From 3ec491639695b90a3f6380054fdad5caab1f2440 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 28 Jul 2017 11:34:57 -0700 Subject: [PATCH 01/15] date and time format --- ...ngs-windows-defender-advanced-threat-protection.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 6dd42769f1..d30fbc3c7e 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -54,6 +54,17 @@ To set the time zone: 2. Select the **Timezone UTC** indicator. 3. Select **Timezone Local** or **-8:00**. +### Date-time format in browser +**Internet Explorer(IE) and Microsoft Edge (Edge)** +IE and Edge uses the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +**Google Chrome** +If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. + +1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. +2. Restart the browser for the settings to take effect. + + ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). From 2c1e4c4f5c9ea0379f87927f645f21aa52a899da Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:04:12 -0700 Subject: [PATCH 02/15] spacing fix --- .../settings-windows-defender-advanced-threat-protection.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index d30fbc3c7e..66224e09dd 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -56,9 +56,11 @@ To set the time zone: ### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge uses the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +IE and Edge use the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. **Google Chrome** + If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. 1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. From ac93607e8cc2cb69c94bf3624d2e65db00d2af39 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:12:03 -0700 Subject: [PATCH 03/15] add date time issue in troubleshooting topic --- ...ndows-defender-advanced-threat-protection.md | 4 +++- ...ndows-defender-advanced-threat-protection.md | 17 +++++++++++++++++ 2 files changed, 20 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 66224e09dd..0feb5f25ae 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -57,7 +57,7 @@ To set the time zone: ### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge use the local configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. **Google Chrome** @@ -66,6 +66,8 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. 2. Restart the browser for the settings to take effect. +>[!NOTE] +>There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 5bb2935a52..8b2f4e8ebf 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -47,6 +47,23 @@ If onboarding endpoints successfully completes but Windows Defender ATP does not For more information, see [Ensure that Windows Defender is not disabled by policy](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md#ensure-that-windows-defender-is-not-disabled-by-a-policy). + +### Windows Defender ATP has some date-time format issues +**Internet Explorer(IE) and Microsoft Edge (Edge)** + +IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. + +**Google Chrome** + +If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. + +1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. +2. Restart the browser for the settings to take effect. + +>[!NOTE] +>There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. + + ### Related topic - [Troubleshoot Windows Defender Advanced Threat Protection onboarding issues](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md) - [Review events and errors on endpoints with Event Viewer](event-error-codes-windows-defender-advanced-threat-protection.md) From cdeee01f0c933b5adf956a395e02e9be3408a1aa Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:21:05 -0700 Subject: [PATCH 04/15] minor update --- .../troubleshoot-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 8b2f4e8ebf..b2e87a83f0 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -61,7 +61,7 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 2. Restart the browser for the settings to take effect. >[!NOTE] ->There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. +>There currently is no support for Japanese date format (YYYY/MM/DD) in Windows Defender ATP when accessed through Google Chrome. ### Related topic From 0d32d11650de59e472c5bbf64d0b3b15e2efb20f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 2 Aug 2017 14:40:43 -0700 Subject: [PATCH 05/15] include details --- .../settings-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 0feb5f25ae..91ce5a0bb4 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -67,7 +67,7 @@ If you use Google Chrome to access the Windows Defender ATP portal, you might ne 2. Restart the browser for the settings to take effect. >[!NOTE] ->There currently is no support for Japanese format (YYYY/MM/DD) in Windows Defender ATP when used in Google Chrome. +>There currently is no support for Japanese date format format (YYYY/MM/DD) in Windows Defender ATP when when accessed through Google Chrome. ## Suppression rules The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). From cad8702f849ff1431231d7c1e1fdb8baf85763de Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 13:07:52 -0700 Subject: [PATCH 06/15] updates --- .../images/atp-region-control-panel.png | Bin 0 -> 22441 bytes ...ows-defender-advanced-threat-protection.md | 37 ++++++++++++------ 2 files changed, 24 insertions(+), 13 deletions(-) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png b/windows/threat-protection/windows-defender-atp/images/atp-region-control-panel.png new file mode 100644 index 0000000000000000000000000000000000000000..58d25e0f9d298114ba24ace8d1f807fe609fad9a GIT binary patch literal 22441 zcmcG$bzD{5+BLlCkVd50gb31-lADs0?gjzr?gl|hN~J_Vx*IlK(t@OPcX#LJUFbQ_ zx$oyW=X<~Ri$C}&bI-N*T5GOrT-O-mnuICJOJbsvpo2glOlc``We^B%6$FB(L`4Qh zR3Ri?z&~jAQd&+R5LU;-4_q807AY`@;w&xq3S|im1E1n?@R4-q@1a+k&LS?(=5~&t z{F0wizz~KrFeGm3Wb9~R?`&ab3&KaEq5;OyAI8P(>^&SU%*>rZMc6<2fKja9qmHIV z4^t_fEo@9dTo>4Az$a)ApQzZqb#^myGzIC|-#<)$^!wx%PR70#&FpT;z ztYPG6Yhh~!Y9(C{0me}N9Pi?2YzjKN58V0ZG%-6H8&g|n(D~2!7GMndVVbIiv$ZKG zZ-0ai1fm2&<8IWZV^2)V-hm%`<6~q)%;92f}Ol{PH8>!?k9O{p$8QnH?I7&H@y!!4) zk1Zia-d0&njE83Gv?P0NZ*sJxt}taPj)AqHprKxC%rDQ@_2aEC$f)D`WK?BL@b>(q zFjuYDt@$Jc=Mu4S0fw_t(h|7z7_eBf>Rr!YG(Kj z1F;u6_Z0j{7wX?tTb(0#U+#ZfEVMKDP8xY4HBPrN>by^yU+s5DHQ#hccUe`3H?aV- z;f%Wd!O+|^J$n<$xX>2IBIAuyZ@PF6#~@c(Qxdj*_J>^Vzz1htboo0l_Cl~*M0x3!-F^o99^!s+o_o1x zr}v%I!w>S)LokF51N)Ze>Za0ckOUH96q>8>ZF%cguKVdGE~gy-aw;BX@Nvq4H{ER@ zccG!7t-{Z!sTtsr*>Q1|;MiiqLPOF0173@ZtAfn18diRp z4IU2OFB=%0EOlS*bmP|^L-F=uU`U&tzQ6}N*qwAT_`Xx*{4;P)asHFTrS@hw&*Q6& z+9SWDNyv%VZ3zB7+J4J19_+9IJvPkga)UJbkkw7772>r+df9J~LM)m9e4~6Sq3_;= zZ}CA2Z07y~`^c|_=}3X))>yasun?Ff7;SLnMR@q0)d#n<>HO90>Tuy@DQw3ta?Y;- z62yX!i<=_gvmiEqcWQUEaJS|c*aG{Za=Y~b(t)nu{lValHi)$;;+v2caz5v4Vd}_n}sFUz;=^@UVScR`{X>V`s ze8YjK@@^0ua=C*2Sm5T~mk?clcMn9!vIx&zUW4LKqYJ!Fwdab+_M2?T*Ql!pK7ND? z_e&cuc^t4xzmay|pSIjSy3Jg;b-69Mh970UM;*I|QTbli7++2)K)M-?4O%Pj@4hX& z`E6(%9?J?+EPqE3AZh`93_6;BmNnZ!0a}EgmysCAUt8heAX@PDcc5b9fPuiX^AY#+ z&3^S{6m~ouQT_dShC)I#l$smQs56AJ#fV$e+le+`#N5BN!~Pz4V067)x{S1jbbD(C zK>&F#K{XEB94cPg*?v69!)|k7@Y9wH$s}xunaO&0Z6Ov1<~bD{8Ivl+e2N9#EUdrl4mfnb zfARXPW?A{_8O2Ys3RQVv6+nVW#|F1+7l%-T8-m+INl4d}!7aQ#-wAc9_c?JY?Dl!v zA+f&48o}+#!WF;!efGuS8VX65-xcE}cCXnHHf*lc*@Cw@B*I*D96>i!^1Ih$I|ap4 zBTQg5#QVCJY3vJ;c>*0qA>lY z?JcjK(&lUS=G$!6qs!ujOP8OpaY*ZK%e_k;VRNv7_Z6-88QnsA z>HVR>A{aI@Xur>B@EuqruYDw%AITa!3(aWRGGt+!7F*W?#e21b6NUKJWpbQ?f?BfdfIc=f%HFq$tr zU)=87-8~zKid=eB+Vn2vK&WHkw%=f7=DyP}T*JVJz-%D-`=c)lg8QrRZ{KoLK_)wp zUIf;3U}VMCreK7#Hoo7n(`(fMe)h0!SGboyxx9U95PA_^Ei1F~)0mo?Bxr0*O}EaG z*6DF_(DC**Ly1Alywlh4m6z!_87mUs{9wGW(UYTP#uk6GB@XX1MuRSmuEFI;tW7}= zp#DSQo8bm44Bqcx!msJzvnPw!*BD1^j*z?k-{39v+>24G<@UHQvH6he_BI#N^@W3V zX_v4iD5d3=ksj6IzG0#L?gl$bC<0Dka<*gs^5w=GT-@REiIa<%!BoKy3qz{6R|8lS z)^$Klhr9#p~DUBRm{GBYsF0xa9TCx2u+yCSy z)fLp=gG4>z;^Ihu(i7<4oQE9TQrpnrrF!?09UmV*a~~eK6*#?bA-W`6C($T{`lZqJ zkAO3LsYgDRcEXdq8zpC?5m$B2WrHe|rdX==+Vu2avY$gJ* zIEex>3g(&(=F8?WBHEkkab1HBWe>hX2^?Q5E1krzU%RHKohYC>3;e|g7mbqM{Xni- zyF!?%QT}crOpPv|sIS`g1P(*2YX(`d6J2!h-8PD%9Co@HTs*nW0UF|YQ{GeN#nHW!H9j!m} z(cExdornlEcSiQco(ecT5NUh&Jj3h9wi+B4YDSD2Qb|`|I=Zf$El=)!>Y)vhHhWSv z`#xzxdI4T=&i7i4uJ8?Efr}qm)^is&=#@uge|-+b^VJ`Hb7b2WNY zyIl2K@s!6!98XL5qD;@%hw&^l27jHHe+@knxHD*VT)pox7}?2mH~vR+zLeL;{zNUi%Ky=(38dt^+eVQXac;pLIBH)qXzE2ZPb zb*NRVZq@CPB#*z91M1JY?~>8r?!JvO7bi?7H(SH&R(jS_8<399WKsh@)WM8IhX>oB zWKLVB{dAVh-{NOK6^l*{#mzwE=%ka?qhCBi;R9Q58|Azyn0+=UySZi?c_aDrt=Q&# zF{`WD1l>@g!3*DY2PdqtoSbwbM{dTaNvhY^*+Q6S8>@r2_@hbhv>LkbcyP%T0H_V57Co(57uiZ{!yV#}s810vn zQ{wz|n|g%+TE!Octj8^`?Q0r}{Lakws0$sZ>8Kgmc;jmibf}VhvEB#CHlCUc94pBA zsWZoE&PEJb{o27E-?;&C>$NigRUwXuyF))pSirRF`{oUK*o*@b3F1)Gmw}4|$CE{ictleTq zWHJwjLxcOp&^==w^9HH?woA?I;fqLe>}D+@k|jMCoUAademNLWK)P1C!ArsZ$Y&Gh+tj-ePTl*LZ8p~Z zp;lI{v%1brIU8&|O~KHvo$p#x;?CX#rxeGyGxcARbe*4=mD((IrH~2>h-~#kdA*(K z>cL*Xi42Ri-gc(&*S-)8A?5Lh);dooZgP<$85+YYSFz>peb>?vt7J+hUp4`%?H>#)^~!8C|3E zmhyV<0|Z`Nc78qU3a?$h0pd`_N6)G7}$+tBa?UC2t;s zZ9Jb`9;y+nt(uJm@#bOk=;gEZvoqb~b*+kv5862g?9L3a%eD{q^srUc{v?i$HF5G1 z>!O{BV6Wv=rrnT`p70OCmi>?*jS&7e^8!wF7GRMdqw?>=4=aBl7dQw@Z7qM}F?^PP~s zF?Gf;-#g(bzx?XkwpcdKN2YYo&9qS?oI|frM+t(`5k6KKAut++4&lZGzw;;(zu|*# zHsxs(eQFbo6;x$(124ZR{4{&B#B|=-@7IN(k7jev%eOmqMZ&Hv8Voj?rgWK1^PZ_& zCzj}oH>R;SBorHGf*)NXpJK>~K3(%dDYI#bJ|VCd#TK>9pAfu(ZtijQZ7Iw{Rr}~~ zgdBxfaBv9*J}!v4B7z{oAh_YnHH)^#Lbqvk3OlHZ@1bubXtk**M|R%(3;UKa@%@c36ME&D{!gjnzN{s5Bf9>KC4qZS27K2PdWs*#MJswYIe@J`gRm5>hH9# z;ohBQu><*ybQo2uHLNc&JVSW+Y0!p%fj`Kf&FFjhGuY3Y{Na!OI5zk}j?np&eVC6r z99?s1F+KYFuozBG^S44R(?lO1LYYoAxE`;5U$kzk)S8S|)FLr&+JZZhSEaa2#Wrnf z(Ho4tholoqfoiVHrHxSX+>HsQT!_a6`{7bTUuSBVym)NJ%P4&Pdgtd(Yy0~wGT9@z zZd-{bHs(p#9AvF15%S%MDC&*}f!|z(b~oWM*S!{ia7foLHGcCZV}%>4y%#hm#sad? zDPCwHM;_}4j~PlmSU(A)#l%#fG9khrE_Zx8O8ye&J(+}Ds3h{lzHKR5SM8VB%T;4C zjW#q7o6yZkBT7ikW})DEUV{h#OC+)Y+5K-dB*qy9P4qRfE7SxzHqt^P-)`WGZ3Dev#^&%`nzeDwKqqOLv1#CTz4Vsi2; zs8F7jAinmUSfGr(5f=1XcnZd zGa$GeA9aJlmU9m5pM+V|7!tJ$GOk+m$;Y<2pD-3X?6SOmDl$;92w!AO#zsfOS;2s z{Q1t-ifs)A2b5)QVf@%bhc->WbNAiMm2LwC|J+-3{v*$tKCV7*n~Zbq>lGG5$LetT zz|_FKQ!krB6ob!QImHk&aG{EqxmWQM`$NYXKf@1Eb!BWbvqCkI$rJ1wcOTEL#od(O za+Ih*X4cOf6c3I@dEKUS_u5}5z47w{yB*BGDpuz&D^V|8+MjEfTvz~$3?f^Jf3A1l ztp6a9T?-S^-82UWZTIm{PECCu7+`m<3AfbiJ_i01TUOf~m|{vk%nH@2z4mO}!%B*4 z=Zi0BElx3?@$3un7e`Z3Idd0ojO26HW!V}!v$38SHeJ>4R@RG-ni*;S@P3N+b?03R z5|7L5xC{Tzhe`cV__S>A{rX83E=Dw9ka`; zOgjQg<u-$|ZYItT%3zxidr> zheWvVS_!UmG*}VSow2Qm8asoA7rr>kt55ZKF&&pgv);&kJYSPC5B}j|;h~Tl<+3O^ zzfw&;cv5z7ROGaOJ}sB7+6(iG%@d4O&?Z92yq#82W^gUcdwaKBqVb{u#B{K0Xl6$K zp}kRr5GB2#2~!Xzr&(WwaCQ-W4s*!#-fx>5chG9VAa}9OWkk(JA9r)Le{`^#P~^p@ z&bl{Ro)QPCD~*imUFI$riGggRy_P z?&TXNl%2E%%RBSAs%v0ZeNHl>h+aNDU&toc|2kqyZeN&pek_tRF;Tm5@>MiHmPD>T z|C9NAxu<(EUrSAW#P;!YkJo~$w;zVI!p4_!g_eop8L!Ib$h}oA>fVn*$I_3C4M*?U zLiNADd7e94q)`@{Z4TeVf2K;mJ#==ORf5N`)0e27)Srm>s}PT6hc+#?Ihy<)Phj+? z9eLl8V8f3e(v5-6qv}r z-M2=vf5tU5G|UPs-j5qi z7izq?!Lqk%Izi;#&Wf^h#=R2sAPJ3(jBFFYuKQOKjJ$V#hN&rNCf^!UJC^_JHAA*r}Iz$x!`8TE9MD9WC|5L6LdH(P; zHa7m92Kml|NqSy=aRih~Rc9uxzsNOzNrDXjPMP^XDEJKU2@?1Ca+BS=(pL0K}``i0oVAT-oGR{BGa2Q5*V z_XT+@Vk{e5=ghc|R1DOTb6yAz%~M3wfQ6UQnE0V~>keKPr6D^ZbY*+%P&RJ<6sv)1 zK>U47!>ILPhXWN(oaz|$yxk#j18xzmD5R9e`$E*&@9dnW$4=kBl>+02s&~R{u^$BU zg5v~jr$>+FHwhA*Qv~rM90>ULqYTY^!5{TcOl$kX?=(5M9}EclT%so3ZItE%>tg*=<&T+R8S;=PtFi8lmS4yC{bb1+PsL40U{m5GQHH zr?~yrx(mhPihIpR=(d5C&Tv?rMp1woh11`kq>z7Y(anJTpC3=RlXc=MBcfe)aHDm2G zfu?7$15Q?OHoPp%$Og_F=xcb=L5h9{0*Fbb<|kkKU6k^DX=<7_lpwnyS&XfZ`WrY{%vG>(|b+ zIqHR&Zb3zjg0}~~LEql<{!F)??ZXWnwLd`XSSP#5IqVTclww$%wcN-Z?oB6H7 zB5z#&ru9()`m*DKRPzCYD zc*Sd02)C#4amoFV&{jF&x+~LU!fZc!*XJwtW$q&YlD`Zb0%N^5Dh4LuDaY*T@gLP**Zs~U^IuBKhS1Nd_on{&oZWiX}%A5P3~ zJ|0Auu{h#i&0gNKtH213X9m<~RSV%4j}hZT*i<>9Cbk4BKDNL!{IeGzI&PoFn=~os zyKT`0ZXSiGBobvN+g?7apuU$yD+51jQy_Nf?kNQ&HA#-IV-6~?(5)xBF{;w)B>BTd zNj`(4*f^~rqmMOzuu~0Dq+HqLm%SdIRA`l0L=g5DhL+)#D$C)wRbaaajmvnqXrQ7Z zDwY;Zb?>YRjNF3Y5I^mUaT%dMVwZANp(@F_I4Eazm~?GAHzg?GOq-%;ti~4Z-t$AH z<|B?;F-%LOwYsOsGLX=E#W~FZqQk%qrYMTyNEC0>yY03hEk7F@r+49v&K%h}Q~txb zD}m(XEQN%znsrMO_Zs&>R57K*+D@JuW$%qCu4jg!ZLeImT17!Fs)aL}MVo@v3kT=o z;+ugzm6mOfGk0+?M@AnnHZMGBE_tLe;Xo;|bI_hrkfyv{e&kz2mmzw6 zxe|>H-OnQSp?n0lq?0&E>WIu;RhwL#U32uckKk3nFp-)hjb{6hGOaxj)xs~>gXewg z@6t@;IFt4yZ)AwH_MoS;I4Q}NvEs%Gq z z%BITF#taE>tNlaP-B3Ubx3xhl?@($`x-=^5{5YKTc%=%!IUn($)m`7%r>`6bC>4L$ z9(kPPvHQlz6;0(20cEbWcdB7cR~}xf?`PJXc(1S3bu1jO(JJzC*ghgM@;j$oQE6#S zkRx!d*VlZne|1bwPNI6bJEP|Q(VP1sBA^Y? z@ikZZoBSBZw90y{T+@m#D22uq;pA^AG+Cne2eNzF2i`^50~E_7j$faVVs5_@Lvh-S}pbneM{OFgv6Ls#C4Eav<@XaLy8~ghKtbNBw&hn zR%Oo-2Pgg{*z;dACEpk2%-*hx%G+^m%=R$n=Zu^4q`D#bRx@pO*9R`&|UvgE}b#))h;kvpBu zIG|D(s2{S+mK=DvdrogMs$Xb|qNYA5ap}x-)FeVtf5kB-tzWHwpa)Rko*;Zd&Y01_ z0Wv$sf3^qcT!w{$7=GQ!Ap4t_PaewA5Y=z#4-WQUwXx5Nbqa* z4jQ!?^P*oP?c<}qNj4kNmO9mswAH0EJ#;%`j$U9&U6xguXnBD#d(6$~lOk0hF@TQ1 z&l?6X+Mnt*AuT0=%GvMovl)_Jt?(6$*)XYNNf_Z)+t`i_UX3fIq=?I!&g!+U?!rGo zu4qJ$TC*5BzqoL?*w-7igd*%%LP;K==XvdKw|$R-h`9(JV1+R2c+=X>!o%(3==iYw~fj`9f5l54jB`zkl~U;HQB6A;nbFF zs`H7E{COlbeSskS5-9MtjRxTiYA77Sq8nrBBi4-V`v1# zNOzQj2LFbpP@NR`9Ml<#@TlH51P7`+iJ}BE*TpXnQJ~4@FFz?(+mM3f^@tE&QBXZ- z`Ba~m^6lE=^KqSW@4SJU<4I|XVB21m-eS9kS}a^^3(6Ob_fa?QX|MaedW0>|RnBNt zR|?FUlIq>~B3znW(Bpa^$3KY&-8m-sKX0uL5m@*mvDEvg7KC71@(!0hP4^~gC!&8% zncLeOiKY!7Wkx0SOv3`NZO8N}!{W<~7tgIIsLj4%&7k2wDKf7ZZ;Y;(o|Oy*l$5;a zvZ`t{L&Qx@{qZFhar{s7BA(BVaK_L0wxmi8%d;|-x2Oyyn)j#%YaS2PEHETr+d&G-W-$It5qr}n&0#vd-8 z-p1P6*@wcB>X=TwbmGN}7sC!;wTsnbagPtBW-Q~sZ3Q_l)$^UI;FIVL)abwBvcemG zKyJn4R%tyUYq`L&+5pDIpj_{+ldxQ4j}6XjiTU55(5c)M)OmI`dbb5EY=#kEKtNI3 zsc2&6J~B{MrB^fu_6|KHfRxLJGH2M~PrryizGg*^($wT6kqcpHXcRLtJEnL|DJ2fB zlG%U868Y_n08KqTa^R57$Glf|F=+xCMFy1mC`Z<*`x|5IOF?y zbQ!oAb1yI2<4v7r;)5};?Tdp;j-81O;K*B$JP|d9SWs%XFxD|B){Ke5-mZ-;E~~aUK7i#K?=qTD&=b`% zzBl_G&<1rTf6SJCvw;)-iwwWER{iZPT_28m8^}T!ITmkxe41!ut)L|16B9;B&w%$` zVzNC`#a|d1M39q!XvG(+rpfqBm6Al7MtBk75CIVfM>@FR0jsc+Zo&!!YjJ0NZ&e#m zuJNO*;>@e|Zr~`%g7h2j^HtlHi_v93X*)yZk$Zd~A7cKUqvM}@GDEE0R=;k}nwW9P zQTF~B(cOP+LKMEjozT$rjw&|04nTL)8u|0ND5Y#e_NceQwc?m#t{?~+!Tyw_Ztst8 zIJyiYqgOehaIB8^0$QRzK8;l{1|SL5L@D@NtS15BjRj1cc}c>{>&~k`MhbsMC4e&J z!9*!Oo>gMIbIphLG8IX)AI)HJf&w!hOHV;z+4BBNX!sjz>s{607a;n-%LuV`C4?6T z3*DU`2(gF>;$-@AMFBueL`8$mos_p{{i{Ue-WFf@=r}Ef3+Si;fXsxmfzN3(yDl9SN_kc zBfT)CEKxY}4A_Ckn^YV3+TjhL%l<3&kWg2ZEN&>%k`6_&bNEK&m5i$V(iTxLs7Xpx z$bhG-iumudeWuRuY!6+3$o6Kj9kdvo4<5Zr8WCPG&HCj*#nkV(s;5v;!jJ;R{En;A zzs6O&>_6j*M&Yk<_02{nN=eeiwW7TL-Pan7{1v9(78>9vYMS5FnHp1jV%^-_)Oua8 zSVE@*T%g*RfKk;6gTYWeT~E=;dhmh)juC{~j+1Ui#WwPNyZ!i8)d21xGe3G;^_@B; z6?PT#Kk|Lmy@(JKsb<(r!h^BDN~R#{?f@ZgU60(<{BO}!@%QL5wk42N=^N(e=hqx} zis#zYoYxAD!h13S6bp^B=auumh}3*p|JfyqmUlpy!p0F6eyWw9#P%K=BE_v}^yNr~ ziV}zNaOF<*(GP|(&W{8&bNOZJuk#|$)j|s`&yPNRtj3G1_JM$c0*5|aK%g?3jcOuj zAZK#E>T*4lG*)9XLH*P^J+$jJcN@l2a&Bu)>@dz5ELEkEhcveAKpL8`q103zbJly&>$c%QoUHn z(3`oB3djH`W)gD&-%pIJNQ%1pb>Qd(_9|1tLi0A|4JixRnsEO3=A$9_1`lDzhxLy* zhL;`ZWB|V4p~-T%yi+(QVDp>+5zxIN{5-gDrND(T!)NU#p#l_ zh*=-D@l-yC(ic+(cq{+b4%^M;PxE zceTixu_c|l;jS_iw~|idelUigz5X(f~xzaoDHCEa@{HYH^n|(_A@x{wEUK#T{0Hh^Ep)h;g|rXNKH1(6%|7kN z>n;^s2=)~v?exF-1m3%|izU(SHDymy!bg>|iQ4mkm5${)PFUU)(@d!Q;E0bi@8t2o zH@mdx*nb?*7PPQ4Bd*tZ1=SbL&S-b}s#90;s7YBw)-80i=l@dY!0Rc#h^cfEe_u<2 zqNDYmArgURP}dibG!47<3Ub2Y#h!jH9m$lVqBOyq#bY<$Ul?IQ6tB<))J(9i|3ELp zD5XEPa4)Fsv40~9SZH5bd}9j*bp))6fwq8soIsb$UMhlK>Vf&541T zdIH-Rg+JhEi-n|OB*_w}p7L!+!rA5XW{kURPIkEp&X)pIM(sfq32gY0=b27CT8}m7 zLK?7d%X2}OG5inMGJ>yDC_rPyD1Uc_MYBzD#hn3X8p?KR$n{CKwF-W+8hfD{H?%PD z5f{)1`gH#aj~%C$p+vM*a&aLrsC7&goLqJ#lFhr^ud|P!r~_Y*Ba@Kc-g#q7FqVnl z>Pb-fsP!0lme43qXt>QCyJWXGQViAubhbKRt|nS~9x@S#44GyX z#VegNPe$rgx;i~2`>n!)fR^B#B;`_c;pwu^N>=I(G3Kh(KBU#JBNI>fg9_nePNatl zYZ>6BW>7vYM$c5w6oNeZR$M#7QBd-?zlR=BNy_A@=9E>HA(|i=0$fQd0a}<>4^S)H z%HP_{_OpiUeKorYCDu4LByrQ@QMu)RvL)Xy4zE=oOVfYrVndFyqU4eJiOyMw@k4Gi{; zo>WJznKr%f*dfn)Yr8|h^yYce;h8+S%2seT`b(lpMdO^k6{c_Bz$xq%B_@*c>fA(52hf;Q?)gu8#eM+BC+GhUat;5n z&1ArPg5aYc%F+9#3vY<*2HKb;MAE;x-p?dY|*)2Nou*!1f8T*-2(b6bFqOYlgt z=Zk8hKC08`TpHXT>h#bi6&vuo#`2f_j{U1X8?;T|Sxg`5rdH4UDcl?rL7h$%= z&+lK}HSloB-ktyjDjo8_=>z-QR=2>-|z8Y2@DMdacK?4yfP7l8-%Eo?e7np57CaUp3d^Tz{aU@*2YN&c~GW;J<2 zQZ^>D+WEOnak))qafA)Dkp#LhE1`tZqq-nrpif7g@!2F#!E5_;vvZtIA;T$biCu}qbeX#VwzWDD^(lCkq6Cxujd1ENsFtJb?=1*iuqAE+7XJs zUxT7#_^(LOhr=xenRk5SRHiW|u&j@aqpzYuM1;@NSb>TPKe$4}$oV#E_&H^ifhKxC zAG{-LZ^h8*?`r>We8#cB4TRr9H?#Pn5VGFI7dc&Wb0XNc;TUaxS8g~M5z9n<*XTkm zq<-6t`;e8ziVRa9iU^WKc$A7DBar+iNW%M``)~;;SwH}u37k%R_U`dI8h{B(83Vi|KTi9sg@1gV+o;F5xPmR|K&#E?<`9g$cmyg;#CQ}q0@FTVqXw|$A--5dg-MtI zCj`)N=x_St z?7`1#L_Q15N7)DZAcm!t{wAI>I{ruk7XI|ldoC=pPX(rhqg!q1mj?WfHr)TYvGT8P z+i&-!Uy^~F!ifm->`3a~v{#Aj1W~#v>PvK$wFjG2h0n1k-G|uJnVz|7707hd7hmy> z?-!J~!^40jQX{}d{ouVIU(eVNQS}WCj2`m=rs;{zL{EqfO4;jxE{<$k?fW0f3lfx{ zLOh%;XxwI27liE$Qhi>JohD&pqlvl4qmQw3z@Dp7XDpHUQ09V(;5wqk$V@{v*>1h? z%n`r%TclrsqRkO{Dv0l$vKd~p`g*Es_gNVPPs0?x=FIfWsLM!Ev0s05`uPN}S}pj8 zpGsV)gyCrb6Jn5^k&s;v@#IiNZ?vzI$Br>hCT@|DdH%8S=^;Apj#e08)QoSi<;Z3X zH{(gDdolZj^`(sXXG|>$^DQrYrU$!csnfxEw?sHHkeX7ozP)Nv113QW~37*Cn7laYWzK=ypT$yH<{t-BKLnYGifNDl_?{Ov}c^Zbm=Dmepv3qVC`mAMUVWq)<%uoU&yz-Q9kR@IyG6uT}%H zW=82J^Gx!8?~rW&^2XL8VS875JT%y&GF?_t-ET=_H&cPG*4tH#IU|YJ*22g}oAjhZvJRgYpzfWe z_SWxcCgS3fa{n%5eRLb$kA`l3InWuI!~NW-PY?>_4&AJJ{x=09rE7!g*D$VqBXyOC zxT<$1>qDCp?(aUow^)@U;6spvwJENC&K(T-Dft;D?X}K6aMBe0jsVXO^iRle7vHQ(G3oP2 zNO!%_jjL&jjS=k#U@+A7Z`{}b*Srt1i8G?8!FCZ3QQdtof%8Y=hKce!Xt4QnAIDEC zRPNm>$@IC3^cBS86;Z7ilf)bvS^TIt7wXF9vJf7&e(Y)JoHZ>OZUZsXYd1k0gH2zY zCB3pCDt4J1D2>FyX?}lI#Pj+sWX0*@mhaW(&fTZsU@D!y8Wfo(k(;CXi($4Zv3Ng( zOJCx(RHyQ~CNQGnSXVb`-Wog5)n8^89*g>tFGnS-6=*pzf6^=ce6$jWXv<(*h{-^F zhYW6^;%keyGGL3W-@dB(1KO|E+y(ky)+2EkizRGlj$<7jmCyE1HvD`%!zv%TO z5b}KuIQ~U}ET|zmza8J{@7Mu#rO@AybMd_BO03a9+2$qugMJwoap5)(TvstZYOf3_F`ySZ1AR&B|_w%3Tp-g|Luiux=Vjz$dg$xjBSV+lY|12j|2Er;4tkv~F4aFx88wlrPOHst;d2OD zt9>r3BZYPM?gBqqzUfp}q1n~fw*rfFhwr8>uKF4#l zwYqrP`|h4~cuRTqx9*a0)G+kNq5b9CjMU)JH!wi4nyy!ZQ)2)$`Z8Vw zOf%ZJ*T*ob`o68&(;ahhB^A-L$0h?mn=&Aop_1!aKI%({ABswk>63yEJ?rji0R?CA z@gD_;yc+)*ljiVhq6dWQ%PXK)-a@yzE#o+$+{xU*W8^~wt@@0@Bs6d^}9qoPyN^SSMwEvsNV#REwQ>hweBtKS!= zIma3eId?3>jvBm0cflaCA@qO@nEjXu|Ck0rN1pmxft|14t7+J zi}?!;V|9~}@j)^|vVVMl6#N($vn%X3f|8^BwZ!>bLH(ci^LC=H#^-hrMM^@6!-GWx zq)W{Hm?tArG-o8wK1_dGjf3jIxcgnSN+Tn_J&lFRHL`4kNj4X+RY{9Gp8{41Gj=>S zt|!C00HNkOt(3Hq7s9P zQPHX9V@$yNI3Xdb{2a6;*;!drn>vghFPkMs+N>Tgb#9*>(dxpK~e zZV5ellG+dRQ7ao5bDR0k)^MAQBpV`f7U>&qG$su*$^z%^$H}t=ra^qF(w#%37 zP?cs|CeiD-7DVi~S0iZNu1bm{{a5j0^++9bXf)L-LloI~+r_GeCiZum<$hs)uCn^$ zo&(uEF^hF3XWgq^nO7OlpK=8V7pQ)~ICqxqvOOp0DeEZ}PSRLhdUu9CB91>2iHWO| zjZQRct{U-4w39kp+8C-eCz`n-3E9@X@}+$GGx-ZIAN$qT?MBauuOht5HEnZaEpbnF>-W9Q= zUH7xGD6;N^h5IRVNY8``DM*tQ0ccK&<+q|8!q0 zR8bv9BNz|q=5;%6*;_r69N-`O=AJ{&N{!xLzp6S~e8jX4yEElcQ7Ja?O(pqCZ1eQT zbF6(*{-|H16T}+_(LU9&>ZV;ds@=dewXVnK6(e z5EenYB3d^kw&kM%twXDo`TB~TVJx1htFJLGQ_SaZtbw(k6seVM=Nr|{zGnVaAeiB^ zG%KHIZ&uv6Ioe3vPV~=2u=eb?e0Hvj7}^E3=X%LleZ%EnCb}F}F?@wY>q=NRy6hY! zI^Sq#2Yy;@G!<4O;QYU`QN~P|E(Z$dU=d9)E9i1aiZ`e%++55EEQ?A&WsusD7 z6~Dy)`hfw9J3H>nS%8@>sex}(*2M=QT4r9q&3fhhEHxoB)9_ck>802-T3_X5VIg6M zXFgX^nPD2}pqe+Xlp!S*G_;*YXKbl+^(d9HaWvhgdTtWZ|ErSo4r)5v;&`aK6x|gN zr3kAC649VYM^F(F5Rl%BVgN%z?!2`YqubV5jY zzn$6Hoj3D#W_RZPdw=K7o%wuExxaH}#=FL1BcFnyOeksabijd6bm%Lt4wo{=Nc_## zF`ZlsSytAl$g{_2C3{8f5=10p>ArU~oJqG)w@$xh^ZbEX7FKo5uguo6jhdYKNw?M8 z34PX2;FI@h2_oTG!+G>YKlKJ{bC&BhTivW%<=DE<7bFhK)sZt1jF$xdZ?A`Hh)X#a zc`=19n&Tv2A4kcBH!BWTQixqqjmoRZ8NuGx&0Wok{aLt+(6F!5}BF#TDL@ zBDi>F-@o>!f+AY)fLgew3M!bYMmS&}H`}{Okevo~((}ZL0Ez1U`-g?@@nDUjx8WT( z-PMfzB-AUb&V1;B8vb(Cy{ttI^o9I-i!gC9NF!MSO5HjXebw$94PeUo2c{x6;4E(f zTa~Ey z>>np(^EtJ$iHTu@eh&<4=X5@z%o+$xq)Apq>+_if92lK29IL9Ky*Z_pEYZ=?tDZ^Q z_m}W^>LzK`#>yJUPfO1(cCnI(obrQwH~ zWp*wmh%CF;C5Dj$Azofa&tGE2#?lrNFE6)MIO|x6UEXV(WvCe0*7eL8zdCf9XCNf3 zV95vYHO;r^K)nns(?k)xXtb^zAyxgiaLp5Y%OKTD^ZyXxbsi*5{GE3M}Y}u@K43H z_q|oB<{{?(mP-xblOR`&pa7NPlL)TGiGx6n?>^*IbAUnx{ssT5EY+YW<_?_z;Q)1( zgw(~tdoxr(AVtaZUjJA_e*XqXi;I*F(lJC7bdCkQ#n4vYHvdTMXq1C3#IW zh*M^{ldSGH+gWv`m)-J*7skozvg)^`uzJ#5w)x)_QdgevVT22=Y`?2Zy21NKHm#qN zM8Q6yPn-Le)!$9lT1+=MpJA}r{-L{Qb7$KlD|Um_&Z(zC+BW(uq|~1lAd_JrSoOtE z6QVPbBc4Y%!kE88HlnAs&m?*!I%(G3$YAwBmJUB_C#R&S`p*=wJCAZ-joE(DFH9UG zoF`4?)ZFkWS)7`QGhZxw*;i&F;+ZR%u(Lf0RwXw;ms+MQ8{wuaQabvL;njDLO^y;v zG7S;TUQDr&kFOvu`d*`grmZ>bxE89k*N<5iK6^BCfTy8qJ*+qVD_VBn!FlLVFUnC- zTZzeK0m%ATu}v+-W-a?QI?6#~{qwgMVldktaChtj5k9d;J;hNMUD}JD!6#WpLw z{?I$xm6P*y=R1B*p0WDMlA@97x1ANQ zy1gp@Nxne=UFuAVdLLJ2^|~?~UNQKBcYJ5nE4%IOUgEaL7=EcDdf{i_NM{^>_+XfKOd#oO?SvZ9R zRRP7xo)oFDDWNY3T8sW^e0?I?zVOt91b(+O9jEltUR{sCyy*i50pj^vb_I5`@PjBqRid zaCBb!iP(A0qt`|gG;{1-`LoQ4c`dGM>729k({R|Ky}V|`w-E@AV0r)bIlLF z1goC!qzt*;nT#IV@-pnP_}>})bf;Ll&hcu+BVb*I_-q-}q?J4N5BplkKyobmnL%g1 ziiMRdWLRj2#*Aw#uZovNRcvk!>`%4MucPYr4;WS6;d@c%QaK!5Qf)3nL@JGy^Np2F zFY&Y%d|5=K4lK!7SvR|0hwF^XZ20%`j1l*QOAiKT*1KR+HOUyP5UklaX=M6mV84aT zfY-Mc`|Q~Po2uVn>S!TIt~Y%#(?_Dp9wUXx_YzuCNKH27KeymkHB-GT%FyyR)mRQZ zF%{NYa=Qw#qOhw1XzaKUO8$kpq46`L-gFUeu>`7g-Hd_ZBJ5_zy_0$#e2=`MDg0+H zZOaAp9*H;V3kze+>;)Udb1nvy&=(#DQw6c6l&cfBQ5gF;NyNn>IatN4nd1|}$l})k zRAC|QU=uxM{{|mjSyvc@RG%3lXpKW1y!55HTC~aLFqi`@(jl<8U_2Flqid_1F%HeK zLVQ54RMtEbo!d+ji(eV0?D&HzXGog8M#0M7bC4+gjbu){@^e^$WR*QieW?i!-QABV z{S^~(O~E0gR1UJ+gvFMtYDzloWCT%y4dUpM=cj7aN~dAX*ycu7C&ZH%X(1XzOE{}s zx^Cw)a^I~w4ZSd2$(Pig{;HhFe(Fw2xczEFKlaImWK)_Nd)m6lWnnc(s#u9fW9)Iq z7y?j0IwesfUU)HG<8;Bqke!=_4}ai@chJac0j<45e$d*(!TfU^MrgeZFl~==R*wLV zVc32j#&oQ~G}UBJO>5d87+sR$RRZqbjZVgh!S0##h^3vK9+N&%-2(R#4XhTDL_``Z zyVJ?mzcuDTRPSqx62aX{^FW`dcIgCo*JG*=5amif3uuDi;Nz;S&rzc(O`-iOk} zrzn%wxKUu4fuWsSwt%X8HCkRM4NNC{`D!YC&m^k`I_4_tHd?A(&o)73S$)XfK`c>; z;)yB6HyDqiMZ#f{#@1gEqE*KMP*e|iGD1Bx_&5c;q_QH0OOUQDQ!%#*yF}npm z+m^0j^NZ_hlf$yi3B$Xa*j>b$CoZ4@D6qK7;=KXWv__yrcOK$wnYnp(a+Ig)Ma>hF z6y*Ss9a*5VYen}|)Fu_kWtm#Nfr})gr71|^YuPA+r^5}xRM~!|de(*XsJ03$w+0Mb zii#V#2Vc8O$7sYQ*ItfDz-nWIx4uBNrcu}^R|m}>2BCMWErA?Fa@`Y1ho_a z^ykZoT=E3~A6gJS{f=RM`W=}}ejYt#@wH0Z#Sk*re(LyW*mO@*5Tg~1QiW{)$U_5u zDS4XWa!}#`ytbYr4+5Zr|RN?>_f{WPBeV;i`X<1;{x+pBWMH#%mC@j zA4$ny@;5)|Cg8IM2+6Ed=*ZDWpVAyK`y%8k&#+ieo-5Y6B(Z;x(tMYy*v*XV8~P99 zkg)vTB|=QA4(C^U7!_62v12}z0tw%(EgC6|Ufv!K>tX#TC&XijeK%jqWn_BG-ZVOL z5Er7e6}}}_!t@C8qUIhV!^%T+oN0CVOr!vtjRP`jg&V8)U-}ZlAXGY$a!s-kY*paM2c(wcPZcn$Z@v79$1K)o1+F)VIX@?A^cZUKKX+Z{hCbw&Exjy+XU)%60 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 4f5fd7e713..6088cd305c 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -25,7 +25,7 @@ ms.date: 09/05/2017 [!include[Prerelease information](prerelease.md)] -Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone, suppression rules, and view license information. +Use the **Settings** menu ![Settings icon](images/settings.png) to configure the time zone and view license information. ## Time zone settings The aspect of time is important in the assessment and analysis of perceived and actual cyberattacks. @@ -39,7 +39,7 @@ Your current time zone setting is shown in the Windows Defender ATP menu. You ca ### UTC time zone Windows Defender ATP uses UTC time by default. -Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. Choosing this setting means that all users will see the same timestamps in Windows Defender ATP, regardless of their regional settings. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events. +Setting the Windows Defender ATP time zone to UTC will display all system timestamps (alerts, events, and others) in UTC for all users. This can help security analysts working in different locations across the globe to use the same time stamps while investigating events. ### Local time zone You can choose to have Windows Defender ATP use local time zone settings. All alerts and events will be displayed using your local time zone. @@ -55,25 +55,36 @@ To set the time zone: 1. Click the **Settings** menu ![Settings icon](images/settings.png). 2. Select the **Timezone UTC** indicator. -3. Select **Timezone Local** or **-8:00**. +3. Select **Timezone UTC** or your local time zone, for example -7:00. + +### Regional settings +To apply different date formats for Windows Defender ATP, use regional settings for IE and Edge. If you're using another browser such as Google Chrome, follow the required steps to change the time and date settings for that browser. + -### Date-time format in browser **Internet Explorer(IE) and Microsoft Edge (Edge)** -IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +IE and Edge uses the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. -**Google Chrome** +Take the following steps to change the date and time format to conform to the format that you need. -If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. +1. Go to **Control Panel** > **Clock, Language, and Region**. +2. Click **Region** > **Change date, time, or number formats**. You can choose to use match the current format to match the Windows display language or you can specify date and time formats to suit your preference. -1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. -2. Restart the browser for the settings to take effect. + ![Image of region settings in control panel](images/atp-region-control-panel.png) ->[!NOTE] ->There currently is no support for Japanese date format format (YYYY/MM/DD) in Windows Defender ATP when when accessed through Google Chrome. +#### Known issues with regional formats +There are some known issues with the time and date formats. + +The following date formats are supported: +- MM/dd/yyyy +- dd/MM/yyyy + +The following date and time formats are currently not supported: +- Date format yyyy/MM/dd +- Date format dd/MM/yy +- Date format with yy. Will only show yyyy. +- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -## Suppression rules -The suppression rules control what alerts are suppressed. You can suppress alerts so that certain activities are not flagged as suspicious. For more information see, [Suppress alerts](manage-alerts-windows-defender-advanced-threat-protection.md#suppress-alerts). ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From ffb99aedde8eed1f4038e2d491e47621592f8816 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 14:44:33 -0700 Subject: [PATCH 07/15] minor update --- .../settings-windows-defender-advanced-threat-protection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index 6088cd305c..bf8283a33f 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -86,5 +86,6 @@ The following date and time formats are currently not supported: - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. + ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From 42607bb113d3a8f6a5578968a6c6f90393b8dc40 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 15:15:17 -0700 Subject: [PATCH 08/15] update to include dot in numbers --- .../settings-windows-defender-advanced-threat-protection.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index bf8283a33f..d47d1f13da 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -73,6 +73,8 @@ Take the following steps to change the date and time format to conform to the fo ![Image of region settings in control panel](images/atp-region-control-panel.png) #### Known issues with regional formats + +**Date and time formats**
There are some known issues with the time and date formats. The following date formats are supported: @@ -85,6 +87,8 @@ The following date and time formats are currently not supported: - Date format with yy. Will only show yyyy. - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. +**Use of comma to indicate thousand**
+Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. ## License From 0c650fbf09e560f5feeb3abb286125974dd8b155 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 12 Sep 2017 15:17:27 -0700 Subject: [PATCH 09/15] add to troubleshooting topic --- ...ows-defender-advanced-threat-protection.md | 25 ++++++++++--------- 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md index 18014303d9..de337b11fd 100644 --- a/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md @@ -50,22 +50,23 @@ If onboarding endpoints successfully completes but Windows Defender ATP does not For more information, see [Ensure that Windows Defender is not disabled by policy](troubleshoot-onboarding-windows-defender-advanced-threat-protection.md#ensure-that-windows-defender-is-not-disabled-by-a-policy). +#### Known issues with regional formats +**Date and time formats**
+There are some known issues with the time and date formats. -### Windows Defender ATP has some date-time format issues -**Internet Explorer(IE) and Microsoft Edge (Edge)** +The following date formats are supported: +- MM/dd/yyyy +- dd/MM/yyyy -IE and Edge uses the locale settings configured in the control panel language settings. To change the date and time format to conform to the locale that you need, you can update the date, time, and number format from your PC's control panel. +The following date and time formats are currently not supported: +- Date format yyyy/MM/dd +- Date format dd/MM/yy +- Date format with yy. Will only show yyyy. +- Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -**Google Chrome** - -If you use Google Chrome to access the Windows Defender ATP portal, you might need to configure the language settings for the date and time format to reflect your locale. - -1. Go to **Settings** > **Advanced** > **Languages**, then chose the language that applies to your locale. -2. Restart the browser for the settings to take effect. - ->[!NOTE] ->There currently is no support for Japanese date format (YYYY/MM/DD) in Windows Defender ATP when accessed through Google Chrome. +**Use of comma to indicate thousand**
+Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. ### Related topic From f28c357c48b27c60b5063de6de68495e95e74ba5 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 13 Sep 2017 14:26:30 -0700 Subject: [PATCH 10/15] remove steps, add formats, update decimal --- ...ows-defender-advanced-threat-protection.md | 19 +++++++------------ 1 file changed, 7 insertions(+), 12 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md index d47d1f13da..81b976e914 100644 --- a/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/settings-windows-defender-advanced-threat-protection.md @@ -61,16 +61,10 @@ To set the time zone: To apply different date formats for Windows Defender ATP, use regional settings for IE and Edge. If you're using another browser such as Google Chrome, follow the required steps to change the time and date settings for that browser. -**Internet Explorer(IE) and Microsoft Edge (Edge)** +**Internet Explorer (IE) and Microsoft Edge (Edge)** -IE and Edge uses the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. +IE and Edge use the **Region** settings configured in the **Clocks, Language, and Region** option in the Control panel. -Take the following steps to change the date and time format to conform to the format that you need. - -1. Go to **Control Panel** > **Clock, Language, and Region**. -2. Click **Region** > **Change date, time, or number formats**. You can choose to use match the current format to match the Windows display language or you can specify date and time formats to suit your preference. - - ![Image of region settings in control panel](images/atp-region-control-panel.png) #### Known issues with regional formats @@ -82,14 +76,15 @@ The following date formats are supported: - dd/MM/yyyy The following date and time formats are currently not supported: -- Date format yyyy/MM/dd +- Date format yyyy-MM-dd +- Date format dd-MMM-yy - Date format dd/MM/yy +- Date format MM/dd/yy - Date format with yy. Will only show yyyy. - Time format HH:mm:ss is not supported (the 12 hour AM/PM format is not supported). Only the 24-hour format is supported. -**Use of comma to indicate thousand**
-Support of use of comma as a separator in numbers are not supported. Regions where a number is separated with a comma to indicate a thousand, will only see the use of a dot as a separator. For example, 15,5K is displayed as 15.5K. - +**Decimal symbol used in numbers**
+Decimal symbol used is always a dot, even if a comma is selected in the **Numbers** format settings in **Region** settings. For example, 15,5K is displayed as 15.5K. ## License Click the license link in the **Settings** menu to view the license agreement information for Windows Defender ATP. From cd59adc8976a5495296ec9902dc1a51ade24641c Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Thu, 14 Sep 2017 16:51:02 +0000 Subject: [PATCH 11/15] Merged PR 3191: Updated text, formatting, and content organization --- ...change-history-for-configure-windows-10.md | 9 ++-- .../configuration/windows-diagnostic-data.md | 48 +++++++------------ 2 files changed, 22 insertions(+), 35 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 08c50e3ed2..2a2a60a09d 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -29,11 +29,12 @@ New or changed topic | Description ## July 2017 | New or changed topic | Description | | --- | --- | -| [Add image for secondary tiles](start-secondary-tiles.md) | Added XML example for Edge secondary tiles and **ImportEdgeAssets** | -| [Customize and export Start layout](customize-and-export-start-layout.md) | Added explanation for tile behavior when the app is not installed | -| [Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md) | Added that Microsoft Edge is not supported for assigned access | +|[Windows 10, version 1703 Diagnostic Data](windows-diagnostic-data.md)|Updated categories and included diagnostic data.| +|[Add image for secondary tiles](start-secondary-tiles.md) | Added XML example for Edge secondary tiles and **ImportEdgeAssets** | +|[Customize and export Start layout](customize-and-export-start-layout.md) | Added explanation for tile behavior when the app is not installed | +|[Guidelines for choosing an app for assigned access](guidelines-for-assigned-access-app.md) | Added that Microsoft Edge is not supported for assigned access | |[Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md)|Updated several Appraiser events and added Census.Speech. | -| [Manage connections from Windows operating system components to Microsoft-services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Updated Date & Time and Windows spotlight sections. | +|[Manage connections from Windows operating system components to Microsoft-services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Updated Date & Time and Windows spotlight sections. | ## June 2017 diff --git a/windows/configuration/windows-diagnostic-data.md b/windows/configuration/windows-diagnostic-data.md index 611432abea..9f56ccf841 100644 --- a/windows/configuration/windows-diagnostic-data.md +++ b/windows/configuration/windows-diagnostic-data.md @@ -6,12 +6,14 @@ ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: high -author: brianlic-msft +author: eross-msft +ms.author: lizross +ms.date: 09/14/2017 --- # Windows 10, version 1703 Diagnostic Data -Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide relevant tips and recommendations to tailor Microsoft products to the user’s needs. This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). +Microsoft collects Windows diagnostic data to keep Windows up-to-date, secure, and operating properly. It also helps us improve Windows and, for users who have turned on “tailored experiences”, can be used to provide more relevant tips and recommendations to tailor Microsoft products to the user’s needs. This article describes all types diagnostic data collected by Windows at the Full telemetry level (inclusive of data collected at Basic), with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 10, version 1703 Basic level diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md). The data covered in this article is grouped into the following categories: @@ -21,10 +23,8 @@ The data covered in this article is grouped into the following categories: - Product and Service Usage data - Product and Service Performance data - Software Setup and Inventory data -- Content Consumption data -- Browsing, Search and Query data +- Browsing History data - Inking, Typing, and Speech Utterance data -- Licensing and Purchase data > [!NOTE] > The majority of diagnostic data falls into the first four categories. @@ -66,8 +66,15 @@ This type of data includes details about the health of the device, operating sys | Category Name | Description and Examples | | - | - | -| Device health and crash data | Information about the device and software health such as:
  • Error codes and error messages, name and ID of the app, and process reporting the error
  • DLL library predicted to be the source of the error -- xyz.dll
  • System generated files -- app or product logs and trace files to help diagnose a crash or hang
  • System settings such as registry keys
  • User generated files – .doc, .ppt, .csv files where they are indicated as a potential cause for a crash or hang
  • Details and counts of abnormal shutdowns, hangs, and crashes
  • Crash failure data – OS, OS component, driver, device, 1st and 3rd party app data
  • Crash and Hang dumps
    • The recorded state of the working memory at the point of the crash.
    • Memory in use by the kernel at the point of the crash.
    • Memory in use by the application at the point of the crash.
    • All the physical memory used by Windows at the point of the crash.
    • Class and function name within the module that failed.
    | -| Device performance and reliability data | Information about the device and software performance such as:
    • User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.
    • Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).
    • In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.
    • User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.
    • UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance
    • Disk footprint -- Free disk space, out of memory conditions, and disk score.
    • Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states
    • Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results
    • Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times
    • Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.
    • Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions
    • Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.
    • Diagnostic heartbeat – regular signal to validate the health of the diagnostics system
    +|Device health and crash data | Information about the device and software health such as:
    • Error codes and error messages, name and ID of the app, and process reporting the error
    • DLL library predicted to be the source of the error -- xyz.dll
    • System generated files -- app or product logs and trace files to help diagnose a crash or hang
    • System settings such as registry keys
    • User generated files – .doc, .ppt, .csv files where they are indicated as a potential cause for a crash or hang
    • Details and counts of abnormal shutdowns, hangs, and crashes
    • Crash failure data – OS, OS component, driver, device, 1st and 3rd party app data
    • Crash and Hang dumps
      • The recorded state of the working memory at the point of the crash.
      • Memory in use by the kernel at the point of the crash.
      • Memory in use by the application at the point of the crash.
      • All the physical memory used by Windows at the point of the crash.
      • Class and function name within the module that failed.
      | +|Device performance and reliability data | Information about the device and software performance such as:
      • User Interface interaction durations -- Start Menu display times, browser tab switch times, app launch and switch times, and Cortana and search performance and reliability.
      • Device on/off performance -- Device boot, shutdown, power on/off, lock/unlock times, and user authentication times (fingerprint and face recognition durations).
      • In-app responsiveness -- time to set alarm, time to fully render in-app navigation menus, time to sync reading list, time to start GPS navigation, time to attach picture MMS, and time to complete a Microsoft Store transaction.
      • User input responsiveness – onscreen keyboard invocation times for different languages, time to show auto-complete words, pen or touch latencies, latency for handwriting recognition to words, Narrator screen reader responsiveness, and CPU score.
      • UI and media performance and glitches/smoothness -- video playback frame rate, audio glitches, animation glitches (stutter when bringing up Start), graphics score, time to first frame, play/pause/stop/seek responsiveness, time to render PDF, dynamic streaming of video from OneDrive performance
      • Disk footprint -- Free disk space, out of memory conditions, and disk score.
      • Excessive resource utilization – components impacting performance or battery life through high CPU usage during different screen and power states
      • Background task performance -- download times, Windows Update scan duration, Windows Defender Antivirus scan times, disk defrag times, mail fetch times, service startup and state transition times, and time to index on-device files for search results
      • Peripheral and devices -- USB device connection times, time to connect to a wireless display, printing times, network availability and connection times (time to connect to Wi-Fi, time to get an IP address from DHCP etc.), smart card authentication times, automatic brightness environmental response times
      • Device setup -- first setup experience times (time to install updates, install apps, connect to network etc.), time to recognize connected devices (printer and monitor), and time to setup Microsoft Account.
      • Power and Battery life – power draw by component (Process/CPU/GPU/Display), hours of screen off time, sleep state transition details, temperature and thermal throttling, battery drain in a power state (screen off or screen on), processes and components requesting power use during screen off, auto-brightness details, time device is plugged into AC vs. battery, battery state transitions
      • Service responsiveness - Service URI, operation, latency, service success/error codes, and protocol.
      • Diagnostic heartbeat – regular signal to validate the health of the diagnostics system
      | +|Movies|Information about movie consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.
      • Video Width, height, color pallet, encoding (compression) type, and encryption type
      • Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth
      • URL for a specific two second chunk of content if there is an error
      • Full screen viewing mode details| +|Music & TV|Information about music and TV consumption on the device. This isn't intended to capture user viewing, listening or habits.
        • Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service
        • Content type (video, audio, surround audio)
        • Local media library collection statistics -- number of purchased tracks, number of playlists
        • Region mismatch -- User OS Region, and Xbox Live region
        | +|Reading|Information about reading consumption functionality on the device. This isn't intended to capture user viewing, listening or habits.
        • App accessing content and status and options used to open a Microsoft Store book
        • Language of the book
        • Time spent reading content
        • Content type and size details
        | +|Photos App|Information about photos usage on the device. This isn't intended to capture user viewing, listening or habits.
        • File source data -- local, SD card, network device, and OneDrive
        • Image & video resolution, video length, file sizes types and encoding
        • Collection view or full screen viewer use and duration of view
      | +|On-device file query | Information about local search activity on the device such as:
      • Kind of query issued and index type (ConstraintIndex, SystemIndex)
      • Number of items requested and retrieved
      • File extension of search result user interacted with
      • Launched item kind, file extension, index of origin, and the App ID of the opening app.
      • Name of process calling the indexer and time to service the query.
      • A hash of the search scope (file, Outlook, OneNote, IE history)
      • The state of the indices (fully optimized, partially optimized, being built)
      | +|Purchasing| Information about purchases made on the device such as:
      • Product ID, edition ID and product URI
      • Offer details -- price
      • Order requested date/time
      • Store client type -- web or native client
      • Purchase quantity and price
      • Payment type -- credit card type and PayPal
      | +|Entitlements | Information about entitlements on the device such as:
      • Service subscription status and errors
      • DRM and license rights details -- Groove subscription or OS volume license
      • Entitlement ID, lease ID, and package ID of the install package
      • Entitlement revocation
      • License type (trial, offline vs online) and duration
      • License usage session
      | ## Software Setup and Inventory data @@ -78,25 +85,13 @@ This type of data includes software installation and update information on the d | Installed Applications and Install History | Information about apps, drivers, update packages, or OS components installed on the device such as:
      • App, driver, update package, or component’s Name, ID, or Package Family Name
      • Product, SKU, availability, catalog, content, and Bundle IDs
      • OS component, app or driver publisher, language, version and type (Win32 or UWP)
      • Install date, method, and install directory, count of install attempts
      • MSI package code and product code
      • Original OS version at install time
      • User or administrator or mandatory installation/update
      • Installation type – clean install, repair, restore, OEM, retail, upgrade, and update
      | | Device update information | Information about Windows Update such as:
      • Update Readiness analysis of device hardware, OS components, apps, and drivers (progress, status, and results)
      • Number of applicable updates, importance, type
      • Update download size and source -- CDN or LAN peers
      • Delay upgrade status and configuration
      • OS uninstall and rollback status and count
      • Windows Update server and service URL
      • Windows Update machine ID
      • Windows Insider build details
      -## Content Consumption data +## Browsing History data -This type of data includes diagnostic details about Microsoft applications that provide media consumption functionality (such as Groove Music), and is not intended to capture user viewing, listening or reading habits. - -| Category Name | Examples | -| - | - | -| Movies | Information about movie consumption functionality on the device such as:
      • Video Width, height, color pallet, encoding (compression) type, and encryption type
      • Instructions for how to stream content for the user -- the smooth streaming manifest of chunks of content files that must be pieced together to stream the content based on screen resolution and bandwidth
      • URL for a specific two second chunk of content if there is an error
      • Full screen viewing mode details
      | -| Music & TV | Information about music and TV consumption on the device such as:
      • Service URL for song being downloaded from the music service – collected when an error occurs to facilitate restoration of service
      • Content type (video, audio, surround audio)
      • Local media library collection statistics -- number of purchased tracks, number of playlists
      • Region mismatch -- User OS Region, and Xbox Live region
      | -| Reading | Information about reading consumption functionality on the device such as:
      • App accessing content and status and options used to open a Microsoft Store book
      • Language of the book
      • Time spent reading content
      • Content type and size details
      | -| Photos App | Information about photos usage on the device such as:
      • File source data -- local, SD card, network device, and OneDrive
      • Image & video resolution, video length, file sizes types and encoding
      • Collection view or full screen viewer use and duration of view
      - -## Browsing, Search and Query data - -This type of data includes details about web browsing, search and query activity in the Microsoft browsers and Cortana, and local file searches on the device. +This type of data includes details about web browsing in the Microsoft browsers. | Category Name | Description and Examples | | - | - | | Microsoft browser data | Information about Address bar and search box performance on the device such as:
      • Text typed in address bar and search box
      • Text selected for Ask Cortana search
      • Service response time
      • Auto-completed text if there was an auto-complete
      • Navigation suggestions provided based on local history and favorites
      • Browser ID
      • URLs (which may include search terms)
      • Page title
      | -| On-device file query | Information about local search activity on the device such as:
      • Kind of query issued and index type (ConstraintIndex, SystemIndex)
      • Number of items requested and retrieved
      • File extension of search result user interacted with
      • Launched item kind, file extension, index of origin, and the App ID of the opening app.
      • Name of process calling the indexer and time to service the query.
      • A hash of the search scope (file, Outlook, OneNote, IE history)
      • The state of the indices (fully optimized, partially optimized, being built)
      | ## Inking Typing and Speech Utterance data @@ -105,13 +100,4 @@ This type of data gathers details about the voice, inking, and typing input feat | Category Name | Description and Examples | | - | - | -| Voice, inking, and typing | Information about voice, inking and typing features such as:
      • Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used
      • Pen gestures (click, double click, pan, zoom, rotate)
      • Palm Touch x,y coordinates
      • Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate
      • Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as names, email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.
      • Text of speech recognition results -- result codes and recognized text
      • Language and model of the recognizer, System Speech language
      • App ID using speech features
      • Whether user is known to be a child
      • Confidence and Success/Failure of speech recognition
      | - -## ​​​​​​​Licensing and Purchase data - -This type of data includes diagnostic details about the purchase and entitlement activity on the device. - -| Category Name | Data Examples | -| - | - | -| Purchase history | Information about purchases made on the device such as:
      • Product ID, edition ID and product URI
      • Offer details -- price
      • Order requested date/time
      • Store client type -- web or native client
      • Purchase quantity and price
      • Payment type -- credit card type and PayPal
      | -| Entitlements | Information about entitlements on the device such as:
      • Service subscription status and errors
      • DRM and license rights details -- Groove subscription or OS volume license
      • Entitlement ID, lease ID, and package ID of the install package
      • Entitlement revocation
      • License type (trial, offline vs online) and duration
      • License usage session
      | \ No newline at end of file +| Voice, inking, and typing | Information about voice, inking and typing features such as:
      • Type of pen used (highlighter, ball point, pencil), pen color, stroke height and width, and how long it is used
      • Pen gestures (click, double click, pan, zoom, rotate)
      • Palm Touch x,y coordinates
      • Input latency, missed pen signals, number of frames, strokes, first frame commit time, sample rate
      • Ink strokes written, text before and after the ink insertion point, recognized text entered, Input language - processed to remove identifiers, sequencing information, and other data (such as email addresses and numeric values) which could be used to reconstruct the original content or associate the input to the user.
      • Text input from Windows Mobile on-screen keyboards except from password fields and private sessions - processed to remove identifiers, sequencing information, and other data (such as email addresses, and numeric values) which could be used to reconstruct the original content or associate the input to the user.
