From 530619025b5f797c0835f827df6e540311399b58 Mon Sep 17 00:00:00 2001 From: Nash Pherson Date: Wed, 27 Mar 2024 08:50:10 -0500 Subject: [PATCH 01/51] Clarify support for GCC Clarified that Office 365 GCC tenants are supported, but the service is outside the GCC compliance boundary. Made it clear that GCC-High and DOD tenants are not supported. --- .../deployment/update/includes/wufb-deployment-limitations.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/includes/wufb-deployment-limitations.md b/windows/deployment/update/includes/wufb-deployment-limitations.md index a57711bffd..b26f7aeb85 100644 --- a/windows/deployment/update/includes/wufb-deployment-limitations.md +++ b/windows/deployment/update/includes/wufb-deployment-limitations.md @@ -10,4 +10,6 @@ ms.localizationpriority: medium --- -Windows Update for Business deployment service is a Windows service hosted in Azure that uses Windows diagnostic data. You should be aware that Windows Update for Business deployment service doesn't meet [US Government community compliance (GCC)](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc#us-government-community-compliance) requirements. For a list of GCC offerings for Microsoft products and services, see the [Microsoft Trust Center](/compliance/regulatory/offering-home). Windows Update for Business deployment service is available in the Azure Commercial cloud, but not available for GCC High or United States Department of Defense customers. +Windows Update for Business deployment service is a Windows service hosted in Azure Commercial that uses Windows diagnostic data. While customers with Office 365 GCC tenants may chose to use it, the Windows Update for Business deployment service is outside the [US Government community compliance (GCC)](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc#us-government-community-compliance) boundary. For a list of GCC offerings for Microsoft products and services, see the [Microsoft Trust Center](/compliance/regulatory/offering-home). + +Windows Update for Business deployment service is not available in Azure Government for [Office 365 GCC High and DOD](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod) tenants. From 58e6522f1b5b246874dfd83a515ec5bcda58faed Mon Sep 17 00:00:00 2001 From: Narkis Engler <41025789+narkissit@users.noreply.github.com> Date: Wed, 27 Mar 2024 10:21:59 -0700 Subject: [PATCH 02/51] update FAQ questions about ports Updated for accuracy. --- windows/deployment/do/waas-delivery-optimization-faq.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml index 73a6691166..3501f7bb90 100644 --- a/windows/deployment/do/waas-delivery-optimization-faq.yml +++ b/windows/deployment/do/waas-delivery-optimization-faq.yml @@ -77,11 +77,12 @@ sections: questions: - question: Which ports does Delivery Optimization use? answer: | - Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service registers and opens this port on the device. The port must be set to accept inbound traffic through your firewall. If you don't allow inbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). + Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service registers and opens this port on the device. The port must be set to accept inbound and outbound TCP traffic through your firewall. If you don't allow traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download updates by using HTTP over port 80 (or HTTPS over port 443 where applicable). - Delivery Optimization uses Teredo to create peer groups, which include devices across NATs (or any form of internal subnet that uses gateways or firewalls between subnets). To enable this scenario, you must allow inbound TCP/IP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. + If you set the "Download Mode" policy to "Group (2)", Teredo will be used by Delivery Optimization to connect to peer devices across NATs. You must allow inbound and outbound UDP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. - Delivery Optimization also communicates with its cloud service by using HTTP/HTTPS over port 80. + Delivery Optimization also communicates with its cloud service by using HTTPS over port 443. + - question: What are the requirements if I use a proxy? answer: | For Delivery Optimization to successfully use the proxy, you should set up the proxy by using Windows proxy settings or Internet Explorer proxy settings. For details see [Using a proxy with Delivery Optimization](../do/delivery-optimization-proxy.md). Most content downloaded with Delivery Optimization uses byte range requests. Make sure your proxy allows byte range requests. For more information, see [Proxy requirements for Windows Update](/windows/deployment/update/windows-update-troubleshooting). From 6e5480be7e27dda72c14e27cc9a4c87f8e3d2af4 Mon Sep 17 00:00:00 2001 From: Narkis Engler <41025789+narkissit@users.noreply.github.com> Date: Wed, 27 Mar 2024 18:04:04 -0700 Subject: [PATCH 03/51] Teredo also used in "Internet" download mode --- windows/deployment/do/waas-delivery-optimization-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml index 3501f7bb90..2113295426 100644 --- a/windows/deployment/do/waas-delivery-optimization-faq.yml +++ b/windows/deployment/do/waas-delivery-optimization-faq.yml @@ -79,7 +79,7 @@ sections: answer: | Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service registers and opens this port on the device. The port must be set to accept inbound and outbound TCP traffic through your firewall. If you don't allow traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download updates by using HTTP over port 80 (or HTTPS over port 443 where applicable). - If you set the "Download Mode" policy to "Group (2)", Teredo will be used by Delivery Optimization to connect to peer devices across NATs. You must allow inbound and outbound UDP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. + If you set the "Download Mode" policy to "Group (2)" or "Internet (3)", Teredo will be used by Delivery Optimization to connect to peer devices across NATs. You must allow inbound and outbound UDP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. Delivery Optimization also communicates with its cloud service by using HTTPS over port 443. From 37a5128fa775cd05a3391b2ed5f9cfe3954777cf Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 1 Apr 2024 12:07:58 -0700 Subject: [PATCH 04/51] Update wufb-deployment-limitations.md wording tweaks --- .../deployment/update/includes/wufb-deployment-limitations.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/includes/wufb-deployment-limitations.md b/windows/deployment/update/includes/wufb-deployment-limitations.md index b26f7aeb85..1a4d2b6c80 100644 --- a/windows/deployment/update/includes/wufb-deployment-limitations.md +++ b/windows/deployment/update/includes/wufb-deployment-limitations.md @@ -10,6 +10,6 @@ ms.localizationpriority: medium --- -Windows Update for Business deployment service is a Windows service hosted in Azure Commercial that uses Windows diagnostic data. While customers with Office 365 GCC tenants may chose to use it, the Windows Update for Business deployment service is outside the [US Government community compliance (GCC)](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc#us-government-community-compliance) boundary. For a list of GCC offerings for Microsoft products and services, see the [Microsoft Trust Center](/compliance/regulatory/offering-home). +Windows Update for Business deployment service is a Windows service hosted in Azure Commercial that uses Windows diagnostic data. While customers with GCC tenants may choose to use it, the Windows Update for Business deployment service is outside the [US Government community compliance (GCC)](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc#us-government-community-compliance) boundary. For a list of GCC offerings for Microsoft products and services, see the [Microsoft Trust Center](/compliance/regulatory/offering-home). -Windows Update for Business deployment service is not available in Azure Government for [Office 365 GCC High and DOD](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod) tenants. +Windows Update for Business deployment service isn't available in Azure Government for [Office 365 GCC High and DOD](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod) tenants. From a0323a8066f7c13bf50b609a5345cdef6e3fc55b Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 1 Apr 2024 13:24:00 -0700 Subject: [PATCH 05/51] Update windows/deployment/update/includes/wufb-deployment-limitations.md --- .../deployment/update/includes/wufb-deployment-limitations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/includes/wufb-deployment-limitations.md b/windows/deployment/update/includes/wufb-deployment-limitations.md index 1a4d2b6c80..5ed854edd0 100644 --- a/windows/deployment/update/includes/wufb-deployment-limitations.md +++ b/windows/deployment/update/includes/wufb-deployment-limitations.md @@ -12,4 +12,4 @@ ms.localizationpriority: medium Windows Update for Business deployment service is a Windows service hosted in Azure Commercial that uses Windows diagnostic data. While customers with GCC tenants may choose to use it, the Windows Update for Business deployment service is outside the [US Government community compliance (GCC)](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc#us-government-community-compliance) boundary. For a list of GCC offerings for Microsoft products and services, see the [Microsoft Trust Center](/compliance/regulatory/offering-home). -Windows Update for Business deployment service isn't available in Azure Government for [Office 365 GCC High and DOD](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod) tenants. +Windows Update for Business deployment service isn't available in Azure Government for [Office 365 GCC High and DoD](/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod) tenants. From 30db229f60f46adf42ae1bbf6b9eef78f79b5ac8 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 16 Apr 2024 09:16:19 -0700 Subject: [PATCH 06/51] ntlm-dep-8396018 --- windows/whats-new/deprecated-features-resources.md | 10 +++++++++- windows/whats-new/deprecated-features.md | 3 ++- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/deprecated-features-resources.md b/windows/whats-new/deprecated-features-resources.md index 521dc1b1be..ac840d039e 100644 --- a/windows/whats-new/deprecated-features-resources.md +++ b/windows/whats-new/deprecated-features-resources.md @@ -1,7 +1,7 @@ --- title: Resources for deprecated features in the Windows client description: Resources and details for deprecated features in the Windows client. -ms.date: 03/25/2024 +ms.date: 04/19/2024 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -21,6 +21,14 @@ appliesto: This article provides additional resources about [deprecated features for Windows client](deprecated-features.md) that may be needed by IT professionals. The following information is provided to help IT professionals plan for the removal of deprecated features: +## NTLM + +Customers concerned about NTLM usage in their environments are encouraged to utilize [NTLM auditing](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain) to [investigate how NTLM is being used](https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/ntlm-blocking-and-you-application-analysis-and-auditing/ba-p/397191). + +In many cases, applications should be able to replace NTLM with Negotiate using a one-line change in their `AcquireCredentialsHandle` request to the SSPI. One known exception is for applications that have made hard assumptions about the maximum number of round trips needed to complete authentication. In most cases, Negotiate will add at least one additional round trip. Some scenarios may require more additional configuration. For more information, see [Kerberos authentication troubleshooting guidance](/troubleshoot/windows-server/windows-security/kerberos-authentication-troubleshooting-guidance). + +Negotiate's built-in fallback to NTLM is preserved to mitigate compatibility issues during this transition. For updates on NTLM deprecation, see [https://aka.ms/ntlm](https://aka.ms/ntlm). + ## WordPad WordPad will be removed from all editions of Windows starting in Windows 11, version 24H2 and Windows Server 2025. As a result, Windows will no longer have a built-in, default RTF reader. We recommend Microsoft Word for rich text documents like .doc and .rtf and Notepad for plain text documents like .txt. The following binaries will be removed as a result of WordPad removal: diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 662ade9a57..0423badca7 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 03/25/2024 +ms.date: 04/19/2024 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -47,6 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| +| NTLM | All versions of [NTLM](/windows/win32/secauthn/microsoft-ntlm), including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and will be deprecated in Windows 11, version 24H2 and Windows Server 2025. Use of NTLM will continue to work in these releases. Calls to NTLM should be replaced by calls to Negotiate, which will try to authenticate with Kerberos and only fall back to NTLM when necessary. For more information, see [Resources for deprecated features](deprecated-features-resources.md). | April 2024 | | NPLogonNotify and NPPasswordChangeNotify APIs | Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to disabled by default through group policy in [NPLogonNotify](/windows/win32/api/npapi/nf-npapi-nplogonnotify) and [NPPasswordChangeNotify](/windows/win32/api/npapi/nf-npapi-nppasswordchangenotify) APIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a users password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the [EnableMPRNotifications](/windows/client-management/mdm/policy-csp-windowslogon#enablemprnotifications) policy to `enabled`.| March 2024 | | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| | Test Base | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 | From b1ceeaf01d80459c18b70f00a6a367431cc90c3e Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 16 Apr 2024 09:51:59 -0700 Subject: [PATCH 07/51] ntlm-dep-8396018 --- windows/whats-new/deprecated-features-resources.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features-resources.md b/windows/whats-new/deprecated-features-resources.md index ac840d039e..e5fa724c6e 100644 --- a/windows/whats-new/deprecated-features-resources.md +++ b/windows/whats-new/deprecated-features-resources.md @@ -25,7 +25,7 @@ This article provides additional resources about [deprecated features for Window Customers concerned about NTLM usage in their environments are encouraged to utilize [NTLM auditing](/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain) to [investigate how NTLM is being used](https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/ntlm-blocking-and-you-application-analysis-and-auditing/ba-p/397191). -In many cases, applications should be able to replace NTLM with Negotiate using a one-line change in their `AcquireCredentialsHandle` request to the SSPI. One known exception is for applications that have made hard assumptions about the maximum number of round trips needed to complete authentication. In most cases, Negotiate will add at least one additional round trip. Some scenarios may require more additional configuration. For more information, see [Kerberos authentication troubleshooting guidance](/troubleshoot/windows-server/windows-security/kerberos-authentication-troubleshooting-guidance). +In many cases, applications should be able to replace NTLM with Negotiate using a one-line change in their `AcquireCredentialsHandle` request to the SSPI. One known exception is for applications that have made hard assumptions about the maximum number of round trips needed to complete authentication. In most cases, Negotiate will add at least one additional round trip. Some scenarios may require additional configuration. For more information, see [Kerberos authentication troubleshooting guidance](/troubleshoot/windows-server/windows-security/kerberos-authentication-troubleshooting-guidance). Negotiate's built-in fallback to NTLM is preserved to mitigate compatibility issues during this transition. For updates on NTLM deprecation, see [https://aka.ms/ntlm](https://aka.ms/ntlm). From 1421a48ebd9fe93198f04b603110f5d810f01032 Mon Sep 17 00:00:00 2001 From: itsrlyAria <82474610+itsrlyAria@users.noreply.github.com> Date: Fri, 10 May 2024 17:08:00 -0700 Subject: [PATCH 08/51] Update wufb-wsus.md Correcting an error. --- windows/deployment/update/wufb-wsus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-wsus.md b/windows/deployment/update/wufb-wsus.md index 6062716b60..2cb3016af2 100644 --- a/windows/deployment/update/wufb-wsus.md +++ b/windows/deployment/update/wufb-wsus.md @@ -46,7 +46,7 @@ To help you better understand the scan source policy, see the default scan behav - On Windows 10: All of your updates will come from WSUS. - On Windows 11: All of your updates will still come from WSUS unless you configure the specify scan source policy. -- If you configure a WSUS server and deferral policies: All of your updates will come from Windows Update unless you specify the scan source policy. +- If you configure a WSUS server and deferral policies on Windows 10: All of your updates will come from Windows Update unless you specify the scan source policy or have disabled dual scan. - If you configure a WSUS server and the scan source policy: All of your updates will come from the source chosen in the scan source policy. > [!TIP] From 5730390886ed0ee39d931d8a056e06284e75b743 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 24 May 2024 18:24:41 -0600 Subject: [PATCH 09/51] Minor fixes, revved dates, added to cmdlet details. --- windows/deployment/do/TOC.yml | 2 + .../do/delivery-optimization-endpoints.md | 4 +- .../do/delivery-optimization-proxy.md | 4 +- .../do/delivery-optimization-test.md | 66 ++++---- .../do/delivery-optimization-workflow.md | 17 +- windows/deployment/do/index.yml | 3 +- windows/deployment/do/mcc-ent-edu-overview.md | 3 +- .../deployment/do/mcc-enterprise-appendix.md | 13 +- .../deployment/do/mcc-enterprise-deploy.md | 57 ++++--- .../do/mcc-enterprise-prerequisites.md | 2 +- .../do/mcc-enterprise-update-uninstall.md | 2 +- .../do/mcc-isp-cache-node-configuration.md | 5 +- .../do/mcc-isp-create-provision-deploy.md | 10 +- windows/deployment/do/mcc-isp-faq.yml | 2 +- windows/deployment/do/mcc-isp-overview.md | 4 +- windows/deployment/do/mcc-isp-signup.md | 6 +- windows/deployment/do/mcc-isp-support.md | 29 ++-- windows/deployment/do/mcc-isp-update.md | 6 +- .../do/mcc-isp-verify-cache-node.md | 12 +- .../deployment/do/mcc-isp-vm-performance.md | 4 +- windows/deployment/do/mcc-isp.md | 8 +- .../do/waas-delivery-optimization-faq.yml | 4 +- .../do/waas-delivery-optimization-monitor.md | 82 +++++---- .../waas-delivery-optimization-reference.md | 159 +++++++++--------- .../do/waas-delivery-optimization-setup.md | 2 +- .../do/waas-delivery-optimization.md | 42 ++--- .../do/waas-microsoft-connected-cache.md | 2 +- .../do/waas-optimize-windows-10-updates.md | 2 +- windows/deployment/do/whats-new-do.md | 10 +- 29 files changed, 286 insertions(+), 276 deletions(-) diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml index 933c48b4b8..ad705d0de9 100644 --- a/windows/deployment/do/TOC.yml +++ b/windows/deployment/do/TOC.yml @@ -27,6 +27,8 @@ href: delivery-optimization-proxy.md - name: Testing Delivery Optimization href: delivery-optimization-test.md + - name: Delivery Optimization Troubleshooter + href: http://aka.ms/do-fix - name: Microsoft Connected Cache items: - name: What is Microsoft Connected Cache? diff --git a/windows/deployment/do/delivery-optimization-endpoints.md b/windows/deployment/do/delivery-optimization-endpoints.md index bbfa7de7b5..02ad508984 100644 --- a/windows/deployment/do/delivery-optimization-endpoints.md +++ b/windows/deployment/do/delivery-optimization-endpoints.md @@ -14,7 +14,7 @@ appliesto: - ✅ Microsoft Connected Cache for ISPs - ✅ Microsoft Connected Cache for Enterprise and Education - ✅ Connected Cache on a Configuration Manager distribution point -ms.date: 03/31/2023 +ms.date: 05/23/2024 --- # Microsoft Connected Cache content and services endpoints @@ -22,7 +22,7 @@ ms.date: 03/31/2023 > [!NOTE] > All ports are outbound. -This article lists the content and services endpoints to allow in your firewall to be used by Microsoft Connected Cache. +This article lists the content and services endpoints to allow in your firewall to be used by Microsoft Connected Cache. Use the table below to reference any particular content types or services endpoints that are required for [Connected Cache on a Configuration Manager distribution point](/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache), [Connected Cache managed in Azure](waas-microsoft-connected-cache.md), or both. |Domain Name |Protocol/Port(s) | Content Type | Additional Information | Microsoft Connected Cache Version | diff --git a/windows/deployment/do/delivery-optimization-proxy.md b/windows/deployment/do/delivery-optimization-proxy.md index b300268967..3449e9f030 100644 --- a/windows/deployment/do/delivery-optimization-proxy.md +++ b/windows/deployment/do/delivery-optimization-proxy.md @@ -14,7 +14,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Delivery Optimization -ms.date: 06/02/2023 +ms.date: 05/23/2024 --- # Using a proxy with Delivery Optimization @@ -36,7 +36,7 @@ If no user is signed in, even if both the Internet Explorer proxy and netsh conf You can still use netsh to import the proxy setting from Internet Explorer (`netsh winhttp import proxy source=ie`) if your proxy configuration is a static *proxyServerName:Port*. However, the same limitations mentioned previously apply. -### Summary of settings behavior +## Summary of settings behavior These tables summarize the behavior for various combinations of settings: diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index 313d8afd21..2ab71579fd 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -21,7 +21,7 @@ ms.date: 11/08/2022 ## Overview -Delivery Optimization is a powerful and useful tool to help enterprises manage bandwidth usage for downloading Microsoft content. It's a solution designed to be used in large-scale environments with large numbers of devices, various content sizes, etc. Delivery Optimization is native to currently supported versions of Windows and provides default configuration to get the most out of the typical customer environment. Delivery Optimization is used to deliver many different types of content, so Microsoft customers enjoy the best possible download experience for their environment. There are three components to Delivery Optimization: +Delivery Optimization is a powerful and useful tool to help enterprises manage bandwidth usage for downloading Microsoft content. It's a solution designed to be used in large-scal05/23/2024e environments with large numbers of devices, various content sizes, etc. Delivery Optimization is native to currently supported versions of Windows and provides default configuration to get the most out of the typical customer environment. Delivery Optimization is used to deliver many different types of content, so Microsoft customers enjoy the best possible download experience for their environment. There are three components to Delivery Optimization: 1. HTTP downloader. 1. Peer-to-peer (P2P) cloud technology. @@ -29,7 +29,7 @@ Delivery Optimization is a powerful and useful tool to help enterprises manage b One of the most powerful advantages of using Delivery Optimization is the ability to fine-tune settings that empower users to dial in Microsoft content delivery to meet the needs of specific environments. -## Monitoring The Results +## Monitoring the Results Since Delivery Optimization is on by default, you're able to monitor the value either through the Windows Settings for 'Delivery Optimization' using Delivery Optimization PowerShell [cmdlets.](waas-delivery-optimization-setup.md), and/or via the [Windows Update for Business Report](../update/wufb-reports-workbook.md) experience in Azure. @@ -70,18 +70,18 @@ Machine 1 will download zero bytes from peers and Machine 2 will download 50-99% #### Test Machine Setup |Setup Checklist| Value/Explanation -|--------|-------------------------------| -|Number of machines used| 2 | -|Virtual Machines/physical devices| 2 | -|Windows OS version | Windows 10 (21H2) and Windows 11 (21H2) | -|RAM | 8 GB | -|Disk size | 127 GB | -|Network | Connected to same network, one that is representative of the corporate network. | -|Pause Windows Updates | This controls the test environment so no other content is made available during the test, and potentially altering the outcome of the test. If there are problems and no peering happens, use 'Get-DeliveryOptimizationStatus' on the first machine to return a real-time list of the connected peers. | -|Ensure all Store apps are up to date | This helps prevent any new, unexpected updates to download during testing. | -|Delivery Optimization 'Download Mode' Policy | 2 (Group)(set on each machine) | -|Delivery Optimization 'GroupID' Policy | Set the *same* 'GUID' on each test machine. A GUID is a required value, which can be generated using PowerShell, '[[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. | -|**Required on Windows 11 devices only** set Delivery Optimization 'Restrict Peer Selection' policy | 0-NAT (set on each machine). The default behavior in Windows 11 is set to '2-Local Peer Discovery'. For testing purposes, this needs to be scoped to the NAT. | +|--------|------------------------------- +|Number of machines used| 2 +|Virtual Machines/physical devices| 2 +|Windows OS version | Windows 10 (21H2) and Windows 11 (21H2) +|RAM | 8 GB +|Disk size | 127 GB +|Network | Connected to same network, one that is representative of the corporate network. +|Pause Windows Updates | This controls the test environment so no other content is made available during the test, and potentially altering the outcome of the test. If there are problems and no peering happens, use 'Get-DeliveryOptimizationStatus' on the first machine to return a real-time list of the connected peers. +|Ensure all Store apps are up to date | This helps prevent any new, unexpected updates to download during testing. +|Delivery Optimization 'Download Mode' Policy | 2 (Group)(set on each machine) +|Delivery Optimization 'GroupID' Policy | Set the *same* 'GUID' on each test machine. A GUID is a required value, which can be generated using PowerShell, '[[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. +|**Required on Windows 11 devices only** set Delivery Optimization 'Restrict Peer Selection' policy | 0-NAT (set on each machine). The default behavior in Windows 11 is set to '2-Local Peer Discovery'. For testing purposes, this needs to be scoped to the NAT. #### Test Instructions @@ -97,10 +97,10 @@ The following set of instructions will be used for each machine: * Run 'Test Instructions' |Windows 10 | Windows 11 -|--------|-------------------------------| -| :::image type="content" source="images/test-scenarios/win10/m1-basic-complete.png" alt-text="Windows 10 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win10/m1-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m1-basic-complete.png" alt-text="Windows 11 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win11/m1-basic-complete.png"::: | -| **Observations** | | -| *No peers were found on the first machine downloading the content.
* 'TotalBytesDownloaded' is equal to the file size.
*Status is set to 'Caching' the content so future peers can use it.
* Download was happening in the foreground.
*DownloadMode is set to 'Group' and no peers were found.
* No distinct observations seen between Window 10 and Windows 11 devices. | +|--------|------------------------------- +| :::image type="content" source="images/test-scenarios/win10/m1-basic-complete.png" alt-text="Windows 10 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win10/m1-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m1-basic-complete.png" alt-text="Windows 11 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win11/m1-basic-complete.png"::: +| **Observations** +| - No peers were found on the first machine downloading the content.
- 'TotalBytesDownloaded' is equal to the file size.
- Status is set to 'Caching' the content so future peers can use it.
- Download was happening in the foreground.
- DownloadMode is set to 'Group' and no peers were found.
- No distinct observations seen between Window 10 and Windows 11 devices. *Wait 5 minutes*. @@ -108,11 +108,11 @@ The following set of instructions will be used for each machine: * Run 'Test Instructions' -|Windows 10 | Windows 11 | -|--------|--------------------------------| +|Windows 10 | Windows 11 +|--------|-------------------------------- | :::image type="content" source="images/test-scenarios/win10/m2-basic-complete.png" alt-text="Windows 10 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win10/m2-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m2-basic-complete.png" alt-text="Windows 11 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win11/m2-basic-complete.png":::| -| **Observations** | **Observations**| -| *A peer was found for the content and 87% of total bytes came from the peer.
* One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
*Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
* 'DownloadDuration' is roughly the same between machines.|*A peer was found for the content and 90% of total bytes came from the peer.
* All other points are the same as Windows 10 results. | +| **Observations** | **Observations** +| - A peer was found for the content and 87% of total bytes came from the peer.
- One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
- Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
- 'DownloadDuration' is roughly the same between machines.
- A peer was found for the content and 90% of total bytes came from the peer.
- All other points are the same as Windows 10 results. ### Scenario 2: Advance Setup @@ -123,18 +123,18 @@ Machine 1 will download zero bytes from peers and Machine 2 will find peers and #### Test Machine Setup -|Setup Checklist| Value/Explanation | -|--------|-------------------------------| -|Number of machines used| 3 | -|Virtual Machines| 3 | -|Windows OS version | Windows 10 (21H2) | -|RAM | 8 GB | -|Disk size | 127 GB | -|Network | Connected to same network, one that is representative of the corporate network. | -|Delivery Optimization 'Download Mode' Policy| 2 (Group)(set on each machine) | +|Setup Checklist| Value/Explanation +|--------|------------------------------- +|Number of machines used| 3 +|Virtual Machines| 3 +|Windows OS version | Windows 10 (21H2) +|RAM | 8 GB +|Disk size | 127 GB +|Network | Connected to same network, one that is representative of the corporate network. +|Delivery Optimization 'Download Mode' Policy| 2 (Group)(set on each machine). |Delivery Optimization 'Group ID' Policy| Set the *same* 'GUID' on each test machine. A GUID is required value, which can be generated using PowerShell, '[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. | -|Delivery Optimization 'Delay background download from http' Policy | 60 (set on each machine) | -|Delivery Optimization 'Delay foreground download from http Policy |60 (set on each machine) | +|Delivery Optimization 'Delay background download from http' Policy | 60 (set on each machine). +|Delivery Optimization 'Delay foreground download from http Policy |60 (set on each machine). #### Testing Instructions diff --git a/windows/deployment/do/delivery-optimization-workflow.md b/windows/deployment/do/delivery-optimization-workflow.md index 7c2b567c9c..0d20ed1538 100644 --- a/windows/deployment/do/delivery-optimization-workflow.md +++ b/windows/deployment/do/delivery-optimization-workflow.md @@ -17,7 +17,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Delivery Optimization -ms.date: 01/18/2024 +ms.date: 05/23/2024 --- # Delivery Optimization workflow, privacy, security, and endpoints @@ -41,14 +41,13 @@ This workflow allows Delivery Optimization to securely and efficiently deliver r 5. If Delivery Optimization is unable to obtain the content metadata file, or if the verification of the hash file itself fails, the download will fall back to simple mode. Simple mode will only pull content from the HTTP source and peer-to-peer won't be allowed. 6. Once downloading is complete, Delivery Optimization uses all retrieved pieces of the content to put the file together. At that point, the Delivery Optimization caller (for example, Windows Update) checks the entire file to verify the signature prior to installing it. - ## Delivery Optimization service endpoint and data information |Endpoint hostname | Port|Name|Description|Data sent from the computer to the endpoint -|--------------------------------------------|--------|---------------|-----------------------|------------------------| -| geover-prod.do.dsp.mp.microsoft.com
geo-prod.do.dsp.mp.microsoft.com
geo.prod.do.dsp.mp.microsoft.com
geover.prod.do.dsp.mp.microsoft.com | 443 | Geo | Service used to identify the location of the device in order to direct it to the nearest data center. | **Profile**: The device type (for example, PC or Xbox)
**doClientVersion**: The version of the DoSvc client
**groupID**: Group the device belongs to (set with DownloadMode = '2' (Group download mode) + groupID group policy / MDM policies) | -| kv\*.prod.do.dsp.mp.microsoft.com | 443| KeyValue | Bootstrap service provides endpoints for all other services and device configs. | **countryCode**: The country or region the client is connected from
**doClientVersion**: The version of the DoSvc client
**Profile**: The device type (for example, PC or Xbox)
**eId**: Client grouping ID
**CacheHost**: Cache host ID | -| cp\*.prod.do.dsp.mp.microsoft.com
| 443 | Content Policy | Provides content specific policies and as content metadata URLs. | **Profile**: The device type (for example, PC or Xbox)
**ContentId**: The content identifier
**doClientVersion**: The version of the DoSvc client
**countryCode**: The country the client is connected from
**altCatalogID**: If ContentID isn't available, use the download URL instead
**eID**: Client grouping ID
**CacheHost**: Cache host ID | -| disc\*.prod.do.dsp.mp.microsoft.com | 443 | Discovery | Directs clients to a particular instance of the peer matching service (Array), ensuing that clients are collocated by factors, such as content, groupID and external IP. | **Profile**: The device type (for example, PC or Xbox)
**ContentID**: The content identifier
**doClientVersion**: The version of the DoSvc client
**partitionID**: Client partitioning hint
**altCatalogID**: If ContentID isn't available, use the download URL instead
**eID**: Client grouping ID | -| array\*.prod.do.dsp.mp.microsoft.com | 443 | Arrays | Provides the client with list of peers that have the same content and belong to the same peer group. | **Profile**: The device type (for example, PC or Xbox)
**ContentID**: The content identifier
**doClientVersion**: The version of the DoSvc client
**altCatalogID**: If ContentID isn't available, use the download URL instead
**PeerID**: Identity of the device running DO client
**ReportedIp**: The internal / private IP Address
**IsBackground**: Is the download interactive or background
**Uploaded**: Total bytes uploaded to peers
**Downloaded**: Total bytes downloaded from peers
**DownloadedCdn**: Total bytes downloaded from CDN
**Left**: Bytes left to download
**Peers Wanted**: Total number of peers wanted
**Group ID**: Group the device belongs to (set via DownloadMode 2 + Group ID GP / MDM policies)
**Scope**: The Download mode
**UploadedBPS**: The upload speed in bytes per second
**DownloadBPS**: The download speed in Bytes per second
**eID**: Client grouping ID | -| dl.delivery.mp.microsoft.com
emdl.ws.microsoft.com
download.windowsupdate.com | 80 | Delivery Optimization metadata file hosting | CDN hostnames for Delivery Optimization content metadata files | Metadata download can come from different hostnames, but it's required for peer to peer. | +|--------------------------------------------|--------|---------------|-----------------------|------------------------ +| geover-prod.do.dsp.mp.microsoft.com
geo-prod.do.dsp.mp.microsoft.com
geo.prod.do.dsp.mp.microsoft.com
geover.prod.do.dsp.mp.microsoft.com | 443 | Geo | Service used to identify the location of the device in order to direct it to the nearest data center. | **Profile**: The device type (for example, PC or Xbox)
**doClientVersion**: The version of the DoSvc client
**groupID**: Group the device belongs to (set with DownloadMode = '2' (Group download mode) + groupID group policy / MDM policies) +| kv\*.prod.do.dsp.mp.microsoft.com | 443| KeyValue | Bootstrap service provides endpoints for all other services and device configs. | **countryCode**: The country or region the client is connected from
**doClientVersion**: The version of the DoSvc client
**Profile**: The device type (for example, PC or Xbox)
**eId**: Client grouping ID
**CacheHost**: Cache host ID +| cp\*.prod.do.dsp.mp.microsoft.com
| 443 | Content Policy | Provides content specific policies and as content metadata URLs. | **Profile**: The device type (for example, PC or Xbox)
**ContentId**: The content identifier
**doClientVersion**: The version of the DoSvc client
**countryCode**: The country the client is connected from
**altCatalogID**: If ContentID isn't available, use the download URL instead
**eID**: Client grouping ID
**CacheHost**: Cache host ID +| disc\*.prod.do.dsp.mp.microsoft.com | 443 | Discovery | Directs clients to a particular instance of the peer matching service (Array), ensuing that clients are collocated by factors, such as content, groupID and external IP. | **Profile**: The device type (for example, PC or Xbox)
**ContentID**: The content identifier
**doClientVersion**: The version of the DoSvc client
**partitionID**: Client partitioning hint
**altCatalogID**: If ContentID isn't available, use the download URL instead
**eID**: Client grouping ID +| array\*.prod.do.dsp.mp.microsoft.com | 443 | Arrays | Provides the client with list of peers that have the same content and belong to the same peer group. | **Profile**: The device type (for example, PC or Xbox)
**ContentID**: The content identifier
**doClientVersion**: The version of the DoSvc client
**altCatalogID**: If ContentID isn't available, use the download URL instead
**PeerID**: Identity of the device running DO client
**ReportedIp**: The internal / private IP Address
**IsBackground**: Is the download interactive or background
**Uploaded**: Total bytes uploaded to peers
**Downloaded**: Total bytes downloaded from peers
**DownloadedCdn**: Total bytes downloaded from CDN
**Left**: Bytes left to download
**Peers Wanted**: Total number of peers wanted
**Group ID**: Group the device belongs to (set via DownloadMode 2 + Group ID GP / MDM policies)
**Scope**: The Download mode
**UploadedBPS**: The upload speed in bytes per second
**DownloadBPS**: The download speed in Bytes per second
**eID**: Client grouping ID +| dl.delivery.mp.microsoft.com
emdl.ws.microsoft.com
download.windowsupdate.com | 80 | Delivery Optimization metadata file hosting | CDN hostnames for Delivery Optimization content metadata files | Metadata download can come from different hostnames, but it's required for peer to peer. diff --git a/windows/deployment/do/index.yml b/windows/deployment/do/index.yml index 03b2ddc0ac..d4f3409ae7 100644 --- a/windows/deployment/do/index.yml +++ b/windows/deployment/do/index.yml @@ -103,4 +103,5 @@ landingContent: url: delivery-optimization-endpoints.md - text: Testing Delivery Optimization url: delivery-optimization-test.md - + - text: Delivery Optimization Troubleshooter + url: http://aka.ms/do-fix diff --git a/windows/deployment/do/mcc-ent-edu-overview.md b/windows/deployment/do/mcc-ent-edu-overview.md index a6b4c0afed..b17beaa30a 100644 --- a/windows/deployment/do/mcc-ent-edu-overview.md +++ b/windows/deployment/do/mcc-ent-edu-overview.md @@ -13,12 +13,13 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Microsoft Connected Cache for Enterprise and Education -ms.date: 05/09/2023 +ms.date: 05/23/2024 --- # Microsoft Connected Cache for Enterprise and Education Overview > [!IMPORTANT] +> > - Microsoft Connected Cache is currently a preview feature. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/). > - As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup). diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md index 9add17a1be..e755879ed3 100644 --- a/windows/deployment/do/mcc-enterprise-appendix.md +++ b/windows/deployment/do/mcc-enterprise-appendix.md @@ -15,7 +15,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Microsoft Connected Cache for Enterprise and Education -ms.date: 11/07/2023 +ms.date: 05/23/2024 --- # Appendix @@ -28,7 +28,8 @@ ms.date: 11/07/2023 ### Troubleshooting If you're not able to sign up for a Microsoft Azure subscription with the **Account belongs to a directory that cannot be associated with an Azure subscription. Please sign in with a different account.** error, see the following articles: -- [Can't sign up for a Microsoft Azure subscription](/troubleshoot/azure/general/cannot-sign-up-subscription). + +- [Can't sign up for a Microsoft Azure subscription](/troubleshoot/azure/general/cannot-sign-up-subscription). - [Troubleshoot issues when you sign up for a new account in the Azure portal](/azure/cost-management-billing/manage/troubleshoot-azure-sign-up). ## Hardware specifications @@ -91,14 +92,14 @@ There are multiple methods that can be used to apply a policy to PCs that should You can either set your MCC IP address or FQDN using: -1. Registry key (version 1709 and later): +1. Registry key (version 1709 and later): `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization`
"DOCacheHost"=" " - + From an elevated command prompt: - ``` +```powershell reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f ``` @@ -110,7 +111,6 @@ You can either set your MCC IP address or FQDN using: :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png"::: - ## Verify content using the DO client To verify that the Delivery Optimization client can download content using MCC, you can use the following steps: @@ -119,7 +119,6 @@ To verify that the Delivery Optimization client can download content using MCC, :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected."::: - 1. Verify downloads came from MCC by one of two methods: - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*. diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md index b2883ad2fd..8ddf51a732 100644 --- a/windows/deployment/do/mcc-enterprise-deploy.md +++ b/windows/deployment/do/mcc-enterprise-deploy.md @@ -1,6 +1,6 @@ --- title: Deploying your cache node -description: How to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node from the Auzre portal. +description: How to deploy a Microsoft Connected Cache (MCC) for Enterprise and Education cache node from the Azure portal. ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to @@ -13,7 +13,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Microsoft Connected Cache for Enterprise and Education -ms.date: 11/09/2023 +ms.date: 05/23/2024 --- # Deploy your cache node @@ -24,18 +24,28 @@ This article describes how to deploy a Microsoft Connected Cache (MCC) for Enter To deploy MCC to your server: -1. [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id) -1. [Create the MCC Resource in Azure](#create-the-mcc-resource-in-azure) -1. [Create an MCC Node](#create-an-mcc-node-in-azure) -1. [Edit Cache Node Information](#edit-cache-node-information) -1. [Install MCC on a physical server or VM](#install-mcc-on-windows) -1. [Verify MCC functionality](#verify-mcc-server-functionality) -1. [Review common Issues](#common-issues) if needed. - +- [Deploy your cache node](#deploy-your-cache-node) + - [Steps to deploy MCC](#steps-to-deploy-mcc) + - [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id) + - [Create the MCC resource in Azure](#create-the-mcc-resource-in-azure) + - [Error: Validation failed](#error-validation-failed) + - [Create an MCC node in Azure](#create-an-mcc-node-in-azure) + - [Edit cache node information](#edit-cache-node-information) + - [Install MCC on Windows](#install-mcc-on-windows) + - [Run the installer](#run-the-installer) + - [Verify MCC server functionality](#verify-mcc-server-functionality) + - [Verify client side](#verify-client-side) + - [Verify server side](#verify-server-side) + - [Intune (or other management software) configuration for MCC](#intune-or-other-management-software-configuration-for-mcc) + - [Common Issues](#common-issues) + - [PowerShell issues](#powershell-issues) + - [Verify Running MCC Container](#verify-running-mcc-container) + - [DNS needs to be configured](#dns-needs-to-be-configured) + - [Resolve DNS issues](#resolve-dns-issues) ### Provide Microsoft with the Azure subscription ID -As part of the MCC preview onboarding process an Azure subscription ID must be provided to Microsoft. +As part of the MCC preview onboarding process an Azure subscription ID must be provided to Microsoft. > [!IMPORTANT] > As we near the release of public preview, we have paused onboarding. Please continue to submit the form to express interest so we can follow up with you once public preview of Microsoft Connected Cache for Enteprise and Education is available. To register your interest, fill out the form located at [https://aka.ms/MSConnectedCacheSignup](https://aka.ms/MSConnectedCacheSignup). @@ -44,9 +54,9 @@ For information about creating or locating your subscription ID, see [Steps to o ### Create the MCC resource in Azure -The MCC Azure management portal is used to create and manage MCC nodes. An Azure subscription ID is used to grant access to the preview and to create the MCC resource in Azure and Cache nodes. +The MCC Azure management portal is used to create and manage MCC nodes. An Azure subscription ID is used to grant access to the preview and to create the MCC resource in Azure and Cache nodes. -Once you take the survey above and the MCC team adds your subscription ID to the allowlist, you'll be given a link to the Azure portal where you can create the resource described below. +Once you take the survey above and the MCC team adds your subscription ID to the allowlist, you'll be given a link to the Azure portal where you can create the resource described below. 1. In the Azure portal home page, choose **Create a resource**: :::image type="content" source="./images/ent-mcc-create-azure-resource.png" alt-text="Screenshot of the Azure portal. The create a resource option is outlined in red."::: @@ -201,7 +211,7 @@ Installing MCC on your Windows device is a simple process. A PowerShell script p If you restarted your computer after creating a switch, start from step 2 above and skip to step 5. - If you opt to use an existing external switch, select the switch from the presented options. Local Area Connection (or USB) is preferable to Wi-Fi. + If you opt to use an existing external switch, select the switch from the presented options. Local Area Connection (or USB) is preferable to Wi-Fi. :::image type="content" source="./images/ent-mcc-script-new-switch.png" alt-text="Screenshot of the installer script running in PowerShell when a new switch is created." lightbox="./images/ent-mcc-script-new-switch.png"::: @@ -221,12 +231,12 @@ Installing MCC on your Windows device is a simple process. A PowerShell script p :::image type="content" source="./images/external-switch-1.jpg" alt-text="Screenshot of a sample output of ipconfig command showing example of subnet mask." lightbox="./images/external-switch-1.jpg"::: :::image type="content" source="./images/assigning-ip-2.png" alt-text="Screenshot of multiple installer questions about ipv4 address for Eflow." lightbox="./images/assigning-ip-2.png"::: - + If you would like to use your own DNS server instead of Google DNS 8.8.8.8, select **n** and set your own DNS server IP. :::image type="content" source="./images/use-custom-dns-3.png" alt-text="Screenshot of multiple installer questions about setting an alternate DNS server." lightbox="./images/use-custom-dns-3.png"::: - If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings. - -1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path. + If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings. + +1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path. :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png"::: For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommend values for a Branch Office/Small Enterprise deployment. @@ -238,7 +248,7 @@ Installing MCC on your Windows device is a simple process. A PowerShell script p :::image type="content" source="./images/ent-mcc-script-select-hub.png" alt-text="Screenshot of the installer script running in PowerShell prompting you to select which IoT Hub to use." lightbox="./images/ent-mcc-script-select-hub.png"::: --> -1. When the installation is complete, you should see the following output (the values below will be your own) +1. When the installation is complete, you should see the following output (the values below will be your own) :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png"::: :::image type="content" source="./images/installation-complete-7.png" alt-text="Screenshot of expected output when installation is complete." lightbox="./images/installation-complete-7.png"::: @@ -267,10 +277,12 @@ Connect to the EFLOW VM and check if MCC is properly running: You should see MCC, edgeAgent, and edgeHub running. If you see edgeAgent or edgeHub but not MCC, try this command in a few minutes. The MCC container can take a few minutes to deploy. If iotedge list times out, you can run docker ps -a to list the running containers. If the 3 containers are still not running, run the following commands to check if DNS resolution is working correctly: + ```bash ping www.microsoft.com resolvectl query microsoft.com ``` + See the [common issues](#common-issues) section for more information. #### Verify server side @@ -336,7 +348,6 @@ This command will provide the current status of the starting, stopping of a cont :::image type="content" source="./images/ent-mcc-journalctl.png" alt-text="Screenshot of the output from journalctl -u iotedge -f." lightbox="./images/ent-mcc-journalctl.png"::: - > [!NOTE] > You should consult the IoT Edge troubleshooting guide ([Common issues and resolutions for Azure IoT Edge](/azure/iot-edge/troubleshoot)) for any issues you may encounter configuring IoT Edge, but we've listed a few issues that we encountered during our internal validation. > @@ -394,14 +405,14 @@ To configure the device to work with your DNS, use the following steps: ``` ### Resolve DNS issues + Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container: Run ``` Get-EflowVmEndpoint ``` to get interface name -Once you get the name +Once you get the name + ```bash Set-EflowVmDNSServers -vendpointName "interface name from above" -dnsServers @("DNS_IP_ADDRESS") Stop-EflowVm Start-EflowVm ``` - - diff --git a/windows/deployment/do/mcc-enterprise-prerequisites.md b/windows/deployment/do/mcc-enterprise-prerequisites.md index 0671eba29f..1e33e85158 100644 --- a/windows/deployment/do/mcc-enterprise-prerequisites.md +++ b/windows/deployment/do/mcc-enterprise-prerequisites.md @@ -13,7 +13,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - - ✅ Microsoft Connected Cache for Enterprise and Education -ms.date: 11/07/2023 +ms.date: 05/23/2024 --- # Requirements of Microsoft Connected Cache for Enterprise and Education (early preview) diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-enterprise-update-uninstall.md index b36d56df66..7f09c9c9a5 100644 --- a/windows/deployment/do/mcc-enterprise-update-uninstall.md +++ b/windows/deployment/do/mcc-enterprise-update-uninstall.md @@ -15,7 +15,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Microsoft Connected Cache for Enterprise and Education -ms.date: 10/12/2022 +ms.date: 05/23/2024 --- [!INCLUDE [Get Azure subscription](includes/get-azure-subscription.md)] - ### Performance of MCC in virtual environments In virtual environments, the cache server egress peaks at around 1.1 Gbps. If you want to maximize the egress in virtual environments, it's critical to change the following two settings: diff --git a/windows/deployment/do/waas-delivery-optimization-faq.yml b/windows/deployment/do/waas-delivery-optimization-faq.yml index 73a6691166..af0a3d0fd2 100644 --- a/windows/deployment/do/waas-delivery-optimization-faq.yml +++ b/windows/deployment/do/waas-delivery-optimization-faq.yml @@ -17,7 +17,7 @@ metadata: - ✅ Windows 10 - ✅ Windows Server 2019, and later - ✅ Delivery Optimization - ms.date: 02/16/2024 + ms.date: 05/23/2024 title: Frequently Asked Questions about Delivery Optimization summary: | This article answers frequently asked questions about Delivery Optimization. @@ -38,7 +38,7 @@ summary: | - [My firewall requires IP addresses and can't process FQDNs. How do I configure it to download content with Delivery Optimization?How do I configure it to download content with Delivery Optimization?](#my-firewall-requires-ip-addresses-and-can-t-process-fqdns--how-do-i-configure-it-to-download-content-with-delivery-optimization) - [What is the recommended configuration for Delivery Optimization used with cloud proxies?](#what-is-the-recommended-configuration-for-delivery-optimization-used-with-cloud-proxies) - **Peer-to-Peer related questions**: + **Peer-to-peer related questions**: - [How does Delivery Optimization determine which content is available for peering?](#how-does-delivery-optimization-determine-which-content-is-available-for-peering) - [Does Delivery Optimization use multicast?](#does-delivery-optimization-use-multicast) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index a41d6159c2..bc2e0b442b 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -16,14 +16,14 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Delivery Optimization -ms.date: 08/13/2023 +ms.date: 05/23/2024 --- # Monitor Delivery Optimization To monitor Delivery Optimization, you can use either the Windows Update for Business Delivery Optimization Report or Windows PowerShell cmdlets. -## Monitor with Windows Update for Business Delivery Optimization Report +## Monitor with Windows Update for Business Delivery Optimization report Windows Update for Business Delivery Optimization Report provides you with information about your Delivery Optimization configuration, including the observed bandwidth savings across all devices that used peer-to-peer, Microsoft Connected Cache (MCC), HTTP source/CDN distribution over the past 28 days. @@ -47,10 +47,10 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | TotalBytesDownloaded | The number of bytes from any source downloaded so far | | PercentPeerCaching |The percentage of bytes downloaded from peers versus over HTTP | | BytesFromPeers | Total bytes downloaded from peer devices (sum of bytes downloaded from LAN, Group, and Internet Peers) | -| BytesfromHTTP | Total number of bytes received over HTTP. This metric represents all HTTP sources, **which includes BytesFromCacheServer** | +| BytesFromHTTP | Total number of bytes received over HTTP. This metric represents all HTTP sources, **which includes BytesFromCacheServer** | | Status | Current state of the operation. Possible values are: **Downloading** (download in progress); **Complete** (download completed, but isn't uploading yet); **Caching** (download completed successfully and is ready to upload or uploading); **Paused** (download/upload paused by caller) | | Priority | Priority of the download; values are **foreground** or **background** | -| BytesFromCacheServer | Total number of bytes received from cache server (MCC) | +| BytesFromCacheServer | Total number of bytes received from cache Bserver (MCC) | | BytesFromLanPeers | Total number of bytes received from peers found on the LAN | | BytesFromGroupPeers | Total number of bytes received from peers found in the group. (Note: Group mode is LAN + Group. If peers are found on the LAN, those bytes are registered in 'BytesFromLANPeers'.) | | BytesFromInternetPeers | Total number of bytes received from internet peers | @@ -58,17 +58,17 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | BytesToGroupPeers | Total number of bytes delivered from peers found in the group | | BytesToInternetPeers | Total number of bytes delivered from peers found on the LAN | | DownloadDuration | Total download time in seconds | -| HttpConnectionCount | | -| LanConnectionCount | | -| GroupConnectionCount | | -| InternetConnectionCount | | -| DownloadMode | | +| HttpConnectionCount | Number of connections to HTTP source | +| LanConnectionCount | Number of connections to LAN peer connections | +| GroupConnectionCount | Number of connections to Group peer connections | +| InternetConnectionCount | Number of connections to Internet peer connections | +| DownloadMode | Delivery Optimization DownloadMode value | | SourceURL | Http source for the file | | CacheHost | IP address for the cache server | | NumPeers | Indicates the total number of peers returned from the service. | | PredefinedCallerApplication | Indicates the last caller that initiated a request for the file. | | ExpireOn | The target expiration date and time for the file. | -| IsPinned | A yes/no value indicating whether an item has been "pinned" in the cache (see `setDeliveryOptmizationStatus`). | +| IsPinned | A yes/no value indicating whether an item has been "pinned" in the cache (see `setDeliveryOptimizationStatus`). | `Get-DeliveryOptimizationPerfSnap` returns a list of key performance data: @@ -76,40 +76,38 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | --- | --- | | FilesDownloaded | Number of files downloaded | | FilesUploaded | Number of files uploaded | -| Files | | +| Files | Number of files available in the Delivery Optimization cache | | TotalBytesDownloaded | Total bytes downloaded | | TotalBytesUploaded | Total bytes uploaded | | AverageDownloadSize | Average transfer size (download); that is, the number bytes downloaded divided by the number of files | | AverageUploadSize | Average transfer size (upload); the number of bytes uploaded divided by the number of files | -| DownloadMode | Delivery Optimization Download mode used to deliver file | -| CacheSizeBytes | | -| TotalDiskBytes | | -| AvailableDiskBytes | | -| CpuUsagePct | | -| MemUsageKB | | -| NumberOfPeers | | -| CacheHostConnections | | -| CdnConnections | | -| LanConnections | | -| LinkLocalConnections | | -| GroupConnections | | -| InternetConnections | | -| DownlinkBps | | -| DownlinkUsageBps | | -| UplinkBps | | -| UplinkUsageBps | | -| ForegroundDownloadRatePct | | -| BackgroundDownloadRatePct | | -| UploadRatePct | | -| UplinkUsageBps | | -| ForegroundDownloadRatePct | | -| BackgroundDownloadRatePct | | -| UploadRatePct | | -| UploadCount | | -| ForegroundDownloadCount | | -| ForegroundDownloadsPending | | -| BackgroundDownloadCount | | -| BackgroundDownloadsPending | | +| DownloadMode | Delivery Optimization Download mode configured for this device | +| CacheSizeBytes | Total disk space occupied by downloaded files in Delivery Optimization cache | +| TotalDiskBytes | Total space of the disk volume on which Delivery Optimization cache is currently located | +| AvailableDiskBytes | Free space of the disk volume on which Delivery Optimization cache is currently located | +| CpuUsagePct | Average CPU usage by the Delivery Optimization process | +| MemUsageKB | Amount of committed memory currently used by the Delivery Optimization process | +| NumberOfPeers | Total number of peers used found across all files currently in the cache | +| CacheHostConnections | Number of cache host server connections | +| CdnConnections | Number of CDN server connections | +| LanConnections | Number of LAN connections | +| LinkLocalConnections | Number of Link Local connections | +| GroupConnections | Number of Group connections | +| InternetConnections | Number of Internet connections | +| DownlinkBps | Average download bandwidth usage currently seen across all network adapters | +| DownlinkUsageBps | Average bandwidth currently used by Delivery Optimization for downloads | +| UplinkBps | Average bytes per second for upload events | +| UplinkUsageBps | Average bandwidth currently used by Delivery Optimization for uploads | +| ForegroundDownloadRatePct | Average foreground download percentage rate | +| BackgroundDownloadRatePct | Average background download percentage rate | +| UploadRatePct | Percentage of upload bandwidth to be used for uploads | +| ForegroundDownloadRatePct | Average foreground download from start of the month | +| BackgroundDownloadRatePct | Average background download from start of the month | +| UploadCount | Number of files in Delivery Optimization cache currently eligible for uploading | +| ForegroundDownloadCount | Number of foreground downloads that are running | +| ForegroundDownloadsPending | Number of foreground downloads that are waiting in queue | +| BackgroundDownloadCount | Number of background downloads that are running | +| BackgroundDownloadsPending | Number of background downloads that are waiting in queue | Using the `-Verbose` option returns additional information: @@ -188,7 +186,6 @@ If `Path` isn't specified, this cmdlet reads all logs from the DoSvc log directo Log entries are written to the PowerShell pipeline as objects. To dump logs to a text file, run `Get-DeliveryOptimizationLog | Set-Content ` or something similar. - **Starting in Windows 10, version 1803:** `Get-DOConfig -Verbose` @@ -198,7 +195,7 @@ This cmdlet lists local configuration and policies that are applied to Delivery DownloadMode:Simple DownloadModeProvider:Mdm Provider -The provider is listed as "Default Provider" if it's using the Delivery Optimization platform configured default. +The provider is listed as "Default Provider" if it's using the Delivery Optimization platform configured default. The cmdlet returns the following data: @@ -217,4 +214,3 @@ The cmdlet returns the following data: - DownloadForegroundLimitPct: Corresponds to the [DOPercentageMaxForegroundBandwidth](waas-delivery-optimization-reference.md#maximum-foreground-download-bandwidth) policy. - MaxUploadRatePct: Corresponds to the [DOMaxUploadBandwidth](waas-delivery-optimization-reference.md#max-upload-bandwidth) policy (deprecated in Windows 10, version 2004). - UploadLimitMonthlyGB: Corresponds to the [DOMonthlyUploadDataCap](waas-delivery-optimization-reference.md#monthly-upload-data-cap) policy. - diff --git a/windows/deployment/do/waas-delivery-optimization-reference.md b/windows/deployment/do/waas-delivery-optimization-reference.md index 6cfadc06b1..f641968b07 100644 --- a/windows/deployment/do/waas-delivery-optimization-reference.md +++ b/windows/deployment/do/waas-delivery-optimization-reference.md @@ -14,7 +14,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Delivery Optimization -ms.date: 02/14/2024 +ms.date: 05/23/2024 --- # Delivery Optimization reference @@ -42,27 +42,27 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | [Minimum disk size allowed to use peer caching](#minimum-disk-size-allowed-to-use-peer-caching) | DOMinDiskSizeAllowedToPeer | 1703 | Default value is 32 GB. | | [Max cache age](#max-cache-age) | DOMaxCacheAge | 1511 | Default value is 259,200 seconds (three days). | | [Max cache size](#max-cache-size) | DOMaxCacheSize | 1511 | Default value is 20%. | -| [Absolute max cache size (in GBs)](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | 1607 | Default value is 10 GB.| +| [Absolute max cache size (in GBs)](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | 1607 | Default is not configured.| | [Modify cache drive](#modify-cache-drive) | DOModifyCacheDrive | 1607 | Default to the operating system drive through the %SYSTEMDRIVE% environment variable. | | [Minimum peer caching content file size](#minimum-peer-caching-content-file-size) | DOMinFileSizeToCache | 1703 | Default file size is 50 MB. | | [Monthly upload data cap](#monthly-upload-data-cap) | DOMonthlyUploadDataCap | 1607 | Default value is 20 GB. | | [Minimum background QoS](#minimum-background-qos) | DOMinBackgroundQoS | 1607 | Recommend setting this to 500 KB/s. Default value is 2500 KB/s. | | [Enable peer caching while the device connects via VPN](#enable-peer-caching-while-the-device-connects-via-vpn) | DOAllowVPNPeerCaching | 1709 | Default is to not allow peering while on VPN. | -| [VPN Keywords](#vpn-keywords) | DOVpnKeywords | 22H2 September Moment | Allows you to set one or more keywords used to recognize VPN connections. | -| [Disallow Cache Server Downloads from VPN](#disallow-cache-server-downloads-on-vpn) | DODisallowCacheServerDownloadsOnVPN | 22H2 September Moment | Disallow downloads from Microsoft Connected Cache servers when the device connects via VPN. By default, the device is allowed to download from Microsoft Connected Cache when connected via VPN. | +| [VPN keywords](#vpn-keywords) | DOVpnKeywords | 22H2 September Moment | Allows you to set one or more keywords used to recognize VPN connections. | +| [Disallow cache server downloads from VPN](#disallow-cache-server-downloads-on-vpn) | DODisallowCacheServerDownloadsOnVPN | 22H2 September Moment | Disallow downloads from Microsoft Connected Cache servers when the device connects via VPN. By default, the device is allowed to download from Microsoft Connected Cache when connected via VPN. | | [Allow uploads while the device is on battery while under set battery level](#allow-uploads-while-the-device-is-on-battery-while-under-set-battery-level) | DOMinBatteryPercentageAllowedToUpload | 1709 | Default is to not allow peering while on battery. | | [Maximum foreground download bandwidth (percentage)](#maximum-foreground-download-bandwidth) | DOPercentageMaxForegroundBandwidth | 1803 | Default is '0' which will dynamically adjust. | | [Maximum background download bandwidth (percentage)](#maximum-background-download-bandwidth) | DOPercentageMaxBackgroundBandwidth | 1803 | Default is '0' which will dynamically adjust. | | [Maximum foreground download bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) | DOMaxForegroundDownloadBandwidth | 2004 | Default is '0' which will dynamically adjust. | | [Maximum background download bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) | DOMaxBackgroundDownloadBandwidth | 2004 | Default is '0' which will dynamically adjust. | -| [Set hours to limit background download bandwidth](#set-business-hours-to-limit-background-download-bandwidth) | DOSetHoursToLimitBackgroundDownloadBandwidth | 1803 | Default isn't set. | -| [Set hours to limit foreground download bandwidth](#set-business-hours-to-limit-foreground-download-bandwidth) |DOSetHoursToLimitForegroundDownloadBandwidth | 1803 | Default isn't set. | -| [Delay background download from HTTP (in secs)](#delay-background-download-from-http-in-secs) | DODelayBackgroundDownloadFromHttp | 1803 | Default isn't set. For peering, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | -| [Delay foreground download from HTTP (in secs)](#delay-foreground-download-from-http-in-secs) | DODelayForegroundDownloadFromHttp | 1803 | Default isn't set. For peering, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options.