Launcher doesn't support a custom shell with an application that launches a different process and exits. For example, you cannot specify **write.exe** in Shell Launcher. Shell Launcher launches a custom shell and monitors the process to identify when the custom shell exits. **Write.exe** creates a 32-bit wordpad.exe process and exits. Because Shell Launcher is not aware of the newly created wordpad.exe process, Shell Launcher will take action based on the exit code of **Write.exe**, such as restarting the custom shell.  
 
--   A domain, Microsoft Entra ID, or local user account.
+- A domain, Microsoft Entra ID, or local user account. 
 
--   A Windows application that is installed for that account. The app can be your own company application or a common app like Internet Explorer.
+- A Windows application that is installed for that account. The app can be your own company application or a common app like Internet Explorer. 
 
 [See the technical reference for the shell launcher component.](/windows-hardware/customize/enterprise/shell-launcher) 
 
@@ -92,12 +88,19 @@ The following XML sample works for **Shell Launcher v1**:
 
 ```xml
 <?xml version="1.0" encoding="utf-8"?> 
+
 <ShellLauncherConfiguration xmlns="http://schemas.microsoft.com/ShellLauncher/2018/Configuration"> 
+
   <Profiles> 
+
     <Profile ID="{24A7309204F3F-44CC-8375-53F13FE213F7}"> 
+
       <Shell Shell="%ProgramFiles%\Internet Explorer\iexplore.exe -k www.bing.com" /> 
+
     </Profile> 
+
   </Profiles> 
+
   <Configs>
     <!--local account-->
     <Account Name="ShellLauncherUser"/>
@@ -110,16 +113,27 @@ For **Shell Launcher v2**, you can use UWP app type for `Shell` by specifying th
 
 ```xml
 <?xml version="1.0" encoding="utf-8"?> 
+
 <ShellLauncherConfiguration xmlns="http://schemas.microsoft.com/ShellLauncher/2018/Configuration" 
+
 xmlns:v2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> 
+
   <Profiles> 
+
     <DefaultProfile> 
+
       <Shell Shell="ShellLauncherV2DemoUwp_5d7tap497jwe8!App" v2:AppType="UWP" v2:AllAppsFullScreen="true"> 
+
         <DefaultAction Action="RestartShell"/> 
+
       </Shell> 
+
     </DefaultProfile> 
+
   </Profiles> 
+
   <Configs/> 
+
 </ShellLauncherConfiguration>
 ```  
 
@@ -166,6 +180,7 @@ static class CheckShellLauncherLicense
             enabled = 0;
         }
         
+
         return (enabled != 0);
     } 
 
@@ -201,6 +216,7 @@ try {
     $ShellLauncherClass = [wmiclass]"\\$COMPUTER\${NAMESPACE}:WESL_UserSetting"
     } catch [Exception] {
     write-host $_.Exception.Message; 
+
     write-host "Make sure Shell Launcher feature is enabled"
     exit
     } 
@@ -219,6 +235,7 @@ function Get-UsernameSID($AccountName) {
 
     return $NTUserSID.Value
     
+
 } 
 
 # Get the SID for a user account named "Cashier". Rename "Cashier" to an existing account on your system to test this script. 

windows/configuration/kiosk/kiosk-single-app.md

@@ -2,8 +2,6 @@
 title: Set up a single-app kiosk on Windows
 description: A single-use device is easy to set up in Windows Pro, Enterprise, and Education editions.
 ms.reviewer: sybruckm
-ms.author: lizlong
-author: lizgt2000
 ms.topic: article
 ms.collection:
  - tier1
@@ -60,6 +58,7 @@ You have several options for configuring your single-app kiosk.
 
 > [!TIP]
 > You can also configure a kiosk account and app for single-app kiosk within [XML in a provisioning package](lock-down-windows-10-to-specific-apps.md) by using a [kiosk profile](lock-down-windows-10-to-specific-apps.md#profile).  
+
 >
 > Be sure to check the [configuration recommendations](kiosk-prepare.md) before you set up your kiosk. 
 
@@ -69,6 +68,7 @@ You have several options for configuring your single-app kiosk.
 ## Set up a kiosk in local Settings 
 
 >App type: 
+
 > - UWP
 >
 >OS:
@@ -128,7 +128,7 @@ When you set up a kiosk (also known as *assigned access*) in **Settings** for Wi
 
 4.  Choose an app. Only apps that can run above the lock screen will be available in the list of apps to choose from. For more information, see [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md). 
 
-5.  Close **Settings** – your choices are saved automatically, and will be applied the next time that user account signs in.
+5.  Close **Settings** - your choices are saved automatically, and will be applied the next time that user account signs in. 
 
 To remove assigned access, choose **Turn off assigned access and sign out of the selected account**. 
 
@@ -137,14 +137,18 @@ To remove assigned access, choose **Turn off assigned access and sign out of the
 ## Set up a kiosk using Windows PowerShell 
 
  
+
 >App type: 
+
 > - UWP
 >
 >OS: 
+
 > - Windows 10 Pro, Ent, Edu
 > - Windows 11
 >
 >Account type: 
+
 > - Local standard user 
 
 ![PowerShell windows displaying Set-AssignedAccess cmdlet.](images/set-assignedaccess.png) 
@@ -186,6 +190,7 @@ Clear-AssignedAccess
 
 >App type:
 > - UWP 
+
 > - Windows desktop application
 >
 >OS:
@@ -310,9 +315,11 @@ When you use the **Provision kiosk devices** wizard in Windows Configuration Des
 ## Set up a kiosk or digital sign using Microsoft Intune or other MDM service 
 
 >App type: 
+
 > - UWP
 >
 >OS: 
+
 > - Windows 10 Pro version 1709+, Ent, Edu
 > - Windows 11
 >

windows/configuration/kiosk/kiosk-validate.md

@@ -1,14 +1,9 @@
 ---
 title: Validate kiosk configuration (Windows 10/11)
-description: In this article, learn what to expect on a multi-app kiosk in Windows 10/11 Pro, Enterprise, and Education.
+description: In this article, learn what to expect on a multi-app kiosk in Windows 10/11 Pro, Enterprise, and Education.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10 Pro, Enterprise, and Education
+- Windows 10 Pro, Enterprise, and Education
 - Windows 11 
 
 To identify the provisioning packages applied to a device, go to **Settings** > **Accounts** > **Access work or school**, and then click **Add or remove a provisioning package**. You should see a list of packages that were applied to the device. 
@@ -41,13 +36,17 @@ The users can switch apps just as they do today in Windows. They can use the Tas
 
 When the assigned access user signs in, you should see a restricted Start experience:
 - Start gets launched in full screen and prevents the end user from accessing the desktop. 
+
 - Start shows the layout aligned with what you defined in the multi-app configuration XML. 
+
 - Start prevents the end user from changing the tile layout.
   - The user cannot resize, reposition, and unpin the tiles.
   - The user cannot pin additional tiles on the start.
 - Start hides **All Apps** list.
 - Start hides all the folders on Start (including File Explorer, Settings, Documents, Downloads, Music, Pictures, Videos, HomeGroup, Network, and Personal folders). 
+
 - Only **User** and **Power** buttons are available. (You can control whether to show the **User/Power** buttons using [existing policies](/windows/client-management/mdm/policy-csp-start).) 
+
 - Start hides **Change account settings** option under **User** button. 
 
 ### Taskbar changes 

windows/configuration/kiosk/kiosk-xml.md

@@ -2,13 +2,8 @@
 title: Assigned Access configuration kiosk XML reference (Windows 10/11)
 description: Learn about the assigned access configuration (kiosk) for XML and XSD for kiosk device configuration in Windows 10/11.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
-ms.author: lizlong
+
 ms.topic: article
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10
 - Windows 11 
 
 ## Full XML sample 
@@ -28,6 +23,7 @@ ms.date: 12/31/2017
 ```xml
 <?xml version="1.0" encoding="utf-8" ?>
 <AssignedAccessConfiguration 
+
     xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
     xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
     >
@@ -61,6 +57,7 @@ ms.date: 12/31/2017
                               <!-- A link file is required for desktop applications to show on start layout, the link file can be placed under
                                    "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs" if the link file is shared for all users or
                                    "%AppData%\Microsoft\Windows\Start Menu\Programs" if the link file is for the specific user only 
+
                                    see document https://learn.microsoft.com/windows/configuration/start-layout-xml-desktop
                               -->
                               <!-- for inbox desktop applications, a link file might already exist and can be used directly -->
@@ -194,6 +191,7 @@ This sample demonstrates that both UWP and Win32 apps can be configured to autom
                               <!-- A link file is required for desktop applications to show on start layout, the link file can be placed under
                                    "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs" if the link file is shared for all users or
                                    "%AppData%\Microsoft\Windows\Start Menu\Programs" if the link file is for the specific user only 
+
                                    see document https://learn.microsoft.com/windows/configuration/start-layout-xml-desktop
                               -->
                               <!-- for inbox desktop applications, a link file might already exist and can be used directly -->
@@ -260,6 +258,7 @@ This sample demonstrates that both UWP and Win32 apps can be configured to autom
   >
   <Profiles>
     <Profile Id="{AFF9DA33-AE89-4039-B646-3A5706E92957}">      
+
         <KioskModeApp v4:ClassicAppPath="%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe" v4:ClassicAppArguments="--no-first-run --kiosk-idle-timeout-minutes=5 --kiosk www.bing.com" />
         <v4:BreakoutSequence Key="Ctrl+A"/>
     </Profile>
@@ -313,6 +312,7 @@ This sample demonstrates that only a global profile is used, with no active user
                               <!-- A link file is required for desktop applications to show on start layout, the link file can be placed under
                                    "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs" if the link file is shared for all users or
                                    "%AppData%\Microsoft\Windows\Start Menu\Programs" if the link file is for the specific user only 
+
                                    see document https://learn.microsoft.com/windows/configuration/start-layout-xml-desktop
                               -->
                               <!-- for inbox desktop applications, a link file might already exist and can be used directly -->
@@ -365,6 +365,7 @@ Below sample shows dedicated profile and global profile mixed usage, a user woul
                               <!-- A link file is required for desktop applications to show on start layout, the link file can be placed under
                                    "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs" if the link file is shared for all users or
                                    "%AppData%\Microsoft\Windows\Start Menu\Programs" if the link file is for the specific user only 
+
                                    see document https://learn.microsoft.com/windows/configuration/start-layout-xml-desktop
                               -->
                               <!-- for inbox desktop applications, a link file might already exist and can be used directly -->
@@ -756,6 +757,7 @@ The following XML schema is for AssignedAccess Configuration up to Windows 10, v
         <xs:attributeGroup ref="autoLaunch_attributeGroup"/>
     </xs:complexType>
     
+
     <xs:attributeGroup name="autoLaunch_attributeGroup">
         <xs:attribute ref="rs5:AutoLaunch"/>
         <xs:attribute ref="rs5:AutoLaunchArguments" use="optional"/>
@@ -931,6 +933,7 @@ The following XML is the schema for Windows 10 version 1909+:
         <xs:attribute name="Id" type="guid_t" />
     </xs:complexType>
   
+
     <xs:element name="AllowRemovableDrives"/>
     <xs:element name="NoRestriction" />
     <xs:element name="GlobalProfile" type="globalProfile_t" /> 

windows/configuration/kiosk/lock-down-windows-10-applocker.md

@@ -1,15 +1,10 @@
 ---
-title: Use AppLocker to create a Windows 10 kiosk that runs multiple apps (Windows 10)
-description: Learn how to use AppLocker to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps.
+title: Use AppLocker to create a Windows 10 kiosk that runs multiple apps
+description: Learn how to use AppLocker to configure a kiosk device running Windows 10 Enterprise or Windows 10 Education so that users can only run a few specific apps.
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.date: 07/30/2018
-ms.author: lizlong
 ms.topic: article
-ms.technology: itpro-configure
 --- 
 
 # Use AppLocker to create a Windows 10 kiosk that runs multiple apps 
@@ -17,14 +12,14 @@ ms.technology: itpro-configure
 
 **Applies to** 
 
--   Windows 10
+- Windows 10 
 
-Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education, version 1703 and earlier, so that users can only run a few specific apps. The result is similar to [a kiosk device](./kiosk-methods.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings.
+Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education, version 1703 and earlier, so that users can only run a few specific apps. The result is similar to [a kiosk device](./kiosk-methods.md), but with multiple apps available. For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. 
 
 >[!NOTE]
 >For devices running Windows 10, version 1709, we recommend the [multi-app kiosk method](lock-down-windows-10-to-specific-apps.md). 
 
-You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device.
+You can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using [AppLocker](/windows/device-security/applocker/applocker-overview). AppLocker rules specify which apps are allowed to run on the device. 
 
 AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run. For more information, see [How AppLocker works](/windows/device-security/applocker/how-applocker-works-techref). 
 
@@ -83,31 +78,32 @@ After you install the desired apps, set up AppLocker rules to only allow specifi
 
 In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device: 
 
--   Remove **All apps**.
+- Remove **All apps**. 
 
     Go to **Group Policy Editor** > **User Configuration** > **Administrative Templates\\Start Menu and Taskbar\\Remove All Programs list from the Start menu**. 
 
--   Hide **Ease of access** feature on the logon screen.
+- Hide **Ease of access** feature on the logon screen. 
 
     Go to **Control Panel** > **Ease of Access** > **Ease of Access Center**, and turn off all accessibility tools. 
 
--   Disable the hardware power button.
+- Disable the hardware power button. 
 
     Go to **Power Options** > **Choose what the power button does**, change the setting to **Do nothing**, and then **Save changes**. 
 
--   Disable the camera.
+- Disable the camera. 
 
     Go to **Settings** > **Privacy** > **Camera**, and turn off **Let apps use my camera**. 
 
--   Turn off app notifications on the lock screen.
+- Turn off app notifications on the lock screen. 
 
     Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Logon\\Turn off app notifications on the lock screen**. 
 
--   Disable removable media.
+- Disable removable media. 
 
     Go to **Group Policy Editor** > **Computer Configuration** > **Administrative Templates\\System\\Device Installation\\Device Installation Restrictions**. Review the policy settings available in **Device Installation Restrictions** for the settings applicable to your situation. 
 
-    **Note**  
+    **Note**  
+
     To prevent this policy from affecting a member of the Administrators group, in **Device Installation Restrictions**, enable **Allow administrators to override Device Installation Restriction policies**. 
 
       

windows/configuration/kiosk/lock-down-windows-10-to-specific-apps.md

@@ -1,12 +1,11 @@
 ---
 title: Set up a multi-app kiosk on Windows 10
 description: Learn how to configure a kiosk device running Windows 10 so that users can only run a few specific apps.
-author: lizgt2000
-ms.author: lizlong
 ms.reviewer: sybruckm
 ms.topic: how-to
 ms.date: 11/08/2023
 appliesto: 
+
   - ✅ <b>Windows 10 Pro</b>
   - ✅ <b>Windows 10 Enterprise</b>
   - ✅ <b>Windows 10 Education</b>
@@ -453,6 +452,7 @@ Usage is demonstrated below, by using the new XML namespace and specifying `Glob
                               <!-- A link file is required for desktop applications to show on start layout, the link file can be placed under
                                    "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs" if the link file is shared for all users or
                                    "%AppData%\Microsoft\Windows\Start Menu\Programs" if the link file is for the specific user only 
+
                                    see document https://learn.microsoft.com/windows/configuration/start-layout-xml-desktop
                               -->
                               <!-- for inbox desktop applications, a link file might already exist and can be used directly -->

windows/configuration/kiosk/lock-down-windows-11-to-specific-apps.md

@@ -1,14 +1,9 @@
 ---
 title: Set up a multi-app kiosk on Windows 11
 description: Learn how to configure a kiosk device running Windows 11 so that users can only run a few specific apps.
-ms.prod: windows-client
-ms.technology: itpro-configure
-author: lizgt2000
-ms.author: lizlong
 ms.date: 05/12/2023
-manager: aaroncz
 ms.reviewer: sybruckm 
-ms.localizationpriority: medium
+
 ms.topic: how-to
 ---
 # Set up a multi-app kiosk on Windows 11 devices 
@@ -37,6 +32,7 @@ See the table below for the different methods to configure a multi-app kiosk in
 |[MDM WMI Bridge Provider](#configure-a-kiosk-using-wmi-bridge) | Available May 2023| 
 
 <!-- 
+
 Commenting out the coming soon items
 |Intune|Coming soon|
 |Provisioning Package Using Windows Configuration Designer| Coming soon|
@@ -65,6 +61,7 @@ You can start your file by pasting the following XML into an XML editor, and sav
 ```xml
 <?xml version="1.0" encoding="utf-8" ?>
 <AssignedAccessConfiguration  
+
   xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config" xmlns:win11="http://schemas.microsoft.com/AssignedAccess/2022/config">
     <Profiles>
         <Profile Id="">
@@ -165,6 +162,7 @@ Add your pinnedList JSON into the StartPins tag in your XML file.
 ```xml
 <win11:StartPins>
         <![CDATA[  
+
           { "pinnedList":[
             {"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},
             {"packagedAppId":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App"},
@@ -323,6 +321,7 @@ Environments that use [Windows Management Instrumentation (WMI)](/windows/win32/
 Here's an example of how to set AssignedAccess configuration: 
 
 1. Download the [psexec tool](/sysinternals/downloads/psexec).  
+
 1. Using an elevated command prompt, run `psexec.exe -i -s cmd.exe`.
 1. In the command prompt launched by psexec.exe, enter `powershell.exe` to open PowerShell.
 1. Save the following Powershell excerpt as a PowerShell script (.ps1), replacing the placeholder "your XML here" with the [Sample Assigned Access XML](#sample-assigned-access-xml) then run the script at the Powershell prompt from the previous step. 
@@ -340,6 +339,7 @@ $obj.Configuration = [System.Net.WebUtility]::HtmlEncode(@"
 
 <your XML here>
     
+
 "@) 
 
 $obj = Set-CimInstance -CimInstance $obj -ErrorVariable cimSetError -ErrorAction SilentlyContinue
@@ -353,9 +353,12 @@ if($cimSetError) {
         $events = Get-WinEvent -FilterHashtable $eventLogFilterHashTable -ErrorAction Ignore
     } until ($events.Count -or $stopwatch.Elapsed -gt $timeout) # wait for the log to be available
     
+
     if($events.Count) {
         $events | ForEach-Object { 
+
             Write-Output "$($_.TimeCreated) [$($_.LevelDisplayName.ToUpper())] $($_.Message -replace "`n|`r")" 
+
         }
     } else {
         Write-Warning "Timed-out attempting to retrieve event logs..."
@@ -374,22 +377,32 @@ This section contains a predefined XML file which can be used as a quickstart to
 ```xml
 <?xml version="1.0" encoding="utf-8" ?>
 <AssignedAccessConfiguration  
+
   xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config" 
+
   xmlns:win11="http://schemas.microsoft.com/AssignedAccess/2022/config">
   <Profiles>
     <Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">       
+
       <AllAppsList>
         <AllowedApps> 
+
           <App AppUserModelId="Microsoft.Windows.Photos_8wekyb3d8bbwe!App" /> 
+
           <App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" /> 
+
           <App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />
           <App DesktopAppPath="C:\Windows\system32\cmd.exe" />
           <App DesktopAppPath="%windir%\System32\WindowsPowerShell\v1.0\Powershell.exe" />
           <App DesktopAppPath="%windir%\explorer.exe" /> 
+
         </AllowedApps> 
+
       </AllAppsList> 
+
       <win11:StartPins>
         <![CDATA[  
+
           { "pinnedList":[
             {"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},
             {"packagedAppId":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App"},
@@ -402,6 +415,7 @@ This section contains a predefined XML file which can be used as a quickstart to
       </win11:StartPins>
       <Taskbar ShowTaskbar="true"/>
     </Profile> 
+
   </Profiles>
   <Configs>
     <Config>
@@ -410,4 +424,5 @@ This section contains a predefined XML file which can be used as a quickstart to
     </Config>
   </Configs>
 </AssignedAccessConfiguration> 
+
 ```

windows/configuration/kiosk/lockdown-features-windows-10.md

@@ -1,14 +1,8 @@
 ---
-title: Lockdown features from Windows Embedded 8.1 Industry (Windows 10)
-description: Many of the lockdown features available in Windows Embedded 8.1 Industry have been modified in some form for Windows 10.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
+title: Lockdown features from Windows Embedded 8.1 Industry
+description: Many of the lockdown features available in Windows Embedded 8.1 Industry have been modified in some form for Windows 10.
 ms.topic: article 
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 --- 
 
@@ -16,22 +10,22 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10 
 
-Many of the lockdown features available in Windows Embedded 8.1 Industry have been modified in some form for Windows 10. This table maps Windows Embedded Industry 8.1 features to Windows 10 Enterprise features, along with links to documentation.
+Many of the lockdown features available in Windows Embedded 8.1 Industry have been modified in some form for Windows 10. This table maps Windows Embedded Industry 8.1 features to Windows 10 Enterprise features, along with links to documentation. 
 
 |Windows Embedded 8.1 Industry lockdown feature|Windows 10 feature|Changes|
 |--- |--- |--- |
-|[Hibernate Once/Resume Many (HORM)](/previous-versions/windows/embedded/dn449302(v=winembedded.82)): Quick boot to device|[HORM](/windows-hardware/customize/enterprise/hibernate-once-resume-many-horm-)|HORM is supported in Windows 10, version 1607 and later.|
-|[Unified Write Filter](/previous-versions/windows/embedded/dn449332(v=winembedded.82)): protect a device's physical storage media|[Unified Write Filter](/windows-hardware/customize/enterprise/unified-write-filter)|The Unified Write Filter is continued in Windows 10.|
-|[Keyboard Filter](/previous-versions/windows/embedded/dn449298(v=winembedded.82)): block hotkeys and other key combinations|[Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter)|Keyboard filter is added in Windows 10, version 1511. As in Windows Embedded Industry 8.1, Keyboard Filter is an optional component that can be turned on via **Turn Windows Features On/Off**. Keyboard Filter (in addition to the WMI configuration previously available) will be configurable through Windows Imaging and Configuration Designer (ICD) in the SMISettings path.|
-|[Shell Launcher](/previous-versions/windows/embedded/dn449423(v=winembedded.82)): launch a Windows desktop application on sign-on|[Shell Launcher](/windows-hardware/customize/enterprise/shell-launcher)|Shell Launcher continues in Windows 10. It is now configurable in Windows ICD under the **SMISettings** category.<br>Learn [how to use Shell Launcher to create a kiosk device](/windows/configuration/kiosk-single-app) that runs a Windows desktop application.|
-|[Application Launcher](/previous-versions/windows/embedded/dn449251(v=winembedded.82)): launch a Universal Windows Platform (UWP) app on sign-on|[Assigned Access](/windows/client-management/mdm/assignedaccess-csp)|The Windows 8 Application Launcher has been consolidated into Assigned Access. Application Launcher enabled launching a Windows 8 app and holding focus on that app. Assigned Access offers a more robust solution for ensuring that apps retain focus.|
-|[Dialog Filter](/previous-versions/windows/embedded/dn449395(v=winembedded.82)): suppress system dialogs and control which processes can run|[AppLocker](/windows/device-security/applocker/applocker-overview)|Dialog Filter has been deprecated for Windows 10. Dialog Filter provided two capabilities; the ability to control which processes were able to run, and the ability to prevent dialogs (in practice, system dialogs) from appearing.<li>Control over which processes are able to run will now be provided by AppLocker.<li>System dialogs in Windows 10 have been replaced with system toasts. To see more on blocking system toasts, see Toast Notification Filter below.|
+|[Hibernate Once/Resume Many (HORM)](/previous-versions/windows/embedded/dn449302(v=winembedded.82)): Quick boot to device|[HORM](/windows-hardware/customize/enterprise/hibernate-once-resume-many-horm-)|HORM is supported in Windows 10, version 1607 and later.|
+|[Unified Write Filter](/previous-versions/windows/embedded/dn449332(v=winembedded.82)): protect a device's physical storage media|[Unified Write Filter](/windows-hardware/customize/enterprise/unified-write-filter)|The Unified Write Filter is continued in Windows 10.|
+|[Keyboard Filter](/previous-versions/windows/embedded/dn449298(v=winembedded.82)): block hotkeys and other key combinations|[Keyboard Filter](/windows-hardware/customize/enterprise/keyboardfilter)|Keyboard filter is added in Windows 10, version 1511. As in Windows Embedded Industry 8.1, Keyboard Filter is an optional component that can be turned on via **Turn Windows Features On/Off**. Keyboard Filter (in addition to the WMI configuration previously available) will be configurable through Windows Imaging and Configuration Designer (ICD) in the SMISettings path.|
+|[Shell Launcher](/previous-versions/windows/embedded/dn449423(v=winembedded.82)): launch a Windows desktop application on sign-on|[Shell Launcher](/windows-hardware/customize/enterprise/shell-launcher)|Shell Launcher continues in Windows 10. It is now configurable in Windows ICD under the **SMISettings** category.<br>Learn [how to use Shell Launcher to create a kiosk device](/windows/configuration/kiosk-single-app) that runs a Windows desktop application.|
+|[Application Launcher](/previous-versions/windows/embedded/dn449251(v=winembedded.82)): launch a Universal Windows Platform (UWP) app on sign-on|[Assigned Access](/windows/client-management/mdm/assignedaccess-csp)|The Windows 8 Application Launcher has been consolidated into Assigned Access. Application Launcher enabled launching a Windows 8 app and holding focus on that app. Assigned Access offers a more robust solution for ensuring that apps retain focus.|
+|[Dialog Filter](/previous-versions/windows/embedded/dn449395(v=winembedded.82)): suppress system dialogs and control which processes can run|[AppLocker](/windows/device-security/applocker/applocker-overview)|Dialog Filter has been deprecated for Windows 10. Dialog Filter provided two capabilities; the ability to control which processes were able to run, and the ability to prevent dialogs (in practice, system dialogs) from appearing.<li>Control over which processes are able to run will now be provided by AppLocker.<li>System dialogs in Windows 10 have been replaced with system toasts. To see more on blocking system toasts, see Toast Notification Filter below.|
 |[Toast Notification Filter](/previous-versions/windows/embedded/dn449360(v=winembedded.82)): suppress toast notifications|Mobile device management (MDM) and Group Policy|Toast Notification Filter has been replaced by MDM and Group Policy settings for blocking the individual components of non-critical system toasts that may appear. For example, to prevent a toast from appearing when a USB drive is connected, ensure that USB connections have been blocked using the USB-related policies, and turn off notifications from apps.<br>Group Policy: **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **Notifications**<br>MDM policy name may vary depending on your MDM service. In Microsoft Intune, use **Allow action center notifications** and a [custom OMA-URI setting](/mem/intune/configuration/custom-settings-windows-10) for **AboveLock/AllowActionCenterNotifications**.|
-|[Embedded Lockdown Manager](/previous-versions/windows/embedded/dn449279(v=winembedded.82)): configure lockdown features|[Windows Imaging and Configuration Designer (ICD)](/windows/configuration/provisioning-packages/provisioning-install-icd)|The Embedded Lockdown Manager has been deprecated for Windows 10 and replaced by the Windows ICD. Windows ICD is the consolidated tool for Windows imaging and provisioning scenarios and enables configuration of all Windows settings, including the lockdown features previously configurable through Embedded Lockdown Manager.|
+|[Embedded Lockdown Manager](/previous-versions/windows/embedded/dn449279(v=winembedded.82)): configure lockdown features|[Windows Imaging and Configuration Designer (ICD)](/windows/configuration/provisioning-packages/provisioning-install-icd)|The Embedded Lockdown Manager has been deprecated for Windows 10 and replaced by the Windows ICD. Windows ICD is the consolidated tool for Windows imaging and provisioning scenarios and enables configuration of all Windows settings, including the lockdown features previously configurable through Embedded Lockdown Manager.|
 |[USB Filter](/previous-versions/windows/embedded/dn449350(v=winembedded.82)): restrict USB devices and peripherals on system|MDM and Group Policy|The USB Filter driver has been replaced by MDM and Group Policy settings for blocking the connection of USB devices.<br> <br> Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Device Installation** > **Device Installation Restrictions**<br>MDM policy name may vary depending on your MDM service. In Microsoft Intune, use **Removable storage**.|
-|[Assigned Access](/previous-versions/windows/embedded/dn449303(v=winembedded.82)): launch a UWP app on sign-in and lock access to system|[Assigned Access](/windows/client-management/mdm/assignedaccess-csp)|Assigned Access has undergone significant improvement for Windows 10. In Windows 8.1, Assigned Access blocked system hotkeys and edge gestures, and non-critical system notifications, but it also applied some of these limitations to other accounts on the device.<br>In Windows 10, Assigned Access no longer affects accounts other than the one being locked down. Assigned Access now restricts access to other apps or system components by locking the device when the selected user account logs in and launching the designated app above the lock screen, ensuring that no unintended functionality can be accessed.<br><br>Learn [how to use Assigned Access to create a kiosk device](/windows/configuration/kiosk-single-app) that runs a Universal Windows app.|
+|[Assigned Access](/previous-versions/windows/embedded/dn449303(v=winembedded.82)): launch a UWP app on sign-in and lock access to system|[Assigned Access](/windows/client-management/mdm/assignedaccess-csp)|Assigned Access has undergone significant improvement for Windows 10. In Windows 8.1, Assigned Access blocked system hotkeys and edge gestures, and non-critical system notifications, but it also applied some of these limitations to other accounts on the device.<br>In Windows 10, Assigned Access no longer affects accounts other than the one being locked down. Assigned Access now restricts access to other apps or system components by locking the device when the selected user account logs in and launching the designated app above the lock screen, ensuring that no unintended functionality can be accessed.<br><br>Learn [how to use Assigned Access to create a kiosk device](/windows/configuration/kiosk-single-app) that runs a Universal Windows app.|
 |[Gesture Filter](/previous-versions/windows/embedded/dn449374(v=winembedded.82)): block swipes from top, left, and right edges of screen|MDM and Group Policy|In Windows 8.1, gestures provided the ability to close an app, to switch apps, and to reach the Charms. In Windows 10, Charms have been removed. In Windows 10, version 1607, you can block swipes using the [Allow edge swipe](/windows/client-management/mdm/policy-configuration-service-provider#LockDown_AllowEdgeSwipe) policy.|
-|[Custom Logon](/previous-versions/windows/embedded/dn449309(v=winembedded.82)): suppress Windows UI elements during Windows sign-on, sign-off, and shutdown|[Embedded Logon](/windows-hardware/customize/desktop/unattend/microsoft-windows-embedded-embeddedlogon)|No changes. Applies only to Windows 10 Enterprise and Windows 10 Education.|
-|[Unbranded Boot](/previous-versions/windows/embedded/dn449249(v=winembedded.82)): custom brand a device by removing or replacing Windows boot UI elements|[Unbranded Boot](/windows-hardware/customize/enterprise/unbranded-boot)|No changes. Applies only to Windows 10 Enterprise and Windows 10 Education.|
+|[Custom Logon](/previous-versions/windows/embedded/dn449309(v=winembedded.82)): suppress Windows UI elements during Windows sign-on, sign-off, and shutdown|[Embedded Logon](/windows-hardware/customize/desktop/unattend/microsoft-windows-embedded-embeddedlogon)|No changes. Applies only to Windows 10 Enterprise and Windows 10 Education.|
+|[Unbranded Boot](/previous-versions/windows/embedded/dn449249(v=winembedded.82)): custom brand a device by removing or replacing Windows boot UI elements|[Unbranded Boot](/windows-hardware/customize/enterprise/unbranded-boot)|No changes. Applies only to Windows 10 Enterprise and Windows 10 Education.|

windows/configuration/kiosk/setup-digital-signage.md

@@ -1,22 +1,17 @@
 ---
 title: Set up digital signs on Windows 10/11
-description: A single-use device such as a digital sign is easy to set up in Windows 10 and Windows 11 (Pro, Enterprise, and Education).
+description: A single-use device such as a digital sign is easy to set up in Windows 10 and Windows 11 (Pro, Enterprise, and Education).
 ms.reviewer: sybruckm 
-manager: aaroncz
-ms.author: lizlong
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
+
 ms.date: 09/20/2021
 ms.topic: article
-ms.technology: itpro-configure
 --- 
 
 # Set up digital signs on Windows 10/11 
 
 **Applies to** 
 
-- Windows 10 Pro, Enterprise, and Education
+- Windows 10 Pro, Enterprise, and Education
 - Windows 11 
 
 Digital signage can be a useful and exciting business tool. Use digital signs to showcase your products and services, to display testimonials, or to advertise promotions and campaigns. A digital sign can be a static display, such as a building directory or menu, or it can be dynamic, such as repeating videos or a social media feed.  
@@ -34,6 +29,7 @@ Kiosk Browser must be downloaded for offline licensing using Microsoft Store for
 This procedure explains how to configure digital signage using Kiosk Browser on a device running Windows client that has already been set up (completed the first-run experience). 
 
 1. [Get **Kiosk Browser** in Microsoft Store for Business with offline, unencoded license type.](/microsoft-store/acquire-apps-microsoft-store-for-business#acquire-apps) 
+
 2. [Download the **Kiosk Browser** package, license file, and all required frameworks.](/microsoft-store/distribute-offline-apps#download-an-offline-licensed-app)
 2. [Install Windows Configuration Designer.](~/provisioning-packages/provisioning-install-icd.md)
 3. Open Windows Configuration Designer and select **Provision kiosk devices**.
@@ -41,6 +37,7 @@ This procedure explains how to configure digital signage using Kiosk Browser on
 5. On **Set up device**, select **Disabled**, and select **Next**.
 6. On **Set up network**, enable network setup:
     - Toggle **On** wireless network connectivity. 
+
     - Enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.
 7. On **Account management**, select **Disabled**, and select **Next**.
 8. On **Add applications**, select **Add an application**:
@@ -56,6 +53,7 @@ This procedure explains how to configure digital signage using Kiosk Browser on
     - For **App type**, select **Universal Windows App**.
     - In **Enter the AUMID for the app**, enter `Microsoft.KioskBrowser_8wekyb3d8bbwe!App`.
 11. In the bottom left corner of Windows Configuration Designer, select **Switch to advanced editor**. 
+
 12. Go to **Runtime settings** > **Policies** > **KioskBrowser**. Let's assume that the URL for your digital signage content is contoso.com/menu:
     - In **BlockedUrlExceptions**, enter `https://www.contoso.com/menu`.
     - In **BlockedUrl**, enter `*`.

windows/configuration/lock-screen/windows-spotlight.md

@@ -1,11 +1,8 @@
 ---
 title: Configure Windows Spotlight on the lock screen
 description: Windows Spotlight is an option for the lock screen background that displays different background images on the lock screen.
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.date: 04/30/2018
-ms.technology: itpro-configure
 --- 
 
 # Configure Windows Spotlight on the lock screen 
@@ -13,7 +10,7 @@ ms.technology: itpro-configure
 
 **Applies to** 
 
--   Windows 10
+- Windows 10 
 
 
 Windows Spotlight is an option for the lock screen background that displays different background images and occasionally offers suggestions on the lock screen. Windows Spotlight is available in all desktop editions of Windows 10.  
@@ -29,16 +26,17 @@ For managed devices running Windows 10 Enterprise and Windows 10 Education, ente
 ## What does Windows Spotlight include? 
 
 
--   **Background image**
+- **Background image** 
 
     The Windows Spotlight displays a new image on the lock screen each day. The initial background image is included during installation. More images are downloaded on ongoing basis. 
 
     ![lock screen image.](images/lockscreen.png) 
 
--   **Feature suggestions, fun facts, tips**
+- **Feature suggestions, fun facts, tips** 
 
     The lock screen background will occasionally make recommendations on how to enhance your productivity and enjoyment of Microsoft products including suggesting other relevant Microsoft products and services.
     
+
     ![fun facts.](images/funfacts.png) 
 
 ## How do you turn off Windows Spotlight locally? 
@@ -61,6 +59,7 @@ Windows Spotlight is enabled by default. Windows 10 provides Group Policy and mo
 | **Do not suggest third-party content in Windows spotlight** | **Experience/Allow ThirdParty Suggestions In Windows Spotlight** | Enables enterprises to restrict suggestions to Microsoft apps and services | Windows 10 Pro, Enterprise, and Education, version 1607 and later |
 | **Turn off all Windows Spotlight features** | **Experience/Allow Windows Spotlight** | Enables enterprises to completely disable all Windows Spotlight features in a single setting | Windows 10 Enterprise and Education, version 1607 and later |
 | **Configure Spotlight on lock screen** | **Experience/Configure Windows Spotlight On Lock Screen** | Specifically controls the use of the dynamic Windows Spotlight image on the lock screen, and can be enabled or disabled | Windows 10 Enterprise and Education, version 1607 and later | 
+
 | **Turn off the Windows Spotlight on Action Center** | **Experience/Allow Windows Spotlight On Action Center** |  Turn off Suggestions from Microsoft that show after each clean install, upgrade, or on an on-going basis to introduce users to what is new or changed | Windows 10 Enterprise and Education, version 1703 |
 | **Do not use diagnostic data for tailored experiences** | **Experience/Allow Tailored Experiences With Diagnostic Data** | Prevent Windows from using diagnostic data to provide tailored experiences to the user | Windows 10 Pro, Enterprise, and Education, version 1703 |
 | **Turn off the Windows Welcome Experience** | **Experience/Allow Windows Spotlight Windows Welcome Experience** | Turn off the Windows Spotlight Windows Welcome experience that helps introduce users to Windows, such as launching Microsoft Edge with a web page highlighting new features | Windows 10 Enterprise and Education, version 1703 |
@@ -95,3 +94,4 @@ The recommendation for custom lock screen images that include text (such as a le
 
 
  
+

windows/configuration/provisioning-packages/diagnose-provisioning-packages.md

@@ -1,12 +1,10 @@
 ---
 title: Diagnose Provisioning Packages
 description: Diagnose general failures in provisioning.
-manager: aaroncz
 ms.author: lizlong 
+
 ms.topic: article
-ms.prod: windows-client
 ms.technology: itpro-manage
-author: lizgt2000
 ms.date: 01/18/2023
 --- 
 

windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md

@@ -2,13 +2,8 @@
 title: Configuration service providers for IT pros (Windows 10/11)
 description: Describes how IT pros and system administrators can use configuration service providers (CSPs) to configure devices.
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 --- 
 
@@ -105,82 +100,82 @@ The documentation for most CSPs will also include an XML example.
 
 CSPs provide access to many settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful. 
 
--   [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
+- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider) 
 
     The Policy CSP enables the enterprise to configure policies on Windows client. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings. 
 
     Some of the settings available in the Policy CSP include the following: 
 
-    -   **Accounts**, such as whether a non-Microsoft account can be added to the device.
-    -   **Application management**, such as whether only Microsoft Store apps are allowed.
-    -   **Bluetooth**, such as the services allowed to use it.
-    -   **Browser**, such as restricting InPrivate browsing.
-    -   **Connectivity**, such as whether the device can be connected to a computer by USB.
-    -   **Defender** (for desktop only), such as day and time to scan.
-    -   **Device lock**, such as the type of PIN or password required to unlock the device.
-    -   **Experience**, such as allowing Cortana.
-    -   **Security**, such as whether provisioning packages are allowed.
-    -   **Settings**, such as enabling the user to change VPN settings.
-    -   **Start**, such as applying a standard Start layout.
-    -   **System**, such as allowing the user to reset the device.
-    -   **Text input**, such as allowing the device to send anonymized user text input data samples to Microsoft.
-    -   **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store.
-    -   **WiFi**, such as whether Internet sharing is enabled.
+    - **Accounts**, such as whether a non-Microsoft account can be added to the device.
+    - **Application management**, such as whether only Microsoft Store apps are allowed.
+    - **Bluetooth**, such as the services allowed to use it.
+    - **Browser**, such as restricting InPrivate browsing.
+    - **Connectivity**, such as whether the device can be connected to a computer by USB.
+    - **Defender** (for desktop only), such as day and time to scan.
+    - **Device lock**, such as the type of PIN or password required to unlock the device.
+    - **Experience**, such as allowing Cortana.
+    - **Security**, such as whether provisioning packages are allowed.
+    - **Settings**, such as enabling the user to change VPN settings.
+    - **Start**, such as applying a standard Start layout.
+    - **System**, such as allowing the user to reset the device.
+    - **Text input**, such as allowing the device to send anonymized user text input data samples to Microsoft.
+    - **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store.
+    - **WiFi**, such as whether Internet sharing is enabled. 
 
 Here is a list of CSPs supported on Windows 10 Enterprise: 
 
--   [ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
--   [Application CSP](/windows/client-management/mdm/application-csp)
--   [AppLocker CSP](/windows/client-management/mdm/applocker-csp)
--   [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp)
--   [Bootstrap CSP](/windows/client-management/mdm/bootstrap-csp)
--   [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp)
--   [CellularSettings CSP](/windows/client-management/mdm/cellularsettings-csp)
--   [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp)
--   [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp)
--   [CM\_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp)
--   [CM\_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp)
--   [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp)
--   [Defender CSP](/windows/client-management/mdm/defender-csp)
--   [DevDetail CSP](/windows/client-management/mdm/devdetail-csp)
--   [DeviceInstanceService CSP](/windows/client-management/mdm/deviceinstanceservice-csp)
--   [DeviceLock CSP](/windows/client-management/mdm/devicelock-csp)
--   [DeviceStatus CSP](/windows/client-management/mdm/devicestatus-csp)
--   [DevInfo CSP](/windows/client-management/mdm/devinfo-csp)
--   [DiagnosticLog CSP](/windows/client-management/mdm/diagnosticlog-csp)
--   [DMAcc CSP](/windows/client-management/mdm/dmacc-csp)
--   [DMClient CSP](/windows/client-management/mdm/dmclient-csp)
--   [Email2 CSP](/windows/client-management/mdm/email2-csp)
--   [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp)
--   [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp)
--   [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp)
--   [EnterpriseExt CSP](/windows/client-management/mdm/enterpriseext-csp)
--   [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp)
--   [FileSystem CSP](/windows/client-management/mdm/filesystem-csp)
--   [HealthAttestation CSP](/windows/client-management/mdm/healthattestation-csp)
--   [HotSpot CSP](/windows/client-management/mdm/hotspot-csp)
--   [Maps CSP](/windows/client-management/mdm/maps-csp)
--   [NAP CSP](/windows/client-management/mdm/filesystem-csp)
--   [NAPDEF CSP](/windows/client-management/mdm/napdef-csp)
--   [NodeCache CSP](https://go.microsoft.com/fwlink/p/?LinkId=723265)
--   [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp)
--   [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
--   [PolicyManager CSP](https://go.microsoft.com/fwlink/p/?LinkId=723418)
--   [Provisioning CSP](/windows/client-management/mdm/provisioning-csp)
--   [Proxy CSP](https://go.microsoft.com/fwlink/p/?LinkId=723372)
--   [PXLOGICAL CSP](/windows/client-management/mdm/pxlogical-csp)
--   [Registry CSP](/windows/client-management/mdm/registry-csp)
--   [RemoteFind CSP](/windows/client-management/mdm/remotefind-csp)
--   [RemoteWipe CSP](/windows/client-management/mdm/remotewipe-csp)
--   [Reporting CSP](/windows/client-management/mdm/reporting-csp)
--   [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp)
--   [SecurityPolicy CSP](/windows/client-management/mdm/securitypolicy-csp)
--   [Storage CSP](/windows/client-management/mdm/storage-csp)
--   [SUPL CSP](/windows/client-management/mdm/supl-csp)
--   [UnifiedWriteFilter CSP](/windows/client-management/mdm/unifiedwritefilter-csp)
--   [Update CSP](/windows/client-management/mdm/update-csp)
--   [VPN CSP](/windows/client-management/mdm/vpn-csp)
--   [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp)
--   [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp)
--   [WindowsLicensing CSP](/windows/client-management/mdm/windowslicensing-csp)
--   [WindowsSecurityAuditing CSP](/windows/client-management/mdm/windowssecurityauditing-csp)
+- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
+- [Application CSP](/windows/client-management/mdm/application-csp)
+- [AppLocker CSP](/windows/client-management/mdm/applocker-csp)
+- [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp)
+- [Bootstrap CSP](/windows/client-management/mdm/bootstrap-csp)
+- [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp)
+- [CellularSettings CSP](/windows/client-management/mdm/cellularsettings-csp)
+- [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp)
+- [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp)
+- [CM\_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp)
+- [CM\_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp)
+- [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp)
+- [Defender CSP](/windows/client-management/mdm/defender-csp)
+- [DevDetail CSP](/windows/client-management/mdm/devdetail-csp)
+- [DeviceInstanceService CSP](/windows/client-management/mdm/deviceinstanceservice-csp)
+- [DeviceLock CSP](/windows/client-management/mdm/devicelock-csp)
+- [DeviceStatus CSP](/windows/client-management/mdm/devicestatus-csp)
+- [DevInfo CSP](/windows/client-management/mdm/devinfo-csp)
+- [DiagnosticLog CSP](/windows/client-management/mdm/diagnosticlog-csp)
+- [DMAcc CSP](/windows/client-management/mdm/dmacc-csp)
+- [DMClient CSP](/windows/client-management/mdm/dmclient-csp)
+- [Email2 CSP](/windows/client-management/mdm/email2-csp)
+- [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp)
+- [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp)
+- [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp)
+- [EnterpriseExt CSP](/windows/client-management/mdm/enterpriseext-csp)
+- [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp)
+- [FileSystem CSP](/windows/client-management/mdm/filesystem-csp)
+- [HealthAttestation CSP](/windows/client-management/mdm/healthattestation-csp)
+- [HotSpot CSP](/windows/client-management/mdm/hotspot-csp)
+- [Maps CSP](/windows/client-management/mdm/maps-csp)
+- [NAP CSP](/windows/client-management/mdm/filesystem-csp)
+- [NAPDEF CSP](/windows/client-management/mdm/napdef-csp)
+- [NodeCache CSP](https://go.microsoft.com/fwlink/p/?LinkId=723265)
+- [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp)
+- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
+- [PolicyManager CSP](https://go.microsoft.com/fwlink/p/?LinkId=723418)
+- [Provisioning CSP](/windows/client-management/mdm/provisioning-csp)
+- [Proxy CSP](https://go.microsoft.com/fwlink/p/?LinkId=723372)
+- [PXLOGICAL CSP](/windows/client-management/mdm/pxlogical-csp)
+- [Registry CSP](/windows/client-management/mdm/registry-csp)
+- [RemoteFind CSP](/windows/client-management/mdm/remotefind-csp)
+- [RemoteWipe CSP](/windows/client-management/mdm/remotewipe-csp)
+- [Reporting CSP](/windows/client-management/mdm/reporting-csp)
+- [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp)
+- [SecurityPolicy CSP](/windows/client-management/mdm/securitypolicy-csp)
+- [Storage CSP](/windows/client-management/mdm/storage-csp)
+- [SUPL CSP](/windows/client-management/mdm/supl-csp)
+- [UnifiedWriteFilter CSP](/windows/client-management/mdm/unifiedwritefilter-csp)
+- [Update CSP](/windows/client-management/mdm/update-csp)
+- [VPN CSP](/windows/client-management/mdm/vpn-csp)
+- [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp)
+- [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp)
+- [WindowsLicensing CSP](/windows/client-management/mdm/windowslicensing-csp)
+- [WindowsSecurityAuditing CSP](/windows/client-management/mdm/windowssecurityauditing-csp)

windows/configuration/provisioning-packages/provision-pcs-for-initial-deployment.md

@@ -1,14 +1,9 @@
 ---
 title: Provision PCs with common settings (Windows 10/11)
-description: Create a provisioning package to apply common settings to a PC running Windows 10.
+description: Create a provisioning package to apply common settings to a PC running Windows 10.
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10
 - Windows 11 
 
 This topic explains how to create and apply a provisioning package that contains common enterprise settings to a device running all desktop editions of Windows client except Home. 
@@ -25,13 +20,13 @@ This topic explains how to create and apply a provisioning package that contains
 You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices.  
 
 ## Advantages
--   You can configure new devices without reimaging.
+- You can configure new devices without reimaging. 
 
--   Works on desktop devices.
+- Works on desktop devices. 
 
--   No network connectivity required.
+- No network connectivity required. 
 
--   Simple to apply.
+- Simple to apply. 
 
 [Learn more about the benefits and uses of provisioning packages.](provisioning-packages.md) 
 
@@ -44,8 +39,11 @@ The desktop wizard helps you configure the following settings in a provisioning
 - Configure the device for shared use
 - Remove pre-installed software
 - Configure Wi-Fi network 
+
 - Enroll device in Active Directory or Microsoft Entra ID 
+
 - Create local administrator account 
+
 - Add applications and certificates 
 
 >[!WARNING]
@@ -72,6 +70,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
     :::image type="content" source="../images/icd-desktop-1703.png" alt-text="In Windows Configuration Designer, select Finish, and see the ICD desktop provisioning.":::
   
+
 > [!IMPORTANT]
 > When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed. 
 

windows/configuration/provisioning-packages/provision-pcs-with-apps.md

@@ -1,14 +1,9 @@
 ---
 title: Provision PCs with apps  (Windows 10/11)
 description: Learn how to install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package. 
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
-ms.author: lizlong
+
 ms.topic: article
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,7 +12,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10
 - Windows 11 
 
 
@@ -96,8 +91,11 @@ Universal apps that you can distribute in the provisioning package can be line-o
 
     - In Microsoft Store for Business, generate the unencoded license for the app on the app's download page. 
 
+        
+
     - Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and select **Add**.
     
+
 6. In the **Available customizations** pane, select the **LicenseProductId** that you just added.  
 
 7. For **LicenseInstall**, select **Browse**, navigate to the license file that you renamed *\<file name>*.**ms-windows-store-license**, and select the license file. 
@@ -147,9 +145,9 @@ For details about the settings you can customize in provisioning packages, see [
 
 6. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing. 
 
-   -   **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
+   - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. 
 
-   -   **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select...** and choosing the certificate you want to use to sign the package.
+   - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select...** and choosing the certificate you want to use to sign the package. 
 
     > [!TIP]
     > We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store. Any package signed with that certificate can be applied silently.  
@@ -165,19 +163,20 @@ For details about the settings you can customize in provisioning packages, see [
 10. If your build fails, an error message will show up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again.<p>
     If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. 
 
-    -   If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select **Back** to change the output package name and path, and then select **Next** to start another build.
+    - If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select **Back** to change the output package name and path, and then select **Next** to start another build.
     
-    -   If you are done, select **Finish** to close the wizard and go back to the **Customizations Page**.
+
+    - If you are done, select **Finish** to close the wizard and go back to the **Customizations Page**. 
 
 11. Select the **output location** link to go to the location of the package. You can provide that .ppkg to others through any of the following methods: 
 
-    -   Shared network folder
+    - Shared network folder 
 
-    -   SharePoint site
+    - SharePoint site 
 
-    -   Removable media (USB/SD)
+    - Removable media (USB/SD) 
 
-    -   Email
+    - Email 
 
 **Next step**: [How to apply a provisioning package](provisioning-apply-package.md) 
 

windows/configuration/provisioning-packages/provisioning-apply-package.md

@@ -1,14 +1,9 @@
 ---
 title: Apply a provisioning package (Windows 10/11)
 description: Provisioning packages can be applied to a device during initial setup (OOBE) and after (runtime).
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 Provisioning packages can be applied to a device during initial setup (out-of-box experience or "OOBE") and after ("runtime"). 
 

windows/configuration/provisioning-packages/provisioning-command-line.md

@@ -1,14 +1,9 @@
 ---
 title: Windows Configuration Designer command-line interface (Windows 10/11)
 description: Learn more about the ICD syntax, switches, and arguments that you can use in the Windows Configuration Designer command-line interface for Windows10/11 client devices.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -18,7 +13,7 @@ ms.date: 12/31/2017
 **Applies to** 
 
 - Windows 10
-- Windows 11
+- Windows 11 
 
 You can use the Windows Configuration Designer command-line interface (CLI) to automate the building of provisioning packages.  
 
@@ -32,6 +27,7 @@ You can use the Windows Configuration Designer command-line interface (CLI) to a
 
 ``` cmd
 icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:<path_to_ppkg> 
+
 [/StoreFile:<path_to_storefile>]  [/MSPackageRoot:<path_to_mspackage_directory>]  [/OEMInputXML:<path_to_xml>]
 [/ProductName:<product_name>]  [/Variables:<name>:<value>] [[+|-]Encrypted] [[+|-]Overwrite] [/?]
 ``` 
@@ -48,6 +44,7 @@ icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:
 | Overwrite | No | Denotes whether to overwrite an existing provisioning package.</br></br></br>Precede with + to overwrite an existing package or - if you don't want to overwrite an existing package. The default is false (don't overwrite). |
 | /? | No | Lists the switches and their descriptions for the command-line tool or for certain commands. |
  
+
 ## Related articles 
 
 - [Provisioning packages for Windows client](provisioning-packages.md)
@@ -60,4 +57,5 @@ icd.exe /Build-ProvisioningPackage /CustomizationXML:<path_to_xml> /PackagePath:
 - [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
 - [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md)
 - [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
- 
+ 
+

windows/configuration/provisioning-packages/provisioning-create-package.md

@@ -1,14 +1,9 @@
 ---
 title: Create a provisioning package (Windows 10/11)
 description: Learn how to create a provisioning package for Windows 10/11, which lets you quickly configure a device without having to install a new image.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 You can use Windows Configuration Designer to create a provisioning package (`.ppkg`) that contains customization settings, and then apply the provisioning package to a device running Windows client. 
 
@@ -44,6 +39,7 @@ You can use Windows Configuration Designer to create a provisioning package (`.p
 
       Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop and kiosk devices, see [What you can configure using Configuration Designer wizards](provisioning-packages.md#configuration-designer-wizards).
       
+
       >[!NOTE]
       >To target devices running versions earlier than Windows 10, version 2004, ComputerName customization must be defined from the setting path: `Accounts/ComputerAccount/ComputerName` from the advanced editor. The default path from the simple editor uses a new CSP that isn't available on older systems. 
 
@@ -119,6 +115,7 @@ For details on each specific setting, see [Windows Provisioning settings referen
 2. In the **Describe the provisioning package** window, enter the following information, and then select **Next**:
     - **Name** - This field is pre-populated with the project name. You can change this value by entering a different name in the **Name** field.
     - **Version (in Major.Minor format** - Optional. You can change the default package version by specifying a new value in the **Version** field. 
+
     - **Owner** - Select **IT Admin**. For more information, see [Precedence for provisioning packages](provisioning-how-it-works.md#precedence-for-provisioning-packages).
     - **Rank (between 0-99)** - Optional. You can select a value between 0 and 99, inclusive. The default package rank is 0. 
 
@@ -129,6 +126,7 @@ For details on each specific setting, see [Windows Provisioning settings referen
 
      >[!NOTE]
      >You should only configure provisioning package security when the package is used for device provisioning and when the package has content with sensitive security data, such as certificates or credentials that should be prevented from being compromised. When applying an encrypted and/or signed provisioning package, either during OOBE or through the setting UI, the package can be decrypted, and if signed, be trusted without explicit user consent. An IT administrator can set policy on a user device to restrict the removal of required packages from the device, or the provisioning of potentially harmful packages on the device. 
+
      >
      >If a provisioning package is signed by a trusted provisioner, it can be installed on a device without a prompt for user consent. In order to enable trusted provider certificates, you must set the **TrustedProvisioners** setting prior to installing the trusted provisioning package. This is the only way to install a package without user consent. To provide additional security, you can also set **RequireProvisioningPackageSignature**, which prevents users from installing provisioning packages that are not signed by a trusted provisioner. 
 

windows/configuration/provisioning-packages/provisioning-how-it-works.md

@@ -1,14 +1,9 @@
 ---
 title: How provisioning works in Windows 10/11
 description: Learn more about how provisioning package work on Windows client devices. A provisioning package (.ppkg) is a container for a collection of configuration settings.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 Provisioning packages in Windows client provide IT administrators with a simplified way to apply configuration settings to Windows client devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from <!-- the [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) or through the --> Microsoft Store. 
 
@@ -30,11 +25,11 @@ To enable adding multiple sets of settings or configurations, the configuration
 
 A provisioning package (.ppkg) is a container for a collection of configuration settings. The package has the following format:  
 
-- Package metadata – The metadata contains basic information about the package such as package name, description, version, ranking, and so on. 
+- Package metadata - The metadata contains basic information about the package such as package name, description, version, ranking, and so on.  
 
-- XML descriptors – Each descriptor defines a customization asset or configuration setting included in the package. 
+- XML descriptors - Each descriptor defines a customization asset or configuration setting included in the package.  
 
-- Asset payloads – The payloads of a customization asset or a configuration setting associated with an app or data asset. 
+- Asset payloads - The payloads of a customization asset or a configuration setting associated with an app or data asset.  
 
 You can  use provisioning packages for runtime device provisioning by accessing the package on a removable media attached to the device, through near field communication (NFC), or by downloading from a remote source location.  
 
@@ -92,6 +87,7 @@ Underneath the configuration manager are the CSPs. Each section of configuration
 The policy, resource, and context manager components manage the enrollment and unenrollment of devices into enterprise environments. The enrollment process into an enterprise is essentially the provisioning of configuration and device management policies that the enterprise wants to enforce on the device. This is usually done through the explicit signing up of the device to an enterprise's device management server over a network connection. This provides the user with the ability to access the enterprise's resources through the device and the enterprise with a means to manage and control access and manage and control the device itself.  
 
 The key differences between enterprise enrollment and the configuration performed by the provisioning engine are: 
+
 - Enrollment enforces a limited and controlled set of policies on the device that the user may not have full control over. The provisioning engine exposes a larger set of settings that configure more aspects of the device and are generally user adjustable.
 - The policy manager manages policy settings from multiple entities and performs a selection of the setting based on priority of the entities. The provisioning engine applies the settings and does not offer a means of prioritizing settings from different sources. The more specific provisioning is the last one applied and the one that is used.
 - Individual policy settings applied from different enrollment entities are stored so they can be removed later during unenrollment. This enables the user to remove enterprise policy and return the device to a state without the enterprise restrictions and any sensitive data. The provisioning engine does not maintain individual provisioning settings or a means to roll back all applied settings. 
@@ -123,6 +119,7 @@ The following table shows how device provisioning can be initiated when a user f
 | Removable media - USB drive or SD card</br> (Packages must be placed at media root) | Five fast taps on the Windows key to launch the provisioning UI |All Windows devices |
 | From an administrator device through machine-to-machine NFC or NFC tag</br>(The administrator device must run an app that can transfer the package over NFC) | Five fast taps on the Windows key to launch the provisioning UI | Windows IoT Core devices |
  
+
 The provisioning engine always copies the acquired provisioning packages to the `%ProgramData%\Microsoft\Provisioning` folder before processing them during OOBE. The provisioning engine always applies provisioning packages embedded in the installed Windows image during Windows Setup OOBE pass regardless of whether the package is signed and trusted. When the provisioning engine applies an encrypted provisioning package on an end-user device during OOBE, users must first provide a valid password to decrypt the package. The provisioning engine also checks whether a provisioning package is signed and trusted; if it's not, the user must provide consent before the package is applied to the device.  
 
 When the provisioning engine applies provisioning packages during OOBE, it applies only the runtime settings from the package to the device. Runtime settings can be system-wide configuration settings, including security policy, Windows app install/uninstall, network configuration, bootstrapping MDM enrollment, provisioning of file assets, account and domain configuration, Windows edition upgrade, and more. The provisioning engine also checks for the configuration settings on the device, such as region/locale or SIM card, and applies the multivariant settings with matching condition(s).  

windows/configuration/provisioning-packages/provisioning-install-icd.md

@@ -1,8 +1,6 @@
 ---
 title: Install Windows Configuration Designer
 description: Learn how to install and use Windows Configuration Designer so you can easily configure devices running Windows 10/11.
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.reviewer: kevinsheehan
 ms.date: 12/31/2017
@@ -50,6 +48,7 @@ On devices running Windows client, you can install [the Windows Configuration De
 
 - When running Windows Configuration Designer on Windows releases earlier than Windows 10, version 2004 you might need to enable TLS 1.2, especially if using Bulk Enrollment Tokens.  You may see the error message in the `icd.log` file: `Error: AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD` For more information, see [Enable TLS 1.2 on client or server operating systems](/troubleshoot/azure/active-directory/enable-support-tls-environment#enable-tls-12-on-client-or-server-operating-systems-).
  
+
 - Windows Configuration Designer doesn't work properly when the Group Policy setting **Policies** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Security Zones: Use only machine settings** is enabled. When this policy is set, each step will display oversized buttons that fill the **Windows Configuration Designer** window. Additionally, the various options and descriptions that are normally to the right of the buttons won't be displayed because the buttons take up all of the space in the **Windows Configuration Designer** window. To resolve the problem, run Windows Configuration Designer on a device that doesn't have this policy enabled. 
 
 - You can only run one instance of Windows Configuration Designer on your computer at a time. 

windows/configuration/provisioning-packages/provisioning-multivariant.md

@@ -1,14 +1,9 @@
 ---
 title: Create a provisioning package with multivariant settings (Windows 10/11)
 description: Create a provisioning package with multivariant settings to customize the provisioned settings for defined conditions.
-ms.prod: windows-client
-author: lizgt2000
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.author: lizlong
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 
 In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that will apply to devices set up for French and a different set of customization settings for devices set up for Japanese.  
@@ -60,6 +55,7 @@ The following table shows the conditions supported in Windows client provisionin
 | GID1 | P0 | Supported | Digit string | Use to target settings based on the Group Identifier (level 1) value. |
 | ICCID | P0 | Supported | Digit string | Use to target settings based on the Integrated Circuit Card Identifier (ICCID) value. |
 | Roaming | P0 | N/A | Boolean | Use to specify roaming. Set the value to **1** (roaming) or **0** (non-roaming). | 
+
 | UICC | P0 | N/A | Enumeration | Use to specify the Universal Integrated Circuit Card (UICC) state. Set the value to one of the following:</br></br></br>- 0 - Empty</br>- 1 - Ready</br>- 2 - Locked |
 | UICCSLOT | P0 | N/A | Digit string | Use to specify the UICC slot. Set the value one of the following:</br></br></br>- 0 - Slot 0</br>- 1 - Slot 1 |
 | ProcessorType | P1 | Supported | String | Use to target settings based on the processor type. |
@@ -146,12 +142,14 @@ Follow these steps to create a provisioning package with multivariant capabiliti
        </Customizations>
      </Settings>
    </WindowsCustomizations> 
+
     ``` 
 
 5. Edit the customizations.xml file to create a **Targets** section to describe the conditions that will handle your multivariant settings.  
 
     The following example shows the customizations.xml, which has been modified to include several conditions including **ProcessorName**, **ProcessorType**, **MCC**, and **MNC**.
     
+
     ```XML
    <?xml version="1.0" encoding="utf-8"?>
    <WindowsCustomizations>
@@ -195,12 +193,14 @@ Follow these steps to create a provisioning package with multivariant capabiliti
        </Customizations>
      </Settings>
    </WindowsCustomizations> 
+
     ``` 
 
 6. In the customizations.xml file, create a **Variant** section for the settings you need to customize. To do this: 
 
     a. Define a child **TargetRefs** element.
     
+
     b. Within the **TargetRefs** element, define a **TargetRef** element. You can define multiple **TargetRef** elements for each **Id** that you need to apply to customized settings.  
 
     c. Move compliant settings from the **Common** section to the **Variant** section. 
@@ -263,6 +263,7 @@ Follow these steps to create a provisioning package with multivariant capabiliti
        </Customizations>
      </Settings>
    </WindowsCustomizations> 
+
     ``` 
 
 7. Save the updated customizations.xml file and note the path to this updated file. You will need the path as one of the values for the next step. 
@@ -292,6 +293,7 @@ The following events trigger provisioning on Windows client devices:
 
 | Event | Windows client for desktop editions |
 | --- | --- | 
+
 | System boot | Supported |
 | Operating system update | Planned |
 | Package installation during device first run experience | Supported |
@@ -299,6 +301,7 @@ The following events trigger provisioning on Windows client devices:
 | Package installation at runtime | Supported |
 | Roaming detected | Not supported |
  
+
 ## Related articles 
 
 - [Provisioning packages for Windows client](provisioning-packages.md)

windows/configuration/provisioning-packages/provisioning-packages.md

@@ -2,8 +2,6 @@
 title: Provisioning packages overview
 description: With Windows 10 and Windows 11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. Learn about what provisioning packages, are and what they do.
 ms.reviewer: kevinsheehan
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.date: 12/31/2017
 --- 
@@ -22,6 +20,7 @@ A provisioning package (.ppkg) is a container for a collection of configuration
 Provisioning packages are simple enough that with a short set of written instructions, a student, or non-technical employee can use them to configure their device. It can result in a significant reduction in the time required to configure multiple devices in your organization. 
 
 <!-- The [Windows Assessment and Deployment Kit (ADK) for Windows 10](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) includes the Windows Configuration Designer, a tool for configuring provisioning packages.--> 
+
 Windows Configuration Designer is available as an [app in the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22).  
 
 <!--## New in Windows 10, version 1703--> 
@@ -110,17 +109,20 @@ WCD, simplified common provisioning scenarios.
 
 WCD supports the following scenarios for IT administrators: 
 
-* **Simple provisioning** – Enables IT administrators to define a desired configuration in WCD and then apply that configuration on target devices. The simple provisioning wizard makes the entire process quick and easy by guiding an IT administrator through common configuration settings in a step-by-step manner. 
+* **Simple provisioning** - Enables IT administrators to define a desired configuration in WCD and then apply that configuration on target devices. The simple provisioning wizard makes the entire process quick and easy by guiding an IT administrator through common configuration settings in a step-by-step manner.  
 
   [Learn how to use simple provisioning to configure Windows computers.](provision-pcs-for-initial-deployment.md) 
 
-* **Advanced provisioning (deployment of classic (Win32) and Universal Windows Platform (UWP) apps, and certificates)** – Allows an IT administrator to use WCD to open provisioning packages in the advanced settings editor and include apps for deployment on end-user devices. 
+* **Advanced provisioning (deployment of classic (Win32) and Universal Windows Platform (UWP) apps, and certificates)** - Allows an IT administrator to use WCD to open provisioning packages in the advanced settings editor and include apps for deployment on end-user devices.  
 
 * **Mobile device enrollment into management** - Enables IT administrators to purchase off-the-shelf retail Windows devices and enroll them into mobile device management (MDM) before handing them to end users in the organization. IT administrators can use WCD to specify the management endpoint and apply the configuration on target devices by connecting them to a Windows PC (tethered deployment) or through an SD card. Supported management end-points include:  
 
   - Microsoft Intune (certificate-based enrollment) 
+
   - AirWatch (password-string based enrollment) 
+
   - MobileIron (password-string based enrollment) 
+
   - Other MDMs (cert-based enrollment)  
 
 <!--  > [!NOTE] -->

windows/configuration/provisioning-packages/provisioning-powershell.md

@@ -1,14 +1,9 @@
 ---
 title: PowerShell cmdlets for provisioning Windows 10/11 (Windows 10/11)
 description: Learn more about the Windows PowerShell cmdlets that you can use with Provisioning packages on Windows10/11 client desktop devices.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
-- Windows 11
+- Windows 10
+- Windows 11 
 
 Windows client includes Provisioning PowerShell cmdlets. These cmdlets make it easy to script the following functions. 
 

windows/configuration/provisioning-packages/provisioning-script-to-install-app.md

@@ -1,14 +1,9 @@
 ---
 title: Use a script to install a desktop app in provisioning packages (Windows 10/11)
-description: With Windows 10/11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
+description: With Windows 10/11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 This walkthrough describes how to include scripts in a Windows client provisioning package to install Win32 applications. Scripted operations other than installing apps can also be performed. However, some care is needed to avoid unintended behavior during script execution (see [Remarks](#remarks) below). 
 
@@ -35,49 +30,72 @@ This walkthrough describes how to include scripts in a Windows client provisioni
     ```ddf
     ;*** MSDN Sample Source Code MakeCAB Directive file example
     
+
     ;
     
+
     .OPTION EXPLICIT  ; Generate errors on variable typos
     
+
     .set DiskDirectoryTemplate=CDROM  ; All cabinets go in a single directory
     
+
     .Set MaxDiskFileCount=1000; Limit file count per cabinet, so that
     
+
     ; scanning is not too slow
     
+
     .Set FolderSizeThreshold=200000   ; Aim for ~200K per folder
     
+
     .Set CompressionType=MSZIP
     
+
     ;** All files are compressed in cabinet files
     
+
     .Set Cabinet=on
     
+
     .Set Compress=on
     
+
     ;-------------------------------------------------------------------
     
+
     ;** CabinetNameTemplate = name of cab
     
+
     ;** DiskDirectory1 = output directory where cab will be created
     
+
     ;-------------------------------------------------------------------
     
+
     .Set CabinetNameTemplate=tt.cab
     
+
     .Set DiskDirectory1=.
         
+
     ;-------------------------------------------------------------------
     
+
     ; Replace <file> with actual files you want to package
     
+
     ;-------------------------------------------------------------------
     
+
     <file1>
     
+
     <file2>
     
+
     ;*** <the end>  
+
     ``` 
 
 2. Use makecab to create the cab files. 
@@ -104,6 +122,7 @@ Granular logging is not built in, so the logging must be built into the script i
 ```log
 set LOGFILE=%SystemDrive%\HelloWorld.log
 echo Hello, World >> %LOGFILE% 
+
 ``` 
 
 ### .exe example 
@@ -196,6 +215,7 @@ When you are done, [build the package](provisioning-create-package.md#build-pack
 
   
 
+
 ### Remarks 
 
 1. No user interaction or console output is supported via ProvisioningCommands. All work needs to be silent. If your script attempts to do any of the following it will cause undefined behavior, and could put the device in an unrecoverable state if executed during setup or the Out of Box Experience:
@@ -217,6 +237,7 @@ When you are done, [build the package](provisioning-create-package.md#build-pack
 
     >[!NOTE]
     >There is a timeout of 30 minutes for the provisioning process at this point. All scripts and installs need to complete within this time. 
+
 7. The scripts are executed in the background as the rest of provisioning continues to run. For packages added on existing systems using the double-click to install, there is no notification that provisioning or script execution has completed 
 
 ## Related articles 

windows/configuration/provisioning-packages/provisioning-uninstall-package.md

@@ -1,14 +1,9 @@
 ---
 title: Uninstall a provisioning package - reverted settings (Windows 10/11)
 description: This article lists the settings that are reverted when you uninstall a provisioning package on Windows 10/11 desktop client devices.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.reviewer: gkomatsu
-manager: aaroncz
-ms.technology: itpro-configure
 ms.date: 12/31/2017
 --- 
 
@@ -17,8 +12,8 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
--   Windows 11
+- Windows 10
+- Windows 11 
 
 When you uninstall a provisioning package, only certain settings are revertible. This article lists the settings that are reverted when you uninstall a provisioning package. 
 
@@ -40,10 +35,14 @@ The registry-based settings that are revertible when a provisioning package is u
 - UniversalAppInstall / LaunchAppAtLogin
 - [Power](/previous-versions//dn953704(v=vs.85))
 - [TabletMode](../wcd/wcd-tabletmode.md) 
+
 - [Maps](../wcd/wcd-maps.md) 
+
 - [Browser](../wcd/wcd-browser.md)
 - [DeviceFormFactor](../wcd/wcd-deviceformfactor.md) 
+
 - [USBErrorsOEMOverride](/previous-versions/windows/hardware/previsioning-framework/mt769908(v=vs.85)) 
+
 - [WeakCharger](../wcd/wcd-weakcharger.md)  
 
  
@@ -53,25 +52,45 @@ The registry-based settings that are revertible when a provisioning package is u
 Here is the list of revertible settings based on configuration service providers (CSPs).  
 
 [ActiveSync CSP](/windows/client-management/mdm/activesync-csp) 
+
 [AppLocker CSP](/windows/client-management/mdm/applocker-csp)  
+
 [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp)   
+
 [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp) 
+
 [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp)   
+
 [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp)   
+
 [CM_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp)   
+
 [CM_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp)   
+
 [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp)   
+
 [CMPolicyEnterprise CSP](/windows/client-management/mdm/cmpolicyenterprise-csp)   
+
 [EMAIL2 CSP](/windows/client-management/mdm/email2-csp)   
+
 [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp)   
+
 [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp)   
+
 [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp)   
+
 [NAP CSP](/windows/client-management/mdm/nap-csp)   
+
 [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp)   
+
 [Provisioning CSP](/windows/client-management/mdm/provisioning-csp)   
+
 [SecureAssessment CSP](/windows/client-management/mdm/secureassessment-csp)   
+
 [VPN CSP](/windows/client-management/mdm/vpn-csp)   
+
 [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp)   
+
 [WiFi CSP](/windows/client-management/mdm/wifi-csp)    
 
  

windows/configuration/shared-pc/set-up-shared-or-guest-pc.md

@@ -2,12 +2,11 @@
 title: Set up a shared or guest Windows device
 description: Description of how to configured Shared PC mode, which is a Windows feature that optimizes devices for shared use scenarios.
 ms.date: 11/08/2023
-ms.prod: windows-client
-ms.technology: itpro-configure
 ms.topic: how-to
 author: paolomatarazzo
 ms.author: paoloma
 appliesto: 
+
   - ✅ <b>Windows 10</b>
   - ✅ <b>Windows 11</b>
   - ✅ <b>Windows 11 SE</b>
@@ -112,7 +111,9 @@ For more information, see [Using PowerShell scripting with the WMI Bridge Provid
     $adminPass = 'Pa$$word123'
     invoke-expression "net user /add $adminName $adminPass"
     $user = New-Object System.Security.Principal.NTAccount($adminName) 
+
     $sid = $user.Translate([System.Security.Principal.SecurityIdentifier]) 
+
     $sid = $sid.Value;
     New-Item -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\$sid" -Force
     ``` 

windows/configuration/shared-pc/shared-devices-concepts.md

@@ -6,6 +6,7 @@ ms.topic: concept-article
 author: paolomatarazzo
 ms.author: paoloma
 appliesto: 
+
   - ✅ <b>Windows 10</b>
   - ✅ <b>Windows 11</b>
   - ✅ <b>Windows 11 SE</b>

windows/configuration/shared-pc/shared-pc-technical.md

@@ -6,6 +6,7 @@ ms.topic: reference
 author: paolomatarazzo
 ms.author: paoloma
 appliesto: 
+
   - ✅ <b>Windows 10</b>
   - ✅ <b>Windows 11</b>
   - ✅ <b>Windows 11 SE</b>
@@ -115,6 +116,7 @@ Applications can take advantage of Shared PC mode with the following three APIs:
 
 - [**IsEnabled**][API-1] - This API informs applications when the device is configured for shared use scenarios. For example, an app might only download content on demand on a device in shared PC mode, or might skip first run experiences.
 - [**ShouldAvoidLocalStorage**][API-2] - This API informs applications when the PC has been configured to not allow the user to save to the local storage of the PC. Instead, only cloud save locations should be offered by the app or saved automatically by the app.  
+
 - [**IsEducationEnvironment**][API-3] - This API informs applications when the PC is used in an education environment. Apps may want to handle diagnostic data differently or hide advertising functionality.   
 
 ----------- 

windows/configuration/spotlight/manage-tips-and-suggestions.md

@@ -1,15 +1,10 @@
 ---
-title: Manage Windows 10 and Microsoft Store tips, fun facts, and suggestions (Windows 10)
+title: Manage Windows 10 and Microsoft Store tips, fun facts, and suggestions
 description: Windows 10 provides organizations with various options to manage user experiences to provide a consistent and predictable experience for employees.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article 
-ms.localizationpriority: medium
+
 ms.date: 09/20/2017 
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+
 --- 
 
 # Manage Windows 10 and Microsoft Store tips, "fun facts", and suggestions 
@@ -17,7 +12,7 @@ ms.technology: itpro-configure
 
 **Applies to** 
 
--   Windows 10
+- Windows 10 
 
 
 Since its inception, Windows 10 has included a number of user experience features that provide useful tips, "fun facts", and suggestions as you use Windows, as well as app suggestions from the Microsoft Store. These features are designed to help people get the most out of their Windows 10 experience by, for example, sharing new features, providing more details on the features they use, or sharing content available in the Microsoft Store. Examples of such user experiences include:  
@@ -56,6 +51,7 @@ Windows 10 provides organizations the ability to centrally manage the type of co
 - [Windows 10 editions for education customers](/education/windows/windows-editions-for-education-customers) 
 
 
- 
   
- 
+
+ 
+

windows/configuration/start/changes-to-start-policies-in-windows-10.md

@@ -1,26 +1,18 @@
 ---
-title: Changes to Group Policy settings for Windows 10 Start menu (Windows 10)
+title: Changes to Group Policy settings for Windows 10 Start menu
 description: Learn about changes to Group Policy settings for the Windows 10 Start menu. Also, learn about the new Windows 10 Start experience.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: whats-new
-ms.localizationpriority: medium
+appliesto:
+- ✅ <a href=/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
 ms.date: 08/18/2023
-ms.technology: itpro-configure
 --- 
 
 # Changes to Group Policy settings for Windows 10 Start 
 
-**Applies to**:
 
-- Windows 10
+Windows 10 has a brand new Start experience. As a result, there are changes to the Group Policy settings that you can use to manage Start. Some policy settings are new or changed, and some old Start policy settings still apply. Other Start policy settings no longer apply and are deprecated. 
 
-Windows 10 has a brand new Start experience. As a result, there are changes to the Group Policy settings that you can use to manage Start. Some policy settings are new or changed, and some old Start policy settings still apply. Other Start policy settings no longer apply and are deprecated.
-
-## Start policy settings supported for Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
+## Start policy settings supported for Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education 
 
 
 These policy settings are available in **Administrative Templates\\Start Menu and Taskbar** under **User Configuration**. 
@@ -31,51 +23,51 @@ These policy settings are available in **Administrative Templates\\Start Menu an
 |Don't allow pinning items in Jump Lists|Jump Lists are lists of recently opened items, such as files, folders, or websites, organized by the program that you use to open them. This policy prevents users from pinning items to any Jump List.|
 |Don't display or track items in Jump Lists from remote locations|When this policy is applied, only items local on the computer are shown in Jump Lists.|
 |Don't keep history of recently opened documents|Documents that the user opens aren't tracked during the session.|
-|Prevent changes to Taskbar and Start Menu Settings|In Windows 10, this policy disables all of the settings in **Settings** > **Personalization** > **Start** and the options in dialog available via right-click Taskbar > **Properties**|
+|Prevent changes to Taskbar and Start Menu Settings|In Windows 10, this policy disables all of the settings in **Settings** > **Personalization** > **Start** and the options in dialog available via right-click Taskbar > **Properties**|
 |Prevent users from customizing their Start Screen|Use this policy with a [customized Start layout](windows-10-start-layout-options-and-policies.md) to prevent users from changing it|
-|Prevent users from uninstalling applications from Start|In Windows 10, this policy removes the uninstall button in the context menu. It doesn't prevent users from uninstalling the app through other entry points (for example, PowerShell)|
-|Remove All Programs list from the Start menu|In Windows 10, this policy removes the **All apps** button.|
+|Prevent users from uninstalling applications from Start|In Windows 10, this policy removes the uninstall button in the context menu. It doesn't prevent users from uninstalling the app through other entry points (for example, PowerShell)|
+|Remove All Programs list from the Start menu|In Windows 10, this policy removes the **All apps** button.|
 |Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands|This policy removes the Shut Down, Restart, Sleep, and Hibernate commands from the Start Menu, Start Menu power button, CTRL+ALT+DEL screen, and Alt+F4 Shut Down Windows menu.|
 |Remove common program groups from Start Menu|As in earlier versions of Windows, this policy removes apps specified in the All Users profile from Start|
-|Remove frequent programs list from the Start Menu|In Windows 10, this policy removes the top left **Most used** group of apps.|
+|Remove frequent programs list from the Start Menu|In Windows 10, this policy removes the top left **Most used** group of apps.|
 |Remove Logoff on the Start Menu|**Logoff** has been changed to **Sign Out** in the user interface, however the functionality is the same.|
-|Remove pinned programs list from the Start Menu|In Windows 10, this policy removes the bottom left group of apps (by default, only File Explorer and Settings are pinned).|
+|Remove pinned programs list from the Start Menu|In Windows 10, this policy removes the bottom left group of apps (by default, only File Explorer and Settings are pinned).|
 |Show "Run as different user" command on Start|This policy enables the **Run as different user** option in the right-click menu for apps.|
 |Start Layout|This policy applies a specific Start layout, and it also prevents users from changing the layout. This policy can be configured in **User Configuration** or **Computer Configuration**.|
 |Force Start to be either full screen size or menu size|This policy applies a specific size for Start.| 
 
 ## Deprecated Group Policy settings for Start 
 
-The Start policy settings listed in the following table don't work on Windows 10. Most of them were deprecated in Windows 8 however a few more were deprecated in Windows 10. Deprecation in this case means that the policy setting won't work on Windows 10. The “Supported on” text for a policy setting won't list Windows 10. The policy settings are still in the Group Policy Management Console and can be used on the operating systems that they apply to.
+The Start policy settings listed in the following table don't work on Windows 10. Most of them were deprecated in Windows 8 however a few more were deprecated in Windows 10. Deprecation in this case means that the policy setting won't work on Windows 10. The "Supported on" text for a policy setting won't list Windows 10. The policy settings are still in the Group Policy Management Console and can be used on the operating systems that they apply to. 
 
 | Policy                                                                           | When deprecated |
 |----------------------------------------------------------------------------------|-----------------|
-| Go to the desktop instead of Start when signing in                               | Windows 10      |
-| List desktop apps first in the Apps view                                         | Windows 10      |
-| Pin Apps to Start when installed (User or Computer)                              | Windows 10      |
-| Remove Default Programs link from the Start menu.                                | Windows 10      |
-| Remove Documents icon from Start Menu                                            | Windows 10      |
-| Remove programs on Settings menu                                                 | Windows 10      |
-| Remove Run menu from Start Menu                                                  | Windows 10      |
-| Remove the "Undock PC" button from the Start Menu                                | Windows 10      |
-| Search just apps from the Apps view                                              | Windows 10      |
-| Show Start on the display the user is using when they press the Windows logo key | Windows 10      |
-| Show the Apps view automatically when the user goes to Start                     | Windows 10      |
-| Add the Run command to the Start Menu                                            | Windows 8       |
-| Change Start Menu power button                                                   | Windows 8       |
-| Gray unavailable Windows Installer programs Start Menu shortcuts                 | Windows 8       |
-| Remove Downloads link from Start Menu                                            | Windows 8       |
-| Remove Favorites menu from Start Menu                                            | Windows 8       |
-| Remove Games link from Start Menu                                                | Windows 8       |
-| Remove Help menu from Start Menu                                                 | Windows 8       |
-| Remove Homegroup link from Start Menu                                            | Windows 8       |
-| Remove Music icon from Start Menu                                                | Windows 8       |
-| Remove Network icon from Start Menu                                              | Windows 8       |
-| Remove Pictures icon from Start Menu                                             | Windows 8       |
-| Remove Recent Items menu from Start Menu                                         | Windows 8       |
-| Remove Recorded TV link from Start Menu                                          | Windows 8       |
-| Remove user folder link from Start Menu                                          | Windows 8       |
-| Remove Videos link from Start Menu                                               | Windows 8       |
+| Go to the desktop instead of Start when signing in                               | Windows 10      |
+| List desktop apps first in the Apps view                                         | Windows 10      |
+| Pin Apps to Start when installed (User or Computer)                              | Windows 10      |
+| Remove Default Programs link from the Start menu.                                | Windows 10      |
+| Remove Documents icon from Start Menu                                            | Windows 10      |
+| Remove programs on Settings menu                                                 | Windows 10      |
+| Remove Run menu from Start Menu                                                  | Windows 10      |
+| Remove the "Undock PC" button from the Start Menu                                | Windows 10      |
+| Search just apps from the Apps view                                              | Windows 10      |
+| Show Start on the display the user is using when they press the Windows logo key | Windows 10      |
+| Show the Apps view automatically when the user goes to Start                     | Windows 10      |
+| Add the Run command to the Start Menu                                            | Windows 8       |
+| Change Start Menu power button                                                   | Windows 8       |
+| Gray unavailable Windows Installer programs Start Menu shortcuts                 | Windows 8       |
+| Remove Downloads link from Start Menu                                            | Windows 8       |
+| Remove Favorites menu from Start Menu                                            | Windows 8       |
+| Remove Games link from Start Menu                                                | Windows 8       |
+| Remove Help menu from Start Menu                                                 | Windows 8       |
+| Remove Homegroup link from Start Menu                                            | Windows 8       |
+| Remove Music icon from Start Menu                                                | Windows 8       |
+| Remove Network icon from Start Menu                                              | Windows 8       |
+| Remove Pictures icon from Start Menu                                             | Windows 8       |
+| Remove Recent Items menu from Start Menu                                         | Windows 8       |
+| Remove Recorded TV link from Start Menu                                          | Windows 8       |
+| Remove user folder link from Start Menu                                          | Windows 8       |
+| Remove Videos link from Start Menu                                               | Windows 8       | 
 
   
 

windows/configuration/start/customize-and-export-start-layout.md

@@ -1,17 +1,11 @@
 ---
 title: Customize and export Start layout
 description: The easiest method for creating a customized Start layout is to set up the Start screen and export the layout.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: how-to 
-ms.localizationpriority: medium
+
 ms.date: 08/18/2023
 ms.collection:
  - tier1
-ms.technology: itpro-configure
 --- 
 
 # Customize and export Start layout 
@@ -111,6 +105,7 @@ When you have the Start layout that you want your users to see, use the [Export-
                   <start:Tile Size="2x2" Column="4" Row="0" AppUserModelID="Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI" />
                   <start:Tile Size="2x2" Column="2" Row="0" AppUserModelID="Microsoft.BingWeather_8wekyb3d8bbwe!App" />
                 </start:Group>        
+
               </defaultlayout:StartLayout>
             </StartLayoutCollection>
           </DefaultLayoutOverride>
@@ -130,6 +125,7 @@ When you have the Start layout that you want your users to see, use the [Export-
 >* Executable files and scripts should be listed in \Program Files or wherever the installer of the app places them.
 >
 >* Shortcuts that will pinned to Start should be placed in \ProgramData\Microsoft\Windows\Start Menu\Programs. 
+
 >
 >* If you place executable files or scripts in the \ProgramData\Microsoft\Windows\Start Menu\Programs folder, they will not pin to Start.
 >

windows/configuration/start/customize-start-menu-layout-windows-11.md

@@ -1,8 +1,6 @@
 ---
 title: Add or remove pinned apps on the Start menu in Windows 11
 description: Export Start layout to LayoutModification.json with pinned apps, and add or remove pinned apps. Use the JSON text in an MDM policy to deploy a custom Start menu layout to Windows 11 devices.
-author: lizgt2000
-ms.author: lizlong
 ms.reviewer: ericpapa
 ms.date: 01/10/2023
 ms.topic: article
@@ -84,6 +82,7 @@ If you're familiar with creating JSON files, you can create your own `LayoutModi
 
     ```powershell
     Export-StartLayout -Path "C:\Layouts\LayoutModification.json" 
+
     ``` 
 
