From 5446035f3b67b5a4888ea806b0ac0099b953521e Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 2 Aug 2016 10:06:35 -0700 Subject: [PATCH 01/37] Updated for clarity in link naming --- ...hange-history-for-keep-windows-10-secure.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/keep-secure/change-history-for-keep-windows-10-secure.md b/windows/keep-secure/change-history-for-keep-windows-10-secure.md index 744b55e979..756942fd90 100644 --- a/windows/keep-secure/change-history-for-keep-windows-10-secure.md +++ b/windows/keep-secure/change-history-for-keep-windows-10-secure.md @@ -17,17 +17,17 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md The topics in this library have been updated for Windows 10, version 1607 (also known as the Anniversary Update). The following new topics have been added: - [Enable phone sign-in to PC or VPN](enable-phone-signin-to-pc-and-vpn.md) -- [Remote Credential Guard](remote-credential-guard.md) +- [Protect Remote Desktop credentials with Remote Credential Guard](remote-credential-guard.md) - [Windows Defender Offline in Windows 10](windows-defender-offline.md) -- [Use PowerShell cmdlets for Windows Defender](use-powershell-cmdlets-windows-defender-for-windows-10.md) +- [Use PowerShell cmdlets to configure and run Windows Defender](use-powershell-cmdlets-windows-defender-for-windows-10.md) - [Enable the Block at First Sight feature in Windows 10](windows-defender-block-at-first-sight.md) - [Configure enhanced notifications for Windows Defender in Windows 10](windows-defender-enhanced-notifications.md) - [Run a Windows Defender scan from the command line](run-cmd-scan-windows-defender-for-windows-10.md) - [Detect and block Potentially Unwanted Applications with Windows Defender](enable-pua-windows-defender-for-windows-10.md) -- [Assign user access to the portal](assign-portal-access-windows-defender-advanced-threat-protection.md) -- [Configure endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) -- [Troubleshoot onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) -- [Configure SIEM tools to consume alerts](configure-siem-windows-defender-advanced-threat-protection.md) +- [Assign user access to the Windows Defender ATP portal](assign-portal-access-windows-defender-advanced-threat-protection.md) +- [Configure Windows Defender ATP endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) +- [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) +- [Configure security information and events management (SIEM) tools to consume alerts](configure-siem-windows-defender-advanced-threat-protection.md) - [Windows Defender compatibility](defender-compatibility-windows-defender-advanced-threat-protection.md) @@ -37,8 +37,8 @@ The topics in this library have been updated for Windows 10, version 1607 (also |----------------------|-------------| |[Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate](create-and-verify-an-efs-dra-certificate.md) |New | |[Mandatory settings for Windows Information Protection (WIP)](mandatory-settings-for-wip.md) |New | -|[Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md) |New | -|[Create an enterprise data protection (EDP) policy using System Center Configuration Manager](create-edp-policy-using-sccm.md) |New | +|[Create a Windows Information Protection (WIP) policy using Microsoft Intune](create-wip-policy-using-intune.md) |New | +|[Create a Windows Information Protection (WIP) policy using System Center Configuration Manager](create-wip-policy-using-sccm.md) |New | |[Windows Defender Advanced Threat Protection](windows-defender-advanced-threat-protection.md) (multiple topics) | Updated | |[Device Guard deployment guide](device-guard-deployment-guide.md) (multiple topics) | Updated | @@ -47,7 +47,7 @@ The topics in this library have been updated for Windows 10, version 1607 (also |New or changed topic | Description | |----------------------|-------------| -|[Create an enterprise data protection (EDP) policy using Microsoft Intune](create-edp-policy-using-intune.md) |Added an update about needing to reconfigure your enterprise data protection app rules after delivery of the June service update. | +|[Create a Windows Information Protection (WIP) policy using Microsoft Intune](create-wip-policy-using-intune.md) |Added an update about needing to reconfigure your enterprise data protection app rules after delivery of the June service update. | | [Windows Firewall with Advanced Security](windows-firewall-with-advanced-security.md) (multiple topics) | New | | [Advanced security audit policy settings](advanced-security-audit-policy-settings.md) (mutiple topics) | New security monitoring reference topics | | [Windows security baselines](windows-security-baselines.md) | New | From 0a986023a68ccfc07fb83128c2f3c9da0aeba33b Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 2 Aug 2016 10:17:16 -0700 Subject: [PATCH 02/37] Removed note about new topics since there aren't any yet --- .../plan/change-history-for-plan-for-windows-10-deployment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/plan/change-history-for-plan-for-windows-10-deployment.md b/windows/plan/change-history-for-plan-for-windows-10-deployment.md index a5aa2b6a47..b584bf2f8d 100644 --- a/windows/plan/change-history-for-plan-for-windows-10-deployment.md +++ b/windows/plan/change-history-for-plan-for-windows-10-deployment.md @@ -16,7 +16,7 @@ This topic lists new and updated topics in the [Plan for Windows 10 deployment]( ## RELEASE: Windows 10, version 1607 -The topics in this library have been updated for Windows 10, version 1607 (also known as the Anniversary Update). The following new topics have been added: +The topics in this library have been updated for Windows 10, version 1607 (also known as the Anniversary Update). ## July 2016 From f057bffdc60d4c0e279821c0bb4d0197a795e53f Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 2 Aug 2016 10:21:47 -0700 Subject: [PATCH 03/37] fix redirect urls --- windows/whats-new/device-management.md | 2 +- windows/whats-new/lockdown-features-windows-10.md | 2 +- windows/whats-new/microsoft-passport.md | 2 +- windows/whats-new/new-provisioning-packages.md | 2 +- windows/whats-new/windows-spotlight.md | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/device-management.md b/windows/whats-new/device-management.md index 52e09d3d1a..fc3c962c90 100644 --- a/windows/whats-new/device-management.md +++ b/windows/whats-new/device-management.md @@ -7,7 +7,7 @@ ms.pagetype: devices, mobile ms.mktglfcycl: explore ms.sitesec: library author: jdeckerMS -redirect_url: /whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # Enterprise management for Windows 10 devices diff --git a/windows/whats-new/lockdown-features-windows-10.md b/windows/whats-new/lockdown-features-windows-10.md index 90a8a04ba6..67a759be13 100644 --- a/windows/whats-new/lockdown-features-windows-10.md +++ b/windows/whats-new/lockdown-features-windows-10.md @@ -8,7 +8,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security author: jdeckerMS -redirect_url: /manage/lockdown-features-windows-10 +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/manage/lockdown-features-windows-10 --- # Lockdown features from Windows Embedded 8.1 Industry diff --git a/windows/whats-new/microsoft-passport.md b/windows/whats-new/microsoft-passport.md index 57ac5201dc..ed98b87019 100644 --- a/windows/whats-new/microsoft-passport.md +++ b/windows/whats-new/microsoft-passport.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: mobile, security author: jdeckerMS -redirect_url: /whats-new/whats-new-windows-10-version-1607 +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1607 --- # Windows Hello overview diff --git a/windows/whats-new/new-provisioning-packages.md b/windows/whats-new/new-provisioning-packages.md index 1b82f732b1..18725fae2a 100644 --- a/windows/whats-new/new-provisioning-packages.md +++ b/windows/whats-new/new-provisioning-packages.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: mobile author: jdeckerMS -redirect_url: /deploy/provisioning-packages +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/deploy/provisioning-packages --- # Provisioning packages diff --git a/windows/whats-new/windows-spotlight.md b/windows/whats-new/windows-spotlight.md index 61edb41016..15caeeb2a9 100644 --- a/windows/whats-new/windows-spotlight.md +++ b/windows/whats-new/windows-spotlight.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library author: jdeckerMS -redirect_url: /manage/windows-spotlight +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/manage/windows-spotlight --- # Windows Spotlight on the lock screen From 5cf57c036fa3af54807a63872ce89195767bb5e6 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 2 Aug 2016 10:25:28 -0700 Subject: [PATCH 04/37] fixing links --- windows/whats-new/applocker.md | 2 +- windows/whats-new/bitlocker.md | 2 +- windows/whats-new/credential-guard.md | 2 +- windows/whats-new/security-auditing.md | 2 +- windows/whats-new/trusted-platform-module.md | 2 +- windows/whats-new/user-account-control.md | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/whats-new/applocker.md b/windows/whats-new/applocker.md index eded8c7862..2e082cd98c 100644 --- a/windows/whats-new/applocker.md +++ b/windows/whats-new/applocker.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library author: brianlic-msft -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in AppLocker? diff --git a/windows/whats-new/bitlocker.md b/windows/whats-new/bitlocker.md index 0176decb20..9f0df242bf 100644 --- a/windows/whats-new/bitlocker.md +++ b/windows/whats-new/bitlocker.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security, mobile author: brianlic-msft -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in BitLocker? diff --git a/windows/whats-new/credential-guard.md b/windows/whats-new/credential-guard.md index 02ff200227..3edfe53458 100644 --- a/windows/whats-new/credential-guard.md +++ b/windows/whats-new/credential-guard.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library author: brianlic-msft -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in Credential Guard? diff --git a/windows/whats-new/security-auditing.md b/windows/whats-new/security-auditing.md index c597c177b0..8b3428b2bd 100644 --- a/windows/whats-new/security-auditing.md +++ b/windows/whats-new/security-auditing.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library author: brianlic-msft ms.pagetype: security, mobile -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in security auditing? diff --git a/windows/whats-new/trusted-platform-module.md b/windows/whats-new/trusted-platform-module.md index 91f4646825..bbd23d1f72 100644 --- a/windows/whats-new/trusted-platform-module.md +++ b/windows/whats-new/trusted-platform-module.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security, mobile author: brianlic-msft -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in Trusted Platform Module? diff --git a/windows/whats-new/user-account-control.md b/windows/whats-new/user-account-control.md index 7933086c5d..4a670324d3 100644 --- a/windows/whats-new/user-account-control.md +++ b/windows/whats-new/user-account-control.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: brianlic-msft -redirect_url: whats-new-windows-10-version-1507-and-1511.md +redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 --- # What's new in User Account Control? From 7f10f5382eca117862e4bc9a05b675c200196d34 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 2 Aug 2016 10:49:17 -0700 Subject: [PATCH 05/37] fixed rendering issues and TOC entries --- windows/keep-secure/TOC.md | 14 ++++++++++---- windows/keep-secure/credential-guard.md | 5 +++++ 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md index 5cd8b3ab93..58e3985526 100644 --- a/windows/keep-secure/TOC.md +++ b/windows/keep-secure/TOC.md @@ -1,8 +1,5 @@ # [Keep Windows 10 secure](index.md) ## [Block untrusted fonts in an enterprise](block-untrusted-fonts-in-enterprise.md) -## [Device Guard certification and compliance](device-guard-certification-and-compliance.md) -### [Get apps to run on Device Guard-protected devices](getting-apps-to-run-on-device-guard-protected-devices.md) -### [Create a Device Guard code integrity policy based on a reference device](creating-a-device-guard-policy-for-signed-apps.md) ## [Manage identity verification using Windows Hello for Business](manage-identity-verification-using-microsoft-passport.md) ### [Implement Windows Hello for Business in your organization](implement-microsoft-passport-in-your-organization.md) ### [Enable phone sign-in to PC or VPN](enable-phone-signin-to-pc-and-vpn.md) @@ -14,6 +11,16 @@ ### [Windows Hello biometrics in the enterprise](windows-hello-in-enterprise.md) ## [Configure S/MIME for Windows 10 and Windows 10 Mobile](configure-s-mime.md) ## [Install digital certificates on Windows 10 Mobile](installing-digital-certificates-on-windows-10-mobile.md) +## [Device Guard deployment guide](device-guard-deployment-guide.md) +### [Introduction to Device Guard: virtualization-based security and code integrity policies](introduction-to-device-guard-virtualization-based-security-and-code-integrity-policies.md) +### [Requirements and deployment planning guidelines for Device Guard](requirements-and-deployment-planning-guidelines-for-device-guard.md) +### [Planning and getting started on the Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md) +### [Deploy Device Guard: deploy code integrity policies](deploy-device-guard-deploy-code-integrity-policies.md) +#### [Optional: Create a code signing certificate for code integrity policies](optional-create-a-code-signing-certificate-for-code-integrity-policies.md) +#### [Deploy code integrity policies: policy rules and file rules](deploy-code-integrity-policies-policy-rules-and-file-rules.md) +#### [Deploy code integrity policies: steps](deploy-code-integrity-policies-steps.md) +#### [Deploy catalog files to support code integrity policies](deploy-catalog-files-to-support-code-integrity-policies.md) +### [Deploy Device Guard: enable virtualization-based security](deploy-device-guard-enable-virtualization-based-security.md) ## [Protect derived domain credentials with Credential Guard](credential-guard.md) ## [Protect Remote Desktop credentials with Remote Credential Guard](remote-credential-guard.md) ## [Protect your enterprise data using Windows Information Protection (WIP)](protect-enterprise-data-using-wip.md) @@ -832,7 +839,6 @@ ###### [Verify That Network Traffic Is Authenticated](verify-that-network-traffic-is-authenticated.md) ## [Enterprise security guides](windows-10-enterprise-security-guides.md) ### [Control the health of Windows 10-based devices](protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.md) -### [Device Guard deployment guide](device-guard-deployment-guide.md) ### [Microsoft Passport guide](microsoft-passport-guide.md) ### [Windows 10 Mobile security guide](windows-10-mobile-security-guide.md) ### [Windows 10 security overview](windows-10-security-guide.md) diff --git a/windows/keep-secure/credential-guard.md b/windows/keep-secure/credential-guard.md index b0c15689da..988deb9e06 100644 --- a/windows/keep-secure/credential-guard.md +++ b/windows/keep-secure/credential-guard.md @@ -158,6 +158,7 @@ First, you must add the virtualization-based security features. You can do this ``` syntax dism /image: /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor /all ``` + > [!NOTE] > You can also add these features to an online image by using either DISM or Configuration Manager. @@ -183,6 +184,7 @@ If you don't use Group Policy, you can enable Credential Guard by using the regi - Add a new DWORD value named **LsaCfgFlags**. Set the value of this registry setting to 1 to enable Credential Guard with UEFI lock, set it to 2 to enable Credential Guard without lock, and set it to 0 to disable it. 4. Close Registry Editor. + > [!NOTE] > You can also turn on Credential Guard by setting the registry entries in the [FirstLogonCommands](http://msdn.microsoft.com/library/windows/hardware/dn922797.aspx) unattend setting. @@ -348,6 +350,7 @@ On devices that are running Credential Guard, enroll the devices using the machi ``` syntax CertReq -EnrollCredGuardCert MachineAuthentication ``` + > [!NOTE] > You must restart the device after enrolling the machine authentication certificate.   @@ -364,6 +367,7 @@ By using an authentication policy, you can ensure that users only sign into devi ``` syntax .\set-IssuancePolicyToGroupLink.ps1 –IssuancePolicyName:”” –groupOU:”” –groupName:”” ``` + ### Deploy the authentication policy Before setting up the authentication policy, you should log any failed attempt to apply an authentication policy on the KDC. To do this in Event Viewer, navigate to **Applications and Services Logs\\Microsoft\\Windows\\Authentication, right-click AuthenticationPolicyFailures-DomainController**, and then click **Enable Log**. @@ -388,6 +392,7 @@ Now you can set up an authentication policy to use Credential Guard. 14. Click **OK** to create the authentication policy. 15. Close Active Directory Administrative Center. + > [!NOTE] > When authentication policies in enforcement mode are deployed with Credential Guard, users will not be able to sign in using devices that do not have the machine authentication certificate provisioned. This applies to both local and remote sign in scenarios.   From 1fd5fe6d9c16424262605fbdbd41106b801f8fff Mon Sep 17 00:00:00 2001 From: Maggie Evans Date: Tue, 2 Aug 2016 10:56:38 -0700 Subject: [PATCH 06/37] Updated manage change history for uev and appv, added Windows 10 in titles of appv and uev overview topics --- windows/manage/appv-for-windows.md | 2 +- .../manage/change-history-for-manage-and-update-windows-10.md | 2 ++ windows/manage/uev-for-windows.md | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/manage/appv-for-windows.md b/windows/manage/appv-for-windows.md index 446d111723..d127094cb6 100644 --- a/windows/manage/appv-for-windows.md +++ b/windows/manage/appv-for-windows.md @@ -9,7 +9,7 @@ ms.prod: w10 --- -# Application Virtualization (App-V) overview +# Application Virtualization (App-V) for Windows 10 overview The topics in this section provides information and step-by-step procedures to help you administer App-V and its components. This information will be valuable for system administrators who manage large installations with many servers and clients and for support personnel who interact directly with the computers or the end users. diff --git a/windows/manage/change-history-for-manage-and-update-windows-10.md b/windows/manage/change-history-for-manage-and-update-windows-10.md index f1ea30ec04..60d0c5fc89 100644 --- a/windows/manage/change-history-for-manage-and-update-windows-10.md +++ b/windows/manage/change-history-for-manage-and-update-windows-10.md @@ -21,6 +21,8 @@ The topics in this library have been updated for Windows 10, version 1607 (also - [Configure Windows 10 taskbar](configure-windows-10-taskbar.md) - [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) - [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) +- [Application Virtualization (App-V) for Windows 10](appv-for-windows.md) +- [User Experience Virtualization (UE-V) for Windows 10](uev-for-windows.md) ## July 2016 diff --git a/windows/manage/uev-for-windows.md b/windows/manage/uev-for-windows.md index ff241fa090..5963b1ee49 100644 --- a/windows/manage/uev-for-windows.md +++ b/windows/manage/uev-for-windows.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.prod: w10 --- -# User Experience Virtualization overview +# User Experience Virtualization (UE-V) for Windows 10 overview Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Windows Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options. From fb1e2ee2c998173838d490908b23bee2ab3c9536 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 2 Aug 2016 11:02:23 -0700 Subject: [PATCH 07/37] redirecting to reference content --- windows/whats-new/applocker.md | 2 +- windows/whats-new/bitlocker.md | 2 +- windows/whats-new/security-auditing.md | 2 +- windows/whats-new/trusted-platform-module.md | 2 +- windows/whats-new/user-account-control.md | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/applocker.md b/windows/whats-new/applocker.md index 2e082cd98c..3cfd7a6582 100644 --- a/windows/whats-new/applocker.md +++ b/windows/whats-new/applocker.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library author: brianlic-msft -redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/itpro/windows/keep-secure/applocker-overview --- # What's new in AppLocker? diff --git a/windows/whats-new/bitlocker.md b/windows/whats-new/bitlocker.md index 9f0df242bf..6db25cd066 100644 --- a/windows/whats-new/bitlocker.md +++ b/windows/whats-new/bitlocker.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security, mobile author: brianlic-msft -redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/itpro/windows/keep-secure/bitlocker-overview --- # What's new in BitLocker? diff --git a/windows/whats-new/security-auditing.md b/windows/whats-new/security-auditing.md index 8b3428b2bd..8890adb735 100644 --- a/windows/whats-new/security-auditing.md +++ b/windows/whats-new/security-auditing.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library author: brianlic-msft ms.pagetype: security, mobile -redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/itpro/windows/keep-secure/security-auditing-overview --- # What's new in security auditing? diff --git a/windows/whats-new/trusted-platform-module.md b/windows/whats-new/trusted-platform-module.md index bbd23d1f72..e4a2614653 100644 --- a/windows/whats-new/trusted-platform-module.md +++ b/windows/whats-new/trusted-platform-module.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security, mobile author: brianlic-msft -redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/itpro/windows/keep-secure/trusted-platform-module-overview --- # What's new in Trusted Platform Module? diff --git a/windows/whats-new/user-account-control.md b/windows/whats-new/user-account-control.md index 4a670324d3..3d41d3ca1d 100644 --- a/windows/whats-new/user-account-control.md +++ b/windows/whats-new/user-account-control.md @@ -7,7 +7,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: security author: brianlic-msft -redirect_url: https://technet.microsoft.com/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/itpro/windows/keep-secure/user-account-control-overview --- # What's new in User Account Control? From 007f5122a9a8c95672b211f3e2d7ae1017833553 Mon Sep 17 00:00:00 2001 From: jdeckerMS Date: Tue, 2 Aug 2016 12:04:15 -0700 Subject: [PATCH 08/37] pro policy + redirects --- .../group-policies-for-enterprise-and-education-editions.md | 3 ++- windows/whats-new/device-management.md | 2 +- windows/whats-new/microsoft-passport.md | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/manage/group-policies-for-enterprise-and-education-editions.md b/windows/manage/group-policies-for-enterprise-and-education-editions.md index 90eaa4a016..37005acc03 100644 --- a/windows/manage/group-policies-for-enterprise-and-education-editions.md +++ b/windows/manage/group-policies-for-enterprise-and-education-editions.md @@ -26,7 +26,8 @@ In Windows 10, version 1607, the following Group Policies apply only to Windows | **Do not show Windows Tips** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md | | **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md) | | **Start layout** | User Configuration\Administrative Templates\Start Menu and Taskbar | For more info, see [Manage Windows 10 Start layout options and policies](windows-10-start-layout-options-and-policies.md) | -| **Turn off the Store application** | Computer Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application

User Configuration > Administrative Templates > Windows Components > Store > Turn off the Store | For more info, see [Knowledge Base article# 3135657](https://support.microsoft.com/kb/3135657). | +| **Turn off the Store application** | Computer Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application

User Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application | For more info, see [Knowledge Base article# 3135657](https://support.microsoft.com/kb/3135657). | +| **Only display the private store within the Windows Store app** | Computer Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app

User Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app | For more info, see [Manage access to private store](manage-access-to-private-store.md) | | **Don't search the web or display web results** | Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results | For more info, see [Cortana integration in your enterprise](manage-cortana-in-enterprise.md) | diff --git a/windows/whats-new/device-management.md b/windows/whats-new/device-management.md index fc3c962c90..79260f0f69 100644 --- a/windows/whats-new/device-management.md +++ b/windows/whats-new/device-management.md @@ -7,7 +7,7 @@ ms.pagetype: devices, mobile ms.mktglfcycl: explore ms.sitesec: library author: jdeckerMS -redirect_url: https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1507-and-1511 +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/manage/manage-corporate-devices --- # Enterprise management for Windows 10 devices diff --git a/windows/whats-new/microsoft-passport.md b/windows/whats-new/microsoft-passport.md index ed98b87019..e8b4935152 100644 --- a/windows/whats-new/microsoft-passport.md +++ b/windows/whats-new/microsoft-passport.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library ms.pagetype: mobile, security author: jdeckerMS -redirect_url: https://technet.microsoft.com/en-us/itpro/windows/whats-new/whats-new-windows-10-version-1607 +redirect_url: https://technet.microsoft.com/en-us/itpro/windows/keep-secure/manage-identity-verification-using-microsoft-passport --- # Windows Hello overview From f3d8c2dbc5a95d90d83e161dd10e40e3153e5fdd Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Tue, 2 Aug 2016 12:32:38 -0700 Subject: [PATCH 09/37] Spelling fixes --- .../windows-defender-block-at-first-sight.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/keep-secure/windows-defender-block-at-first-sight.md b/windows/keep-secure/windows-defender-block-at-first-sight.md index 6f7d62ba38..71894a0846 100644 --- a/windows/keep-secure/windows-defender-block-at-first-sight.md +++ b/windows/keep-secure/windows-defender-block-at-first-sight.md @@ -21,7 +21,7 @@ Block at First Sight is a feature of Windows Defender cloud protection that prov You can enable Block at First Sight with Group Policy or individually on endpoints. -## Backend procesing and near-instant determinations +## Backend processing and near-instant determinations When a Windows Defender client encounters a suspicious but previously undetected file, it queries our cloud protection backend. The cloud backend will apply heuristics, machine learning, and automated analysis of the file to determine the files as malicious or clean. @@ -86,16 +86,16 @@ Block at First Sight requires a number of Group Policy settings to be configured 5. Expand the tree through **Windows components > Windows Defender > MAPS**. -1. Double-click the **Configure the Block at First Sight feature** setting and set the option to **Enabled**. +1. Double-click the **Configure the ‘Block at First Sight’ feature** setting and set the option to **Enabled**. > [!NOTE] > The Block at First Sight feature will not function if the pre-requisite group policies have not been correctly set. -### Manually enable Block at First Sight on Individual clients +### Manually enable Block at First Sight on individual clients To configure un-managed clients that are running Windows 10, Block at First Sight is automatically enabled as long as **Cloud-based protection** and **Automatic sample submission** are both turned on. -**Enable Block at First Sight on invididual clients** +**Enable Block at First Sight on individual clients** 1. Open Windows Defender settings: @@ -110,4 +110,4 @@ To configure un-managed clients that are running Windows 10, Block at First Sigh ## Related topics -- [Windows Defender in Windows 10](windows-defender-in-windows-10.md) \ No newline at end of file +- [Windows Defender in Windows 10](windows-defender-in-windows-10.md) From ffdd075b18b2d8d69b957c751c450d771b8d009a Mon Sep 17 00:00:00 2001 From: Maggie Evans Date: Tue, 2 Aug 2016 12:37:17 -0700 Subject: [PATCH 10/37] Added UE-V, App-V, and Upgrade Analytics to what's new in 1607 topic --- windows/manage/appv-getting-started.md | 3 +- windows/manage/uev-for-windows.md | 2 + .../whats-new-windows-10-version-1607.md | 37 +++++++++++++++++++ 3 files changed, 40 insertions(+), 2 deletions(-) diff --git a/windows/manage/appv-getting-started.md b/windows/manage/appv-getting-started.md index e70b48b7ef..d7914a115d 100644 --- a/windows/manage/appv-getting-started.md +++ b/windows/manage/appv-getting-started.md @@ -11,10 +11,9 @@ ms.prod: w10 # Getting Started with App-V - Microsoft Application Virtualization (App-V) enables organizations to deliver Win32 applications to users as virtual applications. Virtual applications are installed on centrally managed servers and delivered to users as a service – in real time and on as as-needed basis. Users launch virtual applications from familiar access points, including the Windows Store, and interact with them as if they were installed locally. -With the release of Windows 10, version 1607, App-V is included with the [Windows 10 Enterprise edition](https://www.microsoft.com/en-us/WindowsForBusiness/windows-for-enterprise) and is available with Software Assurance. If you are new to Windows 10 and App-V, you’ll need to download, activate, and install server- and client-side components to start delivering virtual applications to users. For information about what you need to know before getting started with App-V, see the [Application Virtualization (App-V) overview](appv-for-windows.md). +With the release of Windows 10, version 1607, App-V is included with the [Windows 10 Enterprise edition](https://www.microsoft.com/en-us/WindowsForBusiness/windows-for-enterprise). If you are new to Windows 10 and App-V, you’ll need to download, activate, and install server- and client-side components to start delivering virtual applications to users. For information about what you need to know before getting started with App-V, see the [Application Virtualization (App-V) overview](appv-for-windows.md). If you’re already using App-V, performing an in-place upgrade to Windows 10 on user devices automatically installs the App-V client and migrates users’ App-V applications and settings. For more information about how to configure an existing App-V installation after upgrading user devices to Windows 10, see [Upgrading to App-V for Windows 10 from an existing installation](appv-upgrading-to-app-v-for-windows-10-from-an-existing-installation.md). diff --git a/windows/manage/uev-for-windows.md b/windows/manage/uev-for-windows.md index 5963b1ee49..f7a70e651a 100644 --- a/windows/manage/uev-for-windows.md +++ b/windows/manage/uev-for-windows.md @@ -24,6 +24,8 @@ With User Experience Virtualization (UE-V), you can capture user-customized Wind - Recover settings after hardware replacement or upgrade, or after re-imaging a virtual machine to its initial state +With the release of Windows 10, version 1607, UE-V is included with the Windows 10 for Enterprise edition. If you are new to Windows 10 and EU-V or upgrading from a previous version of UE-V, you’ll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. + ## Components of UE-V The diagram below illustrates how UE-V components work together to synchronize user settings. diff --git a/windows/whats-new/whats-new-windows-10-version-1607.md b/windows/whats-new/whats-new-windows-10-version-1607.md index 153d63c8e1..5d509f5ee2 100644 --- a/windows/whats-new/whats-new-windows-10-version-1607.md +++ b/windows/whats-new/whats-new-windows-10-version-1607.md @@ -30,6 +30,26 @@ Windows ICD now includes simplified workflows for creating provisioning packages [Learn more about using provisioning packages in Windows 10.](../deploy/provisioning-packages.md) +### Windows Upgrade Analytics + +Microsoft developed Upgrade Analytics in response to demand from enterprise customers looking for additional direction and details about upgrading to Windows 10. Upgrade Analytics was built taking into account multiple channels of customer feedback, testing, and Microsoft’s experience upgrading millions of devices to Windows 10. + +With Windows telemetry enabled, Upgrade Analytics collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. + +Use Upgrade Analytics to get: + +- A visual workflow that guides you from pilot to production +- Detailed computer and application inventory +- Powerful computer level search and drill-downs +- Guidance and insights into application and driver compatibility issues, with suggested fixes +- Data driven application rationalization tools +- Application usage information, allowing targeted validation; workflow to track validation progress and decisions +- Data export to commonly used software deployment tools + +The Upgrade Analytics workflow steps you through the discovery and rationalization process until you have a list of computers that are upgrade-ready. + +[Learn more about planning and managing Windows upgrades with Windows Upgrade Analytics.](../deploy/manage-windows-upgrades-with-upgrade-analytics.md) + ## Security ### Credential Guard and Device Guard @@ -100,6 +120,23 @@ Numerous settings have been added to the Windows 10 CSPs to expand MDM capabilit Windows 10, Version 1607, introduces shared PC mode, which optimizes Windows 10 for shared use scenarios, such as touchdown spaces in an enterprise and temporary customer use in retail. You can apply shared PC mode to Windows 10 Pro, Education, and Enterprise. [Learn how to set up a shared or guest PC.](../manage/set-up-shared-or-guest-pc.md) +### Application Virtualization (App-V) for Windows 10 + +Application Virtualization (App-V) enables organizations to deliver Win32 applications to users as virtual applications. Virtual applications are installed on centrally managed servers and delivered to users as a service – in real time and on as as-needed basis. Users launch virtual applications from familiar access points, including the Windows Store, and interact with them as if they were installed locally. + +With the release of Windows 10, version 1607, App-V is included with the Windows 10 for Enterprise edition. If you are new to Windows 10 and App-V or if you're upgrading from a previous version of App-V, you’ll need to download, activate, and install server- and client-side components to start delivering virtual applications to users. + +[Learn how to deliver virtual applications with App-V.](../manage/appv-getting-started.md) + +### User Experience Virtualization (UE-V) for Windows 10 + +Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Windows Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options. + +With User Experience Virtualization (UE-V), you can capture user-customized Windows and application settings and store them on a centrally managed network file share. When users log on, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they log on to. + +With the release of Windows 10, version 1607, UE-V is included with the Windows 10 for Enterprise edition. If you are new to Windows 10 and EU-V or upgrading from a previous version of UE-V, you’ll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. + +[Learn how to synchronize user-customized settings with UE-V.](../manage/uev-for-windows.md) ## Learn more From e930fdd559c1606ff68a2e6a4f20075435092fc1 Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 2 Aug 2016 13:25:56 -0700 Subject: [PATCH 11/37] Fixed EDP references --- windows/keep-secure/TOC.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md index 58e3985526..aed9aaf7c4 100644 --- a/windows/keep-secure/TOC.md +++ b/windows/keep-secure/TOC.md @@ -34,8 +34,8 @@ ### [General guidance and best practices for Windows Information Protection (WIP)](guidance-and-best-practices-wip.md) #### [Windows Information Protection (WIP) overview](wip-enterprise-overview.md) #### [Mandatory tasks and settings required to turn on Windows Information Protection (WIP)](mandatory-settings-for-wip.md) -#### [Enlightened apps for use with enterprise data protection (EDP)](enlightened-microsoft-apps-and-edp.md) -#### [Testing scenarios for enterprise data protection (EDP)](testing-scenarios-for-edp.md) +#### [Enlightened apps for use with Windows Information Protection (WIP)](enlightened-microsoft-apps-and-wip.md) +#### [Testing scenarios for Windows Information Protection](testing-scenarios-for-wip.md) ## [Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md) ## [VPN profile options](vpn-profile-options.md) ## [Windows security baselines](windows-security-baselines.md) From 5b598d9463e3406df1692679fabc7365cdf5bf9c Mon Sep 17 00:00:00 2001 From: LizRoss Date: Tue, 2 Aug 2016 13:40:57 -0700 Subject: [PATCH 12/37] Fixed typos --- windows/keep-secure/TOC.md | 2 +- windows/keep-secure/enlightened-microsoft-apps-and-wip.md | 4 ++-- windows/keep-secure/guidance-and-best-practices-wip.md | 1 + 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md index aed9aaf7c4..938b98668d 100644 --- a/windows/keep-secure/TOC.md +++ b/windows/keep-secure/TOC.md @@ -35,7 +35,7 @@ #### [Windows Information Protection (WIP) overview](wip-enterprise-overview.md) #### [Mandatory tasks and settings required to turn on Windows Information Protection (WIP)](mandatory-settings-for-wip.md) #### [Enlightened apps for use with Windows Information Protection (WIP)](enlightened-microsoft-apps-and-wip.md) -#### [Testing scenarios for Windows Information Protection](testing-scenarios-for-wip.md) +#### [Testing scenarios for Windows Information Protection (WIP)](testing-scenarios-for-wip.md) ## [Use Windows Event Forwarding to help with intrusion detection](use-windows-event-forwarding-to-assist-in-instrusion-detection.md) ## [VPN profile options](vpn-profile-options.md) ## [Windows security baselines](windows-security-baselines.md) diff --git a/windows/keep-secure/enlightened-microsoft-apps-and-wip.md b/windows/keep-secure/enlightened-microsoft-apps-and-wip.md index 33d2044176..9fb1f45bd6 100644 --- a/windows/keep-secure/enlightened-microsoft-apps-and-wip.md +++ b/windows/keep-secure/enlightened-microsoft-apps-and-wip.md @@ -10,11 +10,11 @@ ms.pagetype: security author: eross-msft --- -# List of enlightened Microsoft apps for use with Windows Information Protection(WIP) +# List of enlightened Microsoft apps for use with Windows Information Protection (WIP) **Applies to:** -- Windows 10, version 6017 +- Windows 10, version 1607 - Windows 10 Mobile Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your allowed apps list. diff --git a/windows/keep-secure/guidance-and-best-practices-wip.md b/windows/keep-secure/guidance-and-best-practices-wip.md index 28eb875c28..70cee10111 100644 --- a/windows/keep-secure/guidance-and-best-practices-wip.md +++ b/windows/keep-secure/guidance-and-best-practices-wip.md @@ -21,6 +21,7 @@ This section includes info about the enlightened Microsoft apps, including how t ## In this section |Topic |Description | |------|------------| +|[Windows Information Protection (WIP) overview](wip-enterprise-overview.md) |High-level overview info about why to use WIP, the enterprise scenarios, and how to turn it off. | |[Mandatory settings for Windows Information Protection (WIP)](mandatory-settings-for-wip.md) |A list of all of the tasks and settings that are required for the operating system to turn on Windows Information Protection (WIP), formerly known as Windows Information Protection (WIP), in your enterprise. | |[Enlightened apps for use with Windows Information Protection (WIP)](enlightened-microsoft-apps-and-wip.md) |Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your allowed apps list. | |[Testing scenarios for Windows Information Protection (WIP)](testing-scenarios-for-wip.md) |We've come up with a list of suggested testing scenarios that you can use to test WIP in your company. | \ No newline at end of file From b6429ad6b83e38e91fbf07fbbe6a72858a372547 Mon Sep 17 00:00:00 2001 From: Maggie Evans Date: Tue, 2 Aug 2016 13:57:39 -0700 Subject: [PATCH 13/37] Making corrections --- windows/manage/TOC.md | 4 +- windows/manage/appv-about-appv.md | 113 ++++++++---------------------- 2 files changed, 33 insertions(+), 84 deletions(-) diff --git a/windows/manage/TOC.md b/windows/manage/TOC.md index bf74983e5d..b46f78d870 100644 --- a/windows/manage/TOC.md +++ b/windows/manage/TOC.md @@ -36,7 +36,7 @@ ## [Configure devices without MDM](configure-devices-without-mdm.md) ## [Windows 10 servicing options](introduction-to-windows-10-servicing.md) ## [Application development for Windows as a service](application-development-for-windows-as-a-service.md) -## [Application Virtualization for Windows (App-V)](appv-for-windows.md) +## [Application Virtualization (App-V) for Windows](appv-for-windows.md) ### [Getting Started with App-V](appv-getting-started.md) #### [About App-V](appv-about-appv.md) ##### [Release Notes for App-V](appv-release-notes-for-appv-for-windows.md) @@ -133,7 +133,7 @@ #### [Application Publishing and Client Interaction](appv-application-publishing-and-client-interaction.md) #### [Viewing App-V Server Publishing Metadata](appv-viewing-appv-server-publishing-metadata.md) #### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](appv-running-locally-installed-applications-inside-a-virtual-environment.md) -## [User Experience Virtualization (UE-V)](uev-for-windows.md) +## [User Experience Virtualization (UE-V) for Windows](uev-for-windows.md) ### [Get Started with UE-V](uev-getting-started.md) #### [What's New in UE-V for Windows 10, version 1607](uev-whats-new-in-uev-for-windows.md) #### [User Experience Virtualization Release Notes](uev-release-notes-1607.md) diff --git a/windows/manage/appv-about-appv.md b/windows/manage/appv-about-appv.md index e0b49672ed..a0bfee5042 100644 --- a/windows/manage/appv-about-appv.md +++ b/windows/manage/appv-about-appv.md @@ -9,10 +9,11 @@ ms.prod: w10 --- -# About App-V +# About App-V for Windows +Applies to: Windows 10, version 1607 -Use the following sections to review information about significant changes that apply to Application Virtualization (App-V): +Review the following sections for information about significant changes that apply to Application Virtualization (App-V) for Windows: [App-V software prerequisites and supported configurations](#bkmk-51-prereq-configs) @@ -32,10 +33,10 @@ Use the following sections to review information about significant changes that [Hardcoded path to installation folder is redirected to virtual file system root](#bkmk-hardcodepath) -## App-V software prerequisites and supported configurations +## App-V for Windows software prerequisites and supported configurations -See the following links for the App-V software prerequisites and supported configurations. +See the following links for the App-V for Windows software prerequisites and supported configurations. @@ -51,7 +52,7 @@ See the following links for the App-V software prerequisites and supported confi - + @@ -62,12 +63,12 @@ See the following links for the App-V software prerequisites and supported confi   -**Support for using Configuration Manager with App-V:** App-V supports System Center 2012 R2 Configuration Manager SP1. See [Planning for App-V Integration with Configuration Manager](https://technet.microsoft.com/library/jj822982.aspx) for information about integrating your App-V environment with Configuration Manager and Configuration Manager. +**Support for using Configuration Manager with App-V:** App-V supports System Center 2012 R2 Configuration Manager SP1. See [Planning for App-V Integration with Configuration Manager](https://technet.microsoft.com/library/jj822982.aspx) for information about integrating your App-V environment with Configuration Manager. -## Migrating to App-V +## Upgrade to App-V for Windows -Use the following information to upgrade to App-V from earlier versions. See [Migrating to App-V from a Previous Version](appv-migrating-to-appv-from-a-previous-version.md) for more information. +Use the following information to upgrade to App-V for Windows from earlier versions. See [Migrating to App-V from a Previous Version](appv-migrating-to-appv-from-a-previous-version.md) for more information. ### Before you start the upgrade @@ -102,24 +103,21 @@ Review the following information before you start the upgrade: - - +

To upgrade to App-V for Windows, follow the steps in the remaining sections of this topic.

+

Packages and connection groups will continue to work with App-V for Windows as they currently do.

[App-V Prerequisites](appv-prerequisites.md)

Prerequisite software that you must install before starting the App-V installation

Prerequisite software that you must install before you can get started with App-V for Windows

[App-V Supported Configurations](appv-supported-configurations.md)

Upgrading from App-V 4.x

You must first upgrade to App-V 5.0. You cannot upgrade directly from App-V 4.x to App-V. For more information, see:

-
    -

  • “Differences between App-V 4.6 and App-V 5.0” in [About App-V 5.0](https://technet.microsoft.com/en-us/itpro/mdop/appv-v5/about-app-v-50.md)

    • -

  • [Planning for Migrating from a Previous Version of App-V](appv-planning-for-migrating-from-a-previous-version-of-appv.md)

    • +

You must first upgrade to App-V 5.0. You cannot upgrade directly from App-V 4.x to App-V for Windows. For more information, see [Planning for Migrating from a Previous Version of App-V](appv-planning-for-migrating-from-a-previous-version-of-appv.md)

Upgrading from App-V 5.0 or later

You can upgrade to App-V directly from any of the following versions:

+

You can upgrade to App-V for Windows directly from any of the following versions:

  • App-V 5.0

  • App-V 5.0 SP1

  • App-V 5.0 SP2

  • App-V 5.0 SP3

-

To upgrade to App-V, follow the steps in the remaining sections of this topic.

-

Packages and connection groups will continue to work with App-V as they currently do.
@@ -128,7 +126,7 @@ Review the following information before you start the upgrade: ### Steps to upgrade the App-V infrastructure -Complete the following steps to upgrade each component of the App-V infrastructure to App-V. The following order is only a suggestion; you may upgrade components in any order. +Complete the following steps to upgrade each component of the App-V infrastructure to App-V for Windows. The following order is only a suggestion; you can upgrade components in any order. @@ -153,7 +151,7 @@ Complete the following steps to upgrade each component of the App-V infrastructu - + - + @@ -198,61 +196,24 @@ Complete the following steps to upgrade each component of the App-V infrastructu Use the package converter utility to upgrade virtual application packages created using versions of App-V prior to App-V 5.0. The package converter uses PowerShell to convert packages and can help automate the process if you have many packages that require conversion. -**Note**   -App-V packages are exactly the same as App-V 5.0 packages. There has been no change in the package format between the versions and so there is no need to convert App-V 5.0 packages to App-V packages. +>**Note**   +App-V for Windows packages are exactly the same as App-V 5.0 packages. There has been no change in the package format between the versions and so there is no need to convert App-V 5.0 packages to App-V for Windows packages.   ## What’s New in App-V -These sections are for users who are already familiar with App-V and want to know what has changed in App-V. If you are not already familiar with App-V, you should start by reading [Planning for App-V](appv-planning-for-appv.md). +These sections are for users who are already familiar with App-V and want to know what has changed in App-V for Windows. If you are not already familiar with App-V, you should start by reading [Planning for App-V](appv-planning-for-appv.md). -### App-V support for Windows 10 - -The following table lists the Windows 10 support for App-V. Windows 10 is not supported in versions of App-V prior to App-V. - -

Follow these steps:

    -

  1. Do one of the following, depending on the method you are using to upgrade the Management database and/or Reporting database:

    +

  2. Do one of the following, depending on the method you are using to upgrade the management database and/or reporting database:

    @@ -176,17 +174,17 @@ Complete the following steps to upgrade each component of the App-V infrastructu
    -

  3. If you are upgrading the App-V Server from App-V 5.0 SP1 Hotfix Package 3 or later, complete the steps in section [Check registry keys after installing the App-V 5.0 SP3 Server](https://technet.microsoft.com/en-us/itpro/mdop/appv-v5/check-reg-key-svr).

    4. +

  4. If you are upgrading the App-V for Windows Server from App-V 5.0 SP1 Hotfix Package 3 or later, complete the steps in section [Check registry keys after installing the App-V 5.0 SP3 Server](https://technet.microsoft.com/en-us/itpro/mdop/appv-v5/check-reg-key-svr).

  5. Follow the steps in [How to Deploy the App-V Server](appv-deploy-the-appv-server.md)

    6.  

Step 2: Upgrade the App-V Sequencer.