| -| [Delay background download Cache Server fallback (in secs)](#delay-background-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackBackground | 1903 | Default isn't set. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options.| -| [Delay foreground download Cache Server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackForeground | 1903 | Default isn't set. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | -| [Cache Server Hostname](#cache-server-hostname) | DOCacheHost | 1809 | No value is set as default. | -| [Cache Server Hostname Source](#cache-server-hostname-source) | DOCacheHostSource | 2004 | No value is set as default. | +| [Set hours to limit foreground download bandwidth](#set-business-hours-to-limit-foreground-download-bandwidth) |DOSetHoursToLimitForegroundDownloadBandwidth | 1803 | Default isn't configured. | +| [Set hours to limit background download bandwidth](#set-business-hours-to-limit-background-download-bandwidth) | DOSetHoursToLimitBackgroundDownloadBandwidth | 1803 | Default isn't configured. | +| [Delay foreground download from HTTP (in secs)](#delay-foreground-download-from-http-in-secs) | DODelayForegroundDownloadFromHttp | 1803 | Default isn't configured. For peering, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options.| +| [Delay background download from HTTP (in secs)](#delay-background-download-from-http-in-secs) | DODelayBackgroundDownloadFromHttp | 1803 | Default isn't configured. For peering, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | +| [Delay foreground download cache server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackForeground | 1903 | Default isn't configured. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | +| [Delay background download cache server fallback (in secs)](#delay-background-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackBackground | 1903 | Default isn't configured. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options.| +| [Cache server hostname](#cache-server-hostname) | DOCacheHost | 1809 | No value is set as default. | +| [Cache server hostname source](#cache-server-hostname-source) | DOCacheHostSource | 2004 | No value is set as default. | | [Maximum download bandwidth](#maximum-download-bandwidth) | DOMaxDownloadBandwidth | 1607 (deprecated in Windows 10, version 2004); use [Maximum background download bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum foreground download bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| Default is '0' which will dynamically adjust. | | [Percentage of maximum download bandwidth](#percentage-of-maximum-download-bandwidth) | DOPercentageMaxDownloadBandwidth | 1607 (deprecated in Windows 10, version 2004); use [Maximum background download bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum foreground download bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| Default is '0' which will dynamically adjust. | | [Maximum upload bandwidth](#max-upload-bandwidth) | DOMaxUploadBandwidth | 1607 (deprecated in Windows 10, version 2004) | Default is '0' (unlimited). | @@ -73,14 +73,14 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz Delivery Optimization uses locally cached updates to deliver contact via peers. The more content available in the cache, the more likely that peering can be used. In cases where devices have enough local storage and you'd like to cache more content. Likewise, if you have limited storage and would prefer to cache less, use the following settings to adjust the Delivery Optimization cache to suit your scenario: -- [Max Cache Size](#max-cache-size) and [Absolute Max Cache Size](#absolute-max-cache-size) control the amount of space the Delivery Optimization cache can use. -- [Max Cache Age](#max-cache-age) controls the retention period for each update in the cache. -- The system drive is the default location for the Delivery Optimization cache. [Modify Cache Drive](#modify-cache-drive) allows administrators to change that location. +- [DOMaxCacheSize](#max-cache-size) and [DOAbsoluteMaxCacheSize](#absolute-max-cache-size) control the amount of space the Delivery Optimization cache can use. +- [DOMaxCacheAge](#max-cache-age) controls the retention period for each update in the cache. +- The system drive is the default location for the Delivery Optimization cache. [DOModifyCacheDrive](#modify-cache-drive) allows administrators to change that location. >[!NOTE] ->It is possible to configure preferred cache devices. For more information, see [Group ID](#group-id). +>It is possible to configure preferred cache devices. For more information, see [DOGroupID](#group-id). -All cached files have to be above a set minimum size. This size is automatically set by the Delivery Optimization cloud services, but when local storage is sufficient and the network isn't strained or congested, administrators might choose to change it to obtain increased performance. You can set the minimum size of files to cache by adjusting [Minimum Peer Caching Content File Size](#minimum-peer-caching-content-file-size). +All cached files have to be above a set minimum size. This size is automatically set by the Delivery Optimization cloud services, but when local storage is sufficient and the network isn't strained or congested, administrators might choose to change it to obtain increased performance. You can set the minimum size of files to cache by adjusting [DOMinFileSizeToCache](#minimum-peer-caching-content-file-size). #### Impact to network @@ -94,7 +94,7 @@ More options available that control the impact Delivery Optimization has on your - [Select a method to restrict Peer Selection](#select-a-method-to-restrict-peer-selection) restricts peer selection by the options you select. - [Select the source of Group IDs](#select-the-source-of-group-ids) restricts peer selection to a specific source. -#### Policies to prioritize the use of Peer-to-Peer and Cache Server sources +#### Policies to prioritize the use of peer-to-peer and cache server sources When Delivery Optimization client is configured to use peers and Microsoft Connected Cache (MCC), to achieve the best possible content delivery experience, the client connects to both MCC and peers in parallel. If the desired content can't be obtained from MCC or peers, Delivery Optimization will automatically fallback to the HTTP source to get the requested content. There are four settings that allow you to prioritize peer-to-peer or MCC sources by delaying the immediate fallback to HTTP source, which is the default behavior. @@ -105,7 +105,7 @@ When Delivery Optimization client is configured to use peers and Microsoft Conne ##### Microsoft Connected Cache (MCC) delay fallback settings -- [Delay foreground download Cache Server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use a cache server. +- [Delay foreground download cache server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use a cache server. - [Delay background download from HTTP (in secs)](#delay-background-download-from-http-in-secs) allows you to delay the use of an HTTP source in a background download that is allowed to use a cache server. **If both peer-to-peer and MCC are configured, the peer-to-peer delay settings will take precedence over the cache server delay settings.** This setting allows Delivery Optimization to discover peers first then recognize the fallback setting for the MCC cache server. @@ -161,15 +161,15 @@ Starting in Windows 10, version 1803, set this policy to restrict peer selection - 4 = DNS Suffix - 5 = Starting with Windows 10, version 1903, you can use the Microsoft Entra tenant ID as a means to define groups. To do this set the value for DOGroupIdSource to its new maximum value of 5. -When set, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also set. The default behavior, when the GroupID or GroupIDSource policies aren't set, is to determine the Group ID using AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. If GroupIDSource is set to either DHCP Option ID (3) or DNS Suffix (4) and those methods fail, the default behavior is used instead. The option set in this policy only applies to Group (2) download mode. If Group (2) isn't set as Download mode, this policy will be ignored. If you set the value to anything other than 0-5, the policy is ignored. +When set, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also set. The default behavior, when the GroupID or GroupIDSource policies aren't set, is to determine the Group ID using AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. If GroupIDSource is set to either DHCP Option ID (3) or DNS Suffix (4) and those methods fail, the default behavior is used instead. The option set in this policy only applies to Group (2) download mode. If Group (2) isn't configured as Download mode, this policy will be ignored. If you set the value to anything other than 0-5, the policy is ignored. -### Minimum RAM (inclusive) allowed to use Peer Caching +### Minimum RAM (inclusive) allowed to use peer caching MDM Setting: **DOMinRAMAllowedToPeer** This setting specifies the minimum RAM size in GB required to use Peer Caching. For example if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. The recommended values are 1 to 4, and **the default value is 4 GB**. -### Minimum disk size allowed to use Peer Caching +### Minimum disk size allowed to use peer caching MDM Setting: **DOMinDiskSizeAllowedToPeer** @@ -178,45 +178,37 @@ This setting specifies the required minimum disk size (capacity in GB) for the d >[!NOTE] >If the [Modify Cache Drive](#modify-cache-drive) policy is set, the disk size check applies to the new working directory specified by this policy. -### Max Cache Age +### Max cache age MDM Setting: **DOMaxCacheAge** In environments configured for Delivery Optimization, you might want to set an expiration on cached updates and Windows application installation files. If so, this setting defines the maximum number of seconds each file can be held in the Delivery Optimization cache on each Windows 10 client device. Alternatively, organizations might choose to set this value to "0" which means "unlimited" to avoid peers redownloading content. When "Unlimited" value is set, Delivery Optimization holds the files in the cache longer and cleans up the cache as needed (for example when the cache size exceeded the maximum space allowed). **The default value is 259,200 seconds (three days)**. -### Max Cache Size +### Max cache size MDM Setting: **DOMaxCacheSize** This setting limits the maximum amount of space the Delivery Optimization cache can use as a percentage of the available drive space, from 1 to 100. For example, if you set this value to 10 on a Windows client device that has 100 GB of available drive space, then Delivery Optimization uses up to 10 GB of that space. Delivery Optimization constantly assesses the available drive space and automatically clear the cache to keep the maximum cache size under the set percentage. **The default value is 20%**. -### Absolute Max Cache Size +### Absolute max cache size MDM Setting: **DOAbsoluteMaxCacheSize** -This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the [**Max Cache Size**](#max-cache-size) setting, which is a percentage of available disk space. Also, if you configure this policy, it overrides the [**Max Cache Size**](#max-cache-size) setting. **The default value is 10 GB**. +This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the [**Max Cache Size**](#max-cache-size) setting, which is a percentage of available disk space. Also, if you configure this policy, it overrides the [**Max Cache Size**](#max-cache-size) setting. **The default value is not set**. -### Minimum Peer Caching Content File Size +### Minimum peer caching content file size MDM Setting: **DOMinFileSizeToCache** This setting specifies the minimum content file size in MB enabled to use Peer Caching. The recommended values are from 1 to 100000. **The default file size is 50 MB** to participate in peering. -### Maximum Download Bandwidth - -MDM Setting: **DOMaxDownloadBandwidth** - -Deprecated in Windows 10, version 2004. -This setting specifies the maximum download bandwidth that can be used across all concurrent Delivery Optimization downloads in kilobytes per second (KB/s). **A default value of "0"** means that Delivery Optimization dynamically adjusts and optimizes the maximum bandwidth used. - - -### Maximum Foreground Download Bandwidth +### Maximum foreground download bandwidth MDM Setting: **DOPercentageMaxForegroundBandwidth** Starting in Windows 10, version 1803, specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads. However, downloads from LAN peers aren't throttled even when this policy is set. -### Maximum Background Download Bandwidth +### Maximum background download bandwidth MDM Setting: **DOPercentageMaxBackgroundBandwidth** @@ -225,31 +217,17 @@ Starting in Windows 10, version 1803, specifies the maximum background download > [!NOTE] > It is recommended to use the absolute value download options 'DOMaxBackgroundDownloadBandwidth' and 'DOMaxForegroundDownloadBandwidth', rather than percentage-based options, for low bandwidth environments. -### Percentage of Maximum Download Bandwidth - -MDM Setting: **DOPercentageMaxDownloadBandwidth** - -Deprecated in Windows 10, version 2004. -This setting specifies the maximum download bandwidth that Delivery Optimization can use across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. - -### Max Upload Bandwidth - -MDM Setting: **DOMaxUploadBandwidth** - -Deprecated in Windows 10, version 2004. -This setting allows you to limit the number of upload bandwidth individual clients can use for Delivery Optimization. Consider this setting when clients are providing content to requesting peers on the network. This option is set in kilobytes per second (KB/s). **The default value is "0" or "unlimited"** which means Delivery Optimization dynamically optimizes for minimal usage of upload bandwidth; however it doesn't cap the upload bandwidth rate at a set rate. - -### Set Business Hours to Limit Background Download Bandwidth - -MDM Setting: **DOSetHoursToLimitBackgroundDownloadBandwidth** - -Starting in Windows 10, version 1803, specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. **By default, this policy isn't set.** - -### Set Business Hours to Limit Foreground Download Bandwidth +### Set business hours to limit foreground download bandwidth MDM Setting: **DOSetHoursToLimitForegroundDownloadBandwidth** -Starting in Windows 10, version 1803, specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. **By default, this policy isn't set.** +Starting in Windows 10, version 1803, specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. **By default, this policy isn't configured.** + +### Set business hours to limit background download bandwidth + +MDM Setting: **DOSetHoursToLimitBackgroundDownloadBandwidth** + +Starting in Windows 10, version 1803, specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth. **By default, this policy isn't configured.** ### Select a method to restrict peer selection @@ -261,43 +239,43 @@ If Group mode is set, Delivery Optimization connects to locally discovered peers In Windows 11, the Local Peer Discovery (DNS-SD) option can be set via MDM or Group Policy. However, in Windows 10, this feature can be enabled by setting the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\DORestrictPeerSelectionBy` value to **2**. -### Delay background download from HTTP (in secs) - -MDM Setting: **DODelayBackgroundDownloadFromHttp** - -Starting in Windows 10, version 1803, this allows you to delay the use of an HTTP source in a background download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't set.** - ### Delay foreground download from HTTP (in secs) MDM Setting: **DODelayForegroundDownloadFromHttp** -Starting in Windows 10, version 1803, allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't set.** +Starting in Windows 10, version 1803, allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't configured.** -### Delay Foreground Download Cache Server Fallback (in secs) +### Delay background download from HTTP (in secs) + +MDM Setting: **DODelayBackgroundDownloadFromHttp** + +Starting in Windows 10, version 1803, this allows you to delay the use of an HTTP source in a background download that is allowed to use peer-to-peer. The maximum value is 4294967295 seconds. **By default, this policy isn't configured.** + +### Delay foreground download cache server fallback (in secs) MDM Setting: **DelayCacheServerFallbackForeground** -Starting in Windows 10, version 1903, allows you to delay the fallback from cache server to the HTTP source for foreground content download by X seconds. If the 'Delay foreground download from HTTP policy is set, it will apply first (to allow downloads from peers) and then this policy will be applied. **By default, this policy isn't set.** +Starting in Windows 10, version 1903, allows you to delay the fallback from cache server to the HTTP source for foreground content download by X seconds. If the 'Delay foreground download from HTTP policy is set, it will apply first (to allow download from peers). **By default, this policy isn't configured.** -### Delay Background Download Cache Server Fallback (in secs) +### Delay background download cache server fallback (in secs) MDM Setting: **DelayCacheServerFallbackBackground** -Starting in Windows 10, version 1903, set this policy to delay the fallback from cache server to the HTTP source for a background content download by X seconds. If the 'Delay background download from HTTP' policy is set, it will apply first (to allow downloads from peers) and then this policy will be applied. **By default, this policy isn't set.** +Starting in Windows 10, version 1903, set this policy to delay the fallback from cache server to the HTTP source for a background content download by X seconds. If the 'Delay background download from HTTP' policy is set, it will apply first (to allow downloads from peers) and then this policy will be applied. **By default, this policy isn't configured.** -### Minimum Background QoS +### Minimum background QoS MDM Setting: **DOMinBackgroundQoS** This value specifies the minimum download speed guarantee that a client attempts to achieve and will fulfill by downloading more kilobytes from HTTP sources. The lower this value is, the more content is sourced using peers on the network rather than HTTP sources. The higher this value, the more content is received from HTTP sources, versus peers on the local network. **The default value is 2500 KB/s.** -### Modify Cache Drive +### Modify cache drive MDM Setting: **DOModifyCacheDrive** This setting allows for an alternate Delivery Optimization cache location on the clients. **By default, the cache is stored on the operating system drive through the %SYSTEMDRIVE% environment variable.** You can set the value to an environment variable (for example, %SYSTEMDRIVE%), a drive letter (for example, D:), or a folder path (for example, D:\DOCache). -### Monthly Upload Data Cap +### Monthly upload data cap MDM Setting: **DOMonthlyUploadDataCap** @@ -309,7 +287,7 @@ MDM Setting: **DOAllowVPNPeerCaching** This setting determines whether a device will be allowed to participate in Peer Caching while connected to VPN. **By default, if a VPN connection is detected, peering isn't allowed, except when the 'Local Discovery' (DNS-SD) option is chosen.** Specify "true" to allow the device to participate in Peer Caching while connected via VPN to the domain network. The device can download from or upload to other domain network devices, either on VPN or on the corporate domain network. -### VPN Keywords +### VPN keywords MDM Setting: **DOVpnKeywords** @@ -321,7 +299,7 @@ MDM Setting: **DODisallowCacheServerDownloadsOnVPN** This policy disallows downloads from Connected Cache servers when the device connects via VPN. **By default, the device is allowed to download from Connected Cache when connected via VPN.** Set this policy if you prefer devices to download directly from the Internet when connected remotely (via VPN) instead of pulling from a Microsoft Connected Cache server deployed on your corporate network. -### Allow uploads while the device is on battery while under set Battery level +### Allow uploads while the device is on battery while under set battery level MDM Setting: **DOMinBatteryPercentageAllowedToUpload** @@ -331,7 +309,7 @@ The device can download from peers while on battery regardless of this policy. >[!IMPORTANT] > **By default, devices will not upload while on battery**. To enable uploads while on battery, you need to enable this policy and set the battery value under which uploads pause. -### Cache Server Hostname +### Cache server hostname MDM Setting: **DOCacheHost** @@ -340,7 +318,7 @@ Set this policy to designate one or more Microsoft Connected Cache servers to be >[!IMPORTANT] > Any value will signify that the policy is set. For example, an empty string ("") isn't considered empty. -### Cache Server Hostname Source +### Cache server hostname source MDM Setting: **DOCacheHostSource** @@ -356,7 +334,7 @@ Set this policy to designate Delivery Optimization in Network Cache servers thro > [!NOTE] > If you format the DHCP Option ID incorrectly, the client will fall back to the Cache Server Hostname policy value if that value has been set. -### Maximum Foreground Download Bandwidth (in KB/s) +### Maximum foreground download bandwidth (in KB/s) MDM Setting: **DOMaxForegroundDownloadBandwidth** @@ -364,10 +342,33 @@ Specifies the maximum foreground download bandwidth in kilobytes/second that the **The default value of "0" means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.** -### Maximum Background Download Bandwidth (in KB/s) +### Maximum background download bandwidth (in KB/s) MDM Setting: **DOMaxBackgroundDownloadBandwidth** Specifies the maximum background download bandwidth in kilobytes/second that the device can use across all concurrent download activities using Delivery Optimization. **The default value "0" means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.** + +## Deprecated policies + +### Maximum download bandwidth + +MDM Setting: **DOMaxDownloadBandwidth** + +Deprecated in Windows 10, version 2004. +This setting specifies the maximum download bandwidth that can be used across all concurrent Delivery Optimization downloads in kilobytes per second (KB/s). **A default value of "0"** means that Delivery Optimization dynamically adjusts and optimizes the maximum bandwidth used. + +### Percentage of maximum download bandwidth + +MDM Setting: **DOPercentageMaxDownloadBandwidth** + +Deprecated in Windows 10, version 2004. +This setting specifies the maximum download bandwidth that Delivery Optimization can use across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads. + +### Max upload bandwidth + +MDM Setting: **DOMaxUploadBandwidth** + +Deprecated in Windows 10, version 2004. +This setting allows you to limit the number of upload bandwidth individual clients can use for Delivery Optimization. Consider this setting when clients are providing content to requesting peers on the network. This option is set in kilobytes per second (KB/s). **The default value is "0" or "unlimited"** which means Delivery Optimization dynamically optimizes for minimal usage of upload bandwidth; however it doesn't cap the upload bandwidth rate at a set rate. diff --git a/windows/deployment/do/waas-delivery-optimization-setup.md b/windows/deployment/do/waas-delivery-optimization-setup.md index 3435fc58f4..0a8cced507 100644 --- a/windows/deployment/do/waas-delivery-optimization-setup.md +++ b/windows/deployment/do/waas-delivery-optimization-setup.md @@ -16,7 +16,7 @@ appliesto: - ✅ Windows 11 - ✅ Windows 10 - ✅ Delivery Optimization -ms.date: 08/15/2023 +ms.date: 05/23/2024 --- # Set up Delivery Optimization for Windows diff --git a/windows/deployment/do/waas-delivery-optimization.md b/windows/deployment/do/waas-delivery-optimization.md index caf711d69b..fa995d9ba8 100644 --- a/windows/deployment/do/waas-delivery-optimization.md +++ b/windows/deployment/do/waas-delivery-optimization.md @@ -16,7 +16,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 06/02/2023 +ms.date: 05/23/2024 --- # What is Delivery Optimization? @@ -39,32 +39,32 @@ For information about setting up Delivery Optimization, including tips for the b The following table lists the minimum Windows 10 version that supports Delivery Optimization: | Device type | Minimum Windows version -|------------------|---------------| -| Computers running Windows 10 | Windows 10 1511 | -| Computers running Server Core installations of Windows Server | Windows Server 2019 | -| Windows IoT devices | Windows 10 1803 | +|------------------|--------------- +| Computers running Windows 10 | Windows 10 1511 +| Computers running Server Core installations of Windows Server | Windows Server 2019 +| Windows IoT devices | Windows 10 1803 ### Types of download content supported by Delivery Optimization #### Windows Client | Windows Client | Minimum Windows version | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) -|------------------|---------------|----------------|----------|----------------| -| Windows Update ([feature updates quality updates, language packs, drivers](../update/get-started-updates-channels-tools.md#types-of-updates)) | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Windows 10/11 UWP Store apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: | | | -| Windows 10 Store for Business apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Windows Defender definition updates | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Intune Win32 apps| Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Microsoft 365 Apps and updates | Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Edge Browser Updates | Windows 10 1809, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Configuration Manager Express updates| Windows 10 1709 + Configuration Manager version 1711, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Dynamic updates| Windows 10 1903, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| MDM Agent | Windows 11 | :heavy_check_mark: | | | -| Xbox Game Pass (PC) | Windows 10 1809, Windows 11 | :heavy_check_mark: | | :heavy_check_mark: | -| Windows Package Manager| Windows 10 1809, Windows 11 | :heavy_check_mark: | | | -| MSIX Installer| Windows 10 2004, Windows 11 | :heavy_check_mark: | | | -| Teams (via MSIX Installer) | Windows 10 2004, Windows 11 | :heavy_check_mark: | | | +|------------------|---------------|----------------|----------|---------------- +| Windows Update ([feature updates quality updates, language packs, drivers](../update/get-started-updates-channels-tools.md#types-of-updates)) | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Windows 10/11 UWP Store apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: +| Windows 10 Store for Business apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Windows Defender definition updates | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Intune Win32 apps| Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Microsoft 365 Apps and updates | Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Edge Browser Updates | Windows 10 1809, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Configuration Manager Express updates| Windows 10 1709 + Configuration Manager version 1711, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Dynamic updates| Windows 10 1903, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| MDM Agent | Windows 11 | :heavy_check_mark: | | +| Xbox Game Pass (PC) | Windows 10 1809, Windows 11 | :heavy_check_mark: | | :heavy_check_mark: +| Windows Package Manager| Windows 10 1809, Windows 11 | :heavy_check_mark: | | +| MSIX Installer| Windows 10 2004, Windows 11 | :heavy_check_mark: | | +| Teams (via MSIX Installer) | Windows 10 2004, Windows 11 | :heavy_check_mark: | | #### Windows Server diff --git a/windows/deployment/do/waas-microsoft-connected-cache.md b/windows/deployment/do/waas-microsoft-connected-cache.md index 2ae4a2017f..a1cd9a0ca8 100644 --- a/windows/deployment/do/waas-microsoft-connected-cache.md +++ b/windows/deployment/do/waas-microsoft-connected-cache.md @@ -13,7 +13,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 06/02/2023 +ms.date: 05/23/2024 --- # What is Microsoft Connected Cache? diff --git a/windows/deployment/do/waas-optimize-windows-10-updates.md b/windows/deployment/do/waas-optimize-windows-10-updates.md index d145e150d9..330f5c1225 100644 --- a/windows/deployment/do/waas-optimize-windows-10-updates.md +++ b/windows/deployment/do/waas-optimize-windows-10-updates.md @@ -13,7 +13,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 02/14/2023 +ms.date: 05/23/2024 --- # Optimize Windows update delivery diff --git a/windows/deployment/do/whats-new-do.md b/windows/deployment/do/whats-new-do.md index d9a769354f..3b6e535c4f 100644 --- a/windows/deployment/do/whats-new-do.md +++ b/windows/deployment/do/whats-new-do.md @@ -13,12 +13,13 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 06/02/2023 +ms.date: 05/23/2024 --- # What's new in Delivery Optimization This article contains information about what's new in Delivery Optimization, a peer-to-peer distribution method in Windows 10 and Windows 11. + ## Microsoft Connected Cache (early preview) Microsoft Connected Cache (MCC) is a software-only caching solution that delivers Microsoft content within Enterprise networks. MCC can be deployed to as many bare-metal servers or VMs as needed, and is managed from a cloud portal. Cache nodes are created in the cloud portal and are configured by applying the client policy using management tools such as Intune. @@ -32,6 +33,13 @@ There are two different versions: ## New in Delivery Optimization for Windows +### General + +[Check out](http://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the two switches: + +- -p2p: Provides output specific to P2P settings, efficiency, and errors. +- -mcc: Provides output specific to MCC settings and verifies the client can access the cache server. + ### Windows 11 22H2 - New setting: Customize vpn detection by choosing custom keywords. Now, you don't have to rely on Delivery Optimization keywords to detect your Vpn. By using the new VpnKeywords configuration you can add keywords for Delivery Optimization to use when detecting a Vpn when in use. You can find this configuration **[VPN Keywords](waas-delivery-optimization-reference.md#vpn-keywords)** in Group Policy or MDM under **DOVpnKeywords**. From be6e0332abf68a3ca552e03dbac12f6b4273378c Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 24 May 2024 20:27:16 -0600 Subject: [PATCH 10/51] fix errors --- windows/deployment/do/TOC.yml | 2 +- .../deployment/do/mcc-enterprise-appendix.md | 20 +++++++++---------- windows/deployment/do/whats-new-do.md | 2 +- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/deployment/do/TOC.yml b/windows/deployment/do/TOC.yml index ad705d0de9..f0d64329cb 100644 --- a/windows/deployment/do/TOC.yml +++ b/windows/deployment/do/TOC.yml @@ -28,7 +28,7 @@ - name: Testing Delivery Optimization href: delivery-optimization-test.md - name: Delivery Optimization Troubleshooter - href: http://aka.ms/do-fix + href: https://aka.ms/do-fix - name: Microsoft Connected Cache items: - name: What is Microsoft Connected Cache? diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md index e755879ed3..a45a8f699f 100644 --- a/windows/deployment/do/mcc-enterprise-appendix.md +++ b/windows/deployment/do/mcc-enterprise-appendix.md @@ -41,7 +41,7 @@ Most customers choose to install their cache node on a Windows Server with a nes Microsoft Connected Cache for Enterprise and Education can be successfully installed on VMware. To do so, there are a couple of additional configurations to be made. Ensure the VM is turned off before making the following configuration changes: 1. Ensure that you're using ESX. In the VM settings, turn on the option **Expose hardware assisted virtualization to the guest OS**. -1. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**. +2. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**. ### Installing on Hyper-V @@ -57,16 +57,16 @@ To run this script: mccinstaller > Eflow > Diagnostics -1. Run the following commands: +2. Run the following commands: ```powershell Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process .\collectMccDiagnostics.ps1 ``` -1. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\**\mccdiagnostics\support_bundle_\$timestamp.tar.gz +3. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\**\mccdiagnostics\support_bundle_\$timestamp.tar.gz -1. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process. +4. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process. ## IoT Edge runtime @@ -99,15 +99,15 @@ You can either set your MCC IP address or FQDN using: From an elevated command prompt: -```powershell - reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f + ```powershell + reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f ``` -1. MDM path (version 1809 and later): +2. MDM path (version 1809 and later): `.Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost` -1. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`. +3. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`. :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png"::: @@ -119,14 +119,14 @@ To verify that the Delivery Optimization client can download content using MCC, :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected."::: -1. Verify downloads came from MCC by one of two methods: +2. Verify downloads came from MCC by one of two methods: - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*. :::image type="content" source="./images/ent-mcc-get-deliveryoptimizationstatus.png" alt-text="Screenshot of the output of Get-DeliveryOptimization | FT from PowerShell." lightbox="./images/ent-mcc-get-deliveryoptimizationstatus.png"::: - Using the Delivery Optimization Activity Monitor - + :::image type="content" source="./images/ent-mcc-delivery-optimization-activity.png" alt-text="Screenshot of the Delivery Optimization Activity Monitor."::: ## EFLOW diff --git a/windows/deployment/do/whats-new-do.md b/windows/deployment/do/whats-new-do.md index 3b6e535c4f..c9a0382033 100644 --- a/windows/deployment/do/whats-new-do.md +++ b/windows/deployment/do/whats-new-do.md @@ -35,7 +35,7 @@ There are two different versions: ### General -[Check out](http://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the two switches: +[Check out](https://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the two switches: - -p2p: Provides output specific to P2P settings, efficiency, and errors. - -mcc: Provides output specific to MCC settings and verifies the client can access the cache server. From 8bd9a0a26815a89fc727ef530d7d1a68913ee013 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Tue, 28 May 2024 11:57:16 -0600 Subject: [PATCH 11/51] fix table --- windows/deployment/do/delivery-optimization-test.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index 2ab71579fd..36f325b027 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -112,7 +112,7 @@ The following set of instructions will be used for each machine: |--------|-------------------------------- | :::image type="content" source="images/test-scenarios/win10/m2-basic-complete.png" alt-text="Windows 10 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win10/m2-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m2-basic-complete.png" alt-text="Windows 11 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win11/m2-basic-complete.png":::| | **Observations** | **Observations** -| - A peer was found for the content and 87% of total bytes came from the peer.
- One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
- Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
- 'DownloadDuration' is roughly the same between machines.
- A peer was found for the content and 90% of total bytes came from the peer.
- All other points are the same as Windows 10 results. +| - A peer was found for the content and 87% of total bytes came from the peer.
- One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
- Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
- 'DownloadDuration' is roughly the same between machines.| - A peer was found for the content and 90% of total bytes came from the peer.
- All other points are the same as Windows 10 results. ### Scenario 2: Advance Setup From ab42037e378f8284bfeef3a94f70b01c4f676998 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Tue, 28 May 2024 12:20:36 -0600 Subject: [PATCH 12/51] More accurately describe setting to be "configured" not set. --- .../waas-delivery-optimization-reference.md | 70 +++++++++---------- 1 file changed, 35 insertions(+), 35 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-reference.md b/windows/deployment/do/waas-delivery-optimization-reference.md index f641968b07..542334cdd0 100644 --- a/windows/deployment/do/waas-delivery-optimization-reference.md +++ b/windows/deployment/do/waas-delivery-optimization-reference.md @@ -34,10 +34,10 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | Group Policy setting | MDM setting | Supported from version | Notes | | --- | --- | --- | ------- | -| [Download mode](#download-mode) | DODownloadMode | 1511 | Default is set to LAN(1). The Group [Download mode](#download-mode) (2) combined with [Group ID](#group-id), enables administrators to create custom device groups that share content between devices in the group.| -| [Group ID](#group-id) | DOGroupID | 1511 | Used with Group [Download mode](#download-mode). If not set, check [GroupIDSource](#select-the-source-of-group-ids). When GroupID or GroupIDSource policies aren't set, the GroupID is defined as the AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. | -| [Select the source of Group IDs](#select-the-source-of-group-ids) | DOGroupIDSource | 1803 | If not set, check [Group ID](#group-id). When the GroupID or GroupIDSource policies aren't set, the Group is defined as the AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. | -| [Select a method to restrict peer selection](#select-a-method-to-restrict-peer-selection) | DORestrictPeerSelectionBy | 1803 | Starting in Windows 11, a new option to use 'Local discovery (DNS-SD)' is available to set via this policy. | +| [Download mode](#download-mode) | DODownloadMode | 1511 | Default is configured to LAN(1). The Group [Download mode](#download-mode) (2) combined with [Group ID](#group-id), enables administrators to create custom device groups that share content between devices in the group.| +| [Group ID](#group-id) | DOGroupID | 1511 | Used with Group [Download mode](#download-mode). If not configured, check [GroupIDSource](#select-the-source-of-group-ids). When GroupID or GroupIDSource policies aren't configured, the GroupID is defined as the AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. | +| [Select the source of Group IDs](#select-the-source-of-group-ids) | DOGroupIDSource | 1803 | If not configured, check [Group ID](#group-id). When the GroupID or GroupIDSource policies aren't configured, the Group is defined as the AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. | +| [Select a method to restrict peer selection](#select-a-method-to-restrict-peer-selection) | DORestrictPeerSelectionBy | 1803 | Starting in Windows 11, a new option to use 'Local discovery (DNS-SD)' is available to configured via this policy. | | [Minimum RAM (inclusive) allowed to use peer caching](#minimum-ram-inclusive-allowed-to-use-peer-caching) | DOMinRAMAllowedToPeer | 1703 | Default value is 4 GB. | | [Minimum disk size allowed to use peer caching](#minimum-disk-size-allowed-to-use-peer-caching) | DOMinDiskSizeAllowedToPeer | 1703 | Default value is 32 GB. | | [Max cache age](#max-cache-age) | DOMaxCacheAge | 1511 | Default value is 259,200 seconds (three days). | @@ -61,8 +61,8 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | [Delay background download from HTTP (in secs)](#delay-background-download-from-http-in-secs) | DODelayBackgroundDownloadFromHttp | 1803 | Default isn't configured. For peering, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | | [Delay foreground download cache server fallback (in secs)](#delay-foreground-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackForeground | 1903 | Default isn't configured. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options. | | [Delay background download cache server fallback (in secs)](#delay-background-download-cache-server-fallback-in-secs) | DelayCacheServerFallbackBackground | 1903 | Default isn't configured. For Microsoft Connected Cache content, use this policy to delay the fallback to the HTTP source. [Learn more](#policies-to-prioritize-the-use-of-peer-to-peer-and-cache-server-sources) about the different delay options.| -| [Cache server hostname](#cache-server-hostname) | DOCacheHost | 1809 | No value is set as default. | -| [Cache server hostname source](#cache-server-hostname-source) | DOCacheHostSource | 2004 | No value is set as default. | +| [Cache server hostname](#cache-server-hostname) | DOCacheHost | 1809 | No value is configured as default. | +| [Cache server hostname source](#cache-server-hostname-source) | DOCacheHostSource | 2004 | No value is configured as default. | | [Maximum download bandwidth](#maximum-download-bandwidth) | DOMaxDownloadBandwidth | 1607 (deprecated in Windows 10, version 2004); use [Maximum background download bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum foreground download bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| Default is '0' which will dynamically adjust. | | [Percentage of maximum download bandwidth](#percentage-of-maximum-download-bandwidth) | DOPercentageMaxDownloadBandwidth | 1607 (deprecated in Windows 10, version 2004); use [Maximum background download bandwidth (in KB/s)](#maximum-background-download-bandwidth-in-kbs) or [Maximum foreground download bandwidth (in KB/s)](#maximum-foreground-download-bandwidth-in-kbs) instead)| Default is '0' which will dynamically adjust. | | [Maximum upload bandwidth](#max-upload-bandwidth) | DOMaxUploadBandwidth | 1607 (deprecated in Windows 10, version 2004) | Default is '0' (unlimited). | @@ -114,8 +114,8 @@ When Delivery Optimization client is configured to use peers and Microsoft Conne Administrators can further customize scenarios where Delivery Optimization is used with the following settings: -- [Minimum RAM (inclusive) allowed to use Peer Caching](#minimum-ram-inclusive-allowed-to-use-peer-caching) sets the minimum RAM required for peer caching to be enabled. -- [Minimum disk size allowed to use Peer Caching](#minimum-disk-size-allowed-to-use-peer-caching) sets the minimum disk size required for peer caching to be enabled. +- [Minimum RAM (inclusive) allowed to use Peer Caching](#minimum-ram-inclusive-allowed-to-use-peer-caching) configures the minimum RAM required for peer caching to be enabled. +- [Minimum disk size allowed to use Peer Caching](#minimum-disk-size-allowed-to-use-peer-caching) configures the minimum disk size required for peer caching to be enabled. - [Enable Peer Caching while the device connects via VPN](#enable-peer-caching-while-the-device-connects-via-vpn) allows clients connected through VPN to use peer caching. - [Allow uploads while the device is on battery while under set Battery level](#allow-uploads-while-the-device-is-on-battery-while-under-set-battery-level) controls the minimum battery level required for uploads to occur. You must enable this policy to allow upload while on battery. @@ -125,14 +125,14 @@ MDM Setting: **DODownloadMode** Download mode dictates which download sources clients are allowed to use when downloading Windows updates in addition to Windows Update servers. The following table shows the available download mode options and what they do. Other technical details for these policies are available in [Policy CSP - Delivery Optimization](/windows/client-management/mdm/policy-csp-deliveryoptimization). -| Download mode option | Functionality when set | +| Download mode option | Functionality when configured | | --- | --- | | HTTP Only (0) | This setting disables peer-to-peer caching but still allows Delivery Optimization to download content over HTTP from the download's original source or a Microsoft Connected Cache server. This mode uses additional metadata provided by the Delivery Optimization cloud services for a peerless reliable and efficient download experience. | | LAN (**1 - Default**) | This default operating mode for Delivery Optimization enables peer sharing on the same network. The Delivery Optimization cloud service finds other clients that connect to the Internet using the same public IP as the target client. These clients then try to connect to other peers on the same network by using their private subnet IP.| | Group (2) | When group mode is set, the group is automatically selected based on the device's Active Directory Domain Services (AD DS) site (Windows 10, version 1607) or the domain the device is authenticated to (Windows 10, version 1511). In group mode, peering occurs across internal subnets, between devices that belong to the same group, including devices in remote offices. You can use GroupID option to create your own custom group independently of domains and AD DS sites. Starting with Windows 10, version 1803, you can use the GroupIDSource parameter to take advantage of other method to create groups dynamically. Group download mode is the recommended option for most organizations looking to achieve the best bandwidth optimization with Delivery Optimization. | | Internet (3) | Enable Internet peer sources for Delivery Optimization. | | Simple (99) | Simple mode disables the use of Delivery Optimization cloud services completely (for offline environments). Delivery Optimization switches to this mode automatically when the Delivery Optimization cloud services are unavailable, unreachable, or when the content file size is less than 10 MB. In this mode, Delivery Optimization provides a reliable download experience over HTTP from the download's original source or a Microsoft Connected Cache server, with no peer-to-peer caching. | -| Bypass (100) | Starting in Windows 11, this option is deprecated. Don't set **Download mode** to '100' (Bypass), which can cause some content to fail to download. If you want to disable peer-to-peer functionality, set DownloadMode to (0). If your device doesn't have internet access, set Download Mode to (99). When you set Bypass (100), the download bypasses Delivery Optimization and uses BITS instead. You don't need to set this option if you're using Configuration Manager. | +| Bypass (100) | Starting in Windows 11, this option is deprecated. Don't configure **Download mode** to '100' (Bypass), which can cause some content to fail to download. If you want to disable peer-to-peer functionality, configure DownloadMode to (0). If your device doesn't have internet access, configure Download Mode to (99). When you configure Bypass (100), the download bypasses Delivery Optimization and uses BITS instead. You don't need to configure this option if you're using Configuration Manager. | > [!NOTE] > When you use Microsoft Entra tenant, AD Site, or AD Domain as the source of group IDs, the association of devices participating in the group should not be relied on for an authentication of identity of those devices. @@ -152,16 +152,16 @@ By default, peer sharing on clients using the Group download mode (option 2) is MDM Setting: **DOGroupIDSource** -Starting in Windows 10, version 1803, set this policy to restrict peer selection to a specific source, when using a GroupID policy. The options are: +Starting in Windows 10, version 1803, configure this policy to restrict peer selection to a specific source, when using a GroupID policy. The options are: - 0 = Not set - 1 = AD Site - 2 = Authenticated domain SID - 3 = DHCP Option ID (with this option, the client queries DHCP Option ID 234 and use the returned GUID value as the Group ID) - 4 = DNS Suffix -- 5 = Starting with Windows 10, version 1903, you can use the Microsoft Entra tenant ID as a means to define groups. To do this set the value for DOGroupIdSource to its new maximum value of 5. +- 5 = Starting with Windows 10, version 1903, you can use the Microsoft Entra tenant ID as a means to define groups. To do this configure the value for DOGroupIdSource to its new maximum value of 5. -When set, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also set. The default behavior, when the GroupID or GroupIDSource policies aren't set, is to determine the Group ID using AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. If GroupIDSource is set to either DHCP Option ID (3) or DNS Suffix (4) and those methods fail, the default behavior is used instead. The option set in this policy only applies to Group (2) download mode. If Group (2) isn't configured as Download mode, this policy will be ignored. If you set the value to anything other than 0-5, the policy is ignored. +When configured, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also configured. The default behavior, when the GroupID or GroupIDSource policies aren't configured, is to determine the Group ID using AD Site (1), Authenticated domain SID (2) or Microsoft Entra tenant ID (5), in that order. If GroupIDSource is configured to either DHCP Option ID (3) or DNS Suffix (4) and those methods fail, the default behavior is used instead. The option configured in this policy only applies to Group (2) download mode. If Group (2) isn't configured as Download mode, this policy will be ignored. If you configure the value to anything other than 0-5, the policy is ignored. ### Minimum RAM (inclusive) allowed to use peer caching @@ -176,25 +176,25 @@ MDM Setting: **DOMinDiskSizeAllowedToPeer** This setting specifies the required minimum disk size (capacity in GB) for the device to use Peer Caching. The recommended values are 64 to 256, and **the default value is 32 GB**. >[!NOTE] ->If the [Modify Cache Drive](#modify-cache-drive) policy is set, the disk size check applies to the new working directory specified by this policy. +>If the [Modify Cache Drive](#modify-cache-drive) policy is configured, the disk size check applies to the new working directory specified by this policy. ### Max cache age MDM Setting: **DOMaxCacheAge** -In environments configured for Delivery Optimization, you might want to set an expiration on cached updates and Windows application installation files. If so, this setting defines the maximum number of seconds each file can be held in the Delivery Optimization cache on each Windows 10 client device. Alternatively, organizations might choose to set this value to "0" which means "unlimited" to avoid peers redownloading content. When "Unlimited" value is set, Delivery Optimization holds the files in the cache longer and cleans up the cache as needed (for example when the cache size exceeded the maximum space allowed). **The default value is 259,200 seconds (three days)**. +In environments configured for Delivery Optimization, you might want to configure an expiration on cached updates and Windows application installation files. If so, this setting defines the maximum number of seconds each file can be held in the Delivery Optimization cache on each Windows 10 client device. Alternatively, organizations might choose to configure this value to "0" which means "unlimited" to avoid peers redownloading content. When "Unlimited" value is configured, Delivery Optimization holds the files in the cache longer and cleans up the cache as needed (for example when the cache size exceeded the maximum space allowed). **The default value is 259,200 seconds (three days)**. ### Max cache size MDM Setting: **DOMaxCacheSize** -This setting limits the maximum amount of space the Delivery Optimization cache can use as a percentage of the available drive space, from 1 to 100. For example, if you set this value to 10 on a Windows client device that has 100 GB of available drive space, then Delivery Optimization uses up to 10 GB of that space. Delivery Optimization constantly assesses the available drive space and automatically clear the cache to keep the maximum cache size under the set percentage. **The default value is 20%**. +This setting limits the maximum amount of space the Delivery Optimization cache can use as a percentage of the available drive space, from 1 to 100. For example, if you configure this value to 10 on a Windows client device that has 100 GB of available drive space, then Delivery Optimization uses up to 10 GB of that space. Delivery Optimization constantly assesses the available drive space and automatically clear the cache to keep the maximum cache size under the configured percentage. **The default value is 20%**. ### Absolute max cache size MDM Setting: **DOAbsoluteMaxCacheSize** -This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the [**Max Cache Size**](#max-cache-size) setting, which is a percentage of available disk space. Also, if you configure this policy, it overrides the [**Max Cache Size**](#max-cache-size) setting. **The default value is not set**. +This setting specifies the maximum number of gigabytes the Delivery Optimization cache can use. This is different from the [**Max Cache Size**](#max-cache-size) setting, which is a percentage of available disk space. Also, if you configure this policy, it overrides the [**Max Cache Size**](#max-cache-size) setting. **The default value is not configured**. ### Minimum peer caching content file size @@ -206,13 +206,13 @@ This setting specifies the minimum content file size in MB enabled to use Peer C MDM Setting: **DOPercentageMaxForegroundBandwidth** -Starting in Windows 10, version 1803, specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads. However, downloads from LAN peers aren't throttled even when this policy is set. +Starting in Windows 10, version 1803, specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads. However, downloads from LAN peers aren't throttled even when this policy is configured. ### Maximum background download bandwidth MDM Setting: **DOPercentageMaxBackgroundBandwidth** -Starting in Windows 10, version 1803, specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads. However, downloads from LAN peers aren't throttled even when this policy is set. +Starting in Windows 10, version 1803, specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. **The default value of "0"** means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads. However, downloads from LAN peers aren't throttled even when this policy is configured. > [!NOTE] > It is recommended to use the absolute value download options 'DOMaxBackgroundDownloadBandwidth' and 'DOMaxForegroundDownloadBandwidth', rather than percentage-based options, for low bandwidth environments. @@ -233,11 +233,11 @@ Starting in Windows 10, version 1803, specifies the maximum background download MDM Setting: **DORestrictPeerSelectionBy** -Starting in Windows 10, version 1803, set this policy to restrict peer selection via selected option. In Windows 11, the 'Local Peer Discovery' option was introduced to restrict peer discovery to the local network. Currently the available options include: 0 = NAT, 1 = Subnet mask, and 2 = Local Peer Discovery. These options apply to both Download Modes LAN (1) and Group (2) and therefore means there's no peering between subnets. +Starting in Windows 10, version 1803, configure this policy to restrict peer selection via selected option. In Windows 11, the 'Local Peer Discovery' option was introduced to restrict peer discovery to the local network. Currently the available options include: 0 = NAT, 1 = Subnet mask, and 2 = Local Peer Discovery. These options apply to both Download Modes LAN (1) and Group (2) and therefore means there's no peering between subnets. -If Group mode is set, Delivery Optimization connects to locally discovered peers that are also part of the same Group (have the same Group ID). +If Group mode is configured, Delivery Optimization connects to locally discovered peers that are also part of the same Group (have the same Group ID). -In Windows 11, the Local Peer Discovery (DNS-SD) option can be set via MDM or Group Policy. However, in Windows 10, this feature can be enabled by setting the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\DORestrictPeerSelectionBy` value to **2**. +In Windows 11, the Local Peer Discovery (DNS-SD) option can be configured via MDM or Group Policy. However, in Windows 10, this feature can be enabled by setting the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\DORestrictPeerSelectionBy` value to **2**. ### Delay foreground download from HTTP (in secs) @@ -255,13 +255,13 @@ Starting in Windows 10, version 1803, this allows you to delay the use of an HTT MDM Setting: **DelayCacheServerFallbackForeground** -Starting in Windows 10, version 1903, allows you to delay the fallback from cache server to the HTTP source for foreground content download by X seconds. If the 'Delay foreground download from HTTP policy is set, it will apply first (to allow download from peers). **By default, this policy isn't configured.** +Starting in Windows 10, version 1903, allows you to delay the fallback from cache server to the HTTP source for foreground content download by X seconds. If the 'Delay foreground download from HTTP policy is configured, it will apply first (to allow download from peers). **By default, this policy isn't configured.** ### Delay background download cache server fallback (in secs) MDM Setting: **DelayCacheServerFallbackBackground** -Starting in Windows 10, version 1903, set this policy to delay the fallback from cache server to the HTTP source for a background content download by X seconds. If the 'Delay background download from HTTP' policy is set, it will apply first (to allow downloads from peers) and then this policy will be applied. **By default, this policy isn't configured.** +Starting in Windows 10, version 1903, configure this policy to delay the fallback from cache server to the HTTP source for a background content download by X seconds. If the 'Delay background download from HTTP' policy is configured, it will apply first (to allow downloads from peers) and then this policy will be applied. **By default, this policy isn't configured.** ### Minimum background QoS @@ -273,7 +273,7 @@ This value specifies the minimum download speed guarantee that a client attempts MDM Setting: **DOModifyCacheDrive** -This setting allows for an alternate Delivery Optimization cache location on the clients. **By default, the cache is stored on the operating system drive through the %SYSTEMDRIVE% environment variable.** You can set the value to an environment variable (for example, %SYSTEMDRIVE%), a drive letter (for example, D:), or a folder path (for example, D:\DOCache). +This setting allows for an alternate Delivery Optimization cache location on the clients. **By default, the cache is stored on the operating system drive through the %SYSTEMDRIVE% environment variable.** You can configure the value to an environment variable (for example, %SYSTEMDRIVE%), a drive letter (for example, D:), or a folder path (for example, D:\DOCache). ### Monthly upload data cap @@ -291,32 +291,32 @@ This setting determines whether a device will be allowed to participate in Peer MDM Setting: **DOVpnKeywords** -This policy allows you to set one or more comma-separated keywords used to recognize VPN connections. **By default, this policy is not set so if a VPN is detected, the device will not use peering.** Delivery Optimization automatically detects a VPN connection by looking at the network adapter's 'Description' and 'FriendlyName' strings using the default keyword list including: "VPN", "Secure", and "Virtual Private Network" (ex: "MSFTVPN" matches the "VPN" keyword). As the number of VPNs grow it's difficult to support an ever-changing list of VPN names. To address this, we've introduced this new setting to set unique VPN names to meet the needs of individual environments. +This policy allows you to configure one or more comma-separated keywords used to recognize VPN connections. **By default, this policy is not configured so if a VPN is detected, the device will not use peering.** Delivery Optimization automatically detects a VPN connection by looking at the network adapter's 'Description' and 'FriendlyName' strings using the default keyword list including: "VPN", "Secure", and "Virtual Private Network" (ex: "MSFTVPN" matches the "VPN" keyword). As the number of VPNs grow it's difficult to support an ever-changing list of VPN names. To address this, we've introduced this new setting to add unique VPN names to meet the needs of individual environments. ### Disallow cache server downloads on VPN MDM Setting: **DODisallowCacheServerDownloadsOnVPN** -This policy disallows downloads from Connected Cache servers when the device connects via VPN. **By default, the device is allowed to download from Connected Cache when connected via VPN.** Set this policy if you prefer devices to download directly from the Internet when connected remotely (via VPN) instead of pulling from a Microsoft Connected Cache server deployed on your corporate network. +This policy disallows downloads from Connected Cache servers when the device connects via VPN. **By default, the device is allowed to download from Connected Cache when connected via VPN.** Configure this policy if you prefer devices to download directly from the Internet when connected remotely (via VPN) instead of pulling from a Microsoft Connected Cache server deployed on your corporate network. ### Allow uploads while the device is on battery while under set battery level MDM Setting: **DOMinBatteryPercentageAllowedToUpload** -This setting specifies battery levels at which a device will be allowed to upload data. Specify any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on DC power (Battery). Uploads will automatically pause when the battery level drops below the set minimum battery level. The recommended value to set if you allow uploads on battery is 40 (for 40%). +This setting specifies battery levels at which a device will be allowed to upload data. Specify any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on DC power (Battery). Uploads will automatically pause when the battery level drops below the configured minimum battery level. The recommended value to configure, if you allow uploads on battery, is 40 (for 40%). The device can download from peers while on battery regardless of this policy. >[!IMPORTANT] -> **By default, devices will not upload while on battery**. To enable uploads while on battery, you need to enable this policy and set the battery value under which uploads pause. +> **By default, devices will not upload while on battery**. To enable uploads while on battery, you need to enable this policy and configure the battery value under which uploads pause. ### Cache server hostname MDM Setting: **DOCacheHost** -Set this policy to designate one or more Microsoft Connected Cache servers to be used by Delivery Optimization. You can set one or more FQDNs or IP Addresses that are comma-separated, for example: myhost.somerandomhost.com,myhost2.somerandomhost.com,10.10.1.7. **By default, this policy has no value.** Delivery Optimization client will connect to the listed Microsoft Connected Cache servers in the order as they are listed. When multiple FQDNs or IP Addresses are listed, fallback to the CDN occurs immediately after the first failure in downloading from a cache server, unless the [DelayCacheServerFallbackBackground](#delay-background-download-cache-server-fallback-in-secs) or [DelayCacheServerFallbackForeground](#delay-foreground-download-cache-server-fallback-in-secs) policies are set. When these delay policies are set, the fallback occurs only after the configured delay time and the client continues to attempt connecting to the cache servers in round robin order before the delay time expires. +Configure this policy to designate one or more Microsoft Connected Cache servers to be used by Delivery Optimization. You can set one or more FQDNs or IP Addresses that are comma-separated, for example: myhost.somerandomhost.com,myhost2.somerandomhost.com,10.10.1.7. **By default, this policy has no value.** Delivery Optimization client will connect to the listed Microsoft Connected Cache servers in the order as they are listed. When multiple FQDNs or IP Addresses are listed, fallback to the CDN occurs immediately after the first failure in downloading from a cache server, unless the [DelayCacheServerFallbackBackground](#delay-background-download-cache-server-fallback-in-secs) or [DelayCacheServerFallbackForeground](#delay-foreground-download-cache-server-fallback-in-secs) policies are configured. When these delay policies are configured, the fallback occurs only after the configured delay time and the client continues to attempt connecting to the cache servers in round robin order before the delay time expires. >[!IMPORTANT] -> Any value will signify that the policy is set. For example, an empty string ("") isn't considered empty. +> Any value will signify that the policy is configured. For example, an empty string ("") isn't considered empty. ### Cache server hostname source @@ -327,12 +327,12 @@ This policy allows you to specify how your client(s) can discover Delivery Optim - 1 = DHCP Option 235. - 2 = DHCP Option 235 Force. -With either option, the client queries DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if set. **By default, this policy has no value.** +With either option, the client queries DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if configured. **By default, this policy has no value.** -Set this policy to designate Delivery Optimization in Network Cache servers through a custom DHCP Option. Specify the custom DHCP option on your DHCP server as *text* type. You can add one or more values as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address with commas. +Configure this policy to designate Delivery Optimization in Network Cache servers through a custom DHCP Option. Specify the custom DHCP option on your DHCP server as *text* type. You can add one or more values as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address with commas. > [!NOTE] -> If you format the DHCP Option ID incorrectly, the client will fall back to the Cache Server Hostname policy value if that value has been set. +> If you format the DHCP Option ID incorrectly, the client will fall back to the Cache Server Hostname policy value if that value has been configured. ### Maximum foreground download bandwidth (in KB/s) @@ -371,4 +371,4 @@ This setting specifies the maximum download bandwidth that Delivery Optimization MDM Setting: **DOMaxUploadBandwidth** Deprecated in Windows 10, version 2004. -This setting allows you to limit the number of upload bandwidth individual clients can use for Delivery Optimization. Consider this setting when clients are providing content to requesting peers on the network. This option is set in kilobytes per second (KB/s). **The default value is "0" or "unlimited"** which means Delivery Optimization dynamically optimizes for minimal usage of upload bandwidth; however it doesn't cap the upload bandwidth rate at a set rate. +This setting allows you to limit the number of upload bandwidth individual clients can use for Delivery Optimization. Consider this setting when clients are providing content to requesting peers on the network. This option is configured in kilobytes per second (KB/s). **The default value is "0" or "unlimited"** which means Delivery Optimization dynamically optimizes for minimal usage of upload bandwidth; however it doesn't cap the upload bandwidth rate at a set rate. From 1beaa72abd702eeb2313cf8e8b465375b92a4d82 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 May 2024 10:22:35 -0700 Subject: [PATCH 13/51] Update mcc-enterprise-update-uninstall.md fix acrolinx score --- windows/deployment/do/mcc-enterprise-update-uninstall.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/do/mcc-enterprise-update-uninstall.md b/windows/deployment/do/mcc-enterprise-update-uninstall.md index 7f09c9c9a5..8ffa3c50c7 100644 --- a/windows/deployment/do/mcc-enterprise-update-uninstall.md +++ b/windows/deployment/do/mcc-enterprise-update-uninstall.md @@ -39,9 +39,9 @@ For example: --> # Uninstall MCC -Please contact the MCC Team before uninstalling to let us know if you're facing issues. +Contact the MCC Team before uninstalling to let us know if you're facing issues. -This script will remove the following items: +This script removes the following items: 1. EFLOW + Linux VM 1. IoT Edge From 66a35a5c772711d23da665aa4611ba26858d7a8b Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 May 2024 11:32:05 -0600 Subject: [PATCH 14/51] Update windows/deployment/do/delivery-optimization-test.md Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com> --- windows/deployment/do/delivery-optimization-test.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index 36f325b027..eda3e89402 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -21,7 +21,7 @@ ms.date: 11/08/2022 ## Overview -Delivery Optimization is a powerful and useful tool to help enterprises manage bandwidth usage for downloading Microsoft content. It's a solution designed to be used in large-scal05/23/2024e environments with large numbers of devices, various content sizes, etc. Delivery Optimization is native to currently supported versions of Windows and provides default configuration to get the most out of the typical customer environment. Delivery Optimization is used to deliver many different types of content, so Microsoft customers enjoy the best possible download experience for their environment. There are three components to Delivery Optimization: +Delivery Optimization is a powerful and useful tool to help enterprises manage bandwidth usage for downloading Microsoft content. It's a solution designed to be used in large-scale environments with large numbers of devices, various content sizes, etc. Delivery Optimization is native to currently supported versions of Windows and provides default configuration to get the most out of the typical customer environment. Delivery Optimization is used to deliver many different types of content, so Microsoft customers enjoy the best possible download experience for their environment. There are three components to Delivery Optimization: 1. HTTP downloader. 1. Peer-to-peer (P2P) cloud technology. From 1813e9abf1a86bbbc75bc8fb36bedb227383539b Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 May 2024 11:32:28 -0600 Subject: [PATCH 15/51] Update windows/deployment/do/mcc-enterprise-deploy.md Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com> --- windows/deployment/do/mcc-enterprise-deploy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md index 8ddf51a732..19084b7f76 100644 --- a/windows/deployment/do/mcc-enterprise-deploy.md +++ b/windows/deployment/do/mcc-enterprise-deploy.md @@ -409,7 +409,7 @@ To configure the device to work with your DNS, use the following steps: Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container: Run ``` Get-EflowVmEndpoint ``` to get interface name -Once you get the name +Once you get the name: ```bash Set-EflowVmDNSServers -vendpointName "interface name from above" -dnsServers @("DNS_IP_ADDRESS") From d523958ec4bf7804a6179506f406d8d942fc940d Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 11:45:01 -0600 Subject: [PATCH 16/51] Fix tables --- .../do/waas-delivery-optimization-monitor.md | 2 +- .../do/waas-delivery-optimization.md | 30 +++++++++---------- 2 files changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index bc2e0b442b..31ae1962f5 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -50,7 +50,7 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | BytesFromHTTP | Total number of bytes received over HTTP. This metric represents all HTTP sources, **which includes BytesFromCacheServer** | | Status | Current state of the operation. Possible values are: **Downloading** (download in progress); **Complete** (download completed, but isn't uploading yet); **Caching** (download completed successfully and is ready to upload or uploading); **Paused** (download/upload paused by caller) | | Priority | Priority of the download; values are **foreground** or **background** | -| BytesFromCacheServer | Total number of bytes received from cache Bserver (MCC) | +| BytesFromCacheServer | Total number of bytes received from cache server (MCC) | | BytesFromLanPeers | Total number of bytes received from peers found on the LAN | | BytesFromGroupPeers | Total number of bytes received from peers found in the group. (Note: Group mode is LAN + Group. If peers are found on the LAN, those bytes are registered in 'BytesFromLANPeers'.) | | BytesFromInternetPeers | Total number of bytes received from internet peers | diff --git a/windows/deployment/do/waas-delivery-optimization.md b/windows/deployment/do/waas-delivery-optimization.md index fa995d9ba8..03467f0c55 100644 --- a/windows/deployment/do/waas-delivery-optimization.md +++ b/windows/deployment/do/waas-delivery-optimization.md @@ -48,34 +48,34 @@ The following table lists the minimum Windows 10 version that supports Delivery #### Windows Client -| Windows Client | Minimum Windows version | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) -|------------------|---------------|----------------|----------|---------------- -| Windows Update ([feature updates quality updates, language packs, drivers](../update/get-started-updates-channels-tools.md#types-of-updates)) | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Windows 10/11 UWP Store apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: -| Windows 10 Store for Business apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Windows Defender definition updates | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Intune Win32 apps| Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Microsoft 365 Apps and updates | Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Edge Browser Updates | Windows 10 1809, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Configuration Manager Express updates| Windows 10 1709 + Configuration Manager version 1711, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: -| Dynamic updates| Windows 10 1903, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: +| Windows Client | Minimum Windows version | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) | +|------------------|---------------|----------------|----------|----------------| +| Windows Update ([feature updates quality updates, language packs, drivers](../update/get-started-updates-channels-tools.md#types-of-updates)) | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Windows 10/11 UWP Store apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: | +| Windows 10 Store for Business apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Windows Defender definition updates | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Intune Win32 apps| Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Microsoft 365 Apps and updates | Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Edge Browser Updates | Windows 10 1809, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Configuration Manager Express updates| Windows 10 1709 + Configuration Manager version 1711, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | +| Dynamic updates| Windows 10 1903, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | MDM Agent | Windows 11 | :heavy_check_mark: | | -| Xbox Game Pass (PC) | Windows 10 1809, Windows 11 | :heavy_check_mark: | | :heavy_check_mark: +| Xbox Game Pass (PC) | Windows 10 1809, Windows 11 | :heavy_check_mark: | | :heavy_check_mark: | | Windows Package Manager| Windows 10 1809, Windows 11 | :heavy_check_mark: | | | MSIX Installer| Windows 10 2004, Windows 11 | :heavy_check_mark: | | | Teams (via MSIX Installer) | Windows 10 2004, Windows 11 | :heavy_check_mark: | | #### Windows Server -| Windows Server | Minimum Windows version | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) +| Windows Server | Minimum Windows version | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) | |----------------|--------------------------|----------------|----------|----------------| | Windows Update | Windows Server 2019 (1809) | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Edge Browser Updates | Windows Server 2019 (1809) | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | #### Linux (Public Preview) -| Linux ([Public Preview](https://github.com/microsoft/do-client)) | Linux versions | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) +| Linux ([Public Preview](https://github.com/microsoft/do-client)) | Linux versions | HTTP Downloader | Peer to Peer | Microsoft Connected Cache (MCC) | |------------------------|----------------|-----------------|--------------|---------------| | Device Update for IoT Hub | Ubuntu 18.04, 20.04 / Debian 9, 10 | :heavy_check_mark: | | :heavy_check_mark: | > [!NOTE] From 9cd90cd8ad9a970647762a7ff0de4e416716297e Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 11:57:14 -0600 Subject: [PATCH 17/51] Fix table --- .../do/delivery-optimization-test.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index eda3e89402..aa12341ef9 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -123,18 +123,18 @@ Machine 1 will download zero bytes from peers and Machine 2 will find peers and #### Test Machine Setup -|Setup Checklist| Value/Explanation -|--------|------------------------------- -|Number of machines used| 3 -|Virtual Machines| 3 -|Windows OS version | Windows 10 (21H2) -|RAM | 8 GB -|Disk size | 127 GB -|Network | Connected to same network, one that is representative of the corporate network. -|Delivery Optimization 'Download Mode' Policy| 2 (Group)(set on each machine). +|Setup Checklist| Value/Explanation | +|--------|-------------------------------| +|Number of machines used| 3 | +|Virtual Machines| 3 | +|Windows OS version | Windows 10 (21H2) | +|RAM | 8 GB | +|Disk size | 127 GB | +|Network | Connected to same network, one that is representative of the corporate network. | +|Delivery Optimization 'Download Mode' Policy| 2 (Group)(set on each machine). | |Delivery Optimization 'Group ID' Policy| Set the *same* 'GUID' on each test machine. A GUID is required value, which can be generated using PowerShell, '[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. | -|Delivery Optimization 'Delay background download from http' Policy | 60 (set on each machine). -|Delivery Optimization 'Delay foreground download from http Policy |60 (set on each machine). +|Delivery Optimization 'Delay background download from http' Policy | 60 (set on each machine). | +|Delivery Optimization 'Delay foreground download from http Policy |60 (set on each machine). | #### Testing Instructions From 5cf0ee0e533d5ba200d58b4f020489e265895aab Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 12:05:02 -0600 Subject: [PATCH 18/51] More table fixes --- .../do/delivery-optimization-test.md | 42 +++++++++---------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index aa12341ef9..44e9e97544 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -70,18 +70,18 @@ Machine 1 will download zero bytes from peers and Machine 2 will download 50-99% #### Test Machine Setup |Setup Checklist| Value/Explanation -|--------|------------------------------- -|Number of machines used| 2 -|Virtual Machines/physical devices| 2 -|Windows OS version | Windows 10 (21H2) and Windows 11 (21H2) -|RAM | 8 GB -|Disk size | 127 GB -|Network | Connected to same network, one that is representative of the corporate network. -|Pause Windows Updates | This controls the test environment so no other content is made available during the test, and potentially altering the outcome of the test. If there are problems and no peering happens, use 'Get-DeliveryOptimizationStatus' on the first machine to return a real-time list of the connected peers. -|Ensure all Store apps are up to date | This helps prevent any new, unexpected updates to download during testing. -|Delivery Optimization 'Download Mode' Policy | 2 (Group)(set on each machine) -|Delivery Optimization 'GroupID' Policy | Set the *same* 'GUID' on each test machine. A GUID is a required value, which can be generated using PowerShell, '[[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. -|**Required on Windows 11 devices only** set Delivery Optimization 'Restrict Peer Selection' policy | 0-NAT (set on each machine). The default behavior in Windows 11 is set to '2-Local Peer Discovery'. For testing purposes, this needs to be scoped to the NAT. +|--------|-------------------------------| +|Number of machines used| 2 | +|Virtual Machines/physical devices| 2 | +|Windows OS version | Windows 10 (21H2) and Windows 11 (21H2) | +|RAM | 8 GB | +|Disk size | 127 GB | +|Network | Connected to same network, one that is representative of the corporate network. | +|Pause Windows Updates | This controls the test environment so no other content is made available during the test, and potentially altering the outcome of the test. If there are problems and no peering happens, use 'Get-DeliveryOptimizationStatus' on the first machine to return a real-time list of the connected peers. | +|Ensure all Store apps are up to date | This helps prevent any new, unexpected updates to download during testing. | +|Delivery Optimization 'Download Mode' Policy | 2 (Group)(set on each machine) | +|Delivery Optimization 'GroupID' Policy | Set the *same* 'GUID' on each test machine. A GUID is a required value, which can be generated using PowerShell, '[[guid]::NewGuid().](https://devblogs.microsoft.com/scripting/powertip-create-a-new-guid-by-using-powershell/)'. | +|**Required on Windows 11 devices only** set Delivery Optimization 'Restrict Peer Selection' policy | 0-NAT (set on each machine). The default behavior in Windows 11 is set to '2-Local Peer Discovery'. For testing purposes, this needs to be scoped to the NAT. | #### Test Instructions @@ -96,11 +96,11 @@ The following set of instructions will be used for each machine: * Run 'Test Instructions' -|Windows 10 | Windows 11 -|--------|------------------------------- -| :::image type="content" source="images/test-scenarios/win10/m1-basic-complete.png" alt-text="Windows 10 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win10/m1-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m1-basic-complete.png" alt-text="Windows 11 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win11/m1-basic-complete.png"::: -| **Observations** -| - No peers were found on the first machine downloading the content.
- 'TotalBytesDownloaded' is equal to the file size.
- Status is set to 'Caching' the content so future peers can use it.
- Download was happening in the foreground.
- DownloadMode is set to 'Group' and no peers were found.
- No distinct observations seen between Window 10 and Windows 11 devices. +|Windows 10 | Windows 11 | +|--------|-------------------------------| +| :::image type="content" source="images/test-scenarios/win10/m1-basic-complete.png" alt-text="Windows 10 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win10/m1-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m1-basic-complete.png" alt-text="Windows 11 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win11/m1-basic-complete.png":::| +| **Observations** | +| - No peers were found on the first machine downloading the content.
- 'TotalBytesDownloaded' is equal to the file size.
- Status is set to 'Caching' the content so future peers can use it.
- Download was happening in the foreground.
- DownloadMode is set to 'Group' and no peers were found.
- No distinct observations seen between Window 10 and Windows 11 devices. | *Wait 5 minutes*. @@ -108,11 +108,11 @@ The following set of instructions will be used for each machine: * Run 'Test Instructions' -|Windows 10 | Windows 11 -|--------|-------------------------------- +|Windows 10 | Windows 11 | +|--------|--------------------------------| | :::image type="content" source="images/test-scenarios/win10/m2-basic-complete.png" alt-text="Windows 10 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win10/m2-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m2-basic-complete.png" alt-text="Windows 11 21H2 - Machine 2 - Basic Test." lightbox="images/test-scenarios/win11/m2-basic-complete.png":::| -| **Observations** | **Observations** -| - A peer was found for the content and 87% of total bytes came from the peer.
- One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
- Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
- 'DownloadDuration' is roughly the same between machines.| - A peer was found for the content and 90% of total bytes came from the peer.
- All other points are the same as Windows 10 results. +| **Observations** | **Observations** | +| - A peer was found for the content and 87% of total bytes came from the peer.
- One peer was found for the piece of content, which is expected as there are only two devices in the peering group.
- Download mode was set to 'Group', but since group mode includes both LAN and Group devices, Delivery Optimization prioritizes LAN peers, if found. Therefore, 'BytesFromLanPeers' shows bytes where 'BytesFromGroupPeers' doesn't.
- 'DownloadDuration' is roughly the same between machines.| - A peer was found for the content and 90% of total bytes came from the peer.
- All other points are the same as Windows 10 results. | ### Scenario 2: Advance Setup From 38d31bbfba2c78a63fe929412eef6f50cb1bcae8 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 12:35:40 -0600 Subject: [PATCH 19/51] Syntax --- .../do/delivery-optimization-test.md | 2 +- .../deployment/do/mcc-enterprise-appendix.md | 14 +++++++------- .../do/waas-delivery-optimization.md | 18 +++++++++--------- 3 files changed, 17 insertions(+), 17 deletions(-) diff --git a/windows/deployment/do/delivery-optimization-test.md b/windows/deployment/do/delivery-optimization-test.md index 44e9e97544..3631e0b459 100644 --- a/windows/deployment/do/delivery-optimization-test.md +++ b/windows/deployment/do/delivery-optimization-test.md @@ -99,7 +99,7 @@ The following set of instructions will be used for each machine: |Windows 10 | Windows 11 | |--------|-------------------------------| | :::image type="content" source="images/test-scenarios/win10/m1-basic-complete.png" alt-text="Windows 10 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win10/m1-basic-complete.png"::: | :::image type="content" source="images/test-scenarios/win11/m1-basic-complete.png" alt-text="Windows 11 21H2 - Machine 1 - Basic Test." lightbox="images/test-scenarios/win11/m1-basic-complete.png":::| -| **Observations** | +| **Observations** | | | - No peers were found on the first machine downloading the content.
- 'TotalBytesDownloaded' is equal to the file size.
- Status is set to 'Caching' the content so future peers can use it.
- Download was happening in the foreground.
- DownloadMode is set to 'Group' and no peers were found.
- No distinct observations seen between Window 10 and Windows 11 devices. | *Wait 5 minutes*. diff --git a/windows/deployment/do/mcc-enterprise-appendix.md b/windows/deployment/do/mcc-enterprise-appendix.md index a45a8f699f..6264ea32c4 100644 --- a/windows/deployment/do/mcc-enterprise-appendix.md +++ b/windows/deployment/do/mcc-enterprise-appendix.md @@ -41,7 +41,7 @@ Most customers choose to install their cache node on a Windows Server with a nes Microsoft Connected Cache for Enterprise and Education can be successfully installed on VMware. To do so, there are a couple of additional configurations to be made. Ensure the VM is turned off before making the following configuration changes: 1. Ensure that you're using ESX. In the VM settings, turn on the option **Expose hardware assisted virtualization to the guest OS**. -2. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**. +1. Using the Hyper-V Manager, create an external switch. For the external switch to have internet connection, ensure **"Allow promiscuous mode"** and **"Forged transmits"** are switched to **Yes**. ### Installing on Hyper-V @@ -57,16 +57,16 @@ To run this script: mccinstaller > Eflow > Diagnostics -2. Run the following commands: +1. Run the following commands: ```powershell Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process .\collectMccDiagnostics.ps1 ``` -3. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\**\mccdiagnostics\support_bundle_\$timestamp.tar.gz +1. The script stores all the debug files into a folder and then creates a tar file. After the script is finished running, it will output the path of the tar file, which you can share with us. The location should be **\**\mccdiagnostics\support_bundle_\$timestamp.tar.gz -4. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process. +1. [Email the MCC team](mailto:mccforenterprise@microsoft.com?subject=Debugging%20Help%20Needed%20for%20MCC%20for%20Enterprise) and attach this file asking for debugging support. Screenshots of the error along with any other warnings you saw will be helpful during out debugging process. ## IoT Edge runtime @@ -103,11 +103,11 @@ You can either set your MCC IP address or FQDN using: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /v DOCacheHost /t REG_SZ /d "10.137.187.38" /f ``` -2. MDM path (version 1809 and later): +1. MDM path (version 1809 and later): `.Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost` -3. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`. +1. In Windows (release version 1809 and later), you can apply the policy via Group Policy Editor. The policy to apply is **DOCacheHost**. To configure the clients to pull content from the MCC using Group Policy, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**. Set the **Cache Server Hostname** to the IP address of your MCC, such as `10.137.187.38`. :::image type="content" source="./images/ent-mcc-group-policy-hostname.png" alt-text="Screenshot of the Group Policy editor showing the Cache Server Hostname Group Policy setting." lightbox="./images/ent-mcc-group-policy-hostname.png"::: @@ -119,7 +119,7 @@ To verify that the Delivery Optimization client can download content using MCC, :::image type="content" source="./images/ent-mcc-store-example-download.png" alt-text="Screenshot of the Microsoft Store with the game, Angry Birds 2, selected."::: -2. Verify downloads came from MCC by one of two methods: +1. Verify downloads came from MCC by one of two methods: - Using the PowerShell Cmdlet Get-DeliveryOptimizationStatus you should see *BytesFromCacheServer*. diff --git a/windows/deployment/do/waas-delivery-optimization.md b/windows/deployment/do/waas-delivery-optimization.md index 03467f0c55..10e0059d41 100644 --- a/windows/deployment/do/waas-delivery-optimization.md +++ b/windows/deployment/do/waas-delivery-optimization.md @@ -39,10 +39,10 @@ For information about setting up Delivery Optimization, including tips for the b The following table lists the minimum Windows 10 version that supports Delivery Optimization: | Device type | Minimum Windows version -|------------------|--------------- -| Computers running Windows 10 | Windows 10 1511 -| Computers running Server Core installations of Windows Server | Windows Server 2019 -| Windows IoT devices | Windows 10 1803 +|------------------|---------------| +| Computers running Windows 10 | Windows 10 1511 | +| Computers running Server Core installations of Windows Server | Windows Server 2019 | +| Windows IoT devices | Windows 10 1803 | ### Types of download content supported by Delivery Optimization @@ -52,7 +52,7 @@ The following table lists the minimum Windows 10 version that supports Delivery |------------------|---------------|----------------|----------|----------------| | Windows Update ([feature updates quality updates, language packs, drivers](../update/get-started-updates-channels-tools.md#types-of-updates)) | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Windows 10/11 UWP Store apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: | +| Windows 11 Win32 Store apps | Windows 11 | :heavy_check_mark: | | | Windows 10 Store for Business apps | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Windows Defender definition updates | Windows 10 1511, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Intune Win32 apps| Windows 10 1709, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | @@ -60,11 +60,11 @@ The following table lists the minimum Windows 10 version that supports Delivery | Edge Browser Updates | Windows 10 1809, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Configuration Manager Express updates| Windows 10 1709 + Configuration Manager version 1711, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | | Dynamic updates| Windows 10 1903, Windows 11 | :heavy_check_mark: | :heavy_check_mark: | :heavy_check_mark: | -| MDM Agent | Windows 11 | :heavy_check_mark: | | +| MDM Agent | Windows 11 | :heavy_check_mark: | | | | Xbox Game Pass (PC) | Windows 10 1809, Windows 11 | :heavy_check_mark: | | :heavy_check_mark: | -| Windows Package Manager| Windows 10 1809, Windows 11 | :heavy_check_mark: | | -| MSIX Installer| Windows 10 2004, Windows 11 | :heavy_check_mark: | | -| Teams (via MSIX Installer) | Windows 10 2004, Windows 11 | :heavy_check_mark: | | +| Windows Package Manager| Windows 10 1809, Windows 11 | :heavy_check_mark: | | | +| MSIX Installer| Windows 10 2004, Windows 11 | :heavy_check_mark: | | | +| Teams (via MSIX Installer) | Windows 10 2004, Windows 11 | :heavy_check_mark: | | | #### Windows Server From 5f999c0a6bed25923947767955629f0e43d42e65 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 13:04:07 -0600 Subject: [PATCH 20/51] TOC fix --- windows/deployment/do/mcc-enterprise-deploy.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md index 19084b7f76..3aa57e12b9 100644 --- a/windows/deployment/do/mcc-enterprise-deploy.md +++ b/windows/deployment/do/mcc-enterprise-deploy.md @@ -23,7 +23,6 @@ This article describes how to deploy a Microsoft Connected Cache (MCC) for Enter ## Steps to deploy MCC To deploy MCC to your server: - - [Deploy your cache node](#deploy-your-cache-node) - [Steps to deploy MCC](#steps-to-deploy-mcc) - [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id) From 5d5e2e60b340ca3112d8ff9a091965e4414d590a Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Fri, 31 May 2024 12:07:48 -0700 Subject: [PATCH 21/51] Update mcc-enterprise-deploy.md undo mcc-enterprise-deployment.md autosuggest --- .../deployment/do/mcc-enterprise-deploy.md | 26 ++++++------------- 1 file changed, 8 insertions(+), 18 deletions(-) diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md index 3aa57e12b9..3d6b94c78f 100644 --- a/windows/deployment/do/mcc-enterprise-deploy.md +++ b/windows/deployment/do/mcc-enterprise-deploy.md @@ -23,24 +23,14 @@ This article describes how to deploy a Microsoft Connected Cache (MCC) for Enter ## Steps to deploy MCC To deploy MCC to your server: -- [Deploy your cache node](#deploy-your-cache-node) - - [Steps to deploy MCC](#steps-to-deploy-mcc) - - [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id) - - [Create the MCC resource in Azure](#create-the-mcc-resource-in-azure) - - [Error: Validation failed](#error-validation-failed) - - [Create an MCC node in Azure](#create-an-mcc-node-in-azure) - - [Edit cache node information](#edit-cache-node-information) - - [Install MCC on Windows](#install-mcc-on-windows) - - [Run the installer](#run-the-installer) - - [Verify MCC server functionality](#verify-mcc-server-functionality) - - [Verify client side](#verify-client-side) - - [Verify server side](#verify-server-side) - - [Intune (or other management software) configuration for MCC](#intune-or-other-management-software-configuration-for-mcc) - - [Common Issues](#common-issues) - - [PowerShell issues](#powershell-issues) - - [Verify Running MCC Container](#verify-running-mcc-container) - - [DNS needs to be configured](#dns-needs-to-be-configured) - - [Resolve DNS issues](#resolve-dns-issues) + +1. [Provide Microsoft with the Azure subscription ID](#provide-microsoft-with-the-azure-subscription-id) +1. [Create the MCC Resource in Azure](#create-the-mcc-resource-in-azure) +1. [Create an MCC Node](#create-an-mcc-node-in-azure) +1. [Edit Cache Node Information](#edit-cache-node-information) +1. [Install MCC on a physical server or VM](#install-mcc-on-windows) +1. [Verify MCC functionality](#verify-mcc-server-functionality) +1. [Review common Issues](#common-issues) if needed. ### Provide Microsoft with the Azure subscription ID From fe9b3106fd6ae06350220c5f1802e7fb17ba71cf Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 14:20:34 -0600 Subject: [PATCH 22/51] Fix descriptions --- .../do/waas-delivery-optimization-monitor.md | 27 +++++++++---------- 1 file changed, 12 insertions(+), 15 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index 31ae1962f5..3952f099b9 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -59,16 +59,16 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | BytesToInternetPeers | Total number of bytes delivered from peers found on the LAN | | DownloadDuration | Total download time in seconds | | HttpConnectionCount | Number of connections to HTTP source | -| LanConnectionCount | Number of connections to LAN peer connections | -| GroupConnectionCount | Number of connections to Group peer connections | -| InternetConnectionCount | Number of connections to Internet peer connections | +| LanConnectionCount | Number of connections to LAN peers | +| GroupConnectionCount | Number of connections to Group peers | +| InternetConnectionCount | Number of connections to Internet peers | | DownloadMode | Delivery Optimization DownloadMode value | | SourceURL | Http source for the file | | CacheHost | IP address for the cache server | | NumPeers | Indicates the total number of peers returned from the service. | | PredefinedCallerApplication | Indicates the last caller that initiated a request for the file. | | ExpireOn | The target expiration date and time for the file. | -| IsPinned | A yes/no value indicating whether an item has been "pinned" in the cache (see `setDeliveryOptimizationStatus`). | +| IsPinned | A yes/no value indicating whether an item has been "pinned" in the cache (see `Set-DeliveryOptimizationStatus`). | `Get-DeliveryOptimizationPerfSnap` returns a list of key performance data: @@ -96,13 +96,10 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | InternetConnections | Number of Internet connections | | DownlinkBps | Average download bandwidth usage currently seen across all network adapters | | DownlinkUsageBps | Average bandwidth currently used by Delivery Optimization for downloads | -| UplinkBps | Average bytes per second for upload events | +| UplinkBps | Average upload bandwidth usage currently seen across all network adapters | | UplinkUsageBps | Average bandwidth currently used by Delivery Optimization for uploads | -| ForegroundDownloadRatePct | Average foreground download percentage rate | -| BackgroundDownloadRatePct | Average background download percentage rate | -| UploadRatePct | Percentage of upload bandwidth to be used for uploads | -| ForegroundDownloadRatePct | Average foreground download from start of the month | -| BackgroundDownloadRatePct | Average background download from start of the month | +| ForegroundDownloadRatePct | Percentage of bandwidth to be used for foreground downloads | +| BackgroundDownloadRatePct | Percentage of bandwidth to be used for background downloads | | UploadCount | Number of files in Delivery Optimization cache currently eligible for uploading | | ForegroundDownloadCount | Number of foreground downloads that are running | | ForegroundDownloadsPending | Number of foreground downloads that are waiting in queue | @@ -133,17 +130,17 @@ Starting in Windows 10, version 1803, `Get-DeliveryOptimizationPerfSnapThisMonth **Starting in Windows 10, version 1903:** -`set-DeliveryOptimizationStatus -ExpireOn [date time]` extends the expiration of all files in the cache. You can set the expiration immediately for all files that are in the "caching" state. For files in progress ("downloading"), the expiration is applied once the download is complete. You can set the expiration up to one year from the current date and time. +`Set-DeliveryOptimizationStatus -ExpireOn [date time]` extends the expiration of all files in the cache. You can set the expiration immediately for all files that are in the "caching" state. For files in progress ("downloading"), the expiration is applied once the download is complete. You can set the expiration up to one year from the current date and time. -`set-DeliveryOptimizationStatus -ExpireOn [date time] -FileID [FileID]` extends expiration for a single specific file in the cache. +`Set-DeliveryOptimizationStatus -ExpireOn [date time] -FileID [FileID]` extends expiration for a single specific file in the cache. You can now "pin" files to keep them persistent in the cache, only with files that are downloaded in modes 1, 2, or 3. -`set-DeliveryOptimizationStatus -Pin [True] -File ID [FileID]` keeps a specific file in the cache such that it won't be deleted until the expiration date and time (which you set with `set-DeliveryOptimizationStatus -ExpireOn [date time] -FileID [FileID]`). The file is also excluded from the cache quota calculation. +`Set-DeliveryOptimizationStatus -Pin [True] -File ID [FileID]` keeps a specific file in the cache such that it won't be deleted until the expiration date and time (which you set with `Set-DeliveryOptimizationStatus -ExpireOn [date time] -FileID [FileID]`). The file is also excluded from the cache quota calculation. -`set-DeliveryOptimizationStatus -Pin [False] -File ID [FileID]` "unpins" a file, so that it will be deleted when the expiration date and time are reached. The file is included in the cache quota calculation. +`Set-DeliveryOptimizationStatus -Pin [False] -File ID [FileID]` "unpins" a file, so that it will be deleted when the expiration date and time are reached. The file is included in the cache quota calculation. -`delete-DeliveryOptimizationCache` lets you clear files from the cache and remove all persisted data related to them. You can use these options with this cmdlet: +`Delete-DeliveryOptimizationCache` lets you clear files from the cache and remove all persisted data related to them. You can use these options with this cmdlet: - `-FileID` specifies a particular file to delete. - `-IncludePinnedFiles` deletes all files that are pinned. From 0f38892b485dc95359214bb30fd3773c0748491f Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 14:35:38 -0600 Subject: [PATCH 23/51] Check for accuracy on descriptions --- .../do/waas-delivery-optimization-monitor.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index 3952f099b9..89d150b2bd 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -87,19 +87,20 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | AvailableDiskBytes | Free space of the disk volume on which Delivery Optimization cache is currently located | | CpuUsagePct | Average CPU usage by the Delivery Optimization process | | MemUsageKB | Amount of committed memory currently used by the Delivery Optimization process | -| NumberOfPeers | Total number of peers used found across all files currently in the cache | +| NumberOfPeers | Total number of peers found across all files currently in the cache | | CacheHostConnections | Number of cache host server connections | | CdnConnections | Number of CDN server connections | -| LanConnections | Number of LAN connections | -| LinkLocalConnections | Number of Link Local connections | -| GroupConnections | Number of Group connections | -| InternetConnections | Number of Internet connections | +| LanConnections | Number of LAN peer connections | +| LinkLocalConnections | Number of Link Local peer connections | +| GroupConnections | Number of Group peer connections | +| InternetConnections | Number of Internet peer connections | | DownlinkBps | Average download bandwidth usage currently seen across all network adapters | | DownlinkUsageBps | Average bandwidth currently used by Delivery Optimization for downloads | | UplinkBps | Average upload bandwidth usage currently seen across all network adapters | | UplinkUsageBps | Average bandwidth currently used by Delivery Optimization for uploads | | ForegroundDownloadRatePct | Percentage of bandwidth to be used for foreground downloads | | BackgroundDownloadRatePct | Percentage of bandwidth to be used for background downloads | +| UploadRatePct | Percentage of upload bandwidth to be used for uploads | | UploadCount | Number of files in Delivery Optimization cache currently eligible for uploading | | ForegroundDownloadCount | Number of foreground downloads that are running | | ForegroundDownloadsPending | Number of foreground downloads that are waiting in queue | From 7abd382d071732f12ed6e84d2b5b3b31e810b787 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 14:45:12 -0600 Subject: [PATCH 24/51] More small updates --- .../deployment/do/waas-delivery-optimization-monitor.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index 89d150b2bd..675851ae42 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -90,10 +90,10 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | NumberOfPeers | Total number of peers found across all files currently in the cache | | CacheHostConnections | Number of cache host server connections | | CdnConnections | Number of CDN server connections | -| LanConnections | Number of LAN peer connections | -| LinkLocalConnections | Number of Link Local peer connections | -| GroupConnections | Number of Group peer connections | -| InternetConnections | Number of Internet peer connections | +| LanConnections | Number of peer connections over LAN | +| LinkLocalConnections | Number of peer connections over Link Local | +| GroupConnections | Number of peer connections over Group | +| InternetConnections | Number of peer connections over Internet | | DownlinkBps | Average download bandwidth usage currently seen across all network adapters | | DownlinkUsageBps | Average bandwidth currently used by Delivery Optimization for downloads | | UplinkBps | Average upload bandwidth usage currently seen across all network adapters | From bda376105fbc756081dafe82d18f37bc78770f2e Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Fri, 31 May 2024 17:02:54 -0700 Subject: [PATCH 25/51] Acrolinx: Correctness --- windows/deployment/do/mcc-enterprise-deploy.md | 2 +- windows/deployment/do/waas-delivery-optimization-reference.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/do/mcc-enterprise-deploy.md b/windows/deployment/do/mcc-enterprise-deploy.md index 3d6b94c78f..6b09effa10 100644 --- a/windows/deployment/do/mcc-enterprise-deploy.md +++ b/windows/deployment/do/mcc-enterprise-deploy.md @@ -228,7 +228,7 @@ Installing MCC on your Windows device is a simple process. A PowerShell script p 1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path. :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png"::: - For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommend values for a Branch Office/Small Enterprise deployment. + For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommended values for a Branch Office/Small Enterprise deployment. :::image type="content" source="./images/memory-storage-5.png" alt-text="Screenshot of multiple installer questions about memory and storage." lightbox="./images/memory-storage-5.png"::: :::image type="content" source="./images/external-switch-1.jpg" alt-text="Screenshot of a sample output of ipconfig command showing example of subnet mask." lightbox="./images/external-switch-1.jpg"::: + :::image type="content" source="./images/assigning-ip-2.png" alt-text="Screenshot of multiple installer questions about ipv4 address for Eflow." lightbox="./images/assigning-ip-2.png"::: If you would like to use your own DNS server instead of Google DNS 8.8.8.8, select **n** and set your own DNS server IP. + :::image type="content" source="./images/use-custom-dns-3.png" alt-text="Screenshot of multiple installer questions about setting an alternate DNS server." lightbox="./images/use-custom-dns-3.png"::: + If you use a dynamic IP address, the DHCP server will automatically configure the IP address and DNS settings. 1. Choose where you would like to download, install, and store the virtual hard disk for EFLOW. You'll also be asked how much memory, storage, and how many cores you would like to allocate for the VM. For this example, we chose the default values for download path, install path, and virtual hard disk path. + :::image type="content" source="./images/installation-info-4.png" alt-text="Screenshot of multiple installer questions about memory and storage for EFLOW." lightbox="./images/installation-info-4.png"::: + For more information, see [Sizing Recommendations](mcc-enterprise-prerequisites.md#sizing-recommendations) for memory, virtual storage, and CPU cores. For this example we chose the recommended values for a Branch Office/Small Enterprise deployment. + :::image type="content" source="./images/memory-storage-5.png" alt-text="Screenshot of multiple installer questions about memory and storage." lightbox="./images/memory-storage-5.png"::: 1. When the installation is complete, you should see the following output (the values below will be your own) - :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png"::: + + :::image type="content" source="./images/ent-mcc-script-complete.png" alt-text="Screenshot of the installer script displaying the completion summary in PowerShell." lightbox="./images/ent-mcc-script-complete.png"::: + :::image type="content" source="./images/installation-complete-7.png" alt-text="Screenshot of expected output when installation is complete." lightbox="./images/installation-complete-7.png"::: 1. Your MCC deployment is now complete. + If you don't see any errors, continue to the next section to validate your MCC deployment. Your VM will not appear in Hyper-V Manager as it is an EFLOW VM. - After validating your MCC is properly functional, review your management solution documentation, such as [Intune](/mem/intune/configuration/delivery-optimization-windows), to set the cache host policy to the IP address of your MCC. - If you had errors during your deployment, see the [Common Issues](#common-issues) section in this article. @@ -286,7 +297,7 @@ A successful test result will display a status code of 200 along with additional :::image type="content" source="./images/ent-mcc-verify-server-ssh.png" alt-text="Screenshot of a successful wget with an SSH client." lightbox="./images/ent-mcc-verify-server-ssh.png"::: - :::image type="content" source="./images/ent-mcc-verify-server-powershell.png" alt-text="Screenshot of a successful wget using PowerShell." lightbox="./images/ent-mcc-verify-server-powershell.png"::: +:::image type="content" source="./images/ent-mcc-verify-server-powershell.png" alt-text="Screenshot of a successful wget using PowerShell." lightbox="./images/ent-mcc-verify-server-powershell.png"::: Similarly, enter the following URL from a browser in the network: @@ -312,9 +323,9 @@ If you're seeing errors similar to this error: `The term Get- isn't r 1. Ensure you have Hyper-V enabled: - **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v) + **Windows 10:** [Enable Hyper-V on Windows 10](/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v) - **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server) + **Windows Server:** [Install the Hyper-V role on Windows Server](/windows-server/virtualization/hyper-v/get-started/install-the-hyper-v-role-on-windows-server) #### Verify Running MCC Container @@ -339,7 +350,7 @@ This command will provide the current status of the starting, stopping of a cont > [!NOTE] > You should consult the IoT Edge troubleshooting guide ([Common issues and resolutions for Azure IoT Edge](/azure/iot-edge/troubleshoot)) for any issues you may encounter configuring IoT Edge, but we've listed a few issues that we encountered during our internal validation. -> + ### DNS needs to be configured @@ -355,48 +366,48 @@ To configure the device to work with your DNS, use the following steps: 1. Use `ifconfig` to find the appropriate NIC adapter name. - ```bash - ifconfig - ``` + ```bash + ifconfig + ``` 1. Run `nmcli device show ` to show the DNS name for the ethernet adapter. For example, to show DNS information for **eno1**: - ```bash - nmcli device show eno1 - ``` + ```bash + nmcli device show eno1 + ``` - :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png"::: + :::image type="content" source="images/mcc-isp-nmcli.png" alt-text="Screenshot of a sample output of nmcli command to show network adapter information." lightbox="./images/mcc-isp-nmcli.png"::: 1. Open or create the Docker configuration file used to configure the DNS server. - ```bash - sudo nano /etc/docker/daemon.json - ``` + ```bash + sudo nano /etc/docker/daemon.json + ``` 1. Paste the following string into the **daemon.json** file, and include the appropriate DNS server address. For example, in the previous screenshot, `IP4.DNS[1]` is `10.50.10.50`. - ```bash - { "dns": ["x.x.x.x"]} - ``` + ```bash + { "dns": ["x.x.x.x"]} + ``` 1. Save the changes to daemon.json. If you need to change permissions on this file, use the following command: - ```bash - sudo chmod 555 /etc/docker/daemon.json - ``` + ```bash + sudo chmod 555 /etc/docker/daemon.json + ``` 1. Restart Docker to pick up the new DNS setting. Then restart IoT Edge. - ```bash - sudo systemctl restart docker - sudo systemctl daemon-reload - sudo restart IoTEdge - ``` + ```bash + sudo systemctl restart docker + sudo systemctl daemon-reload + sudo restart IoTEdge + ``` ### Resolve DNS issues Follow these steps if you see a DNS error when trying to resolve hostnames during the provisioning or download of container: -Run ``` Get-EflowVmEndpoint ``` to get interface name +Run `Get-EflowVmEndpoint` to get interface name Once you get the name: From 5ac0cc0290d24e4b324a92954da7df496a618261 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 20:23:47 -0600 Subject: [PATCH 28/51] Minor updates and add health check --- .../do/waas-delivery-optimization-monitor.md | 12 ++++++------ windows/deployment/do/whats-new-do.md | 5 +++-- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/windows/deployment/do/waas-delivery-optimization-monitor.md b/windows/deployment/do/waas-delivery-optimization-monitor.md index 675851ae42..6c30ab2dc4 100644 --- a/windows/deployment/do/waas-delivery-optimization-monitor.md +++ b/windows/deployment/do/waas-delivery-optimization-monitor.md @@ -88,12 +88,12 @@ For details, see [Windows Update for Business Delivery Optimization Report](/win | CpuUsagePct | Average CPU usage by the Delivery Optimization process | | MemUsageKB | Amount of committed memory currently used by the Delivery Optimization process | | NumberOfPeers | Total number of peers found across all files currently in the cache | -| CacheHostConnections | Number of cache host server connections | -| CdnConnections | Number of CDN server connections | -| LanConnections | Number of peer connections over LAN | -| LinkLocalConnections | Number of peer connections over Link Local | -| GroupConnections | Number of peer connections over Group | -| InternetConnections | Number of peer connections over Internet | +| CacheHostConnections | Number of connections to Microsoft Connected Cache servers | +| CdnConnections | Number of connections to CDN servers | +| LanConnections | Number of connections to LAN peers | +| LinkLocalConnections | Number of connections to Link Local peers | +| GroupConnections | Number of connections to Group peers| +| InternetConnections | Number of connections to Internet peers | | DownlinkBps | Average download bandwidth usage currently seen across all network adapters | | DownlinkUsageBps | Average bandwidth currently used by Delivery Optimization for downloads | | UplinkBps | Average upload bandwidth usage currently seen across all network adapters | diff --git a/windows/deployment/do/whats-new-do.md b/windows/deployment/do/whats-new-do.md index c9a0382033..0f9840b7ed 100644 --- a/windows/deployment/do/whats-new-do.md +++ b/windows/deployment/do/whats-new-do.md @@ -37,8 +37,9 @@ There are two different versions: [Check out](https://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the two switches: -- -p2p: Provides output specific to P2P settings, efficiency, and errors. -- -mcc: Provides output specific to MCC settings and verifies the client can access the cache server. +- -HealthCheck: Provides an overall check of the device setup to ensure Delivery Optimization communication is possible on the device. +- -P2P: Provides output specific to P2P settings, efficiency, and errors. +- -MCC: Provides output specific to MCC settings and verifies the client can access the cache server. ### Windows 11 22H2 From 7a1fb7ce324b3207ac30fe2a52707697a2002dba Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Fri, 31 May 2024 20:28:17 -0600 Subject: [PATCH 29/51] Changing for consistency --- windows/deployment/do/waas-delivery-optimization-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/waas-delivery-optimization-reference.md b/windows/deployment/do/waas-delivery-optimization-reference.md index c93596986a..9c90b088c4 100644 --- a/windows/deployment/do/waas-delivery-optimization-reference.md +++ b/windows/deployment/do/waas-delivery-optimization-reference.md @@ -42,7 +42,7 @@ In MDM, the same settings are under **.Vendor/MSFT/Policy/Config/DeliveryOptimiz | [Minimum disk size allowed to use peer caching](#minimum-disk-size-allowed-to-use-peer-caching) | DOMinDiskSizeAllowedToPeer | 1703 | Default value is 32 GB. | | [Max cache age](#max-cache-age) | DOMaxCacheAge | 1511 | Default value is 259,200 seconds (three days). | | [Max cache size](#max-cache-size) | DOMaxCacheSize | 1511 | Default value is 20%. | -| [Absolute max cache size (in GBs)](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | 1607 | Default is not configured.| +| [Absolute max cache size (in GBs)](#absolute-max-cache-size) | DOAbsoluteMaxCacheSize | 1607 | Default isn't configured.| | [Modify cache drive](#modify-cache-drive) | DOModifyCacheDrive | 1607 | Default to the operating system drive through the %SYSTEMDRIVE% environment variable. | | [Minimum peer caching content file size](#minimum-peer-caching-content-file-size) | DOMinFileSizeToCache | 1703 | Default file size is 50 MB. | | [Monthly upload data cap](#monthly-upload-data-cap) | DOMonthlyUploadDataCap | 1607 | Default value is 20 GB. | From d40d9fd80b941b141c5bdb675ea89d69f4338e6c Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 3 Jun 2024 05:57:47 -0400 Subject: [PATCH 30/51] updated description for settings catalog policy --- education/windows/federated-sign-in.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md index 9c6425ae8e..090cd46bf2 100644 --- a/education/windows/federated-sign-in.md +++ b/education/windows/federated-sign-in.md @@ -1,7 +1,7 @@ --- title: Configure federated sign-in for Windows devices description: Learn how federated sign-in in Windows works and how to configure it. -ms.date: 04/10/2024 +ms.date: 06/03/2024 ms.topic: how-to appliesto: - ✅ Windows 11 @@ -87,7 +87,7 @@ Review the following instructions to configure your devices using either Microso |--|--|--| | Education | Is Education Environment | Enabled | | Federated Authentication | Enable Web Sign In For Primary User | Enabled | -| Authentication | Configure Web Sign In Allowed Urls | Semicolon separated list of domains, for example: `samlidp.clever.com;clever.com;mobile-redirector.clever.com` | +| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
-`mobile-redirector.clever.com` | | Authentication | Configure Webcam Access Domain Names | This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon. For example: `clever.com` | [!INCLUDE [intune-settings-catalog-2](../../includes/configure/intune-settings-catalog-2.md)] @@ -134,7 +134,7 @@ Review the following instructions to configure your shared devices using either | Education | Is Education Environment | Enabled | | SharedPC | Enable Shared PC Mode With OneDrive Sync | True | | Authentication | Enable Web Sign In | Enabled | -| Authentication | Configure Web Sign In Allowed Urls | Semicolon separated list of domains, for example: `samlidp.clever.com;clever.com;mobile-redirector.clever.com` | +| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
-`mobile-redirector.clever.com` | | Authentication | Configure Webcam Access Domain Names | This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon. For example: `clever.com` | [!INCLUDE [intune-settings-catalog-2](../../includes/configure/intune-settings-catalog-2.md)] From c35798ff00261504503830e1ed1ac6531e199c84 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 3 Jun 2024 06:42:36 -0400 Subject: [PATCH 31/51] fixed typo --- education/windows/federated-sign-in.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md index 090cd46bf2..aca908bb45 100644 --- a/education/windows/federated-sign-in.md +++ b/education/windows/federated-sign-in.md @@ -87,7 +87,7 @@ Review the following instructions to configure your devices using either Microso |--|--|--| | Education | Is Education Environment | Enabled | | Federated Authentication | Enable Web Sign In For Primary User | Enabled | -| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
-`mobile-redirector.clever.com` | +| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
- `mobile-redirector.clever.com` | | Authentication | Configure Webcam Access Domain Names | This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon. For example: `clever.com` | [!INCLUDE [intune-settings-catalog-2](../../includes/configure/intune-settings-catalog-2.md)] @@ -134,7 +134,7 @@ Review the following instructions to configure your shared devices using either | Education | Is Education Environment | Enabled | | SharedPC | Enable Shared PC Mode With OneDrive Sync | True | | Authentication | Enable Web Sign In | Enabled | -| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
-`mobile-redirector.clever.com` | +| Authentication | Configure Web Sign In Allowed Urls | Enter the list of domains, with each URL in a separate row. For example:
- `samlidp.clever.com`
- `clever.com`
- `mobile-redirector.clever.com` | | Authentication | Configure Webcam Access Domain Names | This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon. For example: `clever.com` | [!INCLUDE [intune-settings-catalog-2](../../includes/configure/intune-settings-catalog-2.md)] From 803cf9d8084ee796e3ffdcc35c5b850ee390b198 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 3 Jun 2024 11:43:16 -0400 Subject: [PATCH 32/51] format update --- windows/configuration/start/layout.md | 42 ------------------- .../taskbar/includes/allow-widgets.md | 2 +- .../includes/configure-start-layout.md | 4 +- .../configures-search-on-the-taskbar.md | 2 +- .../disable-editing-quick-settings.md | 2 +- ...o-not-allow-pinning-items-in-jump-lists.md | 2 +- ...t-allow-pinning-programs-to-the-taskbar.md | 2 +- ...-allow-pinning-store-app-to-the-taskbar.md | 2 +- ...allow-taskbars-on-more-than-one-display.md | 2 +- ...ems-in-jump-lists-from-remote-locations.md | 2 +- .../taskbar/includes/hide-recent-jumplists.md | 4 +- .../includes/hide-the-notification-area.md | 2 +- .../includes/hide-the-taskview-button.md | 4 +- .../includes/lock-all-taskbar-settings.md | 2 +- .../taskbar/includes/lock-the-taskbar.md | 2 +- ...nges-to-taskbar-and-start-menu-settings.md | 2 +- .../prevent-grouping-of-taskbar-items.md | 2 +- ...-users-from-adding-or-removing-toolbars.md | 2 +- ...taskbar-to-another-screen-dock-location.md | 2 +- ...prevent-users-from-rearranging-toolbars.md | 2 +- ...prevent-users-from-resizing-the-taskbar.md | 2 +- ...ss-to-the-context-menus-for-the-taskbar.md | 2 +- ...clock-from-the-system-notification-area.md | 2 +- .../remove-notifications-and-action-center.md | 2 +- ...remove-pinned-programs-from-the-taskbar.md | 2 +- .../taskbar/includes/remove-quick-settings.md | 2 +- .../includes/remove-the-battery-meter.md | 2 +- .../includes/remove-the-meet-now-icon.md | 2 +- .../includes/remove-the-networking-icon.md | 2 +- .../remove-the-people-bar-from-the-taskbar.md | 2 +- .../remove-the-volume-control-icon.md | 2 +- .../includes/show-additional-calendar.md | 2 +- .../simplify-quick-settings-layout.md | 2 +- ...on-of-notification-icons-to-the-taskbar.md | 2 +- .../turn-off-notification-area-cleanup.md | 2 +- windows/configuration/taskbar/pinned-apps.md | 4 ++ 36 files changed, 41 insertions(+), 79 deletions(-) diff --git a/windows/configuration/start/layout.md b/windows/configuration/start/layout.md index 8a771280ae..30baa389a1 100644 --- a/windows/configuration/start/layout.md +++ b/windows/configuration/start/layout.md @@ -649,45 +649,3 @@ When you configure the Start layout with policy settings, you overwrite the enti [MEM-1]: /mem/intune/configuration/custom-settings-windows-10 [PS-1]: /powershell/module/startlayout/export-startlayout [WIN-1]: /windows/client-management/mdm/policy-csp-start - - - diff --git a/windows/configuration/taskbar/includes/allow-widgets.md b/windows/configuration/taskbar/includes/allow-widgets.md index 83a0bb12e7..7033aec825 100644 --- a/windows/configuration/taskbar/includes/allow-widgets.md +++ b/windows/configuration/taskbar/includes/allow-widgets.md @@ -15,4 +15,4 @@ This policy specifies whether the widgets feature is allowed on the device. | | Path | |--|--| | **CSP** | `./Device/Vendor/MSFT/Policy/Config/NewsAndInterests/`[AllowNewsAndInterests](/windows/client-management/mdm/policy-csp-newsandinterests#allownewsandinterests) | -| **GPO** | **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Widgets** | +| **GPO** | - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Widgets** | diff --git a/windows/configuration/taskbar/includes/configure-start-layout.md b/windows/configuration/taskbar/includes/configure-start-layout.md index 7edd14def2..ce75e3d6df 100644 --- a/windows/configuration/taskbar/includes/configure-start-layout.md +++ b/windows/configuration/taskbar/includes/configure-start-layout.md @@ -13,7 +13,7 @@ This policy setting lets you specify the applications pinned to the taskbar. The | | Path | |--|--| -| **CSP** | - `./Device/Vendor/MSFT/Policy/Config/Start/StartLayout`/[Configure start layout](/windows/client-management/mdm/policy-csp-start#startlayout)

- `./User/Vendor/MSFT/Policy/Config/Start/StartLayout`/[Configure start layout](/windows/client-management/mdm/policy-csp-start#startlayout) | -| **GPO** | **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar**

**User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **CSP** | - `./Device/Vendor/MSFT/Policy/Config/Start/StartLayout`/[Configure start layout](/windows/client-management/mdm/policy-csp-start#startlayout)
- `./User/Vendor/MSFT/Policy/Config/Start/StartLayout`/[Configure start layout](/windows/client-management/mdm/policy-csp-start#startlayout) | +| **GPO** | - **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar**
- **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | For more information, see [Customize the taskbar pinned applications](../pinned-apps.md). diff --git a/windows/configuration/taskbar/includes/configures-search-on-the-taskbar.md b/windows/configuration/taskbar/includes/configures-search-on-the-taskbar.md index 3382db1ac7..5e009d1125 100644 --- a/windows/configuration/taskbar/includes/configures-search-on-the-taskbar.md +++ b/windows/configuration/taskbar/includes/configures-search-on-the-taskbar.md @@ -18,4 +18,4 @@ This policy setting allows you to configure search on the taskbar. | | Path | |--|--| | **CSP** | `./Device/Vendor/MSFT/Policy/Config/Search/`[ConfigureSearchOnTaskbarMode](/windows/client-management/mdm/policy-csp-search#configuresearchontaskbarmode) | -| **GPO** | **Computer Configuration** > **Windows Components** > **Search** | +| **GPO** | - **Computer Configuration** > **Windows Components** > **Search** | diff --git a/windows/configuration/taskbar/includes/disable-editing-quick-settings.md b/windows/configuration/taskbar/includes/disable-editing-quick-settings.md index d1f29ba96d..e57bff141e 100644 --- a/windows/configuration/taskbar/includes/disable-editing-quick-settings.md +++ b/windows/configuration/taskbar/includes/disable-editing-quick-settings.md @@ -13,4 +13,4 @@ ms.topic: include | | Path | |--|--| | **CSP** | `./Device/Vendor/MSFT/Policy/Config/Start/`[DisableEditingQuickSettings](/windows/client-management/mdm/policy-csp-start#disableeditingquicksettings)| -| **GPO** | **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **Disable editing quick settings** | +| **GPO** | - **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **Disable editing quick settings** | diff --git a/windows/configuration/taskbar/includes/do-not-allow-pinning-items-in-jump-lists.md b/windows/configuration/taskbar/includes/do-not-allow-pinning-items-in-jump-lists.md index 22d26069ab..9813a70d10 100644 --- a/windows/configuration/taskbar/includes/do-not-allow-pinning-items-in-jump-lists.md +++ b/windows/configuration/taskbar/includes/do-not-allow-pinning-items-in-jump-lists.md @@ -15,4 +15,4 @@ With this policy setting you control the pinning of items in Jump Lists. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/do-not-allow-pinning-programs-to-the-taskbar.md b/windows/configuration/taskbar/includes/do-not-allow-pinning-programs-to-the-taskbar.md index 70b4320f49..8017676f8c 100644 --- a/windows/configuration/taskbar/includes/do-not-allow-pinning-programs-to-the-taskbar.md +++ b/windows/configuration/taskbar/includes/do-not-allow-pinning-programs-to-the-taskbar.md @@ -15,4 +15,4 @@ This policy setting allows you to control pinning programs to the Taskbar. | | Path | |--|--| | **CSP** | `./Device/Vendor/MSFT/Policy/Config/Start/`[NoPinningToTaskbar](/windows/client-management/mdm/policy-csp-start#nopinningtotaskbar) | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/do-not-allow-pinning-store-app-to-the-taskbar.md b/windows/configuration/taskbar/includes/do-not-allow-pinning-store-app-to-the-taskbar.md index a394034ed7..bdfd18c8cc 100644 --- a/windows/configuration/taskbar/includes/do-not-allow-pinning-store-app-to-the-taskbar.md +++ b/windows/configuration/taskbar/includes/do-not-allow-pinning-store-app-to-the-taskbar.md @@ -15,4 +15,4 @@ This policy setting allows you to control pinning the Store app to the Taskbar. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/do-not-allow-taskbars-on-more-than-one-display.md b/windows/configuration/taskbar/includes/do-not-allow-taskbars-on-more-than-one-display.md index 7766466c8c..4d42fdee7d 100644 --- a/windows/configuration/taskbar/includes/do-not-allow-taskbars-on-more-than-one-display.md +++ b/windows/configuration/taskbar/includes/do-not-allow-taskbars-on-more-than-one-display.md @@ -12,4 +12,4 @@ This policy setting allows you to prevent taskbars from being displayed on more | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/do-not-display-or-track-items-in-jump-lists-from-remote-locations.md b/windows/configuration/taskbar/includes/do-not-display-or-track-items-in-jump-lists-from-remote-locations.md index fb0d96e2d0..a91be73b37 100644 --- a/windows/configuration/taskbar/includes/do-not-display-or-track-items-in-jump-lists-from-remote-locations.md +++ b/windows/configuration/taskbar/includes/do-not-display-or-track-items-in-jump-lists-from-remote-locations.md @@ -18,4 +18,4 @@ This policy setting allows you to control displaying or tracking items in Jump L | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/hide-recent-jumplists.md b/windows/configuration/taskbar/includes/hide-recent-jumplists.md index 67c433344f..8e4ad2a207 100644 --- a/windows/configuration/taskbar/includes/hide-recent-jumplists.md +++ b/windows/configuration/taskbar/includes/hide-recent-jumplists.md @@ -19,5 +19,5 @@ Prevents the operating system and installed programs from creating and displayin | | Path | |--|--| -| **CSP** | - `./Device/Vendor/MSFT/Policy/Config/Start/`[HideRecentJumplists](/windows/client-management/mdm/policy-csp-start#hiderecentjumplists)

- `./User/Vendor/MSFT/Policy/Config/Start/`[HideRecentJumplists](/windows/client-management/mdm/policy-csp-start#hiderecentjumplists) | -| **GPO** | **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **don't keep history of recently opened documents**

**User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **don't keep history of recently opened documents**| +| **CSP** | - `./Device/Vendor/MSFT/Policy/Config/Start/`[HideRecentJumplists](/windows/client-management/mdm/policy-csp-start#hiderecentjumplists)
- `./User/Vendor/MSFT/Policy/Config/Start/`[HideRecentJumplists](/windows/client-management/mdm/policy-csp-start#hiderecentjumplists) | +| **GPO** | - **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **don't keep history of recently opened documents**
- **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** > **don't keep history of recently opened documents**| diff --git a/windows/configuration/taskbar/includes/hide-the-notification-area.md b/windows/configuration/taskbar/includes/hide-the-notification-area.md index 1313ae901b..f7f8b3f04d 100644 --- a/windows/configuration/taskbar/includes/hide-the-notification-area.md +++ b/windows/configuration/taskbar/includes/hide-the-notification-area.md @@ -12,4 +12,4 @@ This setting affects the notification area (previously called the "system tray") | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/hide-the-taskview-button.md b/windows/configuration/taskbar/includes/hide-the-taskview-button.md index aa95d9a03f..567f130a95 100644 --- a/windows/configuration/taskbar/includes/hide-the-taskview-button.md +++ b/windows/configuration/taskbar/includes/hide-the-taskview-button.md @@ -11,5 +11,5 @@ This policy setting allows you to hide the TaskView button. If you enable this p | | Path | |--|--| -| **CSP** |- `./Device/Vendor/MSFT/Policy/Config/Start/`[HideTaskViewButton](/windows/client-management/mdm/policy-csp-start#hidetaskviewbutton)

- `./User/Vendor/MSFT/Policy/Config/Start/`[HideTaskViewButton](/windows/client-management/mdm/policy-csp-start#hidetaskviewbutton) | -| **GPO** |- **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**

- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **CSP** |- `./Device/Vendor/MSFT/Policy/Config/Start/`[HideTaskViewButton](/windows/client-management/mdm/policy-csp-start#hidetaskviewbutton)
- `./User/Vendor/MSFT/Policy/Config/Start/`[HideTaskViewButton](/windows/client-management/mdm/policy-csp-start#hidetaskviewbutton) | +| **GPO** |- **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**
- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/lock-all-taskbar-settings.md b/windows/configuration/taskbar/includes/lock-all-taskbar-settings.md index 59e7e89884..981e828059 100644 --- a/windows/configuration/taskbar/includes/lock-all-taskbar-settings.md +++ b/windows/configuration/taskbar/includes/lock-all-taskbar-settings.md @@ -15,4 +15,4 @@ With this policy setting you lock all taskbar settings. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/lock-the-taskbar.md b/windows/configuration/taskbar/includes/lock-the-taskbar.md index 2f5694702d..93986d5626 100644 --- a/windows/configuration/taskbar/includes/lock-the-taskbar.md +++ b/windows/configuration/taskbar/includes/lock-the-taskbar.md @@ -12,4 +12,4 @@ This setting affects the taskbar, which is used to switch between running applic | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-changes-to-taskbar-and-start-menu-settings.md b/windows/configuration/taskbar/includes/prevent-changes-to-taskbar-and-start-menu-settings.md index a159c12d82..07b9780bb7 100644 --- a/windows/configuration/taskbar/includes/prevent-changes-to-taskbar-and-start-menu-settings.md +++ b/windows/configuration/taskbar/includes/prevent-changes-to-taskbar-and-start-menu-settings.md @@ -15,4 +15,4 @@ With this policy setting you prevent changes to taskbar and Start settings. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**

- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**
- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-grouping-of-taskbar-items.md b/windows/configuration/taskbar/includes/prevent-grouping-of-taskbar-items.md index eb97a11ff8..8fdaf1d499 100644 --- a/windows/configuration/taskbar/includes/prevent-grouping-of-taskbar-items.md +++ b/windows/configuration/taskbar/includes/prevent-grouping-of-taskbar-items.md @@ -15,4 +15,4 @@ Taskbar grouping consolidates similar applications when there's no room on the t | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-users-from-adding-or-removing-toolbars.md b/windows/configuration/taskbar/includes/prevent-users-from-adding-or-removing-toolbars.md index da36dcc670..bfd489e4ba 100644 --- a/windows/configuration/taskbar/includes/prevent-users-from-adding-or-removing-toolbars.md +++ b/windows/configuration/taskbar/includes/prevent-users-from-adding-or-removing-toolbars.md @@ -15,4 +15,4 @@ With this policy setting you prevent users from adding or removing toolbars. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-users-from-moving-taskbar-to-another-screen-dock-location.md b/windows/configuration/taskbar/includes/prevent-users-from-moving-taskbar-to-another-screen-dock-location.md index 953135ecf3..34d6cbff58 100644 --- a/windows/configuration/taskbar/includes/prevent-users-from-moving-taskbar-to-another-screen-dock-location.md +++ b/windows/configuration/taskbar/includes/prevent-users-from-moving-taskbar-to-another-screen-dock-location.md @@ -15,4 +15,4 @@ With this policy setting you prevent users from moving taskbar to another screen | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-users-from-rearranging-toolbars.md b/windows/configuration/taskbar/includes/prevent-users-from-rearranging-toolbars.md index 0e64eb8a09..801b804b91 100644 --- a/windows/configuration/taskbar/includes/prevent-users-from-rearranging-toolbars.md +++ b/windows/configuration/taskbar/includes/prevent-users-from-rearranging-toolbars.md @@ -15,4 +15,4 @@ With this policy setting you prevent users from rearranging toolbars. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/prevent-users-from-resizing-the-taskbar.md b/windows/configuration/taskbar/includes/prevent-users-from-resizing-the-taskbar.md index cddb749761..8796175a15 100644 --- a/windows/configuration/taskbar/includes/prevent-users-from-resizing-the-taskbar.md +++ b/windows/configuration/taskbar/includes/prevent-users-from-resizing-the-taskbar.md @@ -15,4 +15,4 @@ With this policy setting you prevent users from resizing the taskbar. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-access-to-the-context-menus-for-the-taskbar.md b/windows/configuration/taskbar/includes/remove-access-to-the-context-menus-for-the-taskbar.md index 5ff72e3932..a79bd60c89 100644 --- a/windows/configuration/taskbar/includes/remove-access-to-the-context-menus-for-the-taskbar.md +++ b/windows/configuration/taskbar/includes/remove-access-to-the-context-menus-for-the-taskbar.md @@ -17,4 +17,4 @@ This policy setting doesn't prevent users from using other methods to issue the | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**

- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**
- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-clock-from-the-system-notification-area.md b/windows/configuration/taskbar/includes/remove-clock-from-the-system-notification-area.md index 569921f889..ee455afcd7 100644 --- a/windows/configuration/taskbar/includes/remove-clock-from-the-system-notification-area.md +++ b/windows/configuration/taskbar/includes/remove-clock-from-the-system-notification-area.md @@ -13,4 +13,4 @@ ms.topic: include | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-notifications-and-action-center.md b/windows/configuration/taskbar/includes/remove-notifications-and-action-center.md index 850a20179f..d141649c74 100644 --- a/windows/configuration/taskbar/includes/remove-notifications-and-action-center.md +++ b/windows/configuration/taskbar/includes/remove-notifications-and-action-center.md @@ -17,4 +17,4 @@ The notification area is located at the far right end of the taskbar, and includ | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-pinned-programs-from-the-taskbar.md b/windows/configuration/taskbar/includes/remove-pinned-programs-from-the-taskbar.md index 069de94c04..901e8f2402 100644 --- a/windows/configuration/taskbar/includes/remove-pinned-programs-from-the-taskbar.md +++ b/windows/configuration/taskbar/includes/remove-pinned-programs-from-the-taskbar.md @@ -15,4 +15,4 @@ This policy setting allows you to remove pinned programs from the taskbar. | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**

- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar**
- **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-quick-settings.md b/windows/configuration/taskbar/includes/remove-quick-settings.md index 55eaca637d..58e2e01069 100644 --- a/windows/configuration/taskbar/includes/remove-quick-settings.md +++ b/windows/configuration/taskbar/includes/remove-quick-settings.md @@ -17,4 +17,4 @@ If this setting is enabled, Quick Settings isn't displayed in the Quick Settings | | Path | |--|--| | **CSP** | `./User/Vendor/MSFT/Policy/Config/Start/`[DisableControlCenter](/windows/client-management/mdm/policy-csp-start#disablecontrolcenter) | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-the-battery-meter.md b/windows/configuration/taskbar/includes/remove-the-battery-meter.md index 445dba6aa5..5eac19f260 100644 --- a/windows/configuration/taskbar/includes/remove-the-battery-meter.md +++ b/windows/configuration/taskbar/includes/remove-the-battery-meter.md @@ -15,4 +15,4 @@ With this policy setting you can remove the battery meter from the system contro | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-the-meet-now-icon.md b/windows/configuration/taskbar/includes/remove-the-meet-now-icon.md index 75cd22365b..e0ed92dcbb 100644 --- a/windows/configuration/taskbar/includes/remove-the-meet-now-icon.md +++ b/windows/configuration/taskbar/includes/remove-the-meet-now-icon.md @@ -15,4 +15,4 @@ With this policy setting allows you can remove the Meet Now icon from the system | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-the-networking-icon.md b/windows/configuration/taskbar/includes/remove-the-networking-icon.md index a1825e5f0e..18f8a0d6ba 100644 --- a/windows/configuration/taskbar/includes/remove-the-networking-icon.md +++ b/windows/configuration/taskbar/includes/remove-the-networking-icon.md @@ -15,4 +15,4 @@ With this policy setting you can remove the networking icon from the system cont | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-the-people-bar-from-the-taskbar.md b/windows/configuration/taskbar/includes/remove-the-people-bar-from-the-taskbar.md index 679df69fde..9a07b3ea06 100644 --- a/windows/configuration/taskbar/includes/remove-the-people-bar-from-the-taskbar.md +++ b/windows/configuration/taskbar/includes/remove-the-people-bar-from-the-taskbar.md @@ -12,4 +12,4 @@ With this policy allows you can remove the People Bar from the taskbar and disab | | Path | |--|--| | **CSP** | `./User/Vendor/MSFT/Policy/Config/Start/`[HidePeopleBar](/windows/client-management/mdm/policy-csp-start#hidepeoplebar) | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/remove-the-volume-control-icon.md b/windows/configuration/taskbar/includes/remove-the-volume-control-icon.md index 8e34ed3d84..b1c847e81c 100644 --- a/windows/configuration/taskbar/includes/remove-the-volume-control-icon.md +++ b/windows/configuration/taskbar/includes/remove-the-volume-control-icon.md @@ -15,4 +15,4 @@ With this policy setting you can remove the volume control icon from the system | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/show-additional-calendar.md b/windows/configuration/taskbar/includes/show-additional-calendar.md index 39ecd45a89..8198012d72 100644 --- a/windows/configuration/taskbar/includes/show-additional-calendar.md +++ b/windows/configuration/taskbar/includes/show-additional-calendar.md @@ -19,4 +19,4 @@ By default, the calendar is set according to the locale of the operating system, | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/simplify-quick-settings-layout.md b/windows/configuration/taskbar/includes/simplify-quick-settings-layout.md index ea3d57141e..bce9e7ab7d 100644 --- a/windows/configuration/taskbar/includes/simplify-quick-settings-layout.md +++ b/windows/configuration/taskbar/includes/simplify-quick-settings-layout.md @@ -13,4 +13,4 @@ ms.topic: include | | Path | |--|--| | **CSP** | `./Device/Vendor/MSFT/Policy/Config/Start/`[SimplifyQuickSettings](/windows/client-management/mdm/policy-csp-start#simplifyquicksettings) | -| **GPO** | **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **Computer Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/turn-off-automatic-promotion-of-notification-icons-to-the-taskbar.md b/windows/configuration/taskbar/includes/turn-off-automatic-promotion-of-notification-icons-to-the-taskbar.md index 4e9527beef..9642aecd96 100644 --- a/windows/configuration/taskbar/includes/turn-off-automatic-promotion-of-notification-icons-to-the-taskbar.md +++ b/windows/configuration/taskbar/includes/turn-off-automatic-promotion-of-notification-icons-to-the-taskbar.md @@ -15,4 +15,4 @@ With this policy setting you can turn off automatic promotion of notification ic | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/includes/turn-off-notification-area-cleanup.md b/windows/configuration/taskbar/includes/turn-off-notification-area-cleanup.md index 56f39f1f65..6150f80740 100644 --- a/windows/configuration/taskbar/includes/turn-off-notification-area-cleanup.md +++ b/windows/configuration/taskbar/includes/turn-off-notification-area-cleanup.md @@ -18,4 +18,4 @@ This setting determines whether the items are always expanded or always collapse | | Path | |--|--| | **CSP** | Not available. | -| **GPO** | **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | +| **GPO** | - **User Configuration** > **Administrative Templates** > **Start Menu and Taskbar** | diff --git a/windows/configuration/taskbar/pinned-apps.md b/windows/configuration/taskbar/pinned-apps.md index d38c8a7d60..f7cbe59725 100644 --- a/windows/configuration/taskbar/pinned-apps.md +++ b/windows/configuration/taskbar/pinned-apps.md @@ -231,3 +231,7 @@ If you apply the taskbar configuration to a clean install or an update, users ca Learn more about the options available to configure Start menu settings using the Configuration Service Provider (CSP) and Group Policy (GPO): - [Taskbar policy settings](policy-settings.md) + +--- +[WIN-1]: /windows/client-management/mdm/policy-csp-start +[MEM-1]: /mem/intune/configuration/custom-settings-windows-10 From 5ec88ce68255f99b4a4b70ce44111b1c7297cf3d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 3 Jun 2024 08:54:18 -0700 Subject: [PATCH 33/51] ntlm dep --- windows/whats-new/deprecated-features-resources.md | 2 +- windows/whats-new/deprecated-features.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/deprecated-features-resources.md b/windows/whats-new/deprecated-features-resources.md index 96fa6e0a29..3e79887cbe 100644 --- a/windows/whats-new/deprecated-features-resources.md +++ b/windows/whats-new/deprecated-features-resources.md @@ -1,7 +1,7 @@ --- title: Resources for deprecated features in the Windows client description: Resources and details for deprecated features in the Windows client. -ms.date: 04/19/2024 +ms.date: 06/03/2024 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 1f929001b1..62fe325980 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 05/30/2024 +ms.date: 06/03/2024 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium From 09b0bdcf39467d79a46644bcd01407209d50707f Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 3 Jun 2024 08:58:23 -0700 Subject: [PATCH 34/51] june rather than may --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 62fe325980..0a7bbc5918 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -47,7 +47,7 @@ The features in this article are no longer being actively developed, and might b | Feature | Details and mitigation | Deprecation announced | |---|---|---| -| NTLM | All versions of [NTLM](/windows/win32/secauthn/microsoft-ntlm), including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated. Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows. Calls to NTLM should be replaced by calls to Negotiate, which will try to authenticate with Kerberos and only fall back to NTLM when necessary. For more information, see [Resources for deprecated features](deprecated-features-resources.md). | May 2024 | +| NTLM | All versions of [NTLM](/windows/win32/secauthn/microsoft-ntlm), including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated. Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows. Calls to NTLM should be replaced by calls to Negotiate, which will try to authenticate with Kerberos and only fall back to NTLM when necessary. For more information, see [Resources for deprecated features](deprecated-features-resources.md). | June 2024 | | Driver Verifier GUI (verifiergui.exe) | Driver Verifier GUI, verifiergui.exe, is deprecated and will be removed in a future version of Windows. You can use the [Verifier Command Line](/windows-hardware/drivers/devtest/verifier-command-line) (verifier.exe) instead of the Driver Verifier GUI.| May 2024 | | NPLogonNotify and NPPasswordChangeNotify APIs | Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to disabled by default through group policy in [NPLogonNotify](/windows/win32/api/npapi/nf-npapi-nplogonnotify) and [NPPasswordChangeNotify](/windows/win32/api/npapi/nf-npapi-nppasswordchangenotify) APIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a user's password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the [EnableMPRNotifications](/windows/client-management/mdm/policy-csp-windowslogon#enablemprnotifications) policy to `enabled`.| March 2024 | | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| From 39c02a42eec5320fc3cc6b2cb21c2e7ce7cf3165 Mon Sep 17 00:00:00 2001 From: "[cmknox]" <[cmknox@gmail.com]> Date: Mon, 3 Jun 2024 10:26:43 -0600 Subject: [PATCH 35/51] Minor update --- windows/deployment/do/whats-new-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/do/whats-new-do.md b/windows/deployment/do/whats-new-do.md index 0f9840b7ed..b750903a23 100644 --- a/windows/deployment/do/whats-new-do.md +++ b/windows/deployment/do/whats-new-do.md @@ -35,7 +35,7 @@ There are two different versions: ### General -[Check out](https://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the two switches: +[Check out](https://aka.ms/do-fix) the new Delivery Optimization Troubleshooter. This tool provides a device health check to verify the device is set up properly to use Delivery Optimization. To scope the output more specifically, use one of the available switches: - -HealthCheck: Provides an overall check of the device setup to ensure Delivery Optimization communication is possible on the device. - -P2P: Provides output specific to P2P settings, efficiency, and errors. From 4bf649c310a3e32336b62eed8a9e9d7f2adfb728 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Mon, 3 Jun 2024 11:35:06 -0600 Subject: [PATCH 36/51] Update wmi-providers-supported-in-windows.md --- windows/client-management/wmi-providers-supported-in-windows.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/wmi-providers-supported-in-windows.md b/windows/client-management/wmi-providers-supported-in-windows.md index 81c71bd5ba..9afd80ebd2 100644 --- a/windows/client-management/wmi-providers-supported-in-windows.md +++ b/windows/client-management/wmi-providers-supported-in-windows.md @@ -76,7 +76,7 @@ For links to these classes, see [**MDM Bridge WMI Provider**](/windows/win32/dmw | [**MDM_WirelesssProfileXML**](/previous-versions/windows/desktop/mdmsettingsprov/mdm-wirelessprofilexml) | Yes | | [**MDM_WNSChannel**](/previous-versions/windows/desktop/mdmsettingsprov/mdm-wnschannel) | Yes | | [**MDM_WNSConfiguration**](/previous-versions/windows/desktop/mdmsettingsprov/mdm-wnsconfiguration) | Yes | -| [**MSFT_NetFirewallProfile**](/previous-versions/windows/desktop/wfascimprov/msft-netfirewallprofile) | Yes | +| [**MSFT_NetFirewallProfile**](/windows/win32/fwp/wmi/wfascimprov/msft-netfirewallprofile) | Yes | | [**MSFT_VpnConnection**](/previous-versions/windows/desktop/vpnclientpsprov/msft-vpnconnection) | Yes | | [**SoftwareLicensingProduct**](/previous-versions/windows/desktop/sppwmi/softwarelicensingproduct) | | | [**SoftwareLicensingService**](/previous-versions/windows/desktop/sppwmi/softwarelicensingservice) | | From 6b1335646762aa311f721fb38b1fbaa2d26b10e0 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 3 Jun 2024 15:39:13 -0700 Subject: [PATCH 37/51] fresh-updrel-8966710 --- windows/deployment/update/release-cycle.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/release-cycle.md b/windows/deployment/update/release-cycle.md index 2d4e8ecb19..2df0fe24ef 100644 --- a/windows/deployment/update/release-cycle.md +++ b/windows/deployment/update/release-cycle.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 05/19/2023 +ms.date: 06/04/2024 --- # Update release cycle for Windows clients @@ -56,18 +56,15 @@ Many update management tools, such as [Microsoft Configuration Manager](/mem/con ## Optional nonsecurity preview release -**Optional nonsecurity preview releases** provide IT admins an opportunity for early validation of that content prior to the **monthly security update release**. Admins can test and validate production-quality releases ahead of the planned monthly security update release for the following month. These updates are optional, cumulative, nonsecurity preview releases. New features might initially be deployed in the prior month's **optional nonsecurity preview release**, then ship in the following **monthly security update release**. These releases are only offered to the most recent, supported versions of Windows. +**Optional nonsecurity preview releases** provide IT admins an opportunity for early validation of that content prior to the **monthly security update release**. Admins can test and validate production-quality releases ahead of the planned monthly security update release for the following month. These updates are optional, cumulative, nonsecurity preview releases. New features might initially be deployed in the prior month's **optional nonsecurity preview release**, then ship in the following **monthly security update release**. **Optional nonsecurity preview releases** are typically released on the fourth Tuesday of the month at 10:00 AM Pacific Time (PST/PDT). These releases are only offered to the most recent, supported versions of Windows. **Optional nonsecurity preview releases** might commonly be referred to as: -- C or D week releases (meaning the third or fourth week of the month) +- D week releases (meaning the fourth week of the month) - Preview updates - Preview CU - LCU preview -> [!Important] -> Starting in April 2023, all **optional nonsecurity preview releases** will be released on the fourth Tuesday of the month. This change in release cadence gives admins a consistent time cycle for testing and validating fixes and features. - To access the optional nonsecurity preview release: - Navigate to **Settings** > **Update & Security** > **Windows Update** and select **Check for updates**. - Use [Windows Insider Program for Business](https://insider.windows.com/for-business) @@ -77,7 +74,7 @@ To access the optional nonsecurity preview release: **Out-of-band (OOB) releases** might be provided to fix a recently identified issue or vulnerability. They're used in atypical cases when an issue is detected and can't wait for the next monthly release, because devices must be updated immediately to address security vulnerabilities or to resolve a quality issue impacting many devices. **Out-of-band (OOB) releases** are provided outside of the monthly schedule when there's an exceptional need. -Some key considerations about OOB releases include: +Some key considerations about OOB releases include: - OOB releases are always cumulative. - OOB releases supersede any prior monthly security update and optional nonsecurity preview release. From 0fd29e3440180c325385480262c2fdb4e80c5806 Mon Sep 17 00:00:00 2001 From: Kenichi Maruyama <25722430+kemaruya@users.noreply.github.com> Date: Tue, 4 Jun 2024 11:14:48 +0900 Subject: [PATCH 38/51] Update prerequisites-microsoft-store-for-business.md Fixed an unintentional backslash being exposed. --- .../prerequisites-microsoft-store-for-business.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/store-for-business/prerequisites-microsoft-store-for-business.md b/store-for-business/prerequisites-microsoft-store-for-business.md index 1d519c7d26..ac4b271b5d 100644 --- a/store-for-business/prerequisites-microsoft-store-for-business.md +++ b/store-for-business/prerequisites-microsoft-store-for-business.md @@ -65,11 +65,10 @@ If your organization restricts computers on your network from connecting to the - `account.live.com` - `clientconfig.passport.net` - `windowsphone.com` -- `\*.wns.windows.com` -- `\*.microsoft.com` -- `\*.s-microsoft.com` +- `*.wns.windows.com` +- `*.microsoft.com` +- `*.s-microsoft.com` - `www.msftncsi.com` (prior to Windows 10, version 1607) -- `www.msftconnecttest.com/connecttest.txt` (replaces `www.msftncsi.com` - starting with Windows 10, version 1607) +- `www.msftconnecttest.com/connecttest.txt` (replaces `www.msftncsi.com` starting with Windows 10, version 1607) Store for Business requires Microsoft Windows HTTP Services (WinHTTP) to install, or update apps. From 2ec14e1e4f13f48b8328564324c239025394c147 Mon Sep 17 00:00:00 2001 From: Michael Scovetta Date: Mon, 3 Jun 2024 23:48:03 -0400 Subject: [PATCH 39/51] Fix case (VGpu -> vGpu) Minor typo for consistency. --- .../windows-sandbox/windows-sandbox-configure-using-wsb-file.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md index 236eeb8788..50526dc308 100644 --- a/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md +++ b/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md @@ -208,7 +208,7 @@ The following config file can be used to easily test the downloaded files inside ```xml - Disable + Disable Disable From 4639f1467f3af6036cf743e8701c5d56d47ff085 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 4 Jun 2024 07:56:57 -0700 Subject: [PATCH 40/51] rm-gadmin-ex --- windows/deployment/update/check-release-health.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/check-release-health.md b/windows/deployment/update/check-release-health.md index fb83ad99f7..bb837de075 100644 --- a/windows/deployment/update/check-release-health.md +++ b/windows/deployment/update/check-release-health.md @@ -13,7 +13,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 04/04/2024 +ms.date: 06/04/2024 --- # How to check Windows release health @@ -33,7 +33,7 @@ Ensure the following prerequisites are met to display the Windows release health - Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 or A5) - Sign into the Microsoft 365 admin center using an [admin role](/microsoft-365/admin/add-users/about-admin-roles). - - Most roles containing the word `administrator` give you access to the Windows release health page such as [Global Administrator](/azure/active-directory/roles/permissions-reference#global-administrator), [Helpdesk Administrator](/azure/active-directory/roles/permissions-reference#helpdesk-administrator), and [Service Support Administrator](/azure/active-directory/roles/permissions-reference#service-support-administrator). For more information, see [Assign admin roles in the Microsoft 365 admin center](/microsoft-365/admin/add-users/assign-admin-roles). + - Most roles containing the word `administrator` give you access to the Windows release health page such as [Helpdesk Administrator](/azure/active-directory/roles/permissions-reference#helpdesk-administrator) and [Service Support Administrator](/azure/active-directory/roles/permissions-reference#service-support-administrator). For more information, see [Assign admin roles in the Microsoft 365 admin center](/microsoft-365/admin/add-users/assign-admin-roles). > [!NOTE] > Currently, Windows release health is available for Government Community Cloud (GCC) tenants, but isn't available for GCC High and DoD. From ac2d102c088f01469e1495219b4122d616b309f2 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 4 Jun 2024 12:15:26 -0400 Subject: [PATCH 41/51] removed GA for least privileged efforts --- .../windows/configure-aad-google-trust.md | 4 +- .../windows/use-set-up-school-pcs-app.md | 100 +++++++++--------- 2 files changed, 52 insertions(+), 52 deletions(-) diff --git a/education/windows/configure-aad-google-trust.md b/education/windows/configure-aad-google-trust.md index 00367e56dc..204a70649c 100644 --- a/education/windows/configure-aad-google-trust.md +++ b/education/windows/configure-aad-google-trust.md @@ -18,7 +18,7 @@ To configure Google Workspace as an IdP for Microsoft Entra ID, the following pr 1. A Microsoft Entra tenant, with one or multiple custom DNS domains (that is, domains that aren't in the format \**.onmicrosoft.com*) - If the federated domain hasn't yet been added to Microsoft Entra ID, you must have access to the DNS domain to create a DNS record. This is required to verify the ownership of the DNS namespace - Learn how to [Add your custom domain name using the Microsoft Entra admin center](/azure/active-directory/fundamentals/add-custom-domain) -1. Access to Microsoft Entra ID with an account with the *Global Administrator* role +1. Access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [External Identity Provider Administrator](/entra/identity/role-based-access-control/permissions-reference#external-identity-provider-administrator) 1. Access to Google Workspace with an account with *super admin* privileges To test federation, the following prerequisites must be met: @@ -73,7 +73,7 @@ Now that the app is configured, you must enable it for the users in Google Works ## Configure Microsoft Entra ID as a Service Provider (SP) for Google Workspace The configuration of Microsoft Entra ID consists of changing the authentication method for the custom DNS domains. This configuration can be done using PowerShell.\ -Using the **IdP metadata** XML file downloaded from Google Workspace, modify the *$DomainName* variable of the following script to match your environment, and then run it in a PowerShell session. When prompted to authenticate to Microsoft Entra ID, use the credentials of an account with the *Global Administrator* role. +Using the **IdP metadata** XML file downloaded from Google Workspace, modify the *$DomainName* variable of the following script to match your environment, and then run it in a PowerShell session. When prompted to authenticate to Microsoft Entra ID, sign in as at least a [External Identity Provider Administrator](/entra/identity/role-based-access-control/permissions-reference#external-identity-provider-administrator) ```powershell Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser -Force diff --git a/education/windows/use-set-up-school-pcs-app.md b/education/windows/use-set-up-school-pcs-app.md index d6b1fa3e62..b7d2153dce 100644 --- a/education/windows/use-set-up-school-pcs-app.md +++ b/education/windows/use-set-up-school-pcs-app.md @@ -7,7 +7,7 @@ appliesto: - ✅ Windows 10 --- -# Use the Set up School PCs app +# Use the Set up School PCs app IT administrators and technical teachers can use the **Set up School PCs** app to quickly set up Windows devices for students. The app configures devices with the apps and features students need, and it removes the ones they don't need. During setup, if licensed in your tenant, the app enrolls each student device in Microsoft Intune. You can then manage all the settings the app configures through Intune. @@ -16,20 +16,20 @@ With Set up School PCs you can: - Joins student devices to your organization's Microsoft Entra tenant - Enable the optional Autopilot Reset feature, to return devices to a fully configured or known IT-approved state - Use Windows Update and maintenance hours to keep student devices up-to-date, without interfering with class time -- Lock down student devices to prevent activity that aren't beneficial to their education +- Lock down student devices to prevent activity that aren't beneficial to their education -This article describes how to use the Set up School PCs app. To learn more about the app's functionality, review the [Technical reference for the Set up School PCs app](set-up-school-pcs-technical.md). +This article describes how to use the Set up School PCs app. To learn more about the app's functionality, review the [Technical reference for the Set up School PCs app](set-up-school-pcs-technical.md). ## Requirements Before you begin, make sure that your devices and your school's network are configured with the following requirements: - Microsoft Entra ID and Microsoft 365 licenses -- [Latest Set up School PCs app](https://apps.microsoft.com/detail/9NBLGGH4LS40) +- [Latest Set up School PCs app](https://apps.microsoft.com/detail/9NBLGGH4LS40) - A NTFS-formatted USB drive that is at least 1 GB - Student devices must either: - Be within range of the Wi-Fi network that you configured in the app - - Have a wired Ethernet connection when you set them up + - Have a wired Ethernet connection when you set them up ### Prepare existing PC account for new setup @@ -46,7 +46,7 @@ Alternatively, you can also select **Start** > **Power** icon. Hold down Sh 1. Select **Troubleshoot** > **Reset this PC** 1. Select **Remove everything** -1. If the option appears, select **Only the drive where Windows is installed** +1. If the option appears, select **Only the drive where Windows is installed** 1. Select **Just remove my files** 1. Select **Reset** @@ -58,20 +58,20 @@ This section offers recommendations to prepare you for the best possible setup e We recommend you run the IT administrator or technical teacher's device on the same Windows build as the student devices. -### Student devices must meet OS requirements for the app +### Student devices must meet OS requirements for the app -Check the OS requirements in the Set up School PCs app. We recommend using the latest Set up School PCs app along with the latest Windows images on the student devices. +Check the OS requirements in the Set up School PCs app. We recommend using the latest Set up School PCs app along with the latest Windows images on the student devices. To check the app's OS requirements, go to the Microsoft Store and locate the Set up School PCs app. In the app's description, go to **System Requirements** > **OS**. -### Use app on a PC that is connected to your school's network +### Use app on a PC that is connected to your school's network We recommend that you run the Set up School PCs app on a computer that's connected to your school's network. That way the app can gather accurate information about your school's wireless networks and cloud subscriptions. If it's not connected, you need to enter the information manually. ->[!NOTE] +>[!NOTE] >Don't use the **Set up Schools PCs** app for devices that must connect to enterprise or open Wi-Fi networds that require the user to accept Terms of Use. -### Run app on an open network or network that requires a basic password +### Run app on an open network or network that requires a basic password Don't use Set up School PCs over a certificate-based network, or one where you have to enter credentials in a browser. If you need to set up many devices over Wi-Fi, make sure that your network configuration can support it. @@ -87,57 +87,57 @@ We recommend that you: To set up more than one PC at the same time, save the provisioning package to additional USB drives. Then plug the USBs in at the same time during setup. -### Limit changes to school-optimized settings +### Limit changes to school-optimized settings -We strongly recommend that you avoid changing preset policies. Changes can slow down setup, performance, and the time it takes to sign in. +We strongly recommend that you avoid changing preset policies. Changes can slow down setup, performance, and the time it takes to sign in. -## Create the provisioning package +## Create the provisioning package The **Set up School PCs** app guides you through the configuration choices for the student PCs. To begin, open the app on your device and select **Get started**. -![Launch the Set up School PCs app.](images/suspcs/suspc_getstarted_050817.png) +![Launch the Set up School PCs app.](images/suspcs/suspc_getstarted_050817.png) ### Package name -Type a unique name to help distinguish your school's provisioning packages. The name appears: +Type a unique name to help distinguish your school's provisioning packages. The name appears: - On the local package folder - In your tenant's Microsoft Entra account in the Azure portal -A package expiration date is also attached to the end of each package. For example, *Set_Up_School_PCs (Expires 1-1-2024)*. The expiration date is 180 days after you create your package. +A package expiration date is also attached to the end of each package. For example, *Set_Up_School_PCs (Expires 1-1-2024)*. The expiration date is 180 days after you create your package. - ![Example screenshot of the Set up School PCs app, Name your package screen.](images/suspcs/1810_Name_Your_Package_SUSPC.png) + ![Example screenshot of the Set up School PCs app, Name your package screen.](images/suspcs/1810_Name_Your_Package_SUSPC.png) -After you select **Next**, you can no longer change the name in the app. To create a package with a different name, reopen the Set up School PCs app. +After you select **Next**, you can no longer change the name in the app. To create a package with a different name, reopen the Set up School PCs app. -To change an existing package's name, right-click the package folder on your device and select **Rename**. This action doesn't change the name in Microsoft Entra ID. If you have Global Admin permissions, you can go to Microsoft Entra ID in the Azure portal, and rename the package there. +To change an existing package's name, right-click the package folder on your device and select **Rename**. This action doesn't change the name in Microsoft Entra ID. You can access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [User Administrator](/entra/identity/role-based-access-control/permissions-reference#user-administrator), and rename the package there. -### Sign in +### Sign in 1. Select how you want to sign in - 1. (Recommended) To enable student device to automatically connect and authenticate to Microsoft Entra ID, and management services like Microsoft Intune, select **Sign-in**. Then go to step 3 + 1. (Recommended) To enable student device to automatically connect and authenticate to Microsoft Entra ID, and management services like Microsoft Intune, select **Sign-in**. Then go to step 3 1. To complete setup without signing in, select **Continue without account**. Student devices won't connect to your school's cloud services and their management will be more difficult later. Continue to [Wireless network](#wireless-network) -1. In the new window, select the account you want to use throughout setup. +1. In the new window, select the account you want to use throughout setup. - ![Sign-in screen showing the option to "Use this account" or use a different "Work or school account."](images/suspcs/1810_choose_account_suspc.png) + ![Sign-in screen showing the option to "Use this account" or use a different "Work or school account."](images/suspcs/1810_choose_account_suspc.png) - To add an account not listed: - 1. Select **Work or school account** > **Continue**. - 1. Type in the account username and select **Next**. - 1. Verify the user account and password, if prompted. + To add an account not listed: + 1. Select **Work or school account** > **Continue**. + 1. Type in the account username and select **Next**. + 1. Verify the user account and password, if prompted. 