 ### Get the pinnedList JSON 
@@ -95,13 +94,21 @@ If you're familiar with creating JSON files, you can create your own `LayoutModi
 
     ```json
     { 
+
       "pinnedList": [ 
+
         { "desktopAppId": "MSEdge" }, 
+
         { "desktopAppId": "Microsoft.Office.WINWORD.EXE.15" }, 
+
         { "packagedAppId": "Microsoft.WindowsStore_8wekyb3d8bbwe!App" }, 
+
         { "packagedAppId": "Microsoft.WindowsNotepad_8wekyb3d8bbwe!App" } 
+
       ] 
+
     } 
+
     ``` 
 
 3. Starting with Windows 11, the **ConfigureStartPins** policy is available. This policy uses the `LayoutModification.json` file to add apps to the Pinned section. In your JSON file, you can add more apps to this section using the following keys: 
@@ -149,13 +156,21 @@ To deploy this policy, the devices must be enrolled, and managed by your organiz
 
       ```json
       { 
+
         "pinnedList": [ 
+
           { "desktopAppId": "MSEdge" }, 
+
           { "desktopAppId": "Microsoft.Office.WINWORD.EXE.15" }, 
+
           { "packagedAppId": "Microsoft.WindowsStore_8wekyb3d8bbwe!App" }, 
+
           { "packagedAppId": "Microsoft.WindowsNotepad_8wekyb3d8bbwe!App" } 
+
         ] 
+
       } 
+
       ``` 
 
     Your settings look similar to the following settings: 

windows/configuration/start/customize-windows-10-start-screens-by-using-group-policy.md

@@ -1,10 +1,6 @@
 ---
 title: Customize Windows 10 Start and taskbar with group policy
 description: In Windows 10, you can use a Group Policy Object (GPO) to deploy a customized Start layout to users in a domain.
-ms.reviewer: 
-manager: aaroncz
-author: lizgt2000
-ms.author: lizlong
 ms.date: 12/31/2017
 --- 
 
@@ -13,7 +9,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
--   Windows 10
+- Windows 10 
 
 >**Looking for consumer information?** See [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630) 
 
@@ -40,14 +36,14 @@ The GPO can be configured from any computer on which the necessary ADMX and ADML
 
 Three features enable Start and taskbar layout control: 
 
--   The [Export-StartLayout](/powershell/module/startlayout/export-startlayout) cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format. 
+- The [Export-StartLayout](/powershell/module/startlayout/export-startlayout) cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format.  
 
     >[!NOTE]
     >To import the layout of Start to a mounted Windows image, use the [Import-StartLayout](/powershell/module/startlayout/import-startlayout) cmdlet. 
 
--    [You can modify the Start .xml file](configure-windows-10-taskbar.md) to include  `<CustomTaskbarLayoutCollection>` or create an .xml file just for the taskbar configuration. 
+-  [You can modify the Start .xml file](configure-windows-10-taskbar.md) to include  `<CustomTaskbarLayoutCollection>` or create an .xml file just for the taskbar configuration.  
 
--   In Group Policy, you use the **Start Layout** settings for the **Start Menu and Taskbar** administrative template to set a Start and taskbar layout from an .xml file when the policy is applied. The Group Policy object doesn't support an empty tile layout, so the default tile layout for Windows is loaded in that case.
+- In Group Policy, you use the **Start Layout** settings for the **Start Menu and Taskbar** administrative template to set a Start and taskbar layout from an .xml file when the policy is applied. The Group Policy object doesn't support an empty tile layout, so the default tile layout for Windows is loaded in that case. 
 
 >[!NOTE]
 >To learn how customize Start to include your line-of-business apps when you deploy Windows 10, see [Customize the Windows 10 Start layout]( https://go.microsoft.com/fwlink/p/?LinkId=620863). 
@@ -105,6 +101,7 @@ This procedure adds the customized Start and taskbar layout to the user configur
    > [!IMPORTANT]
    > If you disable Start Layout policy settings that have been in effect and then re-enable the policy, users will not be able to make changes to Start, however the layout in the .xml file will not be reapplied unless the file has been updated. In Windows PowerShell, you can update the timestamp on a file by running the following command:
    > 
+
    > `(ls <path>).LastWriteTime = Get-Date` 
 
       
@@ -126,3 +123,4 @@ After you use Group Policy to apply a customized Start and taskbar layout on a c
 - [Customize Windows 10 Start and taskbar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
 - [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
  
+

windows/configuration/start/customize-windows-10-start-screens-by-using-mobile-device-management.md

@@ -1,15 +1,9 @@
 ---
 title: Change the Windows 10 Start and taskbar using mobile device management | Microsoft Docs
-description: In Windows 10, you can use a mobile device management (MDM) policy to deploy a customized Start and taskbar layout to users. For example, use Microsoft Intune to configure the start menu layout and taskbar, and deploy the policy to your devices.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
+description: In Windows 10, you can use a mobile device management (MDM) policy to deploy a customized Start and taskbar layout to users. For example, use Microsoft Intune to configure the start menu layout and taskbar, and deploy the policy to your devices.
 ms.topic: article 
-ms.author: lizlong
-ms.localizationpriority: medium
+
 ms.date: 08/05/2021
-ms.technology: itpro-configure
 --- 
 
 # Customize Windows 10 Start and taskbar with mobile device management (MDM) 
@@ -17,12 +11,12 @@ ms.technology: itpro-configure
 
 **Applies to** 
 
-- Windows 10
+- Windows 10 
 
 
 >**Looking for consumer information?** [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630) 
 
-In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, you can use a mobile device management (MDM) policy to deploy a customized Start and taskbar layout to users. No reimaging is required. The layout can be updated simply by overwriting the `.xml` file that contains the layout. This feature enables you to customize Start layouts for different departments or organizations, with minimal management overhead.
+In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, you can use a mobile device management (MDM) policy to deploy a customized Start and taskbar layout to users. No reimaging is required. The layout can be updated simply by overwriting the `.xml` file that contains the layout. This feature enables you to customize Start layouts for different departments or organizations, with minimal management overhead. 
 
 >[!NOTE]
 >Support for applying a customized taskbar using MDM is added in Windows 10, version 1703. 
@@ -39,14 +33,14 @@ In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, you can us
 
 Two features enable Start layout control: 
 
--   The **Export-StartLayout** cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format. 
+- The **Export-StartLayout** cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format.  
 
     >[!NOTE]
     >To import the layout of Start to a mounted Windows image, use the [Import-StartLayout](/powershell/module/startlayout/import-startlayout) cmdlet. 
 
       
 
--   In Microsoft Intune, you select the Start layout XML file and add it to a device configuration profile. 
+- In Microsoft Intune, you select the Start layout XML file and add it to a device configuration profile.  
 
     >[!NOTE]
     >Please do not include XML Prologs like \<?xml version="1.0" encoding="utf-8"?\> in the Start layout XML file. The settings may not be reflected correctly. 

windows/configuration/start/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md

@@ -1,14 +1,8 @@
 ---
-title: Customize Windows 10 Start and taskbar with provisioning packages (Windows 10)
-description: In Windows 10, you can use a provisioning package to deploy a customized Start layout to users.
-ms.reviewer: 
-manager: aaroncz
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
+title: Customize Windows 10 Start and taskbar with provisioning packages
+description: In Windows 10, you can use a provisioning package to deploy a customized Start layout to users.
 ms.topic: article 
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 --- 
 
@@ -17,14 +11,14 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10 
 
 > **Looking for consumer information?** [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630) 
 
 > [!NOTE]
 > Currently, using provisioning packages to customize the Start menu layout is supported on Windows 10. It's not supported on Windows 11. 
 
-In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, version 1703, you can use a provisioning package that you create with Windows Configuration Designer to deploy a customized Start and taskbar layout to users. No reimaging is required, and the Start and taskbar layout can be updated simply by overwriting the .xml file that contains the layout. The provisioning package can be applied to a running device. This enables you to customize Start and taskbar layouts for different departments or organizations, with minimal management overhead.
+In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, version 1703, you can use a provisioning package that you create with Windows Configuration Designer to deploy a customized Start and taskbar layout to users. No reimaging is required, and the Start and taskbar layout can be updated simply by overwriting the .xml file that contains the layout. The provisioning package can be applied to a running device. This enables you to customize Start and taskbar layouts for different departments or organizations, with minimal management overhead. 
 
 > [!IMPORTANT]
 > If you use a provisioning package to configure the taskbar, your configuration will be reapplied each time the explorer.exe process restarts. If your configuration pins an app and the user unpins that app, the user's change will be overwritten the next time the configuration is applied. To apply a taskbar configuration and allow users to make changes that will persist, apply your configuration by using Group Policy. 
@@ -36,14 +30,14 @@ In Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, version 17
 
 Three features enable Start and taskbar layout control: 
 
--   The **Export-StartLayout** cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format. 
+- The **Export-StartLayout** cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format.  
 
     > [!NOTE]
     > To import the layout of Start to a mounted Windows image, use the [Import-StartLayout](/powershell/module/startlayout/import-startlayout) cmdlet. 
 
--    [You can modify the Start .xml file](configure-windows-10-taskbar.md) to include  `<CustomTaskbarLayoutCollection>` or create an .xml file just for the taskbar configuration.
+-  [You can modify the Start .xml file](configure-windows-10-taskbar.md) to include  `<CustomTaskbarLayoutCollection>` or create an .xml file just for the taskbar configuration. 
 
--   In Windows Configuration Designer, you use the **Policies/Start/StartLayout** setting to provide the contents of the .xml file that defines the Start and taskbar layout.
+- In Windows Configuration Designer, you use the **Policies/Start/StartLayout** setting to provide the contents of the .xml file that defines the Start and taskbar layout. 
 
 <span id="escape"/> 
 
@@ -103,9 +97,9 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
 11. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing. 
 
-    -   **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
+    - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. 
 
-    -   **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Browse** and choosing the certificate you want to use to sign the package.
+    - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Browse** and choosing the certificate you want to use to sign the package. 
 
 12. Click **Next** to specify the output location where you want the provisioning package to go when it's built. By default, Windows Imaging and Configuration Designer (ICD) uses the project folder as the output location. 
 
@@ -121,8 +115,8 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
     If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. 
 
-    -   If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, click **Back** to change the output package name and path, and then click **Next** to start another build.
-    -   If you are done, click **Finish** to close the wizard and go back to the **Customizations Page**.
+    - If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, click **Back** to change the output package name and path, and then click **Next** to start another build.
+    - If you are done, click **Finish** to close the wizard and go back to the **Customizations Page**. 
 
 16. Copy the provisioning package to the target device. 
 

windows/configuration/start/start-layout-xml-desktop.md

@@ -1,15 +1,9 @@
 ---
-title: Start layout XML for desktop editions of Windows 10 (Windows 10)
+title: Start layout XML for desktop editions of Windows 10
 description: This article describes the options for customizing Start layout in LayoutModification.xml for Windows 10 desktop editions.
-ms.prod: windows-client
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.date: 10/02/2018 
-ms.reviewer: 
-manager: aaroncz
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 --- 
 
 # Start layout XML for desktop editions of Windows 10 (reference) 
@@ -17,7 +11,7 @@ ms.technology: itpro-configure
 
 **Applies to** 
 
--   Windows 10
+- Windows 10 
 
 >**Looking for consumer information?** See [Customize the Start menu](https://go.microsoft.com/fwlink/p/?LinkId=623630) 
 
@@ -28,8 +22,11 @@ On Windows 10 for desktop editions, the customized Start works by:
 - Windows 10 reads the LayoutModification.xml file and allows groups to be appended to Start. The groups have the following constraints:
     - Two groups that are six columns wide, or equivalent to the width of three medium tiles.
     - Two medium-sized tile rows in height. Windows 10 ignores any tiles that are pinned beyond the second row. 
+
     - No limit to the number of apps that can be pinned. There's a theoretical limit of 24 tiles per group (four small tiles per medium square x 3 columns x 2 rows). 
 
+    
+
 >[!NOTE]
 >To use the layout modification XML to configure Start with roaming user profiles, see [Deploying Roaming User Profiles](/windows-server/storage/folder-redirection/deploy-roaming-user-profiles#step-7-optionally-specify-a-start-layout-for-windows-10-pcs). 
 
@@ -90,9 +87,13 @@ The following table lists the supported elements and attributes for the LayoutMo
 New devices running Windows 10 for desktop editions will default to a Start menu with two columns of tiles unless boot to tablet mode is enabled. Devices with screens that are under 10" have boot to tablet mode enabled by default. For these devices, users see the full screen Start on the desktop. You can adjust the following features: 
 
 - Boot to tablet mode can be set on or off. 
+
 - Set full screen Start on desktop to on or off. 
+
     To do this, add the LayoutOptions element in your LayoutModification.xml file and set the FullScreenStart attribute to true or false. 
+
 - Specify the number of columns in the Start menu to 1 or 2. 
+
     To do this, add the LayoutOptions element in your LayoutModification.xml file and set the StartTileGroupsColumnCount attribute to 1 or 2.  
 
 The following example shows how to use the LayoutOptions element to specify full screen Start on the desktop and to use one column in the Start menu: 
@@ -204,6 +205,7 @@ You can use the **start:DesktopApplicationTile** tag to pin a Windows desktop ap
           Column="4"/>
   ```
     
+
   You must set the **DesktopApplicationLinkPath** attribute to the .lnk file that points to the Windows desktop application. The path also supports environment variables. 
 
   If you are pointing to a third-party Windows desktop application and the layout is being applied before the first boot, you must put the .lnk file in a legacy Start Menu directory before first boot; for example, "%APPDATA%\Microsoft\Windows\Start Menu\Programs\" or the all users profile "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\". 
@@ -257,6 +259,7 @@ The following example shows how to create a tile of the Web site's URL using the
           Arguments="http://msn.com"
           DisplayName="MySite"
           Square150x150LogoUri="ms-appx:///Assets/MicrosoftEdgeSquare150x150.png" 
+
           Wide310x150LogoUri="ms-appx:///Assets/MicrosoftEdgeWide310x150.png"
           ShowNameOnSquare150x150Logo="true"
           ShowNameOnWide310x150Logo="false"
@@ -394,6 +397,7 @@ The following sample LayoutModification.xml shows how you can configure the Star
           Row="0"
           Column="4"/>
       </AppendGroup>	  
+
       <AppendGroup
         Name="Fabrikam Group 2">
         <start:Tile
@@ -433,8 +437,10 @@ The following sample LayoutModification.xml shows how you can configure the Star
           Row="0"
           Column="2"/>
       </AppendGroup>	  
+
     </RequiredStartGroups>
   </RequiredStartGroupsCollection> 
+
  </LayoutModificationTemplate>
 ``` 
 
@@ -467,23 +473,36 @@ The following example shows what the overall customization file might look like
         <Target Id="Processor ABC">
           <TargetState>
           <TargetState> 
+
             <Condition Name="ProcessorName" Value="Pattern:.*Celeron.*" /> 
+
             <Condition Name="ProcessorType" Value="Pattern:.*I|intel.*" /> 
+
           </TargetState>
           </TargetState>
         </Target>
       </Targets>
       <Common>
         <Settings> 
+
           <Policies> 
+
             <AllowBrowser>1</AllowBrowser> 
+
             <AllowCamera>1</AllowCamera> 
+
             <AllowBluetooth>1</AllowBluetooth> 
+
           </Policies> 
+
           <HotSpot> 
+
             <Enabled>1</Enabled> 
+
           </HotSpot> 
+
         </Settings> 
+
       </Common>
       <Variant>
         <TargetRefs>
@@ -512,6 +531,7 @@ Once you have created your LayoutModification.xml file to customize devices that
 1. In the **Available customizations** pane, expand **Runtime settings**, select **Start** > Select the **StartLayout** setting.
 2. In the middle pane, click **Browse** to open File Explorer.
 3. In the File Explorer window, navigate to the location where you saved your LayoutModification.xml file. 
+
 4. Select the file and then click **Open**.  
 
 This should set the value of **StartLayout**. The setting appears in the **Selected customizations** pane. 

windows/configuration/start/start-secondary-tiles.md

@@ -1,14 +1,9 @@
 ---
-title: Add image for secondary Microsoft Edge tiles (Windows 10)
+title: Add image for secondary Microsoft Edge tiles
 description: Add app tiles on Windows 10 that's a secondary tile. 
-ms.prod: windows-client
-ms.localizationpriority: medium
-author: lizgt2000
-ms.author: lizlong
+
 ms.topic: article 
-ms.reviewer: 
-manager: aaroncz
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 --- 
 
@@ -16,7 +11,7 @@ ms.date: 12/31/2017
 
 **Applies to** 
 
-- Windows 10
+- Windows 10 
 
 App tiles are the Start screen tiles that represent and launch an app. A tile that allows a user to go to a specific location in an app is a *secondary tile*. Some examples of secondary tiles include: 
 
@@ -44,17 +39,29 @@ In Windows 10, version 1703, by using the PowerShell cmdlet `export-StartLayoutE
 
 ```xml
 <start:SecondaryTile 
+
     AppUserModelID="Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App" 
+
     TileID="-9513911450" 
+
     DisplayName="Bing" 
+
     Size="2x2" 
+
     Column="0" 
+
     Row="0" 
+
     Arguments="-contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x36a8c2e4 -pinnedTimeHigh 0x01d0919b -securityFlags 0x00000000 -tileType 0x00000000 -url 0x00000014 http://www.bing.com/" Square150x150LogoUri="ms-appdata:///local/PinnedTiles/-9513911450/lowres.png" 
+
     Wide310x150LogoUri="ms-appx:///" 
+
     ShowNameOnSquare150x150Logo="true" 
+
     ShowNameOnWide310x150Logo="true" 
+
     BackgroundColor="#7fffffff" 
+
   />
 ``` 
 
@@ -73,10 +80,12 @@ In Windows 10, version 1703, by using the PowerShell cmdlet `export-StartLayoutE
 
 3. If you’d like to change the image for a secondary tile to your own custom image, open the layout.xml file, and look for the images that the tile references.
    - For example, your layout.xml contains `Square150x150LogoUri="ms-appdata:///local/PinnedTiles/21581260870/hires.png" Wide310x150LogoUri="ms-appx:///"` 
+
    - Open `C:\Users\<username>\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\21581260870\` and replace those images with your customized images. 
 
 4. In Windows PowerShell, enter the following command:
  
+
     ```powershell
     Export-StartLayoutEdgeAssets assets.xml
     ``` 
@@ -190,9 +199,9 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
 20. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing. 
 
-    -   **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
+    - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. 
 
-    -   **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package.
+    - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package. 
 
 21. Select **Next** to specify the output location where you want the provisioning package to go when it's built. By default, Windows Imaging and Configuration Designer (ICD) uses the project folder as the output location. 
 
@@ -208,8 +217,8 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
     If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. 
 
-    -   If you choose, you can build the provisioning package again and pick a different path for the output package. To change the path, select **Back** to change the output package name and path, and then select **Next** to start another build.
-    -   If you're done, select **Finish** to close the wizard and go back to the **Customizations Page**.
+    - If you choose, you can build the provisioning package again and pick a different path for the output package. To change the path, select **Back** to change the output package name and path, and then select **Next** to start another build.
+    - If you're done, select **Finish** to close the wizard and go back to the **Customizations Page**. 
 
 25. Copy the provisioning package to the target device. 
 
@@ -217,6 +226,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
 
 ## Related articles
  
+
 - [Manage Windows 10 Start and taskbar layout](windows-10-start-layout-options-and-policies.md)
 - [Configure Windows 10 taskbar](configure-windows-10-taskbar.md)
 - [Customize and export Start layout](customize-and-export-start-layout.md)

windows/configuration/start/supported-csp-start-menu-layout-windows.md

@@ -1,13 +1,8 @@
 ---
 title: Supported CSP policies to customize Start menu on Windows 11 | Microsoft Docs
 description: See a list of the Policy CSP - Start items that are supported on Windows 11 to customize the Start menu.
-manager: aaroncz
-ms.author: lizlong
 ms.reviewer: ericpapa 
-ms.prod: windows-client
-author: lizgt2000
-ms.localizationpriority: medium
-ms.technology: itpro-configure
+
 ms.date: 12/31/2017
 ms.topic: article
 --- 
@@ -65,6 +60,7 @@ For information on customizing the Start menu layout using policy, see [Customiz
 - [Start/HideRecentlyAddedApps](/windows/client-management/mdm/policy-csp-start#start-hiderecentlyaddedapps)
   - Group policy: `Computer Configuration\Administrative Templates\Start Menu and Taskbar\Remove "Recently added" list from Start Menu`
   
+
 > [!NOTE]
 > The following two policies are supported starting in Windows 11, version 22H2 
 
@@ -75,5 +71,6 @@ For information on customizing the Start menu layout using policy, see [Customiz
 
 - [Start/DisableContextMenus](/windows/client-management/mdm/policy-csp-start#start-disablecontextmenus)
   - Group policy: 
+
     - `Computer Configuration\Administrative Templates\Start Menu and Taskbar\Disable context menus in the Start Menu`
     - `User Configuration\Administrative Templates\Start Menu and Taskbar\Disable context menus in the Start Menu`

windows/configuration/start/windows-10-start-layout-options-and-policies.md

@@ -1,8 +1,6 @@
 ---
 title: Customize and manage the Windows 10 Start and taskbar layout
 description: On Windows devices, customize the start menu layout and taskbar using XML, group policy, provisioning package, or MDM policy. You can add pinned folders, add a start menu size, pin apps to the taskbar, and more.
-author: lizgt2000
-ms.author: lizlong
 ms.topic: article
 ms.date: 08/05/2021
 ---