Step 2: Install the new App-V for Windows sequencer.

See [How to Install the Sequencer](appv-install-the-sequencer.md).

Step 3: Enabled the App-V Client.

Step 3: Enable the in-box App-V Client.

See [Enable the App-V desktop client](appv-enable-the-app-v-desktop-client.md).
----- - - - - - - - - - - - - - - - - - - - - - - - - -
ComponentApp-VApp-V 5.0

App-V Client

Yes

No

App-V RDS Client

Yes

No

App-V Sequencer

Yes

No

- -  ### App-V Management Console Changes -This section compares the App-V Management Console’s current and previous functionality. +This section compares the App-V for Windows Management Console’s current and previous functionality. ### Silverlight is no longer required -The Management Console UI no longer requires Silverlight. The 5.1 Management Console is built on HTML5 and Javascript. +The Management Console UI no longer requires Silverlight. The Management Console is built on HTML5 and Javascript. ### Notifications and messages are displayed individually in a dialog box @@ -263,7 +224,7 @@ The Management Console UI no longer requires Silverlight. The 5.1 Management Con -New in App-V +New in App-V for Windows Prior to App-V @@ -300,8 +261,8 @@ The Management Console UI no longer requires Silverlight. The 5.1 Management Con -New in App-V -Prior to App-V +New in App-V for Windows +Prior to App-V for Windows @@ -324,8 +285,8 @@ The Management Console UI no longer requires Silverlight. The 5.1 Management Con -New in App-V -Prior to App-V +New in App-V for Windows +Prior to App-V for Windows @@ -347,8 +308,8 @@ The Management Console UI no longer requires Silverlight. The 5.1 Management Con -New in App-V -Prior to App-V +New in App-V for Windows +Prior to App-V Windows @@ -483,7 +444,7 @@ You can enable or disable Browser Helper Objects by selecting a new check box, E You can now use the package converter to convert App-V 4.6 packages that contain scripts, and registry information and scripts from source .osd files are now included in package converter output. -For more information including examples, see [Migrating to App-V from a Previous Version](appv-migrating-to-appv-from-a-previous-version.md). +For more information including examples, see [Migrating to App-V for Windows from a Previous Version](appv-migrating-to-appv-from-a-previous-version.md). ### Support for multiple scripts on a single event trigger @@ -491,18 +452,6 @@ App-V supports the use of multiple scripts on a single event trigger for App-V p For more information, including a list of event triggers and the context under which scripts can be run, see the Scripts section in [About App-V Dynamic Configuration](appv-dynamic-configuration.md). -### Hardcoded path to installation folder is redirected to virtual file system root - -When you convert packages from App-V 4.6 to 5.1, the App-V package can access the hardcoded drive that you were required to use when you created 4.6 packages. The drive letter will be the drive you selected as the installation drive on the 4.6 sequencing machine. (The default drive letter is Q:\\.) - -Previously, the 4.6 root folder was not recognized and could not be accessed by App-V 5.0 packages. App-V packages can access hardcoded files by their full path or can programmatically enumerate files under the App-V 4.6 installation root. - -**Technical Details:** The App-V package converter will save the App-V 4.6 installation root folder and short folder names in the FilesystemMetadata.xml file in the Filesystem element. When the App-V client creates the virtual process, it will map requests from the App-V 4.6 installation root to the virtual file system root. - -## How to Get MDOP Technologies - - -App-V is a part of the Microsoft Desktop Optimization Pack (MDOP). MDOP is part of Microsoft Software Assurance. For more information about Microsoft Software Assurance and acquiring MDOP, see [How Do I Get MDOP](http://go.microsoft.com/fwlink/?LinkId=322049). ## Have a suggestion for App-V? From ab171a7158ada9a8202dee2ba4e58c34844d548b Mon Sep 17 00:00:00 2001 From: Maggie Evans Date: Tue, 2 Aug 2016 16:17:25 -0700 Subject: [PATCH 14/37] Fixed typos and removed old information --- windows/manage/uev-for-windows.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/manage/uev-for-windows.md b/windows/manage/uev-for-windows.md index f7a70e651a..96293f71db 100644 --- a/windows/manage/uev-for-windows.md +++ b/windows/manage/uev-for-windows.md @@ -24,7 +24,7 @@ With User Experience Virtualization (UE-V), you can capture user-customized Wind - Recover settings after hardware replacement or upgrade, or after re-imaging a virtual machine to its initial state -With the release of Windows 10, version 1607, UE-V is included with the Windows 10 for Enterprise edition. If you are new to Windows 10 and EU-V or upgrading from a previous version of UE-V, you’ll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. +With the release of Windows 10, version 1607, UE-V is included with the Windows 10 for Enterprise edition. If you are new to Windows 10 and UE-V or upgrading from a previous version of UE-V, you’ll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. ## Components of UE-V @@ -50,7 +50,7 @@ Use these UE-V components to create and manage custom templates for your third-p | Component | Description | |-------------------------------|---------------| -| **UE-V template generator** | Use the **UE-V template generator** to create custom settings location templates that you can then distribute to user computers. The UE-V template generator also lets you edit an existing template or validate a template that was created with a different XML editor.
With the Windows 10, version 1607 release, the UE-V template generator is installed with the [Windows 10 Assessment and Deployment kit](https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit) (Windows ADK).
If you are upgrading from an existing UE-V installation, you’ll need to use the new generator to create new settings location templates. Application templates created with previous versions of the UE-V template generator are still supported, however. | +| **UE-V template generator** | Use the **UE-V template generator** to create custom settings location templates that you can then distribute to user computers. The UE-V template generator also lets you edit an existing template or validate a template that was created with a different XML editor.
With the Windows 10, version 1607 release, the UE-V template generator is installed with the [Windows Assessment and Deployment kit for Windows 10, version 1607](https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit) (Windows ADK).
If you are upgrading from an existing UE-V installation, you’ll need to use the new generator to create new settings location templates. Application templates created with previous versions of the UE-V template generator are still supported, however. | | **Settings template catalog** | The **settings template catalog** is a folder path on UE-V computers or a Server Message Block (SMB) network share that stores the custom settings location templates. The UE-V service checks this location once a day, retrieves new or updated templates, and updates its synchronization behavior.
If you use only the UE-V default settings location templates, then a settings template catalog is unnecessary. For more information about settings deployment catalogs, see [Deploy a UE-V settings template catalog](uev-deploy-uev-for-custom-applications.md#deploycatalogue). |