      • Text of speech recognition results -- result codes and recognized text
      • Language and model of the recognizer, System Speech language
      • App ID using speech features
      • Whether user is known to be a child
      • Confidence and Success/Failure of speech recognition
      | \ No newline at end of file From ec31357472af9ebee6d163a162a7e44293e46ffc Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 14 Sep 2017 09:59:08 -0700 Subject: [PATCH 12/15] Add dbghost and dbgsvc to block list --- .../device-guard/deploy-code-integrity-policies-steps.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index 9f7bef9162..be6f4de127 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -36,6 +36,8 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you - bginfo.exe[1] - cdb.exe - csi.exe +- dbghost.exe +- dbgsvc.exe - dnx.exe - fsi.exe - fsiAnyCpu.exe @@ -110,7 +112,9 @@ Microsoft recommends that you block the following Microsoft-signed applications - + + + @@ -177,6 +181,8 @@ Microsoft recommends that you block the following Microsoft-signed applications + + From baa5a1b402815d3f2f035ffb29b6f1045e6cb351 Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Thu, 14 Sep 2017 17:20:24 +0000 Subject: [PATCH 13/15] Merged PR 3193: Merge Olympia enrollment methods into a single topic --- windows/deployment/TOC.md | 2 - .../enrollment-keep-current-edition.md | 44 ---------- .../enrollment-upgrade-to-enterprise.md | 57 ------------ .../olympia/olympia-enrollment-guidelines.md | 87 ++++++++++++++++++- 4 files changed, 84 insertions(+), 106 deletions(-) delete mode 100644 windows/deployment/update/olympia/enrollment-keep-current-edition.md delete mode 100644 windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index b070057f1d..3d057730dc 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -222,8 +222,6 @@ #### [Windows Insider Program for Business using Azure Active Directory](update/waas-windows-insider-for-business-aad.md) #### [Windows Insider Program for Business Frequently Asked Questions](update/waas-windows-insider-for-business-faq.md) #### [Olympia Corp enrollment](update/olympia/olympia-enrollment-guidelines.md) -##### [Keep your current Windows 10 edition](update/olympia/enrollment-keep-current-edition.md) -##### [Upgrade your Windows 10 edition from Pro to Enterprise](update/olympia/enrollment-upgrade-to-enterprise.md) ### [Change history for Update Windows 10](update/change-history-for-update-windows-10.md) ## Windows Analytics diff --git a/windows/deployment/update/olympia/enrollment-keep-current-edition.md b/windows/deployment/update/olympia/enrollment-keep-current-edition.md deleted file mode 100644 index b0016c44ee..0000000000 --- a/windows/deployment/update/olympia/enrollment-keep-current-edition.md +++ /dev/null @@ -1,44 +0,0 @@ ---- -title: Keep your current Windows 10 edition -description: Olympia Corp enrollment - Keep your current Windows 10 edition -ms.author: nibr -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: nickbrower -ms.date: 09/01/2017 ---- - -# Olympia Corp enrollment - -## Keep your current Windows 10 edition - -1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). - - ![Settings -> Accounts](images/1-1.png) - -2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. - -3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. - - ![Set up a work or school account](images/1-3.png) - -4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. - - > [!NOTE] - > Passwords should contain 8-16 characters, including at least one special character or number. - - ![Update your password](images/1-4.png) - -5. Read the **Terms and Conditions**. Click **Accept** to participate in the program. - -6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details. - -7. Create a PIN for signing into your Olympia corporate account. - -8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. - - > [!NOTE] - > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). - -9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. diff --git a/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md b/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md deleted file mode 100644 index 6643971428..0000000000 --- a/windows/deployment/update/olympia/enrollment-upgrade-to-enterprise.md +++ /dev/null @@ -1,57 +0,0 @@ ---- -title: Upgrade your Windows 10 edition from Pro to Enterprise -description: Olympia Corp enrollment - Upgrade your Windows 10 edition from Pro to Enterprise -ms.author: nibr -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: nickbrower -ms.date: 09/01/2017 ---- - -# Olympia Corp enrollment - -## Upgrade your Windows 10 edition from Pro to Enterprise - -1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). - - ![Settings -> Accounts](images/1-1.png) - -2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. - -3. Click **Connect**, then click **Join this device to Azure Active Directory**. - - ![Update your password](images/2-3.png) - -4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. - - ![Set up a work or school account](images/2-4.png) - -5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. - - > [!NOTE] - > Passwords should contain 8-16 characters, including at least one special character or number. - - ![Update your password](images/2-5.png) - -6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. - -7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details. - -8. Create a PIN for signing into your Olympia corporate account. - -9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. - -10. Restart your PC. - -11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*. - -12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. - - > [!NOTE] - > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). - -13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. - -\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia. - diff --git a/windows/deployment/update/olympia/olympia-enrollment-guidelines.md b/windows/deployment/update/olympia/olympia-enrollment-guidelines.md index 17b87bd7b0..fddd959017 100644 --- a/windows/deployment/update/olympia/olympia-enrollment-guidelines.md +++ b/windows/deployment/update/olympia/olympia-enrollment-guidelines.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 09/01/2017 +ms.date: 09/14/2017 --- # Olympia Corp enrollment guidelines @@ -17,6 +17,87 @@ As part of Windows Insider Lab for Enterprise, you can upgrade to Windows 10 Ent Choose one of the following two enrollment options: -1. [Keep your current Windows 10 edition](./enrollment-keep-current-edition.md) +1. [Keep your current Windows 10 edition](#enrollment-keep-current-edition) + +2. [Upgrade your Windows 10 edition from Pro to Enterprise](#enrollment-upgrade-to-enterprise) + + + +## Keep your current Windows 10 edition + +1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). + + ![Settings -> Accounts](images/1-1.png) + +2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. + +3. Click **Connect** and enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. + + ![Set up a work or school account](images/1-3.png) + +4. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. + + > [!NOTE] + > Passwords should contain 8-16 characters, including at least one special character or number. + + ![Update your password](images/1-4.png) + +5. Read the **Terms and Conditions**. Click **Accept** to participate in the program. + +6. If this is the first time you are logging in, please fill in the additional information to help you retrieve your account details. + +7. Create a PIN for signing into your Olympia corporate account. + +8. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. + + > [!NOTE] + > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). + +9. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. + + + +## Upgrade your Windows 10 edition from Pro to Enterprise + +1. Go to **Start > Settings > Accounts > Access work or school**. To see this setting, you need to have administrator rights to your PC (see [local administrator](https://support.microsoft.com/en-us/instantanswers/5de907f1-f8ba-4fd9-a89d-efd23fee918c/create-a-local-user-or-administrator-account-in-windows-10)). + + ![Settings -> Accounts](images/1-1.png) + +2. If you are already connected to a domain, click the existing account and then click **Disconnect**. Click **Restart Later**. + +3. Click **Connect**, then click **Join this device to Azure Active Directory**. + + ![Update your password](images/2-3.png) + +4. Enter your **Olympia corporate account** (e.g., username@olympia.windows.com). Click **Next**. + + ![Set up a work or school account](images/2-4.png) + +5. Enter the temporary password that was sent to you. Click **Sign in**. Follow the instructions to set a new password. + + > [!NOTE] + > Passwords should contain 8-16 characters, including at least one special character or number. + + ![Update your password](images/2-5.png) + +6. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. + +7. If this is the first time you are signing in, please fill in the additional information to help you retrieve your account details. + +8. Create a PIN for signing into your Olympia corporate account. + +9. When asked to make sure this is your organization, verify that the information is correct. If so, click **Join**. + +10. Restart your PC. + +11. In the sign-in screen, choose **Other User** and sign in with your **Olympia corporate account**. Your PC will upgrade to Windows 10 Enterprise*. + +12. Go to **Start > Settings > Update & Security > Windows Insider Program**. Click on the current Windows Insider account, and click **Change**. Sign in with your **Olympia corporate account**. + + > [!NOTE] + > To complete this step, you will need to register your account with the [Windows Insider Program for Business](https://insider.windows.com/ForBusiness). + +13. Open the **Feedback Hub**, and sign in with your **Olympia corporate account**. + +\* Please note that your Windows 10 Enterprise license will not be renewed if your PC is not connected to Olympia. -2. [Upgrade your Windows 10 edition from Pro to Enterprise](./enrollment-upgrade-to-enterprise.md) From abfb498772c4d82ca6dc6a159922c9776424cab0 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 14 Sep 2017 22:30:30 +0000 Subject: [PATCH 14/15] Merged PR 3205: Add link in parent to child Add link to parent topic pointing to important procedure in child topic --- .../deployment/windows-10-enterprise-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-enterprise-subscription-activation.md b/windows/deployment/windows-10-enterprise-subscription-activation.md index c767d18075..9f6b5c02a8 100644 --- a/windows/deployment/windows-10-enterprise-subscription-activation.md +++ b/windows/deployment/windows-10-enterprise-subscription-activation.md @@ -102,7 +102,7 @@ changepk.exe /ProductKey %ProductKey% ### Obtaining an Azure AD licence Enterprise Agreement/Software Assurance (EA/SA): -- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). +- Organizations with a traditional EA must order a $0 SKU, process e-mails sent to the license administrator for the company, and assign licenses using Azure AD (ideally to groups using the new Azure AD Premium feature for group assignment). For more information, see [Enabling Subscription Activation with an existing EA](https://docs.microsoft.com/en-us/windows/deployment/deploy-enterprise-licenses#enabling-subscription-activation-with-an-existing-ea). - The license administrator can assign seats to Azure AD users with the same process that is used for O365. - New EA/SA Windows Enterprise customers can acquire both an SA subscription and an associated $0 cloud subscription. From 6376a76a3d5f40e7a5393103e3298f24df9128c6 Mon Sep 17 00:00:00 2001 From: John Tobin Date: Thu, 14 Sep 2017 16:06:58 -0700 Subject: [PATCH 15/15] Correct Cred Guard CI File Rule for KD_KMCI --- .../device-guard/deploy-code-integrity-policies-steps.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md index be6f4de127..8b11311fb6 100644 --- a/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md +++ b/windows/device-security/device-guard/deploy-code-integrity-policies-steps.md @@ -108,6 +108,7 @@ Microsoft recommends that you block the following Microsoft-signed applications + @@ -167,7 +168,7 @@ Microsoft recommends that you block the following Microsoft-signed applications - +