diff --git a/windows/client-management/mdm/policies-in-preview.md b/windows/client-management/mdm/policies-in-preview.md index b3ead6b748..26e00d9b59 100644 --- a/windows/client-management/mdm/policies-in-preview.md +++ b/windows/client-management/mdm/policies-in-preview.md @@ -1,7 +1,7 @@ --- title: Configuration service provider preview policies description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview. -ms.date: 02/13/2025 +ms.date: 03/26/2025 ms.topic: generated-reference --- @@ -141,6 +141,17 @@ This article lists the policies that are applicable for Windows Insider Preview - [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-remotedesktopservices.md#ts_server_remoteapp_use_shellappruntime) +## RemoteRemediation CSP + +- [EnableCloudRemediation](remoteremediation-csp.md#cloudremediationsettingsenablecloudremediation) +- [EnableAutoRemediation](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingsenableautoremediation) +- [SetTimeToReboot](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingssettimetoreboot) +- [SetRetryInterval](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingssetretryinterval) +- [NetworkSSID](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkssid) +- [NetworkPassword](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpassword) +- [NetworkPasswordEncryptionType](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptiontype) +- [NetworkPasswordEncryptionStore](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptionstore) + ## SettingsSync - [EnableWindowsbackup](policy-csp-settingssync.md#enablewindowsbackup) diff --git a/windows/client-management/mdm/policy-csp-admx-desktop.md b/windows/client-management/mdm/policy-csp-admx-desktop.md index 89fc9aff2b..4dbafefca9 100644 --- a/windows/client-management/mdm/policy-csp-admx-desktop.md +++ b/windows/client-management/mdm/policy-csp-admx-desktop.md @@ -1,7 +1,7 @@ --- title: ADMX_Desktop Policy CSP description: Learn more about the ADMX_Desktop Area in Policy CSP. -ms.date: 03/12/2025 +ms.date: 03/20/2025 ms.topic: generated-reference --- @@ -224,7 +224,7 @@ This setting prevents users from trying to enable or disable Active Desktop whil If you disable this setting or don't configure it, Active Desktop is disabled by default, but users can enable it. > [!NOTE] -> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored. +> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting ( in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored. diff --git a/windows/client-management/mdm/remoteremediation-csp.md b/windows/client-management/mdm/remoteremediation-csp.md new file mode 100644 index 0000000000..d19c21521d --- /dev/null +++ b/windows/client-management/mdm/remoteremediation-csp.md @@ -0,0 +1,551 @@ +--- +title: RemoteRemediation CSP +description: Learn more about the RemoteRemediation CSP. +ms.date: 03/26/2025 +ms.topic: generated-reference +--- + + + + +# RemoteRemediation CSP + +[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] + + + + + + +The following list shows the RemoteRemediation configuration service provider nodes: + +- ./Vendor/MSFT/RemoteRemediation + - [CloudRemediationSettings](#cloudremediationsettings) + - [AutoRemediationSettings](#cloudremediationsettingsautoremediationsettings) + - [EnableAutoRemediation](#cloudremediationsettingsautoremediationsettingsenableautoremediation) + - [SetRetryInterval](#cloudremediationsettingsautoremediationsettingssetretryinterval) + - [SetTimeToReboot](#cloudremediationsettingsautoremediationsettingssettimetoreboot) + - [EnableCloudRemediation](#cloudremediationsettingsenablecloudremediation) + - [NetworkSettings](#cloudremediationsettingsnetworksettings) + - [NetworkCredentials](#cloudremediationsettingsnetworksettingsnetworkcredentials) + - [NetworkPassword](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpassword) + - [NetworkPasswordEncryptionStore](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptionstore) + - [NetworkPasswordEncryptionType](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptiontype) + - [NetworkSSID](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkssid) + + + +## CloudRemediationSettings + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings +``` + + + + +Interior node containing settings related to cloud remediation. Delete on this node will reset all cloud remediation settings to their default values. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `node` | +| Access Type | Add, Delete, Get, Replace | +| Atomic Required | True | + + + + + + + + + +### CloudRemediationSettings/AutoRemediationSettings + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings +``` + + + + +Interior node containing settings related to auto remediation. Delete on this node will reset all auto remediation settings to their default values. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `node` | +| Access Type | Add, Delete, Get, Replace | + + + + + + + + + +#### CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation +``` + + + + +Enable or disable auto remediation. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `bool` | +| Access Type | Add, Delete, Get, Replace | +| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| true | Auto remediation enabled. | +| false | Auto remediation disabled. | + + + + + + + + + +#### CloudRemediationSettings/AutoRemediationSettings/SetRetryInterval + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetRetryInterval +``` + + + + +Get/set the retry interval (in minutes) during auto cloud remediation. The retry interval shouldn't be higher than the time to reboot. "SetRetryInterval" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise, an invalid argument error will be returned and no changes will be made. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[1,4320]` | +| Dependency [EnableAutoRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + + + + + + + +#### CloudRemediationSettings/AutoRemediationSettings/SetTimeToReboot + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetTimeToReboot +``` + + + + +Get/set the time to reboot (in minutes) during auto cloud remediation. The maximum time to reboot possible is 72 hours. "SetTimeToReboot" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise an invalid argument error will be returned and no changes will be made. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[1-4320]` | +| Dependency [EnableAutoRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + + + + + + + +### CloudRemediationSettings/EnableCloudRemediation + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation +``` + + + + +Enable or disable cloud remediation. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `bool` | +| Access Type | Add, Delete, Get, Replace | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| true | Cloud remediation enabled. | +| false | Cloud remediation disabled. | + + + + + + + + + +### CloudRemediationSettings/NetworkSettings + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings +``` + + + + +Interior node containing settings related to network. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `node` | +| Access Type | Add, Delete, Get, Replace | + + + + + + + + + +#### CloudRemediationSettings/NetworkSettings/NetworkCredentials + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials +``` + + + + +Interior node containing settings related to network credentials. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `node` | +| Access Type | Add, Delete, Get, Replace | + + + + + + + + + +##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPassword + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPassword +``` + + + + +Get/Set the password for the wifi network that cloud remediation will attempt to connect during cloud remediation. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + + + + + + + +##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionStore + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionStore +``` + + + + +The encryption store that's specified if we are using a custom certificate for password encryption. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + + + + + + + +##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionType + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionType +``` + + + + +The type of encryption that might be used for the network password. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 1 | No encryption. | +| 2 | Encrypt using Mdm certificate. | +| 3 | Encrypt with custom certificate. | + + + + + + + + + +##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkSSID + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkSSID +``` + + + + +Get/Set the network SSID that cloud remediation will attempt to connect to during remediation. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn`
Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation`
Dependency Allowed Value: `true`
Dependency Allowed Value Type: `ENUM`
| + + + + + + + + + + + + + + +## Related articles + +[Configuration service provider reference](configuration-service-provider-reference.md) diff --git a/windows/client-management/mdm/remoteremediation-ddf-file.md b/windows/client-management/mdm/remoteremediation-ddf-file.md new file mode 100644 index 0000000000..0cd36d957d --- /dev/null +++ b/windows/client-management/mdm/remoteremediation-ddf-file.md @@ -0,0 +1,479 @@ +--- +title: RemoteRemediation DDF file +description: View the XML file containing the device description framework (DDF) for the RemoteRemediation configuration service provider. +ms.date: 03/26/2025 +ms.topic: generated-reference +--- + + + +# RemoteRemediation DDF file + +The following XML file contains the device description framework (DDF) for the RemoteRemediation configuration service provider. + +```xml + +]> + + 1.2 + + + + RemoteRemediation + ./Vendor/MSFT + + + + + The root node for remote remediation function. + + + + + + + + + + + + + + 99.9.99999 + 1.0 + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + + + + CloudRemediationSettings + + + + + + + + Interior node containing settings related to cloud remediation. Delete on this node will reset all cloud remediation settings to their default values. + + + + + + + + + + + + + + + + EnableCloudRemediation + + + + + + + + Enable or disable cloud remediation. + + + + + + + + + + + + + + + true + Cloud remediation enabled + + + false + Cloud remediation disabled + + + + + + AutoRemediationSettings + + + + + + + + Interior node containing settings related to auto remediation. Delete on this node will reset all auto remediation settings to their default values. + + + + + + + + + + + + + + + EnableAutoRemediation + + + + + + + + Enable or disable auto remediation. + + + + + + + + + + + + + + + true + Auto remediation enabled + + + false + Auto remediation disabled + + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation + + + true + Cloud remediation enabled + + + + + + + + + SetTimeToReboot + + + + + + + + Get/set the time to reboot (in minutes) during auto cloud remediation. The maximum time to reboot possible is 72 hours. "SetTimeToReboot" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise an invalid argument error will be returned and no changes will be made. + + + + + + + + + + + + + + [1-4320] + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation + + + true + Auto remediation enabled + + + + + + + + + SetRetryInterval + + + + + + + + Get/set the retry interval (in minutes) during auto cloud remediation. The retry interval should not be higher than the time to reboot. "SetRetryInterval" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise, an invalid argument error will be returned and no changes will be made. + + + + + + + + + + + + + + [1,4320] + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation + + + true + Auto remediation enabled + + + + + + + + + + NetworkSettings + + + + + + + + Interior node containing settings related to network. + + + + + + + + + + + + + + + NetworkCredentials + + + + + + + + Interior node containing settings related to network credentials. + + + + + + + + + + + + + + + NetworkSSID + + + + + + + + Get/Set the network SSID that cloud remediation will attempt to connect to during remediation. + + + + + + + + + + + + + + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation + + + true + Cloud remediation enabled + + + + + + + + + NetworkPassword + + + + + + + + Get/Set the password for the wifi network that cloud remediation will attempt to connect during cloud remediation. + + + + + + + + + + + + + + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation + + + true + Cloud remediation enabled + + + + + + + + + NetworkPasswordEncryptionType + + + + + + + + The type of encryption that might be used for the network password. + + + + + + + + + + + + + + + 1 + No encryption + + + 2 + Encrypt using Mdm certificate + + + 3 + Encrypt with custom certificate + + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation + + + true + Cloud remediation enabled + + + + + + + + + NetworkPasswordEncryptionStore + + + + + + + + The encryption store that is specified if we are using a custom certificate for password encryption. + + + + + + + + + + + + + + + + + + Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation + + + true + Cloud remediation enabled + + + + + + + + + + + + +``` + +## Related articles + +[RemoteRemediation configuration service provider reference](remoteremediation-csp.md) diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 4b5c7ff09c..28c696c112 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -866,6 +866,11 @@ items: items: - name: RemoteFind DDF file href: remotefind-ddf-file.md + - name: RemoteRemediation + href: remoteremediation-csp.md + items: + - name: RemoteRemediation DDF file + href: remoteremediation-ddf-file.md - name: RemoteWipe href: remotewipe-csp.md items: