From 41b502443ddcaf905bd60144d393034b2c669118 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Sun, 25 Feb 2024 17:53:38 -0500 Subject: [PATCH] Update Shell Launcher support for Windows 10, version 1903 --- .../assigned-access-configuration-file.md | 6 +- .../assigned-access-quickstart-kiosk.md | 2 +- .../includes/quickstart-shell-launcher-xml.md | 4 +- .../shell-launcher-quickstart-intune.md | 2 +- .../includes/shell-launcher-quickstart-ps.md | 4 +- .../includes/shell-launcher-quickstart-xml.md | 4 +- .../shell-launcher-configuration-file.md | 104 +++++++++++++++++- .../assigned-access/shell-launcher-xsd.md | 2 +- 8 files changed, 115 insertions(+), 13 deletions(-) diff --git a/windows/configuration/assigned-access/assigned-access-configuration-file.md b/windows/configuration/assigned-access/assigned-access-configuration-file.md index 2b497f7baa..1705f95356 100644 --- a/windows/configuration/assigned-access/assigned-access-configuration-file.md +++ b/windows/configuration/assigned-access/assigned-access-configuration-file.md @@ -474,8 +474,8 @@ Group accounts are specified using ``. Nested groups aren't supported ``` -::: zone-end +::: zone-end ### FileExplorerNamespaceRestrictions @@ -856,9 +856,9 @@ Below sample shows dedicated profile and global profile mixed usage, a user woul ## Folder Access sample xml -Starting with Windows 10 version 1809 +, folder access is locked down so that when common file dialog is opened, IT Admin can specify if the user has access to the Downloads folder, or no access to any folder at all. This restriction has been redesigned for finer granularity and easier use, and is available in Windows 10 version 2009+. +Folder access is locked down so that when common file dialog is opened, IT Admin can specify if the user has access to the Downloads folder, or no access to any folder at all. -IT Admin now can specify user access to Downloads folder, Removable drives, or no restrictions at all. Downloads and Removable Drives can be allowed at the same time. +You can specify user access to Downloads folder, Removable drives, or no restrictions at all. Downloads and Removable Drives can be allowed at the same time. ```xml diff --git a/windows/configuration/assigned-access/assigned-access-quickstart-kiosk.md b/windows/configuration/assigned-access/assigned-access-quickstart-kiosk.md index 4f51dc73d3..2559bf6938 100644 --- a/windows/configuration/assigned-access/assigned-access-quickstart-kiosk.md +++ b/windows/configuration/assigned-access/assigned-access-quickstart-kiosk.md @@ -18,7 +18,7 @@ The examples can be modified to fit your specific requirements. For example, you >[!div class="checklist"] >Here's a list of requirements to complete this quickstart: > ->- A Windows 11 device +>- A Windows device >- Microsoft Intune, or a non-Microsoft MDM solution, if you want to configure the settings using MDM >- Windows Configuration Designer, if you want to configure the settings using a provisioning package >- Access to the [psexec tool](/sysinternals/downloads/psexec), if you want to test the configuration using Windows PowerShell diff --git a/windows/configuration/assigned-access/includes/quickstart-shell-launcher-xml.md b/windows/configuration/assigned-access/includes/quickstart-shell-launcher-xml.md index b2325dd5f5..85d730dcb0 100644 --- a/windows/configuration/assigned-access/includes/quickstart-shell-launcher-xml.md +++ b/windows/configuration/assigned-access/includes/quickstart-shell-launcher-xml.md @@ -10,13 +10,13 @@ ms.prod: windows-client +xmlns:V2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> - + diff --git a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-intune.md b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-intune.md index cc124eeed7..2c5922c1ef 100644 --- a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-intune.md +++ b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-intune.md @@ -10,5 +10,5 @@ ms.prod: windows-client POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations Content-Type: application/json -{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Kiosk - Shell Launcher", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "ShellLauncher", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/ShellLauncher", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n" } ], } +{ "id": "00-0000-0000-0000-000000000000", "displayName": "_MSLearn_Example_Kiosk - Shell Launcher", "description": "This is a sample policy created from an article on learn.microsoft.com.", "roleScopeTagIds": [ "0" ], "@odata.type": "#microsoft.graph.windows10CustomConfiguration", "omaSettings": [ { "@odata.type": "#microsoft.graph.omaSettingString", "displayName": "ShellLauncher", "description": null, "omaUri": "./Vendor/MSFT/AssignedAccess/ShellLauncher", "secretReferenceValueId": null, "isEncrypted": true, "value": "\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n" } ], } ``` \ No newline at end of file diff --git a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-ps.md b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-ps.md index f1989bbd98..f3133df6d5 100644 --- a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-ps.md +++ b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-ps.md @@ -11,13 +11,13 @@ $shellLauncherConfiguration = @" +xmlns:V2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> - + diff --git a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-xml.md b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-xml.md index 7e483e140f..b4e15a314b 100644 --- a/windows/configuration/assigned-access/includes/shell-launcher-quickstart-xml.md +++ b/windows/configuration/assigned-access/includes/shell-launcher-quickstart-xml.md @@ -10,13 +10,13 @@ ms.prod: windows-client +xmlns:V2="http://schemas.microsoft.com/ShellLauncher/2019/Configuration"> - + diff --git a/windows/configuration/assigned-access/shell-launcher-configuration-file.md b/windows/configuration/assigned-access/shell-launcher-configuration-file.md index 6015ddd860..b366633ad2 100644 --- a/windows/configuration/assigned-access/shell-launcher-configuration-file.md +++ b/windows/configuration/assigned-access/shell-launcher-configuration-file.md @@ -9,7 +9,109 @@ ms.topic: how-to This article provides practical examples of Shell Launcher XML configuration files. -For more details, review the Shell Launcher XSD reference article. +Let's start by looking at the basic structure of the XML file. + +- A configuration xml can define multiple `profiles`. Each profile has a *profile Id* and defines a set of applications that are allowed to run +- A configuration xml can have multiple `configs`. Each config associates a non-admin user account to a default profile Id +- A profile has no effect if it's not associated to a user account + +You can start your file by pasting the following XML code into a text editor, and saving the file with an xml extension. For example, `kiosk.xml`. + +```xml + + + + + + + + + + + + + + + + + + + + + + +``` + +## Profiles node + +An Shell Launcher configuration file can contain one or more profiles. Each profile is identified by a unique identified `Profile Id`, for example: + +```xml + + + ... + + +``` + +### AppType + +Allowed values are `Desktop` and `UWP`. + +`AllAppsFullScreen` is a boolean value. If true, all applications are executed in full screen. If false... + +:::row::: + :::column span="1"::: + **Scenario** + :::column-end::: + :::column span="3"::: + **Sample Xml** + :::column-end::: +:::row-end::: +:::row::: + :::column span="1"::: + **Desktop application** + :::column-end::: + :::column span="3"::: + In this example, Microsoft Edge is executed in full screen, opening a website. The website is reloaded after 2 minutes of inactivity. + ```xml + + + + + + + + + + + ``` + :::column-end::: +:::row-end::: +:::row::: + :::column span="1"::: + **UWP application** + In this example, the Weather app is executed in full screen. + :::column-end::: + :::column span="3"::: + ```xml + + + + + + + + + + + + ``` + :::column-end::: +:::row-end::: ## Kiosk example diff --git a/windows/configuration/assigned-access/shell-launcher-xsd.md b/windows/configuration/assigned-access/shell-launcher-xsd.md index dadee30994..f585ad6c3b 100644 --- a/windows/configuration/assigned-access/shell-launcher-xsd.md +++ b/windows/configuration/assigned-access/shell-launcher-xsd.md @@ -167,7 +167,7 @@ The following is the latest Shell Launcher XSD: ## Windows 10, version 1903 additions -In Windows 10, version 1903, Shell Launcher introduced the support of both UWP and Win32 apps as the custom shell. +In Windows 10, version 1903, Shell Launcher introduced the support of both UWP and desktop apps as the custom shell. The following is the XSD for Shell Launcher features added in Windows 10, version 1903: