Merge branch 'main' into do_docs

This commit is contained in:
Carmen Forsmann 2024-07-03 19:49:33 -06:00 committed by GitHub
commit 3bc76190fb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
34 changed files with 163 additions and 575 deletions

View File

@ -159,11 +159,21 @@
"source_path":"windows/whats-new/whats-new-windows-10-version-20H2.md",
"redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-20H2",
"redirect_document_id":false
},
{
"source_path":"windows/whats-new/whats-new-windows-10-version-21H1.md",
"redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H1",
"redirect_document_id":false
}
]
}
},
{
"source_path":"windows/whats-new/whats-new-windows-10-version-21H1.md",
"redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H1",
"redirect_document_id":false
},
{
"source_path":"windows/whats-new/whats-new-windows-10-version-21H2.md",
"redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H2",
"redirect_document_id":false
},
{
"source_path":"windows/whats-new/ltsc/index.yml",
"redirect_url":"/windows/whats-new/",
"redirect_document_id":false
}
]
}

View File

@ -128,7 +128,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `IMT Lazarus` | 2.86.0 | `Win32` | `IMTLazarus` |
| `Inprint` | 3.7.6 | `Win32` | `Inprint` |
| `Inspiration 10` | 10.11 | `Win32` | `TechEdology Ltd` |
| `Instashare` | 1.3.13.0 | `Win32` | `Instashare` |
| `Instashare 2` | 1.3.13.0 | `Win32` | `BenQ` |
| `JAWS for Windows` | 2024.2312.53 | `Win32` | `Freedom Scientific` |
| `Kite Student Portal` | 9.0.0.0 | `Win32` | `Dynamic Learning Maps` |
| `Keyman` | 16.0.142 | `Win32` | `SIL International` |

View File

@ -69,11 +69,6 @@
"Windows 10"
]
},
"fileMetadata": {
"feedback_system": {
"app-v/**/*.*": "None"
}
},
"template": [],
"dest": "win-app-management",
"markdownEngineName": "markdig"

View File

@ -9,7 +9,7 @@ metadata:
author: aczechowski
ms.author: aaroncz
manager: aaroncz
ms.date: 08/18/2023
ms.date: 06/28/2024
ms.topic: landing-page
ms.service: windows-client
ms.subservice: itpro-apps
@ -40,22 +40,3 @@ landingContent:
url: per-user-services-in-windows.md
- text: Changes to Service Host grouping in Windows 10
url: svchost-service-refactoring.md
- title: Application Virtualization (App-V)
linkLists:
- linkListType: overview
links:
- text: App-V overview
url: /microsoft-desktop-optimization-pack/app-v/appv-for-windows
- text: Getting started with App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-getting-started
- text: Planning for App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv
- text: Deploying App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv
- text: Operations for App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-operations
- text: Troubleshooting App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting
- text: Technical Reference for App-V
url: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference

View File

@ -4,7 +4,7 @@ description: Learn about the different types of apps that run on Windows. For ex
author: aczechowski
ms.author: aaroncz
manager: aaroncz
ms.date: 08/28/2023
ms.date: 06/28/2024
ms.topic: overview
ms.service: windows-client
ms.subservice: itpro-apps
@ -31,7 +31,7 @@ For more information on deploying Microsoft 365 apps, see the [Deployment guide
### Power Apps
These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers.
These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers.
For more information, see [What is Power Apps?](/power-apps/powerapps-overview).
@ -182,7 +182,7 @@ App-V allows Win32 apps to be used as virtual apps.
On an on-premises server, you install and configure the App-V server components, and then install your Win32 apps. On Windows Enterprise client devices, you use the App-V client components to run the virtualized apps. They allow users to open the virtual apps using the icons and file names they're familiar with. Users use the apps as if they're installed locally.
The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](./app-v/appv-for-windows.md).
The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](/microsoft-desktop-optimization-pack/app-v/appv-for-windows).
## Manage apps

View File

@ -1,255 +1,17 @@
items:
- name: Manage Windows applications
href: index.yml
- name: Application management
items:
- name: Overview of apps in Windows
href: overview-windows-apps.md
- name: Sideload line of business (LOB) apps
href: sideload-apps-in-windows.md
- name: Private app repo on Windows 11
href: private-app-repository-mdm-company-portal-windows-11.md
- name: Remove background task resource restrictions
href: enterprise-background-activity-controls.md
- name: Service host grouping in Windows 10
href: svchost-service-refactoring.md
- name: Per-user services in Windows
href: per-user-services-in-windows.md
- name: Keep removed apps from returning during an update
href: remove-provisioned-apps-during-update.md
- name: Application Virtualization (App-V)
items:
- name: App-V for Windows overview
href: /microsoft-desktop-optimization-pack/app-v/appv-for-windows
- name: Getting Started
items:
- name: Getting Started with App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-getting-started
- name: What's new
items:
- name: What's new in App-V for Windows 10, version 1703 and earlier
href: /microsoft-desktop-optimization-pack/app-v/appv-about-appv
- name: Release Notes for App-V for Windows 10, version 1607
href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows
- name: Release Notes for App-V for Windows 10, version 1703
href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows-1703
- name: Evaluating App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-evaluating-appv
- name: High Level Architecture for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-high-level-architecture
- name: Planning
items:
- name: Planning for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv
- name: Preparing your environment
items:
- name: Preparing your environment for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-preparing-your-environment
- name: App-V Prerequisites
href: /microsoft-desktop-optimization-pack/app-v/appv-prerequisites
- name: App-V security considerations
href: /microsoft-desktop-optimization-pack/app-v/appv-security-considerations
- name: Planning to deploy
items:
- name: Planning to Deploy App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv
- name: App-V Supported Configurations
href: /microsoft-desktop-optimization-pack/app-v/appv-supported-configurations
- name: App-V Capacity Planning
href: /microsoft-desktop-optimization-pack/app-v/appv-capacity-planning
- name: Planning for High Availability with App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-high-availability-with-appv
- name: Planning to Deploy App-V with an Electronic Software Distribution System
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions
- name: Planning for the App-V Server Deployment
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv-server-deployment
- name: Planning for the App-V Sequencer and Client Deployment
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-sequencer-and-client-deployment
- name: Planning for Using App-V with Office
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-using-appv-with-office
- name: Planning to Use Folder Redirection with App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-folder-redirection-with-appv
- name: App-V Planning Checklist
href: /microsoft-desktop-optimization-pack/app-v/appv-planning-checklist
- name: Deploying
items:
- name: Deploying App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv
- name: App-V sequencer and client configuration
items:
- name: Deploying the App-V Sequencer and Configuring the Client
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-sequencer-and-client
- name: About Client Configuration Settings
href: /microsoft-desktop-optimization-pack/app-v/appv-client-configuration-settings
- name: Enable the App-V desktop client
href: /microsoft-desktop-optimization-pack/app-v/appv-enable-the-app-v-desktop-client
- name: How to Install the Sequencer
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-sequencer
- name: App-V server deployment
items:
- name: Deploying the App-V Server
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-server
- name: How to Deploy the App-V Server
href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server
- name: How to Deploy the App-V Server Using a Script
href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server-with-a-script
- name: How to Deploy the App-V Databases by Using SQL Scripts
href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-databases-with-sql-scripts
- name: How to Install the Publishing Server on a Remote Computer
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-publishing-server-on-a-remote-computer
- name: How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-and-reporting-databases-on-separate-computers
- name: How to install the Management Server on a Standalone Computer and Connect it to the Database
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-server-on-a-standalone-computer
- name: About App-V Reporting
href: /microsoft-desktop-optimization-pack/app-v/appv-reporting
- name: How to install the Reporting Server on a Standalone Computer and Connect it to the Database
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-reporting-server-on-a-standalone-computer
- name: App-V Deployment Checklist
href: /microsoft-desktop-optimization-pack/app-v/appv-deployment-checklist
- name: Deploying Microsoft Office 2016 by Using App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2016-with-appv
- name: Deploying Microsoft Office 2013 by Using App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2013-with-appv
- name: Deploying Microsoft Office 2010 by Using App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2010-wth-appv
- name: Operations
items:
- name: Operations for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-operations
- name: Creating and managing virtualized applications
items:
- name: Creating and Managing App-V Virtualized Applications
href: /microsoft-desktop-optimization-pack/app-v/appv-creating-and-managing-virtualized-applications
- name: Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)
href: /microsoft-desktop-optimization-pack/app-v/appv-auto-provision-a-vm
- name: Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)
href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-sequencing
- name: Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)
href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-updating
- name: Manually sequence a new app using Microsoft Application Virtualization Sequencer (App-V Sequencer)
href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-new-application
- name: How to Modify an Existing Virtual Application Package
href: /microsoft-desktop-optimization-pack/app-v/appv-modify-an-existing-virtual-application-package
- name: How to Create and Use a Project Template
href: /microsoft-desktop-optimization-pack/app-v/appv-create-and-use-a-project-template
- name: How to Create a Package Accelerator
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator
- name: How to Create a Virtual Application Package Using an App-V Package Accelerator
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-virtual-application-package-package-accelerator
- name: Administering App-V
items:
- name: Administering App-V Virtual Applications by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-administering-virtual-applications-with-the-management-console
- name: About App-V Dynamic Configuration
href: /microsoft-desktop-optimization-pack/app-v/appv-dynamic-configuration
- name: How to Connect to the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-connect-to-the-management-console
- name: How to Add or Upgrade Packages by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-upgrade-packages-with-the-management-console
- name: How to Configure Access to Packages by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-configure-access-to-packages-with-the-management-console
- name: How to Publish a Package by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-packages-with-the-management-console
- name: How to Delete a Package in the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-package-with-the-management-console
- name: How to Add or Remove an Administrator by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-remove-an-administrator-with-the-management-console
- name: How to Register and Unregister a Publishing Server by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console
- name: How to Create a Custom Configuration File by Using the App-V Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-custom-configuration-file-with-the-management-console
- name: How to Transfer Access and Configurations to Another Version of a Package by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console
- name: How to Customize Virtual Applications Extensions for a Specific AD Group by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-customize-virtual-application-extensions-with-the-management-console
- name: How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console
href: /microsoft-desktop-optimization-pack/app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console
- name: Connection groups
items:
- name: Managing Connection Groups
href: /microsoft-desktop-optimization-pack/app-v/appv-managing-connection-groups
- name: About the Connection Group Virtual Environment
href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-virtual-environment
- name: About the Connection Group File
href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-file
- name: How to Create a Connection Group
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group
- name: How to Create a Connection Group with User-Published and Globally Published Packages
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages
- name: How to Delete a Connection Group
href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-connection-group
- name: How to Publish a Connection Group
href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-connection-group
- name: How to Make a Connection Group Ignore the Package Version
href: /microsoft-desktop-optimization-pack/app-v/appv-configure-connection-groups-to-ignore-the-package-version
- name: How to Allow Only Administrators to Enable Connection Groups
href: /microsoft-desktop-optimization-pack/app-v/appv-allow-administrators-to-enable-connection-groups
- name: Deploying App-V packages with ESD
items:
- name: Deploying App-V Packages by Using Electronic Software Distribution (ESD)
href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-packages-with-electronic-software-distribution-solutions
- name: How to deploy App-V Packages Using Electronic Software Distribution
href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions
- name: How to Enable Only Administrators to Publish Packages by Using an ESD
href: /microsoft-desktop-optimization-pack/app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions
- name: Using the management console
items:
- name: Using the App-V client management console
href: /microsoft-desktop-optimization-pack/app-v/appv-using-the-client-management-console
- name: Automatically clean up unpublished packages on the App-V client
href: /microsoft-desktop-optimization-pack/app-v/appv-auto-clean-unpublished-packages
- name: Migrating
items:
- name: Migrating to App-V from a previous version
href: /microsoft-desktop-optimization-pack/app-v/appv-migrating-to-appv-from-a-previous-version
- name: How to convert a package created in a previous version of App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-convert-a-package-created-in-a-previous-version-of-appv
- name: Maintenance
items:
- name: Maintaining App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-maintaining-appv
- name: How to Move the App-V Server to Another Computer
href: /microsoft-desktop-optimization-pack/app-v/appv-move-the-appv-server-to-another-computer
- name: Administering App-V with Windows PowerShell
items:
- name: Administering App-V by using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-administering-appv-with-powershell
- name: How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help
href: /microsoft-desktop-optimization-pack/app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help
- name: How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell
- name: How to Manage Connection Groups on a Stand-alone Computer by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell
- name: How to Modify Client Configuration by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-modify-client-configuration-with-powershell
- name: How to Configure the Client to Receive Package and Connection Groups Updates From the Publishing Server
href: /microsoft-desktop-optimization-pack/app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server
- name: How to Apply the User Configuration File by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-user-configuration-file-with-powershell
- name: How to Apply the Deployment Configuration File by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-deployment-configuration-file-with-powershell
- name: How to Sequence a Package by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-package-with-powershell
- name: How to Create a Package Accelerator by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator-with-powershell
- name: How to Enable Reporting on the App-V Client by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-enable-reporting-on-the-appv-client-with-powershell
- name: How to Install the App-V Databases and Convert the Associated Security Identifiers by Using Windows PowerShell
href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell
- name: Troubleshooting App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting
- name: Technical Reference
items:
- name: Technical Reference for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference
- name: Available Mobile Device Management (MDM) settings for App-V
href: /microsoft-desktop-optimization-pack/app-v/appv-available-mdm-settings
- name: Performance Guidance for Application Virtualization
href: /microsoft-desktop-optimization-pack/app-v/appv-performance-guidance
- name: Application Publishing and Client Interaction
href: /microsoft-desktop-optimization-pack/app-v/appv-application-publishing-and-client-interaction
- name: Viewing App-V Server Publishing Metadata
href: /microsoft-desktop-optimization-pack/app-v/appv-viewing-appv-server-publishing-metadata
- name: Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications
href: /microsoft-desktop-optimization-pack/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment
- name: Overview of apps in Windows
href: overview-windows-apps.md
- name: Sideload line of business (LOB) apps
href: sideload-apps-in-windows.md
- name: Private app repo on Windows 11
href: private-app-repository-mdm-company-portal-windows-11.md
- name: Remove background task resource restrictions
href: enterprise-background-activity-controls.md
- name: Service host grouping in Windows 10
href: svchost-service-refactoring.md
- name: Per-user services in Windows
href: per-user-services-in-windows.md
- name: Keep removed apps from returning during an update
href: remove-provisioned-apps-during-update.md

View File

@ -1,19 +1,9 @@
---
title: Add, remove, or hide Windows features
description: Learn how to add or remove Windows optional features using the Optional features page in the Settings app. Also see the group policy objects (GPO) and MDM policies that show or hide Windows Features in the Settings app. Use Windows PowerShell to show or hide specific features in Windows Features.
author: aczechowski
ms.author: aaroncz
manager: aaroncz
ms.date: 03/28/2024
ms.date: 07/01/2024
ms.topic: how-to
ms.service: windows-client
ms.subservice: itpro-apps
ms.localizationpriority: medium
ms.collection: tier2
zone_pivot_groups: windows-versions-11-10
appliesto:
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11</a>
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
---
# Add, remove, or hide Windows features
@ -29,7 +19,7 @@ Open the **Optional features** pane in the **Settings** app by selecting the fol
> [!div class="nextstepaction"]
> [Optional features](ms-settings:optionalfeatures)
or
Or
1. Right-click on the **Start** menu and select **Run**.
@ -41,7 +31,7 @@ or
and then select **OK**.
or
Or
::: zone pivot="windows-11"

View File

@ -1,18 +1,26 @@
---
title: Windows Tools/Administrative Tools
title: Windows Tools
description: The folders for Windows Tools and Administrative Tools are folders in the Control Panel that contain tools for system administrators and advanced users.
ms.localizationpriority: medium
ms.date: 08/10/2023
ms.date: 07/01/2024
ms.topic: conceptual
ms.collection:
- highpri
- tier2
- essentials-manage
zone_pivot_groups: windows-versions-11-10
---
# Windows Tools/Administrative Tools
# Windows Tools
**Windows Tools** is a folder in the Windows 11 Control Panel. **Administrative Tools** is a folder in the Windows 10 Control Panel. These folders contain tools for system administrators and advanced users.
::: zone pivot="windows-11"
**Windows Tools** is a folder in the Windows 11 Control Panel. This folder contains tools for system administrators and advanced users.
::: zone-end
::: zone pivot="windows-10"
**Administrative Tools** is a folder in the Windows 10 Control Panel. This folder contains tools for system administrators and advanced users.
::: zone-end
::: zone pivot="windows-11"
## Windows Tools folder
@ -24,6 +32,10 @@ The tools in the folder might vary depending on which edition of Windows you use
:::image type="content" source="images/win11-windows-tools.png" alt-text="Screenshot of the contents of the Windows Tools folder in Windows 11." lightbox="images/win11-windows-tools.png":::
::: zone-end
::: zone pivot="windows-10"
## Administrative Tools folder
The following graphic shows the **Administrative Tools** folder in Windows 10:
@ -34,34 +46,7 @@ The tools in the folder might vary depending on which edition of Windows you use
![Screenshot of the contents of the Administrative Tools folder in Windows 10.](images/admin-tools-folder.png)
## Tools
The tools are located in the folder `C:\Windows\System32\` or its subfolders.
These tools were included in previous versions of Windows. The associated documentation for each tool can help you use them. The following list provides links to documentation for each tool.
- [Component Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731901(v=ws.11))
- [Computer Management](https://support.microsoft.com/topic/how-to-use-computer-management-in-windows-xp-d5872f93-4498-f4dd-3a34-36d6f569924f)
- [Defragment and Optimize Drives](https://support.microsoft.com/windows/ways-to-improve-your-computer-s-performance-c6018c78-0edd-a71a-7040-02267d68ea90)
- [Disk Cleanup](https://support.microsoft.com/windows/disk-cleanup-in-windows-8a96ff42-5751-39ad-23d6-434b4d5b9a68)
- [Event Viewer](/previous-versions/windows/it-pro/windows-2000-server/cc938674(v=technet.10))
- [iSCSI Initiator](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee338476(v=ws.10))
- [Local Security Policy](/previous-versions/tn-archive/dd277395(v=technet.10))
- [ODBC Data Sources](/sql/odbc/admin/odbc-data-source-administrator)
- [Performance Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749115(v=ws.11))
- [Print Management](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731857(v=ws.11))
- [Recovery Drive](https://support.microsoft.com/windows/create-a-recovery-drive-abb4691b-5324-6d4a-8766-73fab304c246)
- [Registry Editor](/windows/win32/sysinfo/registry)
- [Resource Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883276(v=ws.10))
- [Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772408(v=ws.11))
- [System Configuration](/troubleshoot/windows-client/performance/system-configuration-utility-troubleshoot-configuration-errors)
- [System Information](/previous-versions/windows/it-pro/windows-2000-server/cc957818(v=technet.10))
- [Task Scheduler](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc766428(v=ws.11))
- [Windows Firewall with Advanced Security](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754274(v=ws.11))
- [Windows Memory Diagnostic](/previous-versions/technet-magazine/cc745953(v=msdn.10))
> [!TIP]
> If the linked content in this list doesn't provide the information you need to use that tool, send feedback with the **This page** link in the **Feedback** section at the bottom of this article.
::: zone-end
## Related articles

View File

@ -1,12 +1,11 @@
---
title: Windows default media removal policy
description: In Windows 10 and later, the default removal policy for external storage media changed from Better performance to Quick removal.
ms.date: 08/10/2023
description: Manage default media removal policy in Windows.
ms.date: 07/01/2024
ms.topic: conceptual
ms.localizationpriority: medium
---
# Change in default removal policy for external storage media in Windows
# Manage default media removal policy
Windows defines two main policies, **Quick removal** and **Better performance**, that control how the system interacts with external storage devices such as USB thumb drives or Thunderbolt-enabled external drives. Beginning in Windows 10 version 1809, the default policy is **Quick removal**. In earlier versions of Windows, the default policy was **Better performance**.
@ -16,7 +15,7 @@ You can change the policy setting for each external device, and the policy that
You can use the storage device policy setting to change the manner in which Windows manages storage devices to better meet your needs. The policy settings have the following effects:
- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This may degrade system performance.
- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This can degrade system performance.
- **Better performance**: This policy manages storage operations in a manner that improves system performance. When this policy is in effect, Windows can cache write operations to the external device. However, you must use the Safely Remove Hardware process to remove the external drive. The Safely Remove Hardware process protects the integrity of data on the device by making sure that all cached operations finish.
> [!IMPORTANT]

View File

@ -2,7 +2,7 @@
title: Connect to remote Microsoft Entra joined device
description: Learn how to use Remote Desktop Connection to connect to a Microsoft Entra joined device.
ms.localizationpriority: medium
ms.date: 08/10/2023
ms.date: 07/01/2024
ms.topic: conceptual
ms.collection:
- highpri
@ -14,18 +14,16 @@ ms.collection:
Windows supports remote connections to devices joined to Active Directory s well as devices joined to Microsoft Entra ID using Remote Desktop Protocol (RDP).
- Starting in Windows 10, version 1809, you can [use biometrics to authenticate to a remote desktop session](/windows/whats-new/whats-new-windows-10-version-1809#remote-desktop-with-biometrics).
- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-azure-ad-authentication).
- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-microsoft-entra-authentication).
## Prerequisites
- Both devices (local and remote) must be running a supported version of Windows.
- Remote device must have the **Connect to and use this PC from another device using the Remote Desktop app** option selected under **Settings** > **System** > **Remote Desktop**.
- It's recommended to select **Require devices to use Network Level Authentication to connect** option.
- Select **Require devices to use Network Level Authentication to connect** option is recommended.
- If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must [add users to the Remote Desktop Users group](#add-users-to-remote-desktop-users-group) on the remote device.
- Ensure [Remote Credential Guard](/windows/access-protection/remote-credential-guard) is turned off on the device you're using to connect to the remote device.
<a name='connect-with-azure-ad-authentication'></a>
## Connect with Microsoft Entra authentication
Microsoft Entra authentication can be used on the following operating systems for both the local and remote device:
@ -64,8 +62,6 @@ The Windows lock screen in the remote session doesn't support Microsoft Entra au
Disconnecting the session also ensures that when the connection is relaunched after a period of inactivity, Microsoft Entra ID reevaluates the applicable conditional access policies.
<a name='connect-without-azure-ad-authentication'></a>
## Connect without Microsoft Entra authentication
By default, RDP doesn't use Microsoft Entra authentication, even if the remote PC supports it. This method allows you to connect to the remote Microsoft Entra joined device from:

Binary file not shown.

Before

Width:  |  Height:  |  Size: 159 KiB

After

Width:  |  Height:  |  Size: 24 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 31 KiB

After

Width:  |  Height:  |  Size: 38 KiB

View File

@ -1,7 +1,7 @@
---
title: Manage Device Installation with Group Policy
description: Find out how to manage Device Installation Restrictions with Group Policy.
ms.date: 08/10/2023
ms.date: 07/01/2024
ms.topic: conceptual
---

View File

@ -1,7 +1,7 @@
---
title: Manage the Settings app with Group Policy
description: Find out how to manage the Settings app with Group Policy so you can hide specific pages from users.
ms.date: 08/10/2023
ms.date: 07/01/2024
ms.topic: conceptual
---

View File

@ -1,16 +1,13 @@
---
title: Create mandatory user profiles
description: A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users.
ms.date: 08/10/2023
description: A mandatory user profile is a special type of preconfigured roaming user profile that administrators can use to specify settings for users.
ms.date: 07/01/2024
ms.topic: conceptual
ms.collection:
- highpri
- tier2
---
# Create mandatory user profiles
A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
A mandatory user profile is a roaming user profile that has been preconfigured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles.
@ -118,12 +115,12 @@ In a domain, you modify properties for the user account to point to the mandator
### How to apply a mandatory user profile to users
1. Open **Active Directory Users and Computers** (dsa.msc).
1. Navigate to the user account that you'll assign the mandatory profile to.
1. Navigate to the user account that you want to assign the mandatory profile to.
1. Right-click the user name and open **Properties**.
1. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is `\\server\share\profile.v6`, you would enter `\\server\share\profile`.
1. Select **OK**.
It may take some time for this change to replicate to all domain controllers.
It can take some time for this change to replicate to all domain controllers.
## Apply policies to improve sign-in time

View File

@ -1,9 +1,8 @@
---
title: Use Quick Assist to help users
description: Learn how IT Pros can use Quick Assist to help users.
ms.date: 05/09/2024
ms.date: 07/01/2024
ms.topic: conceptual
ms.localizationpriority: medium
ms.collection:
- highpri
- tier1
@ -134,7 +133,7 @@ Quick Assist for macOS is available for interactions with Microsoft Support. If
## Disable Quick Assist within your organization
If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents external users from using Quick Assist to gain access to devices within your organization.
If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents guests from using Quick Assist to gain access to devices within your organization.
### Disable Quick Assist

View File

@ -15,7 +15,7 @@ items:
href: manage-settings-app-with-group-policy.md
- name: Manage default media removal policy
href: change-default-removal-policy-external-storage-media.md
- name: What version of Windows am I running
href: windows-version-search.md
- name: Windows libraries
href: windows-libraries.md
- name: What version of Windows am I running
href: windows-version-search.md

View File

@ -2,13 +2,15 @@
title: Windows Libraries
description: All about Windows Libraries, which are containers for users' content, such as Documents and Pictures.
ms.topic: conceptual
ms.date: 08/10/2023
ms.date: 07/01/2024
---
# Windows libraries
Libraries are virtual containers for users' content. A library can contain files and folders stored on the local computer or in a remote storage location. In Windows Explorer, users interact with libraries in ways similar to how they would interact with other folders. Libraries are built upon the legacy known folders (such as My Documents, My Pictures, and My Music) that users are familiar with, and these known folders are automatically included in the default libraries and set as the default save location.
To show libraries in File Explorer, go to **Options**, select the **View** tab, and then select **Show libraries**.
## Features for Users
Windows libraries provide full content search and rich metadata. Libraries offer the following advantages to users:

View File

@ -1,7 +1,7 @@
---
title: What version of Windows am I running?
description: Discover which version of Windows you're running to determine whether or not your device is enrolled in the Long-Term Servicing Channel or General Availability Channel.
ms.date: 08/10/2023
ms.date: 07/01/2024
ms.topic: conceptual
---
@ -17,8 +17,6 @@ To determine if your device is enrolled in the Long-Term Servicing Channel or th
Select **Start** > **Settings** > **System**, then select **About**. You then see **Edition**, **Version**, and **OS Build** information.
:::image type="content" source="images/systemcollage.png" alt-text="screenshot of the system properties window for a device running Windows 10.":::
## Using Keyword Search
You can type the following in the search bar and press **ENTER** to see version details for your device.

View File

@ -55,9 +55,9 @@
"titleSuffix": "Configure Windows",
"contributors_to_exclude": [
"dstrome2",
"rjagiewich",
"rjagiewich",
"American-Dipper",
"claydetels19",
"claydetels19",
"jborsecnik",
"v-stchambers",
"shdyas",
@ -72,9 +72,6 @@
]
},
"fileMetadata": {
"feedback_system": {
"ue-v/**/*.*": "None"
},
"author":{
"accessibility//**/*.md": "paolomatarazzo",
"accessibility//**/*.yml": "paolomatarazzo",
@ -96,8 +93,6 @@
"taskbar//**/*.yml": "paolomatarazzo",
"tips//**/*.md": "paolomatarazzo",
"tips//**/*.yml": "paolomatarazzo",
"ue-v//**/*.md": "aczechowski",
"ue-v//**/*.yml": "aczechowski",
"wcd//**/*.md": "vinaypamnani-msft",
"wcd//**/*.yml": "vinaypamnani-msft"
},
@ -122,8 +117,6 @@
"taskbar//**/*.yml": "paoloma",
"tips//**/*.md": "paoloma",
"tips//**/*.yml": "paoloma",
"ue-v//**/*.md": "aaroncz",
"ue-v//**/*.yml": "aaroncz",
"wcd//**/*.md": "vinpa",
"wcd//**/*.yml": "vinpa"
},
@ -132,20 +125,13 @@
"start//**/*.md": "ericpapa"
},
"ms.collection": {
"wcd//**/*.md": "must-keep",
"ue-v//**/*.md": [
"must-keep",
"tier3"
]
"wcd//**/*.md": "must-keep"
},
"appliesto": {
"*/**/*.md": [
"✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 11</a>",
"✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>"
],
"ue-v//**/*.md": [
"✅ <a href=\"https://learn.microsoft.com/windows/release-health/supported-versions-windows-client\" target=\"_blank\">Windows 10</a>"
],
"wcd//**/*.md": ""
}
},

View File

@ -21,5 +21,3 @@ items:
href: provisioning-packages/toc.yml
- name: Windows Configuration Designer
href: wcd/toc.yml
- name: User Experience Virtualization (UE-V)
href: /microsoft-desktop-optimization-pack/ue-v/uev-for-windows

View File

@ -14,7 +14,7 @@ ms.localizationpriority: medium
appliesto:
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
ms.date: 01/29/2024
ms.date: 07/01/2024
---
# Windows Update for Business deployment service prerequisites
@ -26,7 +26,7 @@ Before you begin the process of deploying updates with Windows Update for Busine
## Azure and Microsoft Entra ID
- An Azure subscription with [Microsoft Entra ID](/azure/active-directory/)
- Devices must be Microsoft Entra joined and meet the below OSrequirements.
- Devices must be Microsoft Entra joined and meet the below OS requirements.
- Devices can be [Microsoft Entra joined](/azure/active-directory/devices/concept-azure-ad-join) or [Microsoft Entra hybrid joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid).
- Devices that are [Microsoft Entra registered](/azure/active-directory/devices/concept-azure-ad-register) only (Workplace joined) aren't supported with Windows Update for Business
@ -85,9 +85,11 @@ When you use [Windows Update for Business reports](wufb-reports-overview.md) in
- Windows Update for Business deployment service endpoints
- devicelistenerprod.microsoft.com
- devicelistenerprod.eudb.microsoft.com for the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn) <!--9131668-->
- login.windows.net
- payloadprod*.blob.core.windows.net
- [Windows Push Notification Services](/windows/uwp/design/shell/tiles-and-notifications/firewall-allowlist-config): *(Recommended, but not required. Without this access, devices might not expedite updates until their next daily check for updates.)*
- *.notify.windows.com

View File

@ -1,5 +1,5 @@
---
title: Quick guide to Windows as a service (Windows 10)
title: Quick guide to Windows as a service
description: In Windows 10, Microsoft has streamlined servicing to make operating system updates simpler to test, manage, and deploy.
ms.service: windows-client
ms.subservice: itpro-updates
@ -8,15 +8,15 @@ author: mestew
ms.author: mstewart
manager: aaroncz
ms.localizationpriority: high
appliesto:
appliesto:
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
ms.date: 12/31/2017
---
# Quick guide to Windows as a service
Here's a quick guide to the most important concepts in Windows as a service. For more information, see the [extensive set of documentation](index.md).
Here's a quick guide to the most important concepts in Windows as a service.
## Definitions
@ -25,10 +25,10 @@ Some new terms have been introduced as part of Windows as a service, so you shou
- **Feature updates** are released annually. As the name suggests, these updates add new features, delivered in bite-sized chunks compared to the previous practice of Windows releases every 3-5 years.
- **Quality updates** deliver both security and nonsecurity fixes. They're typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are cumulative, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update. The "servicing stack" is the code that installs other updates, so they're important to keep current. For more information, see [Servicing stack updates](servicing-stack-updates.md).
- **Insider Preview** builds are made available during the development of the features that will be shipped in the next feature update, enabling organizations to validate new features and confirm compatibility with existing apps and infrastructure, providing feedback to Microsoft on any issues encountered.
- **Servicing channels** allow organizations to choose when to deploy new features.
- **Servicing channels** allow organizations to choose when to deploy new features.
- The **General Availability Channel** receives feature updates annually.
- The **Long-Term Servicing Channel**, which is meant only for specialized devices (which typically don't run Office) such as those that control medical equipment or ATMs, receives new feature releases every two to three years.
- **Deployment rings** are groups of devices used to initially pilot, and then to broadly deploy, each feature update in an organization.
- **Deployment rings** are groups of devices used to initially pilot, and then to broadly deploy, each feature update in an organization.
For more information, see [Overview of Windows as a service](waas-overview.md).
@ -36,7 +36,7 @@ For some interesting in-depth information about how cumulative updates work, see
## Key concepts
With each release in the General Availability Channel, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion.
With each release in the General Availability Channel, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion.
Windows Enterprise LTSC versions are separate **Long-Term Servicing Channel** versions. Each release is supported for a total of 10 years (five years standard support, five years extended support). New releases are expected about every three years.

View File

@ -11,7 +11,7 @@ ms.collection:
- highpri
- tier2
ms.localizationpriority: medium
appliesto:
appliesto:
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
ms.date: 10/10/2023
@ -43,7 +43,7 @@ When **Configure Automatic Updates** is enabled in Group Policy, you can also en
- **No auto-restart with logged on users for scheduled automatic updates installations** prevents automatic restart when a user is signed in. If a user schedules the restart in the update notification, the device restarts at the time the user specifies even if a user is signed in at the time. This policy only applies when **Configure Automatic Updates** is set to option **4-Auto download and schedule the install**.
> [!NOTE]
> When using Remote Desktop Protocol connections, only active RDP sessions are considered as logged on users. Devices that do not have locally logged on users, or active RDP sessions, will be restarted.
> When using Remote Desktop Protocol connections, only active RDP sessions are considered as logged on users. Devices that do not have locally logged on users, or active RDP sessions, will be restarted.
You can also use Registry, to prevent automatic restarts when a user is signed in. Under **HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU**, set **AuOptions** to **4** and enable **NoAutoRebootWithLoggedOnUsers**. As with Group Policy, if a user schedules the restart in the update notification, it overrides this setting.
@ -113,7 +113,7 @@ Starting in Windows 10 version 1809, you can define which Windows Update notific
To configure this behavior through MDM, use [**Update/UpdateNotificationLevel**](/windows/client-management/mdm/policy-configuration-service-provider#update-updatenotificationlevel).
Starting in Windows 11, version 22H2, **Apply only during active hours** was added as an additional option for **Display options for update notifications**. When **Apply only during active hours** is selected, the notifications will only be disabled during active hours when options `1` or `2` are used. To ensure that the device stays updated, a notification will still be shown during active hours if **Apply only during active hours** is selected, and once a deadline has been reached when [Specify deadlines for automatic updates and restarts](wufb-compliancedeadlines.md) is configured. <!--6286260-->
Starting in Windows 11, version 22H2, **Apply only during active hours** was added as an additional option for **Display options for update notifications**. When **Apply only during active hours** is selected, the notifications will only be disabled during active hours when options `1` or `2` are used. To ensure that the device stays updated, a notification will still be shown during active hours if **Apply only during active hours** is selected, and once a deadline has been reached when [Specify deadlines for automatic updates and restarts](wufb-compliancedeadlines.md) is configured. <!--6286260-->
To configure this behavior through MDM, use [**Update/UpdateNotificationLevel**](/windows/client-management/mdm/policy-csp-update#update-NoUpdateNotificationDuringActiveHours).
@ -209,7 +209,6 @@ There are three different registry combinations for controlling restart behavior
## More resources
- [Update Windows in the enterprise](index.md)
- [Overview of Windows as a service](waas-overview.md)
- [Configure Delivery Optimization for Windows updates](../do/waas-delivery-optimization.md)
- [Configure BranchCache for Windows updates](waas-branchcache.md)

View File

@ -67,7 +67,7 @@ Windows Enterprise edition has many features that are unavailable in Windows Pro
|Credential Guard|Credential Guard uses virtualization-based security to help protect security secrets so that only privileged system software can access them. Examples of security secrets that can be protected include NTLM password hashes and Kerberos Ticket Granting Tickets. This protection helps prevent Pass-the-Hash or Pass-the-Ticket attacks.<br><br>Credential Guard has the following features:<li>**Hardware-level security** - Credential Guard uses hardware platform security features (such as Secure Boot and virtualization) to help protect derived domain credentials and other secrets.<li>**Virtualization-based security** - Windows services that access derived domain credentials and other secrets run in a virtualized, protected environment that is isolated.<li>**Improved protection against persistent threats** - Credential Guard works with other technologies (for example, Device Guard) to help provide further protection against attacks, no matter how persistent.<li>**Improved manageability** - Credential Guard can be managed through Group Policy, Windows Management Instrumentation (WMI), or Windows PowerShell.<br><br>For more information, see [Protect derived domain credentials with Credential Guard](/windows/security/identity-protection/credential-guard/credential-guard).<br><br>*Credential Guard requires <ul><li>UEFI 2.3.1 or greater with Trusted Boot</li><li>Virtualization Extensions such as Intel VT-x, AMD-V, and SLAT must be enabled</li><li>x64 version of Windows</li><li>IOMMU, such as Intel VT-d, AMD-Vi</li><li>BIOS Lockdown</li><li>TPM 2.0 recommended for device health attestation (uses software if TPM 2.0 not present)*</li></ul>|
|Device Guard|This feature is a combination of hardware and software security features that allows only trusted applications to run on a device. Even if an attacker manages to get control of the Windows kernel, they're much less likely to run executable code. Device Guard can use virtualization-based security (VBS) in Windows Enterprise edition to isolate the Code Integrity service from the Windows kernel itself. With VBS, even if malware gains access to the kernel, the effects can be severely limited, because the hypervisor can prevent the malware from executing code.<br><br>Device Guard protects in the following ways:<li>Helps protect against malware<li>Helps protect the Windows system core from vulnerability and zero-day exploits<li>Allows only trusted apps to run<br><br>For more information, see [Introduction to Device Guard](/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control).|
|AppLocker management|This feature helps IT pros determine which applications and files users can run on a device. The applications and files that can be managed include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.<br><br>For more information, see [AppLocker](/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).|
|Application Virtualization (App-V)|This feature makes applications available to end users without installing the applications directly on users' devices. App-V transforms applications into centrally managed services that are never installed and don't conflict with other applications. This feature also helps ensure that applications are kept current with the latest security updates.<br><br>For more information, see [Getting started with App-V for Windows client](/windows/application-management/app-v/appv-getting-started).|
|Application Virtualization (App-V)|This feature makes applications available to end users without installing the applications directly on users' devices. App-V transforms applications into centrally managed services that are never installed and don't conflict with other applications. This feature also helps ensure that applications are kept current with the latest security updates.<br><br>For more information, see [Getting started with App-V for Windows client](/microsoft-desktop-optimization-pack/app-v/appv-for-windows).|
|User Experience Virtualization (UE-V)|With this feature, user-customized Windows and application settings can be captured and stored on a centrally managed network file share.<br><br>When users sign in, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they sign into.<br><br>UE-V provides the following features:<li>Specify which application and Windows settings synchronize across user devices<li>Deliver the settings anytime and anywhere users work throughout the enterprise<li>Create custom templates for line-of-business applications<li>Recover settings after hardware replacement or upgrade, or after reimaging a virtual machine to its initial state<br><br>For more information, see [User Experience Virtualization (UE-V) overview](/microsoft-desktop-optimization-pack/ue-v/uev-for-windows).|
|Managed User Experience|This feature helps customize and lock down a Windows device's user interface to restrict it to a specific task. For example, a device can be configured for a controlled scenario such as a kiosk or classroom device. The user experience would be automatically reset once a user signs off. Access to services such as the Windows Store can also be restricted. For Windows 10, Start layout options can also be managed, such as:<li>Removing and preventing access to the Shut Down, Restart, Sleep, and Hibernate commands<li>Removing Log Off (the User tile) from the Start menu<li>Removing frequent programs from the Start menu<li>Removing the All Programs list from the Start menu<li>Preventing users from customizing their Start screen<li>Forcing Start menu to be either full-screen size or menu size<li>Preventing changes to Taskbar and Start menu settings|
@ -146,9 +146,9 @@ App-V requires an App-V server infrastructure to support App-V clients. The prim
For more information about implementing the App-V server, App-V sequencer, and App-V client, see the following resources:
- [Getting started with App-V for Windows client](/windows/application-management/app-v/appv-getting-started)
- [Deploying the App-V server](/windows/application-management/app-v/appv-deploying-the-appv-server)
- [Deploying the App-V Sequencer and Configuring the Client](/windows/application-management/app-v/appv-deploying-the-appv-sequencer-and-client)
- [Getting started with App-V for Windows client](/microsoft-desktop-optimization-pack/app-v/appv-getting-started)
- [Deploying the App-V server](/microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-server)
- [Deploying the App-V Sequencer and Configuring the Client](/microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-sequencer-and-client)
### UE-V

View File

@ -64,6 +64,9 @@ The following list can be used as a template for creating a recovery process for
There are a few Microsoft Entra ID roles that allow a delegated administrator to read BitLocker recovery passwords from the devices in the tenant. While it's common for organizations to use the existing Microsoft Entra ID *[Cloud Device Administrator][ENTRA-2]* or *[Helpdesk Administrator][ENTRA-3]* built-in roles, you can also [create a custom role][ENTRA-5], delegating access to BitLocker keys using the `microsoft.directory/bitlockerKeys/key/read` permission. Roles can be delegated to access BitLocker recovery passwords for devices in specific Administrative Units.
> [!NOTE]
> When devices including [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to join to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Administrative unit scoped administrators will lose access to BitLocker recovery keys after device ownership changes. These scoped administrators will need to contact a non-scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user).
The [Microsoft Entra admin center][ENTRA] allows administrators to retrieve BitLocker recovery passwords. To learn more about the process, see [View or copy BitLocker keys][ENTRA-4]. Another option to access BitLocker recovery passwords is to use the Microsoft Graph API, which might be useful for integrated or scripted solutions. For more information about this option, see [Get bitlockerRecoveryKey][GRAPH-1].
In the following example, we use Microsoft Graph PowerShell cmdlet [`Get-MgInformationProtectionBitlockerRecoveryKey`][PS-1] to build a PowerShell function that retrieves recovery passwords from Microsoft Entra ID:

View File

@ -18,14 +18,25 @@
- name: What's new in Windows 11, version 22H2
href: whats-new-windows-11-version-22h2.md
- name: Windows 10
expanded: true
expanded: false
items:
- name: Extended Security Updates (ESU) program for Windows 10
href: extended-security-updates.md
- name: What's new in Windows 10, version 22H2
href: whats-new-windows-10-version-22H2.md
- name: What's new in Windows 10, version 21H2
href: whats-new-windows-10-version-21H2.md
- name: Windows 10 Enterprise LTSC
expanded: false
items:
- name: Windows 10 Enterprise LTSC overview
href: ltsc/overview.md
- name: What's new in Windows 10 Enterprise LTSC 2021
href: ltsc/whats-new-windows-10-2021.md
- name: What's new in Windows 10 Enterprise LTSC 2019
href: ltsc/whats-new-windows-10-2019.md
- name: What's new in Windows 10 Enterprise LTSC 2016
href: ltsc/whats-new-windows-10-2016.md
- name: What's new in Windows 10 Enterprise LTSC 2015
href: ltsc/whats-new-windows-10-2015.md
- name: Windows commercial licensing overview
href: windows-licensing.md
- name: Deprecated and removed Windows features

View File

@ -49,12 +49,11 @@
"folder_relative_path_in_docset": "./"
}
},
"titleSuffix": "What's new in Windows",
"contributors_to_exclude": [
"dstrome2",
"rjagiewich",
"rjagiewich",
"American-Dipper",
"claydetels19",
"claydetels19",
"jborsecnik",
"v-stchambers",
"shdyas",

View File

@ -15,11 +15,13 @@ metadata:
author: aczechowski
ms.author: aaroncz
manager: aaroncz
ms.date: 10/31/2023
ms.date: 07/01/2024
localization_priority: medium
landingContent:
# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | tutorial | overview | quickstart | reference | sample | tutorial | video | whats-new
- title: Windows 11 planning
linkLists:
- linkListType: overview
@ -49,12 +51,35 @@ landingContent:
- linkListType: whats-new
links:
- text: Extended Security Updates (ESU) program for Windows 10
url: extended-security-updates.md
url: extended-security-updates.md
- text: What's new in Windows 10, version 22H2
url: whats-new-windows-10-version-22h2.md
- text: What's new in Windows 10, version 21H2
url: whats-new-windows-10-version-21h2.md
- title: Windows 10 Enterprise LTSC
linkLists:
- linkListType: whats-new
links:
- text: Windows 10 Enterprise LTSC overview
url: ltsc/overview.md
- text: What's new in Windows 10 Enterprise LTSC 2021
url: ltsc/whats-new-windows-10-2021.md
- text: What's new in Windows 10 Enterprise LTSC 2019
url: ltsc/whats-new-windows-10-2019.md
- text: What's new in Windows 10 Enterprise LTSC 2016
url: ltsc/whats-new-windows-10-2016.md
- text: What's new in Windows 10 Enterprise LTSC 2015
url: ltsc/whats-new-windows-10-2015.md
- title: Deprecated features
linkLists:
- linkListType: reference
links:
- text: Windows features we're no longer developing
url: deprecated-features.md
- text: Features and functionality removed in Windows
url: removed-features.md
- text: Lifecycle terminology
url: feature-lifecycle.md#terminology
- title: Learn more
linkLists:
@ -64,15 +89,5 @@ landingContent:
url: /windows/release-health/windows11-release-information
- text: Windows release health dashboard
url: /windows/release-health/
- text: Windows 11 update history
url: https://support.microsoft.com/topic/windows-11-version-22h2-update-history-ec4229c3-9c5f-4e75-9d6d-9025ab70fcce
- text: Windows 10 update history
url: https://support.microsoft.com/topic/windows-10-update-history-857b8ccb-71e4-49e5-b3f6-7073197d98fb
- text: Windows features we're no longer developing
url: deprecated-features.md
- text: Features and functionality removed in Windows
url: removed-features.md
- text: Compare Windows 11 Editions
url: https://www.microsoft.com/windows/business/compare-windows-11
- text: Windows 10 Enterprise LTSC
url: ltsc/overview.md

View File

@ -1,13 +0,0 @@
- name: Windows 10 Enterprise LTSC
href: index.yml
items:
- name: Windows 10 Enterprise LTSC overview
href: overview.md
- name: What's new in Windows 10 Enterprise LTSC 2021
href: whats-new-windows-10-2021.md
- name: What's new in Windows 10 Enterprise LTSC 2019
href: whats-new-windows-10-2019.md
- name: What's new in Windows 10 Enterprise LTSC 2016
href: whats-new-windows-10-2016.md
- name: What's new in Windows 10 Enterprise LTSC 2015
href: whats-new-windows-10-2015.md

View File

@ -1,49 +0,0 @@
### YamlMime:Landing
title: What's new in Windows 10 Enterprise LTSC
summary: Find out about new features and capabilities in the latest release of Windows 10 Enterprise LTSC for IT professionals.
metadata:
title: What's new in Windows 10 Enterprise LTSC
description: Find out about new features and capabilities in the latest release of Windows 10 Enterprise LTSC for IT professionals.
ms.service: windows-client
ms.subservice: itpro-fundamentals
ms.topic: landing-page
ms.collection:
- highpri
- tier1
author: mestew
ms.author: mstewart
manager: aaroncz
ms.date: 12/18/2023
localization_priority: medium
landingContent:
- title: Windows 10 Enterprise LTSC
linkLists:
- linkListType: overview
links:
- text: Windows 10 Enterprise LTSC overview
url: overview.md
- text: What's new in Windows 10 Enterprise LTSC 2021
url: whats-new-windows-10-2021.md
- text: What's new in Windows 10 Enterprise LTSC 2019
url: whats-new-windows-10-2019.md
- text: What's new in Windows 10 Enterprise LTSC 2016
url: whats-new-windows-10-2016.md
- text: What's new in Windows 10 Enterprise LTSC 2015
url: whats-new-windows-10-2015.md
- title: Learn more
linkLists:
- linkListType: overview
links:
- text: Windows release health dashboard
url: /windows/release-health/
- text: Windows 10 update history
url: https://support.microsoft.com/topic/windows-10-update-history-857b8ccb-71e4-49e5-b3f6-7073197d98fb
- text: Windows features we're no longer developing
url: ../deprecated-features.md
- text: Features and functionality removed in Windows
url: ../removed-features.md

View File

@ -39,7 +39,7 @@ Windows ICD now includes simplified workflows for creating provisioning packages
>[!IMPORTANT]
>Upgrade Readiness will not allow you to assess an upgrade to an LTSC release (LTSC builds are not available as target versions). However, you can enroll devices running LTSC to plan for an upgrade to a General Availability Channel release.
Microsoft developed Upgrade Readiness in response to demand from enterprise customers looking for more direction and details about upgrading to Windows 10. Upgrade Readiness was built taking into account multiple channels of customer feedback, testing, and Microsoft's experience upgrading millions of devices to Windows 10.
Microsoft developed Upgrade Readiness in response to demand from enterprise customers looking for more direction and details about upgrading to Windows 10. Upgrade Readiness was built taking into account multiple channels of customer feedback, testing, and Microsoft's experience upgrading millions of devices to Windows 10.
With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they're known to Microsoft.
@ -71,7 +71,7 @@ Other changes for Windows Hello in Windows 10 Enterprise LTSC 2016:
- Personal (Microsoft account) and corporate (Active Directory or Entra ID) accounts use a single container for keys.
- Group Policy settings for managing Windows Hello for Business are now available for both **User Configuration** and **Computer Configuration**.
- Beginning in this version of Windows 10, Windows Hello as a convenience PIN is disabled by default on all domain-joined computers. To enable a convenience PIN, enable the Group Policy setting **Turn on convenience PIN sign-in**.
- Beginning in this version of Windows 10, Windows Hello as a convenience PIN is disabled by default on all domain-joined computers. To enable a convenience PIN, enable the Group Policy setting **Turn on convenience PIN sign-in**.
[Learn more about Windows Hello for Business.](/windows/security/identity-protection/hello-for-business/deploy/requirements)
@ -156,17 +156,17 @@ This version of Windows 10, introduces shared PC mode, which optimizes Windows 1
Application Virtualization (App-V) enables organizations to deliver Win32 applications to users as virtual applications. Virtual applications are installed on centrally managed servers and delivered to users as a service - in real time and on as as-needed basis. Users launch virtual applications from familiar access points, including the Microsoft Store, and interact with them as if they were installed locally.
With the release of this version of Windows 10, App-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and App-V or if you're upgrading from a previous version of App-V, you'll need to download, activate, and install server- and client-side components to start delivering virtual applications to users.
With the release of this version of Windows 10, App-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and App-V or if you're upgrading from a previous version of App-V, you'll need to download, activate, and install server- and client-side components to start delivering virtual applications to users.
[Learn how to deliver virtual applications with App-V.](/windows/application-management/app-v/appv-getting-started)
[Learn how to deliver virtual applications with App-V.](/microsoft-desktop-optimization-pack/app-v/appv-getting-started)
### User Experience Virtualization (UE-V) for Windows 10
Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Microsoft Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options.
Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Microsoft Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options.
With User Experience Virtualization (UE-V), you can capture user-customized Windows and application settings and store them on a centrally managed network file share. When users sign in, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they sign in to.
With the release of this version of Windows 10, UE-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and UE-V or upgrading from a previous version of UE-V, you'll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices.
With the release of this version of Windows 10, UE-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and UE-V or upgrading from a previous version of UE-V, you'll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices.
[Learn how to synchronize user-customized settings with UE-V.](/microsoft-desktop-optimization-pack/ue-v/uev-for-windows)

View File

@ -484,10 +484,10 @@ Previous versions of the Microsoft Application Virtualization Sequencer (App-V S
For more information, see the following articles:
- [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-provision-a-vm)
- [Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-batch-sequencing)
- [Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-batch-updating)
- [Automatically cleanup unpublished packages on the App-V client](/windows/application-management/app-v/appv-auto-clean-unpublished-packages)
- [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-provision-a-vm)
- [Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-batch-sequencing)
- [Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-batch-updating)
- [Automatically cleanup unpublished packages on the App-V client](/microsoft-desktop-optimization-pack/app-v/appv-auto-clean-unpublished-packages)
### Windows diagnostic data

View File

@ -1,77 +0,0 @@
---
title: What's new in Windows 10, version 21H2 for IT pros
description: Learn more about what's new in Windows 10 version 21H2, including servicing updates, Windows Subsystem for Linux, the latest CSPs, and more.
manager: aaroncz
ms.service: windows-client
ms.author: mstewart
author: mestew
ms.localizationpriority: medium
ms.topic: conceptual
ms.collection:
- highpri
- tier2
ms.subservice: itpro-fundamentals
ms.date: 12/31/2017
appliesto:
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10, version 21H2</a>
---
# What's new in Windows 10, version 21H2
Windows 10, version 21H2 is the next feature update. This article lists the new and updated features IT Pros should know. Windows 10, version 21H2 is also known as the Windows 10 November 2021 Update. It includes all features and fixes in previous cumulative updates to Windows 10, version 21H1.
Windows 10, version 21H2 is an [H2-targeted release](/lifecycle/faq/windows#what-is-the-servicing-timeline-for-a-version--feature-update--of-windows-10-), and has the following servicing schedule:
- **Windows 10 Professional**: Serviced for 18 months from the release date.
- **Windows 10 Enterprise**: Serviced for 30 months from the release date.
Windows 10, version 21H2 is available through Windows Server Update Services (including Configuration Manager), Windows Update for Business, and the Volume Licensing Service Center (VLSC). For more information, see [How to get the Windows 10 November 2021 Update](https://blogs.windows.com/windowsexperience/2021/11/16/how-to-get-the-windows-10-november-2021-update/) and [IT tools to support Windows 10, version 21H2 blog](https://aka.ms/tools-for-21h2).
Devices running Windows 10, versions 2004, 20H2, and 21H1 can update quickly to version 21H2 using an enablement package. For more information, see [Feature Update through Windows 10, version 21H2 Enablement Package](https://support.microsoft.com/help/5003791).
To learn more about the status of the November 2021 Update rollout, known issues, and new information, see [Windows release health](/windows/release-health/).
## Updates and servicing
Windows 10, version 21H2 feature updates are installed annually using the General Availability Channel. Previous feature updates were installed using the General Availability Channel. For more information on this change, see the [How to get the Windows 10 November 2021 Update](https://blogs.windows.com/windowsexperience/?p=176473).
Quality updates are still installed monthly on the second Tuesday of the month.
For more information, see:
- [Feature and quality update definitions](/windows/deployment/update/waas-quick-start#definitions)
- [Windows servicing channels](/windows/deployment/update/waas-overview#servicing-channels)
## GPU compute support for the Windows Subsystem for Linux
Starting with Windows 10 version 21H2, the Windows Subsystem for Linux has full graphics processing unit (GPU) compute support. It was available to Windows Insiders, and is now available to everyone. The Linux binaries can use your Windows GPU, and run different workloads, including artificial intelligence (AI) and machine learning (ML) development workflows.
For more information, and what GPU compute support means for you, see the [GPU accelerated ML training inside the Windows Subsystem for Linux blog post](https://blogs.windows.com/windowsdeveloper/2020/06/17/gpu-accelerated-ml-training-inside-the-windows-subsystem-for-linux/).
## Get the latest CSPs
The [KB5005101 September 1, 2021 update](https://support.microsoft.com/topic/september-1-2021-kb5005101-os-builds-19041-1202-19042-1202-and-19043-1202-preview-82a50f27-a56f-4212-96ce-1554e8058dc1) includes about 1400 CSPs that were made available to MDM providers.
These CSPs are built in to Windows 10, version 21H2. These settings are available in Microsoft Intune in the [Settings Catalog](/mem/intune/configuration/settings-catalog). [Group Policy analytics](/mem/intune/configuration/group-policy-analytics) also includes these GPOs in its analysis.
For more information on the CSPs, see the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference).
## Apps appear local with Azure Virtual Desktop
Azure virtual desktop is a Windows client OS hosted in the cloud, and runs virtual apps. You use the cloud to deliver virtual apps in real time, and as-needed. Users use the apps as if they're installed locally.
You can create Azure virtual desktops that run Windows 10 version 21H2.
For more information, see:
- [What is Azure Virtual Desktop?](/azure/virtual-desktop/overview)
- [What's new in Azure Virtual Desktop?](/azure/virtual-desktop/whats-new)
- [Set up MSIX app attach with the Azure portal](/azure/virtual-desktop/app-attach-azure-portal)
## Wi-Fi WPA3-Personal H2E support
Wi-Fi WPA3-Personal H2E (Hash-to-Element) support is built in to Windows 10, version 21H2.
## Related articles
- [Release notes for Microsoft Edge Stable Channel](/deployedge/microsoft-edge-relnote-stable-channel)