mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 06:17:22 +00:00
Merge pull request #2948 from MicrosoftDocs/FromPrivateRepo
From private repo
This commit is contained in:
huypub
GitHub
commit
37e1b48bd4
@ -8,7 +8,7 @@ ms.sitesec: library
|
|||||||
author: jdeckerms
|
author: jdeckerms
|
||||||
ms.author: jdecker
|
ms.author: jdecker
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.date: 07/27/2017
|
ms.date: 03/16/2019
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -267,13 +267,13 @@ If your build is successful, the name of the provisioning package, output direct
|
|||||||
|
|
||||||
## Apply a provisioning package to Surface Hub
|
## Apply a provisioning package to Surface Hub
|
||||||
|
|
||||||
There are two options for deploying provisioning packages to a Surface Hub. You can apply a provisioning packing [during the first run wizard](#apply-a-provisioning-package-during-first-run), or using [Settings](#apply-a-package-using-settings).
|
There are two options for deploying provisioning packages to a Surface Hub. [During the first run wizard](#apply-a-provisioning-package-during-first-run), you can apply a provisioning package that installs certificates, or after the first-run program is complete, you can apply a provisioning package that configures settings, apps, and certificates by using [Settings](#apply-a-package-using-settings).
|
||||||
|
|
||||||
|
|
||||||
### Apply a provisioning package during first run
|
### Apply a provisioning package during first run
|
||||||
|
|
||||||
> [!IMPORTANT]
|
> [!IMPORTANT]
|
||||||
> Only use provisioning packages to install certificates during first run. Use the **Settings** app to install apps and apply other settings.
|
> During the first-run program, you can only use provisioning packages to install certificates. Use the **Settings** app to install apps and apply other settings.
|
||||||
|
|
||||||
1. When you turn on the Surface Hub for the first time, the first-run program will display the [**Hi there page**](first-run-program-surface-hub.md#first-page). Make sure that the settings are properly configured before proceeding.
|
1. When you turn on the Surface Hub for the first time, the first-run program will display the [**Hi there page**](first-run-program-surface-hub.md#first-page). Make sure that the settings are properly configured before proceeding.
|
||||||
|
|
||||||
|
|||||||
@ -118,49 +118,50 @@ The following table lists management options for each setting, beginning with Wi
|
|||||||
| [6. Font streaming](#font-streaming) | |  |  |  | |
|
| [6. Font streaming](#font-streaming) | |  |  |  | |
|
||||||
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  |  | |
|
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  |  | |
|
||||||
| [8. Internet Explorer](#bkmk-ie) |  |  | |  | |
|
| [8. Internet Explorer](#bkmk-ie) |  |  | |  | |
|
||||||
| [9. Live Tiles](#live-tiles) | |  | |  | |
|
| [9. License Manager](#bkmk-licmgr) | | | |  | |
|
||||||
| [10. Mail synchronization](#bkmk-mailsync) |  | |  |  | |
|
| [10. Live Tiles](#live-tiles) | |  | |  | |
|
||||||
| [11. Microsoft Account](#bkmk-microsoft-account) | |  |  |  | |
|
| [11. Mail synchronization](#bkmk-mailsync) |  | |  |  | |
|
||||||
| [12. Microsoft Edge](#bkmk-edge) |  |  |  |  | |
|
| [12. Microsoft Account](#bkmk-microsoft-account) | |  |  |  | |
|
||||||
| [13. Network Connection Status Indicator](#bkmk-ncsi) | |  |  |  | |
|
| [13. Microsoft Edge](#bkmk-edge) |  |  |  |  | |
|
||||||
| [14. Offline maps](#bkmk-offlinemaps) |  |  |  |  | |
|
| [14. Network Connection Status Indicator](#bkmk-ncsi) | |  |  |  | |
|
||||||
| [15. OneDrive](#bkmk-onedrive) | |  | |  | |
|
| [15. Offline maps](#bkmk-offlinemaps) |  |  | |  | |
|
||||||
| [16. Preinstalled apps](#bkmk-preinstalledapps) |  | | | |  |
|
| [16. OneDrive](#bkmk-onedrive) | |  | |  | |
|
||||||
| [17. Settings > Privacy](#bkmk-settingssection) | | | | | |
|
| [17. Preinstalled apps](#bkmk-preinstalledapps) |  | | | |  |
|
||||||
| [17.1 General](#bkmk-general) |  |  |  |  | |
|
| [18. Settings > Privacy](#bkmk-settingssection) | | | | | |
|
||||||
| [17.2 Location](#bkmk-priv-location) |  |  |  |  | |
|
| [18.1 General](#bkmk-general) |  |  |  |  | |
|
||||||
| [17.3 Camera](#bkmk-priv-camera) |  |  |  |  | |
|
| [18.2 Location](#bkmk-priv-location) |  |  |  |  | |
|
||||||
| [17.4 Microphone](#bkmk-priv-microphone) |  |  |  |  | |
|
| [18.3 Camera](#bkmk-priv-camera) |  |  |  |  | |
|
||||||
| [17.5 Notifications](#bkmk-priv-notifications) |  |  | |  | |
|
| [18.4 Microphone](#bkmk-priv-microphone) |  |  |  |  | |
|
||||||
| [17.6 Speech, inking, & typing](#bkmk-priv-speech) |  |  |  |  | |
|
| [18.5 Notifications](#bkmk-priv-notifications) |  |  | |  | |
|
||||||
| [17.7 Account info](#bkmk-priv-accounts) |  |  |  |  | |
|
| [18.6 Speech, inking, & typing](#bkmk-priv-speech) |  |  |  |  | |
|
||||||
| [17.8 Contacts](#bkmk-priv-contacts) |  |  |  |  | |
|
| [18.7 Account info](#bkmk-priv-accounts) |  |  |  |  | |
|
||||||
| [17.9 Calendar](#bkmk-priv-calendar) |  |  |  |  | |
|
| [18.8 Contacts](#bkmk-priv-contacts) |  |  |  |  | |
|
||||||
| [17.10 Call history](#bkmk-priv-callhistory) |  |  |  |  | |
|
| [18.9 Calendar](#bkmk-priv-calendar) |  |  |  |  | |
|
||||||
| [17.11 Email](#bkmk-priv-email) |  |  |  |  | |
|
| [18.10 Call history](#bkmk-priv-callhistory) |  |  |  |  | |
|
||||||
| [17.12 Messaging](#bkmk-priv-messaging) |  |  |  |  | |
|
| [18.11 Email](#bkmk-priv-email) |  |  |  |  | |
|
||||||
| [17.13 Phone calls](#bkmk-priv-phone-calls) |  |  |  |  | |
|
| [18.12 Messaging](#bkmk-priv-messaging) |  |  |  |  | |
|
||||||
| [17.14 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
| [18.13 Phone calls](#bkmk-priv-phone-calls) |  |  |  |  | |
|
||||||
| [17.15 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
| [18.14 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
||||||
| [17.16 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
| [18.15 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
||||||
| [17.17 Background apps](#bkmk-priv-background) |  |  |  | | |
|
| [18.16 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
||||||
| [17.18 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
| [18.17 Background apps](#bkmk-priv-background) |  |  |  | | |
|
||||||
| [17.19 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
| [18.18 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
||||||
| [17.20 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
| [18.19 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
||||||
| [18. Software Protection Platform](#bkmk-spp) | |  |  |  | |
|
| [18.20 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
||||||
| [19. Storage Health](#bkmk-storage-health) | |  | | | |
|
| [19. Software Protection Platform](#bkmk-spp) | |  |  |  | |
|
||||||
| [20. Sync your settings](#bkmk-syncsettings) |  |  |  |  | |
|
| [20. Storage Health](#bkmk-storage-health) | |  | | | |
|
||||||
| [21. Teredo](#bkmk-teredo) | |  | |  |  |
|
| [21. Sync your settings](#bkmk-syncsettings) |  |  |  |  | |
|
||||||
| [22. Wi-Fi Sense](#bkmk-wifisense) |  |  | |  | |
|
| [22. Teredo](#bkmk-teredo) | |  | |  |  |
|
||||||
| [23. Windows Defender](#bkmk-defender) | |  |  |  | |
|
| [23. Wi-Fi Sense](#bkmk-wifisense) |  |  | |  | |
|
||||||
| [23.1 Windows Defender Smartscreen](#bkmk-defender-smartscreen) | |  |  |  | |
|
| [24. Windows Defender](#bkmk-defender) | |  |  |  | |
|
||||||
| [24. Windows Media Player](#bkmk-wmp) |  | | | |  |
|
| [24.1 Windows Defender Smartscreen](#bkmk-defender-smartscreen) | |  |  |  | |
|
||||||
| [25. Windows Spotlight](#bkmk-spotlight) |  |  |  |  | |
|
| [25. Windows Media Player](#bkmk-wmp) |  | | | |  |
|
||||||
| [26. Microsoft Store](#bkmk-windowsstore) | |  | |  | |
|
| [26. Windows Spotlight](#bkmk-spotlight) |  |  |  |  | |
|
||||||
| [26.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
| [27. Microsoft Store](#bkmk-windowsstore) | |  | |  | |
|
||||||
| [27. Windows Update Delivery Optimization](#bkmk-updates) |  |  |  |  | |
|
| [27.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
||||||
| [28. Windows Update](#bkmk-wu) |  |  |  | | |
|
| [28. Windows Update Delivery Optimization](#bkmk-updates) |  |  |  |  | |
|
||||||
| [29. License Manager](#bkmk-licmgr) | | | |  | |
|
| [29. Windows Update](#bkmk-wu) |  |  |  | | |
|
||||||
|
|
||||||
|
|
||||||
### Settings for Windows Server 2016 with Desktop Experience
|
### Settings for Windows Server 2016 with Desktop Experience
|
||||||
|
|
||||||
@ -175,19 +176,19 @@ See the following table for a summary of the management settings for Windows Ser
|
|||||||
| [6. Font streaming](#font-streaming) | |  |  | |
|
| [6. Font streaming](#font-streaming) | |  |  | |
|
||||||
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  | |
|
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  | |
|
||||||
| [8. Internet Explorer](#bkmk-ie) |  |  |  | |
|
| [8. Internet Explorer](#bkmk-ie) |  |  |  | |
|
||||||
| [9. Live Tiles](#live-tiles) | |  |  | |
|
| [10. Live Tiles](#live-tiles) | |  |  | |
|
||||||
| [11. Microsoft Account](#bkmk-microsoft-account) | |  |  | |
|
| [12. Microsoft Account](#bkmk-microsoft-account) | |  |  | |
|
||||||
| [13. Network Connection Status Indicator](#bkmk-ncsi) | |  |  | |
|
| [14. Network Connection Status Indicator](#bkmk-ncsi) | |  |  | |
|
||||||
| [15. OneDrive](#bkmk-onedrive) | |  | | |
|
| [16. OneDrive](#bkmk-onedrive) | |  | | |
|
||||||
| [17. Settings > Privacy](#bkmk-settingssection) | | | | |
|
| [18. Settings > Privacy](#bkmk-settingssection) | | | | |
|
||||||
| [17.1 General](#bkmk-general) |  |  |  | |
|
| [18.1 General](#bkmk-general) |  |  |  | |
|
||||||
| [18. Software Protection Platform](#bkmk-spp) | |  |  | |
|
| [19. Software Protection Platform](#bkmk-spp) | |  |  | |
|
||||||
| [21. Teredo](#bkmk-teredo) | |  |  |  |
|
| [20. Teredo](#bkmk-teredo) | |  |  |  |
|
||||||
| [23. Windows Defender](#bkmk-defender) | |  |  | |
|
| [24. Windows Defender](#bkmk-defender) | |  |  | |
|
||||||
| [24. Windows Media Player](#bkmk-wmp) | | | |  |
|
| [25. Windows Media Player](#bkmk-wmp) | | | |  |
|
||||||
| [26. Microsoft Store](#bkmk-windowsstore) | |  |  | |
|
| [27. Microsoft Store](#bkmk-windowsstore) | |  |  | |
|
||||||
| [26.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
| [27.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
||||||
| [28. Windows Update](#bkmk-wu) | |  |  | |
|
| [29. Windows Update](#bkmk-wu) | |  |  | |
|
||||||
|
|
||||||
### Settings for Windows Server 2016 Server Core
|
### Settings for Windows Server 2016 Server Core
|
||||||
|
|
||||||
@ -198,11 +199,11 @@ See the following table for a summary of the management settings for Windows Ser
|
|||||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  |  | |
|
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  |  | |
|
||||||
| [3. Date & Time](#bkmk-datetime) |  |  | |
|
| [3. Date & Time](#bkmk-datetime) |  |  | |
|
||||||
| [6. Font streaming](#font-streaming) |  |  | |
|
| [6. Font streaming](#font-streaming) |  |  | |
|
||||||
| [13. Network Connection Status Indicator](#bkmk-ncsi) |  | | |
|
| [14. Network Connection Status Indicator](#bkmk-ncsi) |  | | |
|
||||||
| [18. Software Protection Platform](#bkmk-spp) |  | | |
|
| [19. Software Protection Platform](#bkmk-spp) |  | | |
|
||||||
| [21. Teredo](#bkmk-teredo) |  | |  |
|
| [22. Teredo](#bkmk-teredo) |  | |  |
|
||||||
| [23. Windows Defender](#bkmk-defender) |  |  | |
|
| [24. Windows Defender](#bkmk-defender) |  |  | |
|
||||||
| [28. Windows Update](#bkmk-wu) |  |  | |
|
| [29. Windows Update](#bkmk-wu) |  |  | |
|
||||||
|
|
||||||
### Settings for Windows Server 2016 Nano Server
|
### Settings for Windows Server 2016 Nano Server
|
||||||
|
|
||||||
@ -212,8 +213,8 @@ See the following table for a summary of the management settings for Windows Ser
|
|||||||
| - | :-: | :-: | :-: | :-: | :-: |
|
| - | :-: | :-: | :-: | :-: | :-: |
|
||||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  | |
|
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  | |
|
||||||
| [3. Date & Time](#bkmk-datetime) |  | |
|
| [3. Date & Time](#bkmk-datetime) |  | |
|
||||||
| [21. Teredo](#bkmk-teredo) | |  |
|
| [22. Teredo](#bkmk-teredo) | |  |
|
||||||
| [28. Windows Update](#bkmk-wu) |  | |
|
| [29. Windows Update](#bkmk-wu) |  | |
|
||||||
|
|
||||||
### Settings for Windows Server 2019
|
### Settings for Windows Server 2019
|
||||||
|
|
||||||
@ -229,48 +230,48 @@ See the following table for a summary of the management settings for Windows Ser
|
|||||||
| [6. Font streaming](#font-streaming) | |  |  |  | |
|
| [6. Font streaming](#font-streaming) | |  |  |  | |
|
||||||
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  |  | |
|
| [7. Insider Preview builds](#bkmk-previewbuilds) |  |  |  |  | |
|
||||||
| [8. Internet Explorer](#bkmk-ie) |  |  | |  | |
|
| [8. Internet Explorer](#bkmk-ie) |  |  | |  | |
|
||||||
| [9. Live Tiles](#live-tiles) | |  | |  | |
|
| [10. Live Tiles](#live-tiles) | |  | |  | |
|
||||||
| [10. Mail synchronization](#bkmk-mailsync) |  | |  |  | |
|
| [11. Mail synchronization](#bkmk-mailsync) |  | |  |  | |
|
||||||
| [11. Microsoft Account](#bkmk-microsoft-account) | |  |  |  | |
|
| [12. Microsoft Account](#bkmk-microsoft-account) | |  |  |  | |
|
||||||
| [12. Microsoft Edge](#bkmk-edge) |  |  |  |  | |
|
| [13. Microsoft Edge](#bkmk-edge) |  |  |  |  | |
|
||||||
| [13. Network Connection Status Indicator](#bkmk-ncsi) | |  |  |  | |
|
| [14. Network Connection Status Indicator](#bkmk-ncsi) | |  |  |  | |
|
||||||
| [14. Offline maps](#bkmk-offlinemaps) |  |  | |  | |
|
| [15. Offline maps](#bkmk-offlinemaps) |  |  | |  | |
|
||||||
| [15. OneDrive](#bkmk-onedrive) | |  | |  | |
|
| [16. OneDrive](#bkmk-onedrive) | |  | |  | |
|
||||||
| [16. Preinstalled apps](#bkmk-preinstalledapps) |  | | | |  |
|
| [17. Preinstalled apps](#bkmk-preinstalledapps) |  | | | |  |
|
||||||
| [17. Settings > Privacy](#bkmk-settingssection) | | | | | |
|
| [18. Settings > Privacy](#bkmk-settingssection) | | | | | |
|
||||||
| [17.1 General](#bkmk-general) |  |  |  |  | |
|
| [18.1 General](#bkmk-general) |  |  |  |  | |
|
||||||
| [17.2 Location](#bkmk-priv-location) |  |  |  |  | |
|
| [18.2 Location](#bkmk-priv-location) |  |  |  |  | |
|
||||||
| [17.3 Camera](#bkmk-priv-camera) |  |  |  |  | |
|
| [18.3 Camera](#bkmk-priv-camera) |  |  |  |  | |
|
||||||
| [17.4 Microphone](#bkmk-priv-microphone) |  |  |  |  | |
|
| [18.4 Microphone](#bkmk-priv-microphone) |  |  |  |  | |
|
||||||
| [17.5 Notifications](#bkmk-priv-notifications) |  |  | |  | |
|
| [18.5 Notifications](#bkmk-priv-notifications) |  |  | |  | |
|
||||||
| [17.6 Speech, inking, & typing](#bkmk-priv-speech) |  |  |  |  | |
|
| [18.6 Speech, inking, & typing](#bkmk-priv-speech) |  |  |  |  | |
|
||||||
| [17.7 Account info](#bkmk-priv-accounts) |  |  |  |  | |
|
| [18.7 Account info](#bkmk-priv-accounts) |  |  |  |  | |
|
||||||
| [17.8 Contacts](#bkmk-priv-contacts) |  |  |  |  | |
|
| [18.8 Contacts](#bkmk-priv-contacts) |  |  |  |  | |
|
||||||
| [17.9 Calendar](#bkmk-priv-calendar) |  |  |  |  | |
|
| [18.9 Calendar](#bkmk-priv-calendar) |  |  |  |  | |
|
||||||
| [17.10 Call history](#bkmk-priv-callhistory) |  |  |  |  | |
|
| [18.10 Call history](#bkmk-priv-callhistory) |  |  |  |  | |
|
||||||
| [17.11 Email](#bkmk-priv-email) |  |  |  |  | |
|
| [18.11 Email](#bkmk-priv-email) |  |  |  |  | |
|
||||||
| [17.12 Messaging](#bkmk-priv-messaging) |  |  |  |  | |
|
| [18.12 Messaging](#bkmk-priv-messaging) |  |  |  |  | |
|
||||||
| [17.13 Phone calls](#bkmk-priv-phone-calls) |  |  |  |  | |
|
| [18.13 Phone calls](#bkmk-priv-phone-calls) |  |  |  |  | |
|
||||||
| [17.14 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
| [18.14 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
||||||
| [17.15 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
| [18.15 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
||||||
| [17.16 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
| [18.16 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
||||||
| [17.17 Background apps](#bkmk-priv-background) |  |  |  | | |
|
| [18.17 Background apps](#bkmk-priv-background) |  |  |  | | |
|
||||||
| [17.18 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
| [18.18 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
||||||
| [17.19 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
| [18.19 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
||||||
| [17.20 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
| [18.20 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
||||||
| [18. Software Protection Platform](#bkmk-spp) | |  |  |  | |
|
| [19. Software Protection Platform](#bkmk-spp) | |  |  |  | |
|
||||||
| [19. Storage Health](#bkmk-storage-health) | |  | | | |
|
| [20. Storage Health](#bkmk-storage-health) | |  | | | |
|
||||||
| [20. Sync your settings](#bkmk-syncsettings) |  |  |  |  | |
|
| [21. Sync your settings](#bkmk-syncsettings) |  |  |  |  | |
|
||||||
| [21. Teredo](#bkmk-teredo) | |  | |  |  |
|
| [22. Teredo](#bkmk-teredo) | |  | |  |  |
|
||||||
| [22. Wi-Fi Sense](#bkmk-wifisense) |  |  | |  | |
|
| [23. Wi-Fi Sense](#bkmk-wifisense) |  |  | |  | |
|
||||||
| [23. Windows Defender](#bkmk-defender) | |  |  |  | |
|
| [24. Windows Defender](#bkmk-defender) | |  |  |  | |
|
||||||
| [23.1 Windows Defender Smartscreen](#bkmk-defender-smartscreen) | |  |  |  | |
|
| [24.1 Windows Defender Smartscreen](#bkmk-defender-smartscreen) | |  |  |  | |
|
||||||
| [24. Windows Media Player](#bkmk-wmp) |  | | | |  |
|
| [25. Windows Media Player](#bkmk-wmp) |  | | | |  |
|
||||||
| [25. Windows Spotlight](#bkmk-spotlight) |  |  |  |  | |
|
| [26. Windows Spotlight](#bkmk-spotlight) |  |  |  |  | |
|
||||||
| [26. Microsoft Store](#bkmk-windowsstore) | |  | |  | |
|
| [27. Microsoft Store](#bkmk-windowsstore) | |  | |  | |
|
||||||
| [26.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
| [27.1 Apps for websites](#bkmk-apps-for-websites) | |  | | |
|
||||||
| [27. Windows Update Delivery Optimization](#bkmk-updates) |  |  |  |  | |
|
| [28. Windows Update Delivery Optimization](#bkmk-updates) |  |  |  |  | |
|
||||||
| [28. Windows Update](#bkmk-wu) |  |  |  | | |
|
| [29. Windows Update](#bkmk-wu) |  |  |  | | |
|
||||||
|
|
||||||
## How to configure each setting
|
## How to configure each setting
|
||||||
|
|
||||||
@ -541,7 +542,6 @@ You can also use registry entries to set these Group Policies.
|
|||||||
| Turn off background synchronization for feeds and Web Slices | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Feeds<br/>REG_DWORD: BackgroundSyncStatus <br/>Value: 0|
|
| Turn off background synchronization for feeds and Web Slices | HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Feeds<br/>REG_DWORD: BackgroundSyncStatus <br/>Value: 0|
|
||||||
| Turn off Online Tips | HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer<br/>REG_DWORD: AllowOnlineTips <br/>Value: 0|
|
| Turn off Online Tips | HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer<br/>REG_DWORD: AllowOnlineTips <br/>Value: 0|
|
||||||
|
|
||||||
1. HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AllowOnlineTips, 0, Null, Fail
|
|
||||||
|
|
||||||
|
|
||||||
To turn off the home page, enable the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Disable changing home page settings**, and set it to **about:blank**.
|
To turn off the home page, enable the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Disable changing home page settings**, and set it to **about:blank**.
|
||||||
@ -564,7 +564,25 @@ You can turn this off by:
|
|||||||
|
|
||||||
For more info, see [Out-of-date ActiveX control blocking](https://technet.microsoft.com/library/dn761713.aspx).
|
For more info, see [Out-of-date ActiveX control blocking](https://technet.microsoft.com/library/dn761713.aspx).
|
||||||
|
|
||||||
### <a href="" id="live-tiles"></a>9. Live Tiles
|
### <a href="" id="bkmk-licmgr"></a>9. License Manager
|
||||||
|
|
||||||
|
You can turn off License Manager related traffic by setting the following registry entry:
|
||||||
|
|
||||||
|
- Add a REG\_DWORD value named **Start** to **HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\LicenseManager** and set the value to 4
|
||||||
|
|
||||||
|
- The value 4 is to disable the service. Here are the available options to set the registry:
|
||||||
|
|
||||||
|
- **0x00000000** = Boot
|
||||||
|
|
||||||
|
- **0x00000001** = System
|
||||||
|
|
||||||
|
- **0x00000002** = Automatic
|
||||||
|
|
||||||
|
- **0x00000003** = Manual
|
||||||
|
|
||||||
|
- **0x00000004** = Disabled
|
||||||
|
|
||||||
|
### <a href="" id="live-tiles"></a>10. Live Tiles
|
||||||
|
|
||||||
To turn off Live Tiles:
|
To turn off Live Tiles:
|
||||||
|
|
||||||
@ -576,7 +594,7 @@ To turn off Live Tiles:
|
|||||||
|
|
||||||
In Windows 10 Mobile, you must also unpin all tiles that are pinned to Start.
|
In Windows 10 Mobile, you must also unpin all tiles that are pinned to Start.
|
||||||
|
|
||||||
### <a href="" id="bkmk-mailsync"></a>10. Mail synchronization
|
### <a href="" id="bkmk-mailsync"></a>11. Mail synchronization
|
||||||
|
|
||||||
To turn off mail synchronization for Microsoft Accounts that are configured on a device:
|
To turn off mail synchronization for Microsoft Accounts that are configured on a device:
|
||||||
|
|
||||||
@ -598,7 +616,7 @@ To turn off the Windows Mail app:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **ManualLaunchAllowed** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Mail** with a value of 0 (zero).
|
- Create a REG\_DWORD registry setting named **ManualLaunchAllowed** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Mail** with a value of 0 (zero).
|
||||||
|
|
||||||
### <a href="" id="bkmk-microsoft-account"></a>11. Microsoft Account
|
### <a href="" id="bkmk-microsoft-account"></a>12. Microsoft Account
|
||||||
|
|
||||||
To prevent communication to the Microsoft Account cloud authentication service. Many apps and system components that depend on Microsoft Account authentication may lose functionality. Some of them could be in unexpected ways. For example, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are).
|
To prevent communication to the Microsoft Account cloud authentication service. Many apps and system components that depend on Microsoft Account authentication may lose functionality. Some of them could be in unexpected ways. For example, Windows Update will no longer offer feature updates to devices running Windows 10 1709 or higher. See [Feature updates are not being offered while other updates are](https://docs.microsoft.com/windows/deployment/update/windows-update-troubleshooting#feature-updates-are-not-being-offered-while-other-updates-are).
|
||||||
|
|
||||||
@ -616,11 +634,11 @@ To disable the Microsoft Account Sign-In Assistant:
|
|||||||
- Change the Start REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\wlidsvc** to a value of **4**.
|
- Change the Start REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\wlidsvc** to a value of **4**.
|
||||||
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-edge"></a>12. Microsoft Edge
|
### <a href="" id="bkmk-edge"></a>13. Microsoft Edge
|
||||||
|
|
||||||
Use either Group Policy or MDM policies to manage settings for Microsoft Edge. For more info, see [Microsoft Edge and privacy: FAQ](https://go.microsoft.com/fwlink/p/?LinkId=730682).
|
Use either Group Policy or MDM policies to manage settings for Microsoft Edge. For more info, see [Microsoft Edge and privacy: FAQ](https://go.microsoft.com/fwlink/p/?LinkId=730682).
|
||||||
|
|
||||||
### <a href="" id="bkmk-edgegp"></a>12.1 Microsoft Edge Group Policies
|
### <a href="" id="bkmk-edgegp"></a>13.1 Microsoft Edge Group Policies
|
||||||
|
|
||||||
Find the Microsoft Edge Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Edge**.
|
Find the Microsoft Edge Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Edge**.
|
||||||
|
|
||||||
@ -666,7 +684,7 @@ Alternatively, you can configure the Microsoft Group Policies using the followin
|
|||||||
| Prevent the First Run webpage from opening on Microsoft Edge | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\Main <br>REG_DWORD name: PreventFirstRunPage <br/>Value: 1|
|
| Prevent the First Run webpage from opening on Microsoft Edge | HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\Main <br>REG_DWORD name: PreventFirstRunPage <br/>Value: 1|
|
||||||
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-edge-mdm"></a>12.2 Microsoft Edge MDM policies
|
### <a href="" id="bkmk-edge-mdm"></a>13.2 Microsoft Edge MDM policies
|
||||||
|
|
||||||
The following Microsoft Edge MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
The following Microsoft Edge MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||||
|
|
||||||
@ -683,7 +701,7 @@ The following Microsoft Edge MDM policies are available in the [Policy CSP](http
|
|||||||
|
|
||||||
For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/available-policies).
|
For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/available-policies).
|
||||||
|
|
||||||
### <a href="" id="bkmk-ncsi"></a>13. Network Connection Status Indicator
|
### <a href="" id="bkmk-ncsi"></a>14. Network Connection Status Indicator
|
||||||
|
|
||||||
Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftconnecttest.com/connecttest.txt to determine if the device can communicate with the Internet. For more info about NCSI, see [The Network Connection Status Icon](http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx).
|
Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftconnecttest.com/connecttest.txt to determine if the device can communicate with the Internet. For more info about NCSI, see [The Network Connection Status Icon](http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx).
|
||||||
|
|
||||||
@ -702,7 +720,7 @@ You can turn off NCSI by doing one of the following:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **NoActiveProbe** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\NetworkConnectivityStatusIndicator** with a value of 1 (one).
|
- Create a REG\_DWORD registry setting named **NoActiveProbe** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\NetworkConnectivityStatusIndicator** with a value of 1 (one).
|
||||||
|
|
||||||
### <a href="" id="bkmk-offlinemaps"></a>14. Offline maps
|
### <a href="" id="bkmk-offlinemaps"></a>15. Offline maps
|
||||||
|
|
||||||
You can turn off the ability to download and update offline maps.
|
You can turn off the ability to download and update offline maps.
|
||||||
|
|
||||||
@ -724,11 +742,7 @@ You can turn off the ability to download and update offline maps.
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **AllowUntriggeredNetworkTrafficOnSettingsPage** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Maps** with a value of 0 (zero).
|
- Create a REG\_DWORD registry setting named **AllowUntriggeredNetworkTrafficOnSettingsPage** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Maps** with a value of 0 (zero).
|
||||||
|
|
||||||
-or-
|
### <a href="" id="bkmk-onedrive"></a>16. OneDrive
|
||||||
|
|
||||||
- In Windows 10, version 1703 and later, apply the Settings/PageVisibilityList MDM policy from the [Policy CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) with a value of "hide:maps;maps-downloadmaps".
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-onedrive"></a>15. OneDrive
|
|
||||||
|
|
||||||
To turn off OneDrive in your organization:
|
To turn off OneDrive in your organization:
|
||||||
|
|
||||||
@ -746,7 +760,12 @@ To turn off OneDrive in your organization:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **PreventNetworkTrafficPreUserSignIn** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\OneDrive** with a value of 1 (one).
|
- Create a REG\_DWORD registry setting named **PreventNetworkTrafficPreUserSignIn** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\OneDrive** with a value of 1 (one).
|
||||||
|
|
||||||
### <a href="" id="bkmk-preinstalledapps"></a>16. Preinstalled apps
|
-or-
|
||||||
|
|
||||||
|
- Set the System/DisableOneDriveFileSync MDM policy from the [Policy CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#system-disableonedrivefilesync) to True (value 1) to disable OneDrive File Sync.
|
||||||
|
|
||||||
|
|
||||||
|
### <a href="" id="bkmk-preinstalledapps"></a>17. Preinstalled apps
|
||||||
|
|
||||||
Some preinstalled apps get content before they are opened to ensure a great experience. You can remove these using the steps in this section.
|
Some preinstalled apps get content before they are opened to ensure a great experience. You can remove these using the steps in this section.
|
||||||
|
|
||||||
@ -866,49 +885,49 @@ To remove the Sticky notes app:
|
|||||||
|
|
||||||
Remove the app for the current user. From an elevated command prompt, run the following Windows PowerShell command: **Get-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage**
|
Remove the app for the current user. From an elevated command prompt, run the following Windows PowerShell command: **Get-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage**
|
||||||
|
|
||||||
### <a href="" id="bkmk-settingssection"></a>17. Settings > Privacy
|
### <a href="" id="bkmk-settingssection"></a>18. Settings > Privacy
|
||||||
|
|
||||||
Use Settings > Privacy to configure some settings that may be important to your organization. Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.
|
Use Settings > Privacy to configure some settings that may be important to your organization. Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.
|
||||||
|
|
||||||
- [17.1 General](#bkmk-general)
|
- [18.1 General](#bkmk-general)
|
||||||
|
|
||||||
- [17.2 Location](#bkmk-priv-location)
|
- [18.2 Location](#bkmk-priv-location)
|
||||||
|
|
||||||
- [17.3 Camera](#bkmk-priv-camera)
|
- [18.3 Camera](#bkmk-priv-camera)
|
||||||
|
|
||||||
- [17.4 Microphone](#bkmk-priv-microphone)
|
- [18.4 Microphone](#bkmk-priv-microphone)
|
||||||
|
|
||||||
- [17.5 Notifications](#bkmk-priv-notifications)
|
- [18.5 Notifications](#bkmk-priv-notifications)
|
||||||
|
|
||||||
- [17.6 Speech, inking, & typing](#bkmk-priv-speech)
|
- [18.6 Speech, inking, & typing](#bkmk-priv-speech)
|
||||||
|
|
||||||
- [17.7 Account info](#bkmk-priv-accounts)
|
- [18.7 Account info](#bkmk-priv-accounts)
|
||||||
|
|
||||||
- [17.8 Contacts](#bkmk-priv-contacts)
|
- [18.8 Contacts](#bkmk-priv-contacts)
|
||||||
|
|
||||||
- [17.9 Calendar](#bkmk-priv-calendar)
|
- [18.9 Calendar](#bkmk-priv-calendar)
|
||||||
|
|
||||||
- [17.10 Call history](#bkmk-priv-callhistory)
|
- [18.10 Call history](#bkmk-priv-callhistory)
|
||||||
|
|
||||||
- [17.11 Email](#bkmk-priv-email)
|
- [18.11 Email](#bkmk-priv-email)
|
||||||
|
|
||||||
- [17.12 Messaging](#bkmk-priv-messaging)
|
- [18.12 Messaging](#bkmk-priv-messaging)
|
||||||
|
|
||||||
- [17.13 Radios](#bkmk-priv-radios)
|
- [18.13 Radios](#bkmk-priv-radios)
|
||||||
|
|
||||||
- [17.14 Other devices](#bkmk-priv-other-devices)
|
- [18.14 Other devices](#bkmk-priv-other-devices)
|
||||||
|
|
||||||
- [17.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
- [18.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
||||||
|
|
||||||
- [17.16 Background apps](#bkmk-priv-background)
|
- [18.16 Background apps](#bkmk-priv-background)
|
||||||
|
|
||||||
- [17.17 Motion](#bkmk-priv-motion)
|
- [18.17 Motion](#bkmk-priv-motion)
|
||||||
|
|
||||||
- [17.18 Tasks](#bkmk-priv-tasks)
|
- [18.18 Tasks](#bkmk-priv-tasks)
|
||||||
|
|
||||||
- [17.19 App Diagnostics](#bkmk-priv-diag)
|
- [18.19 App Diagnostics](#bkmk-priv-diag)
|
||||||
|
|
||||||
### <a href="" id="bkmk-general"></a>17.1 General
|
### <a href="" id="bkmk-general"></a>18.1 General
|
||||||
|
|
||||||
**General** includes options that don't fall into other areas.
|
**General** includes options that don't fall into other areas.
|
||||||
|
|
||||||
@ -1025,7 +1044,7 @@ To turn off **Let apps on my other devices use Bluetooth to open apps and contin
|
|||||||
|
|
||||||
- Turn off the feature in the UI.
|
- Turn off the feature in the UI.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-location"></a>17.2 Location
|
### <a href="" id="bkmk-priv-location"></a>18.2 Location
|
||||||
|
|
||||||
In the **Location** area, you choose whether devices have access to location-specific sensors and which apps have access to the device's location.
|
In the **Location** area, you choose whether devices have access to location-specific sensors and which apps have access to the device's location.
|
||||||
|
|
||||||
@ -1084,7 +1103,7 @@ To turn off **Choose apps that can use your location**:
|
|||||||
|
|
||||||
- Turn off each app using the UI.
|
- Turn off each app using the UI.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-camera"></a>17.3 Camera
|
### <a href="" id="bkmk-priv-camera"></a>18.3 Camera
|
||||||
|
|
||||||
In the **Camera** area, you can choose which apps can access a device's camera.
|
In the **Camera** area, you can choose which apps can access a device's camera.
|
||||||
|
|
||||||
@ -1125,7 +1144,7 @@ To turn off **Choose apps that can use your camera**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-microphone"></a>17.4 Microphone
|
### <a href="" id="bkmk-priv-microphone"></a>18.4 Microphone
|
||||||
|
|
||||||
In the **Microphone** area, you can choose which apps can access a device's microphone.
|
In the **Microphone** area, you can choose which apps can access a device's microphone.
|
||||||
|
|
||||||
@ -1155,7 +1174,7 @@ To turn off **Choose apps that can use your microphone**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-notifications"></a>17.5 Notifications
|
### <a href="" id="bkmk-priv-notifications"></a>18.5 Notifications
|
||||||
|
|
||||||
>[!IMPORTANT]
|
>[!IMPORTANT]
|
||||||
>Disabling notifications will also disable the ability to manage the device through MDM. If you are using an MDM solution, make sure cloud notifications are enabled through one of the options below.
|
>Disabling notifications will also disable the ability to manage the device through MDM. If you are using an MDM solution, make sure cloud notifications are enabled through one of the options below.
|
||||||
@ -1202,7 +1221,7 @@ To turn off **Let apps access my notifications**:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **LetAppsAccessNotifications** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two)
|
- Create a REG\_DWORD registry setting named **LetAppsAccessNotifications** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two)
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-speech"></a>17.6 Speech, inking, & typing
|
### <a href="" id="bkmk-priv-speech"></a>18.6 Speech, inking, & typing
|
||||||
|
|
||||||
In the **Speech, Inking, & Typing** area, you can let Windows and Cortana better understand your employee's voice and written input by sampling their voice and writing, and by comparing verbal and written input to contact names and calendar entrees.
|
In the **Speech, Inking, & Typing** area, you can let Windows and Cortana better understand your employee's voice and written input by sampling their voice and writing, and by comparing verbal and written input to contact names and calendar entrees.
|
||||||
|
|
||||||
@ -1244,7 +1263,7 @@ Apply the Speech/AllowSpeechModelUpdate MDM policy from the [Policy CSP](https:/
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **ModelDownloadAllowed** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\Preferences** with a value of 0 (zero).
|
- Create a REG\_DWORD registry setting named **ModelDownloadAllowed** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\Preferences** with a value of 0 (zero).
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-accounts"></a>17.7 Account info
|
### <a href="" id="bkmk-priv-accounts"></a>18.7 Account info
|
||||||
|
|
||||||
In the **Account Info** area, you can choose which apps can access your name, picture, and other account info.
|
In the **Account Info** area, you can choose which apps can access your name, picture, and other account info.
|
||||||
|
|
||||||
@ -1274,7 +1293,7 @@ To turn off **Choose the apps that can access your account info**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-contacts"></a>17.8 Contacts
|
### <a href="" id="bkmk-priv-contacts"></a>18.8 Contacts
|
||||||
|
|
||||||
In the **Contacts** area, you can choose which apps can access an employee's contacts list.
|
In the **Contacts** area, you can choose which apps can access an employee's contacts list.
|
||||||
|
|
||||||
@ -1300,7 +1319,7 @@ To turn off **Choose apps that can access contacts**:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **LetAppsAccessContacts** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
- Create a REG\_DWORD registry setting named **LetAppsAccessContacts** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-calendar"></a>17.9 Calendar
|
### <a href="" id="bkmk-priv-calendar"></a>18.9 Calendar
|
||||||
|
|
||||||
In the **Calendar** area, you can choose which apps have access to an employee's calendar.
|
In the **Calendar** area, you can choose which apps have access to an employee's calendar.
|
||||||
|
|
||||||
@ -1330,7 +1349,7 @@ To turn off **Choose apps that can access calendar**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-callhistory"></a>17.10 Call history
|
### <a href="" id="bkmk-priv-callhistory"></a>18.10 Call history
|
||||||
|
|
||||||
In the **Call history** area, you can choose which apps have access to an employee's call history.
|
In the **Call history** area, you can choose which apps have access to an employee's call history.
|
||||||
|
|
||||||
@ -1356,7 +1375,7 @@ To turn off **Let apps access my call history**:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **LetAppsAccessCallHistory** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
- Create a REG\_DWORD registry setting named **LetAppsAccessCallHistory** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-email"></a>17.11 Email
|
### <a href="" id="bkmk-priv-email"></a>18.11 Email
|
||||||
|
|
||||||
In the **Email** area, you can choose which apps have can access and send email.
|
In the **Email** area, you can choose which apps have can access and send email.
|
||||||
|
|
||||||
@ -1382,7 +1401,7 @@ To turn off **Let apps access and send email**:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **LetAppsAccessEmail** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
- Create a REG\_DWORD registry setting named **LetAppsAccessEmail** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-messaging"></a>17.12 Messaging
|
### <a href="" id="bkmk-priv-messaging"></a>18.12 Messaging
|
||||||
|
|
||||||
In the **Messaging** area, you can choose which apps can read or send messages.
|
In the **Messaging** area, you can choose which apps can read or send messages.
|
||||||
|
|
||||||
@ -1422,7 +1441,7 @@ To turn off **Choose apps that can read or send messages**:
|
|||||||
|
|
||||||
- Set the **Allow Message Service Cloud** to **Disable**.
|
- Set the **Allow Message Service Cloud** to **Disable**.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-phone-calls"></a>17.13 Phone calls
|
### <a href="" id="bkmk-priv-phone-calls"></a>18.13 Phone calls
|
||||||
|
|
||||||
In the **Phone calls** area, you can choose which apps can make phone calls.
|
In the **Phone calls** area, you can choose which apps can make phone calls.
|
||||||
|
|
||||||
@ -1453,7 +1472,7 @@ To turn off **Choose apps that can make phone calls**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-radios"></a>17.14 Radios
|
### <a href="" id="bkmk-priv-radios"></a>18.14 Radios
|
||||||
|
|
||||||
In the **Radios** area, you can choose which apps can turn a device's radio on or off.
|
In the **Radios** area, you can choose which apps can turn a device's radio on or off.
|
||||||
|
|
||||||
@ -1484,7 +1503,7 @@ To turn off **Choose apps that can control radios**:
|
|||||||
|
|
||||||
- Turn off the feature in the UI for each app.
|
- Turn off the feature in the UI for each app.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-other-devices"></a>17.15 Other devices
|
### <a href="" id="bkmk-priv-other-devices"></a>18.15 Other devices
|
||||||
|
|
||||||
In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info.
|
In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info.
|
||||||
|
|
||||||
@ -1527,7 +1546,7 @@ To turn off **Let your apps use your trusted devices (hardware you've already co
|
|||||||
- **1**. Force allow
|
- **1**. Force allow
|
||||||
- **2**. Force deny
|
- **2**. Force deny
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-feedback"></a>17.16 Feedback & diagnostics
|
### <a href="" id="bkmk-priv-feedback"></a>18.16 Feedback & diagnostics
|
||||||
|
|
||||||
In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft.
|
In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft.
|
||||||
|
|
||||||
@ -1614,7 +1633,7 @@ To turn off tailored experiences with relevant tips and recommendations by using
|
|||||||
|
|
||||||
- Apply the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**
|
- Apply the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-background"></a>17.17 Background apps
|
### <a href="" id="bkmk-priv-background"></a>18.17 Background apps
|
||||||
|
|
||||||
In the **Background Apps** area, you can choose which apps can run in the background.
|
In the **Background Apps** area, you can choose which apps can run in the background.
|
||||||
|
|
||||||
@ -1643,7 +1662,7 @@ To turn off **Let apps run in the background**:
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Some apps, including Cortana and Search, might not function as expected if you set **Let apps run in the background** to **Force Deny**.
|
> Some apps, including Cortana and Search, might not function as expected if you set **Let apps run in the background** to **Force Deny**.
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-motion"></a>17.18 Motion
|
### <a href="" id="bkmk-priv-motion"></a>18.18 Motion
|
||||||
|
|
||||||
In the **Motion** area, you can choose which apps have access to your motion data.
|
In the **Motion** area, you can choose which apps have access to your motion data.
|
||||||
|
|
||||||
@ -1667,7 +1686,7 @@ To turn off **Let Windows and your apps use your motion data and collect motion
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **LetAppsAccessMotion** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
- Create a REG\_DWORD registry setting named **LetAppsAccessMotion** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppPrivacy** with a value of 2 (two).
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-tasks"></a>17.19 Tasks
|
### <a href="" id="bkmk-priv-tasks"></a>18.19 Tasks
|
||||||
|
|
||||||
In the **Tasks** area, you can choose which apps have access to your tasks.
|
In the **Tasks** area, you can choose which apps have access to your tasks.
|
||||||
|
|
||||||
@ -1689,7 +1708,7 @@ To turn this off:
|
|||||||
- **1**. Force allow
|
- **1**. Force allow
|
||||||
- **2**. Force deny
|
- **2**. Force deny
|
||||||
|
|
||||||
### <a href="" id="bkmk-priv-diag"></a>17.20 App Diagnostics
|
### <a href="" id="bkmk-priv-diag"></a>18.20 App Diagnostics
|
||||||
|
|
||||||
In the **App diagnostics** area, you can choose which apps have access to your diagnostic information.
|
In the **App diagnostics** area, you can choose which apps have access to your diagnostic information.
|
||||||
|
|
||||||
@ -1710,7 +1729,7 @@ To turn this off:
|
|||||||
- **2**. Force deny
|
- **2**. Force deny
|
||||||
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-spp"></a>18. Software Protection Platform
|
### <a href="" id="bkmk-spp"></a>19. Software Protection Platform
|
||||||
|
|
||||||
Enterprise customers can manage their Windows activation status with volume licensing using an on-premises Key Management Server. You can opt out of sending KMS client activation data to Microsoft automatically by doing one of the following:
|
Enterprise customers can manage their Windows activation status with volume licensing using an on-premises Key Management Server. You can opt out of sending KMS client activation data to Microsoft automatically by doing one of the following:
|
||||||
|
|
||||||
@ -1742,7 +1761,7 @@ For Windows Server 2016:
|
|||||||
|
|
||||||
The Windows activation status will be valid for a rolling period of 180 days with weekly activation status checks to the KMS.
|
The Windows activation status will be valid for a rolling period of 180 days with weekly activation status checks to the KMS.
|
||||||
|
|
||||||
### <a href="" id="bkmk-storage-health"></a>19. Storage health
|
### <a href="" id="bkmk-storage-health"></a>20. Storage health
|
||||||
|
|
||||||
Enterprise customers can manage updates to the Disk Failure Prediction Model.
|
Enterprise customers can manage updates to the Disk Failure Prediction Model.
|
||||||
|
|
||||||
@ -1753,7 +1772,7 @@ For Windows 10:
|
|||||||
|
|
||||||
- Create a REG\_DWORD registry setting named **AllowDiskHealthModelUpdates** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\StorageHealth** with a value of 0.
|
- Create a REG\_DWORD registry setting named **AllowDiskHealthModelUpdates** in **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\StorageHealth** with a value of 0.
|
||||||
|
|
||||||
### <a href="" id="bkmk-syncsettings"></a>20. Sync your settings
|
### <a href="" id="bkmk-syncsettings"></a>21. Sync your settings
|
||||||
|
|
||||||
You can control if your settings are synchronized:
|
You can control if your settings are synchronized:
|
||||||
|
|
||||||
@ -1784,7 +1803,7 @@ To turn off Messaging cloud sync:
|
|||||||
- Set the Group Policy Allow Message Service Cloud to Disable. The Group Policy path is Computer Configuration\Administrative templates\Windows Components\Messaging\Allow Message Service Cloud
|
- Set the Group Policy Allow Message Service Cloud to Disable. The Group Policy path is Computer Configuration\Administrative templates\Windows Components\Messaging\Allow Message Service Cloud
|
||||||
- Create a REG\_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging** with a value of 0 (zero).
|
- Create a REG\_DWORD registry setting named **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging** with a value of 0 (zero).
|
||||||
|
|
||||||
### <a href="" id="bkmk-teredo"></a>21. Teredo
|
### <a href="" id="bkmk-teredo"></a>22. Teredo
|
||||||
|
|
||||||
You can disable Teredo by using Group Policy or by using the netsh.exe command. For more info on Teredo, see [Internet Protocol Version 6, Teredo, and Related Technologies](https://technet.microsoft.com/library/cc722030.aspx).
|
You can disable Teredo by using Group Policy or by using the netsh.exe command. For more info on Teredo, see [Internet Protocol Version 6, Teredo, and Related Technologies](https://technet.microsoft.com/library/cc722030.aspx).
|
||||||
|
|
||||||
@ -1801,7 +1820,7 @@ You can disable Teredo by using Group Policy or by using the netsh.exe command.
|
|||||||
|
|
||||||
- From an elevated command prompt, run **netsh interface teredo set state disabled**
|
- From an elevated command prompt, run **netsh interface teredo set state disabled**
|
||||||
|
|
||||||
### <a href="" id="bkmk-wifisense"></a>22. Wi-Fi Sense
|
### <a href="" id="bkmk-wifisense"></a>23. Wi-Fi Sense
|
||||||
|
|
||||||
>[!IMPORTANT]
|
>[!IMPORTANT]
|
||||||
>Beginning with Windows 10, version 1803, Wi-Fi Sense is no longer available. The following section only applies to Windows 10, version 1709 and prior. Please see [Connecting to open Wi-Fi hotspots in Windows 10](https://privacy.microsoft.com/en-us/windows-10-open-wi-fi-hotspots) for more details.
|
>Beginning with Windows 10, version 1803, Wi-Fi Sense is no longer available. The following section only applies to Windows 10, version 1709 and prior. Please see [Connecting to open Wi-Fi hotspots in Windows 10](https://privacy.microsoft.com/en-us/windows-10-open-wi-fi-hotspots) for more details.
|
||||||
@ -1830,7 +1849,7 @@ To turn off **Connect to suggested open hotspots** and **Connect to networks sha
|
|||||||
|
|
||||||
When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee.
|
When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee.
|
||||||
|
|
||||||
### <a href="" id="bkmk-defender"></a>23. Windows Defender
|
### <a href="" id="bkmk-defender"></a>24. Windows Defender
|
||||||
|
|
||||||
You can disconnect from the Microsoft Antimalware Protection Service.
|
You can disconnect from the Microsoft Antimalware Protection Service.
|
||||||
|
|
||||||
@ -1890,7 +1909,7 @@ For Windows 10 only, you can stop Enhanced Notifications:
|
|||||||
|
|
||||||
You can also use the registry to turn off Malicious Software Reporting Tool diagnostic data by setting the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to 1.
|
You can also use the registry to turn off Malicious Software Reporting Tool diagnostic data by setting the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to 1.
|
||||||
|
|
||||||
### <a href="" id="bkmk-defender-smartscreen"></a>23.1 Windows Defender SmartScreen
|
### <a href="" id="bkmk-defender-smartscreen"></a>24.1 Windows Defender SmartScreen
|
||||||
|
|
||||||
To disable Windows Defender Smartscreen:
|
To disable Windows Defender Smartscreen:
|
||||||
|
|
||||||
@ -1920,7 +1939,7 @@ To disable Windows Defender Smartscreen:
|
|||||||
|
|
||||||
- Apply the Browser/AllowSmartScreen MDM policy from the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) where 0 is turned off and 1 is turned on.
|
- Apply the Browser/AllowSmartScreen MDM policy from the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) where 0 is turned off and 1 is turned on.
|
||||||
|
|
||||||
### <a href="" id="bkmk-wmp"></a>24. Windows Media Player
|
### <a href="" id="bkmk-wmp"></a>25. Windows Media Player
|
||||||
|
|
||||||
To remove Windows Media Player on Windows 10:
|
To remove Windows Media Player on Windows 10:
|
||||||
|
|
||||||
@ -1934,7 +1953,7 @@ To remove Windows Media Player on Windows Server 2016:
|
|||||||
|
|
||||||
- Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer**
|
- Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer**
|
||||||
|
|
||||||
### <a href="" id="bkmk-spotlight"></a>25. Windows Spotlight
|
### <a href="" id="bkmk-spotlight"></a>26. Windows Spotlight
|
||||||
|
|
||||||
Windows Spotlight provides features such as different background images and text on the lock screen, suggested apps, Microsoft account notifications, and Windows tips. You can control it by using the user interface, MDM policy, or through Group Policy.
|
Windows Spotlight provides features such as different background images and text on the lock screen, suggested apps, Microsoft account notifications, and Windows tips. You can control it by using the user interface, MDM policy, or through Group Policy.
|
||||||
|
|
||||||
@ -2010,7 +2029,7 @@ If you're not running Windows 10, version 1607 or later, you can use the other o
|
|||||||
|
|
||||||
For more info, see [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight).
|
For more info, see [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight).
|
||||||
|
|
||||||
### <a href="" id="bkmk-windowsstore"></a>26. Microsoft Store
|
### <a href="" id="bkmk-windowsstore"></a>27. Microsoft Store
|
||||||
|
|
||||||
You can turn off the ability to launch apps from the Microsoft Store that were preinstalled or downloaded.
|
You can turn off the ability to launch apps from the Microsoft Store that were preinstalled or downloaded.
|
||||||
This will also turn off automatic app updates, and the Microsoft Store will be disabled.
|
This will also turn off automatic app updates, and the Microsoft Store will be disabled.
|
||||||
@ -2029,13 +2048,13 @@ On Windows Server 2016, this will block Microsoft Store calls from Universal Win
|
|||||||
|
|
||||||
- Create a new REG\_DWORD registry setting named **AutoDownload** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\WindowsStore** with a value of 2 (two).
|
- Create a new REG\_DWORD registry setting named **AutoDownload** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\WindowsStore** with a value of 2 (two).
|
||||||
|
|
||||||
### <a href="" id="bkmk-apps-for-websites"></a>26.1 Apps for websites
|
### <a href="" id="bkmk-apps-for-websites"></a>27.1 Apps for websites
|
||||||
|
|
||||||
You can turn off apps for websites, preventing customers who visit websites that are registered with their associated app from directly launching the app.
|
You can turn off apps for websites, preventing customers who visit websites that are registered with their associated app from directly launching the app.
|
||||||
|
|
||||||
Disable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Group Policy** > **Configure web-to-app linking with URI handlers**
|
Disable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Group Policy** > **Configure web-to-app linking with URI handlers**
|
||||||
|
|
||||||
### <a href="" id="bkmk-updates"></a>27. Windows Update Delivery Optimization
|
### <a href="" id="bkmk-updates"></a>28. Windows Update Delivery Optimization
|
||||||
|
|
||||||
Windows Update Delivery Optimization lets you get Windows updates and Microsoft Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization's PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet.
|
Windows Update Delivery Optimization lets you get Windows updates and Microsoft Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization's PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet.
|
||||||
|
|
||||||
@ -2045,13 +2064,13 @@ Use the UI, Group Policy, MDM policies, or Windows Provisioning to set up Delive
|
|||||||
|
|
||||||
In Windows 10, version 1607, you can stop network traffic related to Windows Update Delivery Optimization by setting **Download Mode** to **Simple** (99) or **Bypass** (100), as described below.
|
In Windows 10, version 1607, you can stop network traffic related to Windows Update Delivery Optimization by setting **Download Mode** to **Simple** (99) or **Bypass** (100), as described below.
|
||||||
|
|
||||||
### <a href="" id="bkmk-wudo-ui"></a>27.1 Settings > Update & security
|
### <a href="" id="bkmk-wudo-ui"></a>28.1 Settings > Update & security
|
||||||
|
|
||||||
You can set up Delivery Optimization from the **Settings** UI.
|
You can set up Delivery Optimization from the **Settings** UI.
|
||||||
|
|
||||||
- Go to **Settings** > **Update & security** > **Windows Update** > **Advanced options** > **Choose how updates are delivered**.
|
- Go to **Settings** > **Update & security** > **Windows Update** > **Advanced options** > **Choose how updates are delivered**.
|
||||||
|
|
||||||
### <a href="" id="bkmk-wudo-gp"></a>27.2 Delivery Optimization Group Policies
|
### <a href="" id="bkmk-wudo-gp"></a>28.2 Delivery Optimization Group Policies
|
||||||
|
|
||||||
You can find the Delivery Optimization Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**.
|
You can find the Delivery Optimization Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**.
|
||||||
|
|
||||||
@ -2065,7 +2084,7 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con
|
|||||||
|
|
||||||
Set the Delivery Optimization Group Policy to "Bypass" to prevent traffic. Alternatively, you can set the **Download Mode** policy by creating a new REG\_DWORD registry setting named **DODownloadMode** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** to a value of 100 (one hundred).
|
Set the Delivery Optimization Group Policy to "Bypass" to prevent traffic. Alternatively, you can set the **Download Mode** policy by creating a new REG\_DWORD registry setting named **DODownloadMode** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization** to a value of 100 (one hundred).
|
||||||
|
|
||||||
### <a href="" id="bkmk-wudo-mdm"></a>27.3 Delivery Optimization MDM policies
|
### <a href="" id="bkmk-wudo-mdm"></a>28.3 Delivery Optimization MDM policies
|
||||||
|
|
||||||
The following Delivery Optimization MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
The following Delivery Optimization MDM policies are available in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||||
|
|
||||||
@ -2078,7 +2097,7 @@ The following Delivery Optimization MDM policies are available in the [Policy CS
|
|||||||
| DeliveryOptimization/DOMaxUploadBandwidth | Lets you specify the maximum upload bandwidth (in KB/second) that a device uses across all concurrent upload activity. <br /> The default value is 0, which means unlimited possible bandwidth.|
|
| DeliveryOptimization/DOMaxUploadBandwidth | Lets you specify the maximum upload bandwidth (in KB/second) that a device uses across all concurrent upload activity. <br /> The default value is 0, which means unlimited possible bandwidth.|
|
||||||
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-wudo-prov"></a>27.4 Delivery Optimization Windows Provisioning
|
### <a href="" id="bkmk-wudo-prov"></a>28.4 Delivery Optimization Windows Provisioning
|
||||||
|
|
||||||
If you don't have an MDM server in your enterprise, you can use Windows Provisioning to configure the Delivery Optimization policies
|
If you don't have an MDM server in your enterprise, you can use Windows Provisioning to configure the Delivery Optimization policies
|
||||||
|
|
||||||
@ -2094,7 +2113,7 @@ Use Windows ICD, included with the [Windows Assessment and Deployment Kit (Windo
|
|||||||
|
|
||||||
For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](https://go.microsoft.com/fwlink/p/?LinkId=730684).
|
For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](https://go.microsoft.com/fwlink/p/?LinkId=730684).