1. Select **Accept** to allow Set up School PCs to access your account throughout setup 1. When your account name appears on the page, select **Next** - ![Example screenshot of the Set up School PC app, Sign in screen, showing that the user's account name appears at the bottom of the page.](images/suspcs/1810_Sign_In_SUSPC.png) + ![Example screenshot of the Set up School PC app, Sign in screen, showing that the user's account name appears at the bottom of the page.](images/suspcs/1810_Sign_In_SUSPC.png) ### Wireless network -Add and save the wireless network profile that you want student devices to connect to. Only skip Wi-Fi setup if you have an Ethernet connection. +Add and save the wireless network profile that you want student devices to connect to. Only skip Wi-Fi setup if you have an Ethernet connection. -Select your organization's Wi-Fi network from the list of available wireless networks, or select **Add a wireless network** to manually configure it. Then select **Next** +Select your organization's Wi-Fi network from the list of available wireless networks, or select **Add a wireless network** to manually configure it. Then select **Next** - ![Example screenshot of the Set up School PC app, Wireless network page with two Wi-Fi networks listed, one of which is selected.](images/suspcs/1810_SUSPC_select_Wifi.png) + ![Example screenshot of the Set up School PC app, Wireless network page with two Wi-Fi networks listed, one of which is selected.](images/suspcs/1810_SUSPC_select_Wifi.png) ### Device names @@ -147,17 +147,17 @@ To make sure all device names are unique, Set up School PCs automatically append To keep the default name for your devices, select **Continue with existing names**. - !["Name these devices" screen with the device field filled in with example device name, "Grd8."](images/suspcs/1810_name-devices_SUSPC.png) + !["Name these devices" screen with the device field filled in with example device name, "Grd8."](images/suspcs/1810_name-devices_SUSPC.png) ### Settings Select more settings to include in the provisioning package. To begin, select the operating system on your student PCs. -![Screenshot of the Current OS version page with the Select OS version menu selected, showing 7 Windows 10 options. All other settings on page are unavailable to select.](images/suspcs/1810_suspc_settings.png) +![Screenshot of the Current OS version page with the Select OS version menu selected, showing 7 Windows 10 options. All other settings on page are unavailable to select.](images/suspcs/1810_suspc_settings.png) Setting selections vary based on the OS version you select. -![Example screenshot of the Current OS version page, with Windows 10 version 1803 selected. 4 available settings and 1 unavailable setting are shown, and none are selected.](images/suspcs/1810_SUSPC_available_settings.png) +![Example screenshot of the Current OS version page, with Windows 10 version 1803 selected. 4 available settings and 1 unavailable setting are shown, and none are selected.](images/suspcs/1810_SUSPC_available_settings.png) The following table describes each setting and lists the applicable Windows 10 versions. To find out if a setting is available in your version of Windows 10, look for an *X* in the setting row and in the version column. @@ -172,20 +172,20 @@ The following table describes each setting and lists the applicable Windows 10 v After you've made your selections, select **Next**. -### Time zone +### Time zone > [!WARNING] > If you are using the Autounattend.xml file to reimage your school PCs, do not specify a time zone in the file. If you set the time zone in the file *and* in this app, you will encounter an error. -Choose the time zone where your school's devices are used. This setting ensures that all PCs are provisioned in the same time zone. When you're done, select **Next**. +Choose the time zone where your school's devices are used. This setting ensures that all PCs are provisioned in the same time zone. When you're done, select **Next**. -![Choose PC time zone page with the time zone menu expanded to show all time zone selections.](images/suspcs/1810_suspc_timezone.png) +![Choose PC time zone page with the time zone menu expanded to show all time zone selections.](images/suspcs/1810_suspc_timezone.png) ### Product key Optionally, type in a 25-digit product key to upgrade or change the edition of Windows on your student devices. If you don't have a product key, select **Continue without change**. -![Example screenshot of the Set up School PC app, Product key screen, showing a value field, Next button, and Continue without change option.](images/suspcs/1810_suspc_product_key.png) +![Example screenshot of the Set up School PC app, Product key screen, showing a value field, Next button, and Continue without change option.](images/suspcs/1810_suspc_product_key.png) ### Take a Test @@ -195,7 +195,7 @@ Set up the Take a Test app to give online quizzes and high-stakes assessments. D ![Set up Take a Test app page with "Yes" selected to create an app button. Page also has two checkboxes for additional settings and one text field for the assessment URL.](images/suspcs/1810_SUSPC_Take_Test.png) -1. Select from the advanced settings. Available settings include: +1. Select from the advanced settings. Available settings include: - Allow keyboard auto-suggestions: Allows app to suggest words as the student types on the device's keyboard - Allow teachers to monitor online tests: Enables screen capture in the Take a Test app 1. Enter the URL where the test is hosted. When students log in to the Take a Test account, they'll be able to select or enter the link to view the assessment @@ -203,11 +203,11 @@ Set up the Take a Test app to give online quizzes and high-stakes assessments. D ### Personalization -Upload custom images to replace the student devices' default desktop and lock screen backgrounds. Select **Browse** to search for an image file on your computer. Accepted image formats are jpg, jpeg, and png. +Upload custom images to replace the student devices' default desktop and lock screen backgrounds. Select **Browse** to search for an image file on your computer. Accepted image formats are jpg, jpeg, and png. -If you don't want to upload custom images or use the images that appear in the app, select **Continue without personalization**. This option doesn't apply any customizations, and instead uses the devices' default or preset images. +If you don't want to upload custom images or use the images that appear in the app, select **Continue without personalization**. This option doesn't apply any customizations, and instead uses the devices' default or preset images. -![Example image of the Set up School PCs app, Personalization screen, showing the default desktop and lock screen background photos, a Browse button under each photo, a blue Next button, and a Continue without personalization button.](images/suspcs/1810_SUSPC_personalization.png) +![Example image of the Set up School PCs app, Personalization screen, showing the default desktop and lock screen background photos, a Browse button under each photo, a blue Next button, and a Continue without personalization button.](images/suspcs/1810_SUSPC_personalization.png) ### Summary @@ -216,7 +216,7 @@ Review all of the settings for accuracy and completeness 1. To make changes now, select any page along the left side of the window 2. When finished, select **Accept** -![Example image of the Summary screen, showing the user's configurations for Sign-in, Wireless network, Device names, Settings, Time zone, Take a Test. Accept button is available and the page contains three links on the right-hand side to help and support.](images/suspcs/1810_SUSPC_summary.png) +![Example image of the Summary screen, showing the user's configurations for Sign-in, Wireless network, Device names, Settings, Time zone, Take a Test. Accept button is available and the page contains three links on the right-hand side to help and support.](images/suspcs/1810_SUSPC_summary.png) > [!NOTE] > To make changes to a saved package, you have to start over. @@ -230,34 +230,34 @@ Review all of the settings for accuracy and completeness 1. When the package is ready, you see the filename and package expiration date. You can also select **Add a USB** to save the same provisioning package to another USB drive. When you're done, remove the USB drive and select **Next** -![Your provisioning package is ready screen with package filename and expiration date. Shows an active blue, Next button, and a gray Add a USB button.](images/suspcs/1810_SUSPC_Package_ready.png) +![Your provisioning package is ready screen with package filename and expiration date. Shows an active blue, Next button, and a gray Add a USB button.](images/suspcs/1810_SUSPC_Package_ready.png) ## Run package - Get PCs ready Complete each step on the **Get PCs ready** page to prepare student devices for set-up. Then select **Next**. -![Your provisioning package is ready! screen with 3 steps to get student devices ready for setup. Save button is active.](images/suspcs/suspc_runpackage_getpcsready.png) +![Your provisioning package is ready! screen with 3 steps to get student devices ready for setup. Save button is active.](images/suspcs/suspc_runpackage_getpcsready.png) ## Run package - Install package on PC The provisioning package on your USB drive is named SetupSchoolPCs_<*devicename*>(Expires <*expiration date*>.ppkg. A provisioning package applies settings to Windows without reimaging the device. -When used in context of the Set up School PCs app, the word *package* refers to your provisioning package. The word *provisioning* refers to the act of installing the package on the student device. This section describes how to apply the settings to a device in your school. +When used in context of the Set up School PCs app, the word *package* refers to your provisioning package. The word *provisioning* refers to the act of installing the package on the student device. This section describes how to apply the settings to a device in your school. > [!IMPORTANT] -> The devices must have a new or reset Windows image and must not already have been through first-run setup experience (which is referred to as *OOBE*). For instructions about how to reset a devices's image, see [Prepare existing PC account for new setup](use-set-up-school-pcs-app.md#prepare-existing-pc-account-for-new-setup). +> The devices must have a new or reset Windows image and must not already have been through first-run setup experience (which is referred to as *OOBE*). For instructions about how to reset a devices's image, see [Prepare existing PC account for new setup](use-set-up-school-pcs-app.md#prepare-existing-pc-account-for-new-setup). 1. Start with the student device turned off or with the device on the first-run setup screen. If the device is past the account setup screen, reset the device to start over. To reset the it, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC** ![Example screenshot of the first screen the Windows 10 PC setup for OOBE. United States is selected as the region and the Yes button is active.](images/suspcs/win10_1703_oobe_firstscreen.png) - + 1. Insert the USB drive. Windows automatically recognizes and installs the package ![Screen showing that the installation is automatically beginning, with a loading bar showing the status on the installation.](images/suspcs/suspc_studentpcsetup_installingsetupfile.png) 1. When you receive the message that it's okay to remove the USB drive, remove it from the device. If there are more devices to set up, insert the USB drive into the next one - ![Screen with message telling user to remove the USB drive.](images/suspcs/suspc_setup_removemediamessage.png) + ![Screen with message telling user to remove the USB drive.](images/suspcs/suspc_setup_removemediamessage.png) 1. If you didn't set up the package with Microsoft Entra join, continue the Windows device setup experience. If you did configure the package with Microsoft Entra join, the device is ready for use and no further configurations are required From e339a59abeecf97666298d717358a714ca887442 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 4 Jun 2024 12:37:22 -0400 Subject: [PATCH 42/51] removed GA for least privileged efforts --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 10 +++++----- .../hello-for-business/pin-reset.md | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 805091b707..558d15b2f9 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -495,7 +495,7 @@ Connector group automatically round-robin, load balance the Microsoft Entra appl Sign-in a workstation with access equivalent to a *domain user*. -1. Sign-in to the [Azure portal](https://portal.azure.com/) with access equivalent to **Global Administrator** +1. Access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) 1. Select **All Services**. Type **Microsoft Entra ID** to filter the list of services. Under **SERVICES**, select **Microsoft Entra ID** 1. Under **MANAGE**, select **Application proxy** 1. Select **Download connector service**. Select **Accept terms & Download**. Save the file (AADApplicationProxyConnectorInstaller.exe) in a location accessible by others on the domain @@ -506,7 +506,7 @@ Sign-in a workstation with access equivalent to a *domain user*. 1. Start **AADApplicationProxyConnectorInstaller.exe** 1. Read the license terms and then select **I agree to the license terms and conditions**. Select **Install** ![Azure Application Proxy Connector: license terms](images/aadjcert/azureappproxyconnectorinstall-01.png) -1. Sign-in to Microsoft Azure with access equivalent to **Global Administrator** +1. Sign-in as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) ![Azure Application Proxy Connector: sign-in](images/aadjcert/azureappproxyconnectorinstall-02.png) 1. When the installation completes. Read the information regarding outbound proxy servers. Select **Close** ![Azure Application Proxy Connector: read](images/aadjcert/azureappproxyconnectorinstall-03.png) @@ -516,7 +516,7 @@ Sign-in a workstation with access equivalent to a *domain user*. Sign-in a workstation with access equivalent to a *domain user*. -1. Sign-in to the [Azure portal](https://portal.azure.com/) with access equivalent to **Global Administrator** +1. Access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) 1. Select **All Services**. Type **Microsoft Entra ID** to filter the list of services. Under **SERVICES**, select **Microsoft Entra ID** 1. Under **MANAGE**, select **Application proxy**. @@ -533,7 +533,7 @@ Sign-in a workstation with access equivalent to a *domain user*. Sign-in a workstation with access equivalent to a *domain user*. -1. Sign-in to the [Azure portal](https://portal.azure.com/) with access equivalent to **Global Administrator** +1. Access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) 1. Select **All Services**. Type **Microsoft Entra ID** to filter the list of services. Under **SERVICES**, select **Microsoft Entra ID** 1. Under **MANAGE**, select **Application proxy** 1. Select **Configure an app** @@ -692,7 +692,7 @@ Optionally (not required), you can configure the Intune connector for certificat Sign-in a workstation with access equivalent to a *domain user*. -1. Sign-in to the [Azure portal](https://portal.azure.com/) with access equivalent to **Global Administrator** +1. Access to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator) 1. Select **All Services**. Type **Microsoft Entra ID** to filter the list of services. Under **SERVICES**, select **Microsoft Entra ID** 1. Select **Groups**. Select **New group** 1. Select **Security** from the **Group type** list diff --git a/windows/security/identity-protection/hello-for-business/pin-reset.md b/windows/security/identity-protection/hello-for-business/pin-reset.md index f9d4487a61..816f46365d 100644 --- a/windows/security/identity-protection/hello-for-business/pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/pin-reset.md @@ -49,7 +49,7 @@ To register the applications, follow these steps: :::row::: :::column span="3"::: - 1. Go to the [Microsoft PIN Reset Service Production website][APP-1], and sign in using a *Global Administrator* account you use to manage your Microsoft Entra tenant. Review the permissions requested by the *Microsoft Pin Reset Service Production* application and select **Accept** to give consent to the application to access your organization + 1. Go to the [Microsoft PIN Reset Service Production website][APP-1], and sign in as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator). Review the permissions requested by the *Microsoft Pin Reset Service Production* application and select **Accept** to give consent to the application to access your organization :::column-end::: :::column span="1"::: :::image type="content" alt-text="Screenshot showing the PIN reset service permissions page." source="images/pin-reset/pin-reset-service-prompt.png" lightbox="images/pin-reset/pin-reset-service-prompt.png" border="true"::: @@ -57,7 +57,7 @@ To register the applications, follow these steps: :::row-end::: :::row::: :::column span="3"::: - 2. Go to the [Microsoft PIN Reset Client Production website][APP-2], and sign in using a *Global Administrator* account you use to manage your Microsoft Entra tenant. Review the permissions requested by the *Microsoft Pin Reset Client Production* application, and select **Next**. + 2. Go to the [Microsoft PIN Reset Client Production website][APP-2], and sign as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator). Review the permissions requested by the *Microsoft Pin Reset Client Production* application, and select **Next**. :::column-end::: :::column span="1"::: :::image type="content" alt-text="Screenshot showing the PIN reset client permissions page." source="images/pin-reset/pin-reset-client-prompt.png" lightbox="images/pin-reset/pin-reset-client-prompt.png" border="true"::: From 365f104add2301e223e3a5d814d9b7b2b8adc20b Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <123032460+American-Dipper@users.noreply.github.com> Date: Tue, 4 Jun 2024 09:39:12 -0700 Subject: [PATCH 43/51] Update configure-aad-google-trust.md --- education/windows/configure-aad-google-trust.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/configure-aad-google-trust.md b/education/windows/configure-aad-google-trust.md index 204a70649c..384e9c8767 100644 --- a/education/windows/configure-aad-google-trust.md +++ b/education/windows/configure-aad-google-trust.md @@ -56,7 +56,7 @@ To test federation, the following prerequisites must be met: |Basic Information: Primary Email|App attributes: IDPEmail| > [!IMPORTANT] - > You must ensure that your the Microsoft Entra user accounts email match those in your Google Workspace. + > You must ensure that your Microsoft Entra user account's email match that in your Google Workspace. 1. Select **Finish** From 9d266bc8c07a291d0cb974e633bfcdeca19aa1c2 Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <123032460+American-Dipper@users.noreply.github.com> Date: Tue, 4 Jun 2024 09:40:03 -0700 Subject: [PATCH 44/51] Update configure-aad-google-trust.md --- education/windows/configure-aad-google-trust.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/configure-aad-google-trust.md b/education/windows/configure-aad-google-trust.md index 384e9c8767..54bf350d77 100644 --- a/education/windows/configure-aad-google-trust.md +++ b/education/windows/configure-aad-google-trust.md @@ -56,7 +56,7 @@ To test federation, the following prerequisites must be met: |Basic Information: Primary Email|App attributes: IDPEmail| > [!IMPORTANT] - > You must ensure that your Microsoft Entra user account's email match that in your Google Workspace. + > You must ensure that your Microsoft Entra user account's email matches that in your Google Workspace. 1. Select **Finish** From 157d51e56985aa5de8634b90633f3b7500c59233 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 4 Jun 2024 11:22:22 -0600 Subject: [PATCH 45/51] Update --- .../client-tools/quick-assist.md | 18 +----------------- 1 file changed, 1 insertion(+), 17 deletions(-) diff --git a/windows/client-management/client-tools/quick-assist.md b/windows/client-management/client-tools/quick-assist.md index 4e34b509fd..496dfd0024 100644 --- a/windows/client-management/client-tools/quick-assist.md +++ b/windows/client-management/client-tools/quick-assist.md @@ -105,23 +105,7 @@ For more information, visit [Install Quick Assist](https://support.microsoft.com ### Install Quick Assist with Intune -Before installing Quick Assist, you need to set up synchronization between Intune and Microsoft Store for Business. If you've already set up sync, log into [Microsoft Store for Business](https://businessstore.microsoft.com) and skip to step 5. - -1. In the [Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431), go to **Tenant administration** / **Connectors and tokens** / **Microsoft Store for Business** and verify that **Microsoft Store for Business sync** is set to **Enable**. -1. Using your Global Admin account, log into [Microsoft Store for Business](https://businessstore.microsoft.com). -1. Select **Manage** / **Settings** and enable **Show offline apps**. -1. Choose the **Distribute** tab and verify that **Microsoft Intune** is **Active**. You might need to use the **+Add management tool** link if it's not. -1. Search for **Quick Assist** and select it from the Search results. -1. Choose the **Offline** license and select **Get the app** -1. In the Intune admin center, choose **Sync**. -1. Navigate to **Apps** / **Windows** and you should see **Quick Assist (Offline)** in the list. -1. Select it to view its properties. -1. By default, the app isn't assigned to any user or device, select the **Edit** link. Assign the app to the required group of devices and choose **Review + save** to complete the application install. - -> [!NOTE] -> Assigning the app to a device or group of devices instead of a user is important because it's the only way to install a store app in device context. - -Visit [Add Microsoft Store apps to Microsoft Intune](/mem/intune/apps/store-apps-windows) for more information. +To deploy Quick Assist with Intune, see [Add Microsoft Store apps to Microsoft Intune](/mem/intune/apps/store-apps-microsoft). ### Install Quick Assist Offline From c9b8acc50d1ac79aa368ecdd00ee27da032771c8 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 4 Jun 2024 10:46:55 -0700 Subject: [PATCH 46/51] rm-gadmin-ex --- windows/deployment/update/wufb-reports-prerequisites.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/wufb-reports-prerequisites.md b/windows/deployment/update/wufb-reports-prerequisites.md index ea7fb94cbb..505c3eeaee 100644 --- a/windows/deployment/update/wufb-reports-prerequisites.md +++ b/windows/deployment/update/wufb-reports-prerequisites.md @@ -11,7 +11,7 @@ manager: aaroncz appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 05/07/2024 +ms.date: 06/04/2024 --- # Windows Update for Business reports prerequisites @@ -50,9 +50,11 @@ Windows Update for Business reports supports Windows client devices on the follo - General Availability Channel - Windows Update for Business reports *counts* Windows Insider Preview devices, but doesn't currently provide detailed deployment insights for them. -### Windows operating system updates +## Windows operating system updates for client devices -For [changes to Windows diagnostic data collection](/windows/privacy/changes-to-windows-diagnostic-data-collection#services-that-rely-on-enhanced-diagnostic-data), installing the January 2023 release preview cumulative update, or a later equivalent update, is recommended. +Installing the February 2023 cumulative update, or a later equivalent update, is required for clients to enroll into Windows Update for Business reports. This update helped enable [changes to Windows diagnostic data collection](/windows/privacy/changes-to-windows-diagnostic-data-collection#services-that-rely-on-enhanced-diagnostic-data), which Windows Update for Business reports relies on. + +For more information about available updates, see [Windows 11 release information](/windows/release-health/windows11-release-information) and [Windows 10 release information](/windows/release-health/release-information). ## Diagnostic data requirements From 468655c4249ed8273e3ded747bf45c6f47209720 Mon Sep 17 00:00:00 2001 From: asbaliga <52298411+asbaliga@users.noreply.github.com> Date: Tue, 4 Jun 2024 11:35:34 -0700 Subject: [PATCH 47/51] Update pluton-as-tpm.md --- .../hardware-security/pluton/pluton-as-tpm.md | 16 +--------------- 1 file changed, 1 insertion(+), 15 deletions(-) diff --git a/windows/security/hardware-security/pluton/pluton-as-tpm.md b/windows/security/hardware-security/pluton/pluton-as-tpm.md index 9ef333a6f3..ccde7ec921 100644 --- a/windows/security/hardware-security/pluton/pluton-as-tpm.md +++ b/windows/security/hardware-security/pluton/pluton-as-tpm.md @@ -19,21 +19,7 @@ To learn more about the TPM related scenarios that benefit from Pluton, see [TPM Microsoft Pluton can be used as a TPM, or in conjunction with a TPM. Although Pluton builds security directly into the CPU, device manufacturers may choose to use discrete TPM as the default TPM, while having Pluton available to the system as a security processor for use cases beyond the TPM. -Pluton is integrated within the SoC subsystem, and provides a flexible, updatable platform for running firmware that implements end-to-end security functionality authored, maintained, and updated by Microsoft. We encourage users owning devices that are Pluton capable, to enable Microsoft Pluton as the default TPM. - -## Enable Microsoft Pluton as TPM - -Devices with Ryzen 6000 and Qualcomm Snapdragon® 8cx Gen 3 series processors are Pluton Capable, however enabling and providing an option to enable Pluton is at the discretion of the device manufacturer. Pluton is supported on these devices and can be enabled from the Unified Extensible Firmware Interface (UEFI) setup options for the device. - -UEFI setup options differ from product to product. Visit the product website and check for guidance to enable Pluton as TPM. - -> [!WARNING] -> If BitLocker is enabled, We recommend disabling BitLocker before changing the TPM configuration to prevent lockouts. After changing TPM configuration, re-enable BitLocker which will then bind the BitLocker keys with the Pluton TPM. Alternatively, save the BitLocker recovery key onto a USB drive. -> -> Windows Hello must be re-configured after switching the TPM. Setup alternate login methods before changing the TPM configuration to prevent any login issues. - -> [!TIP] -> On most Lenovo devices, entering the UEFI options requires pressing Enter key at startup followed by pressing F1. In the UEFI Setup menu, select Security option, then on the Security page, select Security Chip option, to see the TPM configuration options. Under the drop-down list for Security Chip selection, select **MSFT Pluton** and click F10 to Save and Exit. +Pluton is integrated within the SoC subsystem, and provides a flexible, updatable platform for running firmware that implements end-to-end security functionality authored, maintained, and updated by Microsoft. ## Related articles From 5bff88a358c00b09cd53d7bb57c338d8953e4cd5 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 4 Jun 2024 11:35:41 -0700 Subject: [PATCH 48/51] rm-ga-wufbr --- .../update/includes/wufb-reports-admin-center-permissions.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/deployment/update/includes/wufb-reports-admin-center-permissions.md b/windows/deployment/update/includes/wufb-reports-admin-center-permissions.md index a698c7f33b..e51ed03e62 100644 --- a/windows/deployment/update/includes/wufb-reports-admin-center-permissions.md +++ b/windows/deployment/update/includes/wufb-reports-admin-center-permissions.md @@ -19,7 +19,6 @@ Accessing Windows Update for Business reports typcially requires permissions fro To [enroll](../wufb-reports-enable.md#bkmk_enroll) into Windows Update for Business reports from the [Azure portal](https://portal.azure.com) or the [Microsoft 365 admin center](https://admin.microsoft.com) requires one of the following roles: -- [Global Administrator](/azure/active-directory/roles/permissions-reference#global-administrator) Microsoft Entra role - [Intune Administrator](/azure/active-directory/roles/permissions-reference#intune-administrator) Microsoft Entra role - [Windows Update deployment administrator](/azure/active-directory/roles/permissions-reference#windows-update-deployment-administrator) Microsoft Entra role - [Policy and profile manager](/mem/intune/fundamentals/role-based-access-control#built-in-roles) Microsoft Intune role From 41330a9c80531a109496c5aaecc31a2c979d2cb4 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 6 Jun 2024 07:21:42 -0400 Subject: [PATCH 49/51] updates to XSDs --- windows/configuration/assigned-access/xsd.md | 32 ++++++++++++++++++-- 1 file changed, 30 insertions(+), 2 deletions(-) diff --git a/windows/configuration/assigned-access/xsd.md b/windows/configuration/assigned-access/xsd.md index 209c3fb81d..5db2eacec8 100644 --- a/windows/configuration/assigned-access/xsd.md +++ b/windows/configuration/assigned-access/xsd.md @@ -259,7 +259,7 @@ Here's the Assigned Access XSD for the features added in Windows 11, version 21H ## Windows 10, version 1909 additions -Here's the Assigned Access XSD for the features added in Windows 10, version 1909: +Here are the Assigned Access XSDs for the features added in Windows 10, version 1909: ```xml ``` +```xml + + + + + + + + + + + + + + + + + +``` + ## Windows 10, version 1809 additions Here's the Assigned Access XSD for the features added in Windows 10, version 1809: @@ -331,4 +359,4 @@ Here's the Assigned Access XSD for the features added in Windows 10, version 180 -``` \ No newline at end of file +``` From d8f7cf6e9cd7f3f6cf46e76f861392ab82d7f0ab Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 6 Jun 2024 07:27:05 -0400 Subject: [PATCH 50/51] removed line --- windows/configuration/assigned-access/xsd.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/configuration/assigned-access/xsd.md b/windows/configuration/assigned-access/xsd.md index 5db2eacec8..5cd75dccbe 100644 --- a/windows/configuration/assigned-access/xsd.md +++ b/windows/configuration/assigned-access/xsd.md @@ -293,7 +293,6 @@ Here are the Assigned Access XSDs for the features added in Windows 10, version ``` ```xml - Date: Fri, 7 Jun 2024 07:47:11 -0700 Subject: [PATCH 51/51] update CM branding --- windows/deployment/update/update-other-microsoft-products.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/update-other-microsoft-products.md b/windows/deployment/update/update-other-microsoft-products.md index 0d05bd2cd3..f4d26b82ec 100644 --- a/windows/deployment/update/update-other-microsoft-products.md +++ b/windows/deployment/update/update-other-microsoft-products.md @@ -11,7 +11,7 @@ manager: aaroncz appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 03/14/2024 +ms.date: 06/07/2024 --- # Update other Microsoft products @@ -44,6 +44,7 @@ The following is a list of other Microsoft products that might be updated: - Microsoft Advanced Threat Analytics - Microsoft Application Virtualization - Microsoft Azure StorSimple +- Microsoft Configuration Manager - Microsoft Dynamics CRM - Microsoft Information Protection - Microsoft Lync Server and Microsoft Lync @@ -59,7 +60,6 @@ The following is a list of other Microsoft products that might be updated: - Skype for Business - SQL - System Center Application Controller -- System Center Configuration Manager - System Center Data Protection Manager - System Center Operations Manager - System Center Orchestrator