|
||||||
|
|
||||||
### <a href="" id="bkmk-wu"></a>28. Windows Update
|
### <a href="" id="bkmk-wu"></a>29. Windows Update
|
||||||
|
|
||||||
You can turn off Windows Update by setting the following registry entries:
|
You can turn off Windows Update by setting the following registry entries:
|
||||||
|
|
||||||
@ -2141,23 +2160,4 @@ You can turn off automatic updates by doing one of the following. This is not re
|
|||||||
|
|
||||||
- **5**. Turn off automatic updates.
|
- **5**. Turn off automatic updates.
|
||||||
|
|
||||||
|
|
||||||
### <a href="" id="bkmk-licmgr"></a>29. License Manager
|
|
||||||
|
|
||||||
You can turn off License Manager related traffic by setting the following registry entry:
|
|
||||||
|
|
||||||
- Add a REG\_DWORD value named **Start** to **HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\LicenseManager** and set the value to 4
|
|
||||||
|
|
||||||
- The value 4 is to disable the service. Here are the available options to set the registry:
|
|
||||||
|
|
||||||
- **0x00000000** = Boot
|
|
||||||
|
|
||||||
- **0x00000001** = System
|
|
||||||
|
|
||||||
- **0x00000002** = Automatic
|
|
||||||
|
|
||||||
- **0x00000003** = Manual
|
|
||||||
|
|
||||||
- **0x00000004** = Disabled
|
|
||||||
|
|
||||||
To learn more, see [Device update management](https://msdn.microsoft.com/library/windows/hardware/dn957432.aspx) and [Configure Automatic Updates by using Group Policy](https://technet.microsoft.com/library/cc720539.aspx).
|
To learn more, see [Device update management](https://msdn.microsoft.com/library/windows/hardware/dn957432.aspx) and [Configure Automatic Updates by using Group Policy](https://technet.microsoft.com/library/cc720539.aspx).
|
||||||
|
|||||||
@ -11,7 +11,7 @@ manager: dansimp
|
|||||||
audience: ITPro
|
audience: ITPro
|
||||||
ms.collection: M365-security-compliance
|
ms.collection: M365-security-compliance
|
||||||
ms.topic: conceptual
|
ms.topic: conceptual
|
||||||
ms.date: 03/05/2019
|
ms.date: 03/15/2019
|
||||||
---
|
---
|
||||||
|
|
||||||
# Create a Windows Information Protection (WIP) policy with MDM using the Azure portal for Microsoft Intune
|
# Create a Windows Information Protection (WIP) policy with MDM using the Azure portal for Microsoft Intune
|
||||||
@ -426,7 +426,7 @@ For example:
|
|||||||
URL <,proxy>|URL <,proxy>/*AppCompat*/
|
URL <,proxy>|URL <,proxy>/*AppCompat*/
|
||||||
```
|
```
|
||||||
|
|
||||||
When using this string, we recommend that you also turn on [Azure Active Directory Conditional Access](https://docs.microsoft.com/azure/active-directory/active-directory-conditional-access), using the **Domain joined or marked as compliant** option, which blocks apps from accessing any enterprise cloud resources that are protected by conditional access.
|
When you use this string, we recommend that you also turn on [Azure Active Directory Conditional Access](https://docs.microsoft.com/azure/active-directory/active-directory-conditional-access), using the **Domain joined or marked as compliant** option, which blocks apps from accessing any enterprise cloud resources that are protected by conditional access.
|
||||||
|
|
||||||
Value format with proxy:
|
Value format with proxy:
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 30 KiB After Width: | Height: | Size: 124 KiB |
@ -8,7 +8,7 @@ ms.pagetype: security
|
|||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
author: justinha
|
author: justinha
|
||||||
ms.author: justinha
|
ms.author: justinha
|
||||||
ms.date: 01/16/2019
|
ms.date: 03/15/2019
|
||||||
---
|
---
|
||||||
|
|
||||||
# Application Guard testing scenarios
|
# Application Guard testing scenarios
|
||||||
@ -25,7 +25,7 @@ You can see how an employee would use standalone mode with Application Guard.
|
|||||||
|
|
||||||
**To test Application Guard in Standalone mode**
|
**To test Application Guard in Standalone mode**
|
||||||
|
|
||||||
1. Install Application Guard, using the [installation](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard) steps in this guide.
|
1. [Install Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard).
|
||||||
|
|
||||||
2. Restart the device, start Microsoft Edge, and then click **New Application Guard window** from the menu.
|
2. Restart the device, start Microsoft Edge, and then click **New Application Guard window** from the menu.
|
||||||
|
|
||||||
@ -46,7 +46,7 @@ How to install, set up, turn on, and configure Application Guard for Enterprise-
|
|||||||
### Install, set up, and turn on Application Guard
|
### Install, set up, and turn on Application Guard
|
||||||
Before you can use Application Guard in enterprise mode, you must install Windows 10 Enterprise edition, version 1709, which includes the functionality. Then, you must use Group Policy to set up the required settings.
|
Before you can use Application Guard in enterprise mode, you must install Windows 10 Enterprise edition, version 1709, which includes the functionality. Then, you must use Group Policy to set up the required settings.
|
||||||
|
|
||||||
1. Install Application Guard, using the [installation](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard#install-application-guard) steps in this guide.
|
1. [Install Application Guard](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard#install-application-guard).
|
||||||
|
|
||||||
2. Restart the device and then start Microsoft Edge.
|
2. Restart the device and then start Microsoft Edge.
|
||||||
|
|
||||||
@ -68,7 +68,7 @@ Before you can use Application Guard in enterprise mode, you must install Window
|
|||||||
|
|
||||||
4. Go to the **Computer Configuration\Administrative Templates\Windows Components\Windows Defender Application Guard\Turn on Windows Defender Application Guard in Enterprise Mode** setting.
|
4. Go to the **Computer Configuration\Administrative Templates\Windows Components\Windows Defender Application Guard\Turn on Windows Defender Application Guard in Enterprise Mode** setting.
|
||||||
|
|
||||||
5. Click **Enabled** and click **OK**.
|
5. Click **Enabled**, choose Option **1**, and click **OK**.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@ -15,7 +15,6 @@ manager: dansimp
|
|||||||
audience: ITPro
|
audience: ITPro
|
||||||
ms.collection: M365-security-compliance
|
ms.collection: M365-security-compliance
|
||||||
ms.topic: article
|
ms.topic: article
|
||||||
ms.date: 05/08/2018
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Create and manage machine groups in Windows Defender ATP
|
# Create and manage machine groups in Windows Defender ATP
|
||||||
@ -34,6 +33,9 @@ In Windows Defender ATP, you can create machine groups and use them to:
|
|||||||
- Limit access to related alerts and data to specific Azure AD user groups with [assigned RBAC roles](rbac-windows-defender-advanced-threat-protection.md)
|
- Limit access to related alerts and data to specific Azure AD user groups with [assigned RBAC roles](rbac-windows-defender-advanced-threat-protection.md)
|
||||||
- Configure different auto-remediation settings for different sets of machines
|
- Configure different auto-remediation settings for different sets of machines
|
||||||
|
|
||||||
|
>[!TIP]
|
||||||
|
> For a comprehensive look into RBAC application, read: [Is your SOC running flat with RBAC](https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Is-your-SOC-running-flat-with-limited-RBAC/ba-p/320015).
|
||||||
|
|
||||||
As part of the process of creating a machine group, you'll:
|
As part of the process of creating a machine group, you'll:
|
||||||
- Set the automated remediation level for that group. For more information on remediation levels, see [Use Automated investigation to investigate and remediate threats](automated-investigations-windows-defender-advanced-threat-protection.md).
|
- Set the automated remediation level for that group. For more information on remediation levels, see [Use Automated investigation to investigate and remediate threats](automated-investigations-windows-defender-advanced-threat-protection.md).
|
||||||
- Specify the matching rule that determines which machine group belongs to the group based on the machine name, domain, tags, and OS platform. If a machine is also matched to other groups, it is added only to the highest ranked machine group.
|
- Specify the matching rule that determines which machine group belongs to the group based on the machine name, domain, tags, and OS platform. If a machine is also matched to other groups, it is added only to the highest ranked machine group.
|
||||||
@ -44,6 +46,7 @@ As part of the process of creating a machine group, you'll:
|
|||||||
>A machine group is accessible to all users if you don’t assign any Azure AD groups to it.
|
>A machine group is accessible to all users if you don’t assign any Azure AD groups to it.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Create a machine group
|
## Create a machine group
|
||||||
|
|
||||||
1. In the navigation pane, select **Settings** > **Machine groups**.
|
1. In the navigation pane, select **Settings** > **Machine groups**.
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user