mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-18 11:53:37 +00:00
Merge branch 'master' into aljupudi-branch01
This commit is contained in:
Alekhya Jupudi
@ -31,7 +31,7 @@ The order of apps in the XML file dictates the order of pinned apps on the taskb
|
||||
|
||||
The following example shows how apps will be pinned: Windows default apps to the left (blue circle), apps pinned by the user in the center (orange triangle), and apps that you pin using the XML file to the right (green square).
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Configure taskbar (general)
|
||||
@ -142,11 +142,11 @@ The `<CustomTaskbarLayoutCollection>` section will append listed apps to the tas
|
||||
```
|
||||
**Before:**
|
||||
|
||||
|
||||
|
||||
|
||||
**After:**
|
||||
|
||||
|
||||
|
||||
|
||||
## Remove default apps and add your own
|
||||
|
||||
@ -175,11 +175,11 @@ If you only want to remove some of the default pinned apps, you would use this m
|
||||
```
|
||||
**Before:**
|
||||
|
||||
|
||||
|
||||
|
||||
**After:**
|
||||
|
||||
|
||||
|
||||
|
||||
## Remove default apps
|
||||
|
||||
@ -250,15 +250,15 @@ The following example shows you how to configure taskbars by country or region.
|
||||
|
||||
When the preceding example XML file is applied, the resulting taskbar for computers in the US or UK:
|
||||
|
||||
|
||||
|
||||
|
||||
The resulting taskbar for computers in Germany or France:
|
||||
|
||||
|
||||
|
||||
|
||||
The resulting taskbar for computers in any other country region:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
> [!NOTE]
|
||||
|
||||
@ -19,7 +19,7 @@ Cortana integration is a Preview feature that's available for your test or dev e
|
||||
>[!NOTE]
|
||||
>For more info about Dynamics CRM integration, how to turn on Cortana, and how to provide feedback, see [Preview feature: Set up Cortana integration](https://go.microsoft.com/fwlink/p/?LinkId=746819).
|
||||
|
||||
|
||||
|
||||
|
||||
## Turn on Cortana with Dynamics CRM in your organization
|
||||
You must be a CRM administrator to turn on and use Preview features. For more info about what Preview features are and how to use them, see [What are Preview features and how do I enable them](https://go.microsoft.com/fwlink/p/?LinkId=746817)?
|
||||
@ -43,7 +43,7 @@ You must tell your employees to turn on Cortana, before they’ll be able to use
|
||||
|
||||
2. Click on **Connected Services**, click **Dynamics CRM**, and then click **Connect**.
|
||||
|
||||
|
||||
|
||||
|
||||
The employee can also disconnect by clicking **Disconnect** from the **Dynamics CRM** screen.
|
||||
|
||||
|
||||
@ -48,11 +48,11 @@ Before you can start this testing scenario, you must first set up your test envi
|
||||
|
||||
2. Expand the left rail by clicking the **Show the navigation pane** icon.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Click **Get Data** from the left-hand navigation in Power BI.
|
||||
|
||||
|
||||
|
||||
|
||||
4. Click **Samples** from the **Content Pack Library** area of the **Get Data** screen.
|
||||
|
||||
@ -60,23 +60,23 @@ Before you can start this testing scenario, you must first set up your test envi
|
||||
|
||||
5. Click **Retail Analysis Sample**, and then click **Connect**.
|
||||
|
||||
|
||||
|
||||
|
||||
The sample data is imported and you’re returned to the **Power BI** screen.
|
||||
|
||||
6. Click **Dashboards** from the left pane of the **Power BI** screen, and then click **Retail Analysis Sample**.
|
||||
|
||||
|
||||
|
||||
|
||||
7. In the upper right-hand menu, click the **Settings** icon, and then click **Settings**.
|
||||
|
||||
|
||||
|
||||
|
||||
8. Click the **Datasets** tab, and then pick the **Retail Analysis Sample** dataset from the list.
|
||||
|
||||
9. Click **Q&A and Cortana**, check the **Allow Cortana to access this dataset** box, and then click **Apply**.
|
||||
|
||||
|
||||
|
||||
|
||||
>[!NOTE]
|
||||
>It can take up to 30 minutes for a new dataset to appear for Power BI and Cortana. Logging in and out of Windows, or otherwise restarting Cortana, causes the new content to appear immediately.<p>If you enable a dataset for Cortana, and that dataset is part of a content pack you own, you’ll need to re-publish for your colleagues to also use it with Cortana.
|
||||
@ -92,7 +92,7 @@ After you’ve finished creating your Answer Page, you can continue to the inclu
|
||||
**To create a custom sales data Answer Page for Cortana**
|
||||
1. In Power BI, click **My Workspace**, click **Create**, and then click **Report**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. In the **Create Report** screen, click the **Retail Analysis Sample**, and then click **Create**.
|
||||
|
||||
@ -100,11 +100,11 @@ After you’ve finished creating your Answer Page, you can continue to the inclu
|
||||
|
||||
3. In the **Visualizations** pane, click the paint roller icon, expand **Page Size**, and then pick **Cortana** from the **Type** drop-down list.
|
||||
|
||||
|
||||
|
||||
|
||||
4. In the **Fields** pane, click to expand **Sales**, expand **This year sales**, and then add both **Value** and **Goal**.
|
||||
|
||||
|
||||
|
||||
|
||||
The automatically generated graph is added to your blank report. You have the option to change colors, add borders, add additional visualizations, and modify this page so that it answers the question about sales data as precisely, and in as custom a way, as you want. You just need to make sure that it all stays within the page borders.
|
||||
|
||||
@ -112,7 +112,7 @@ After you’ve finished creating your Answer Page, you can continue to the inclu
|
||||
|
||||
The alternate names help Cortana to know what questions to look for and when to show this report. To also improve your results, you should avoid using the names of your report columns.
|
||||
|
||||
|
||||
|
||||
|
||||
6. Click **File**, click **Save as**, and save the report as _Sales data 2016_.
|
||||
|
||||
@ -128,13 +128,13 @@ Now that you’ve set up your device, you can use Cortana to show your info from
|
||||
|
||||
Cortana shows you the available results.
|
||||
|
||||
|
||||
|
||||
|
||||
3. In the **Power BI** area, click **This year in sales – in Retail Analysis Sample**.
|
||||
|
||||
Cortana returns your custom report.
|
||||
|
||||
|
||||
|
||||
|
||||
>[!NOTE]
|
||||
>For more info about how to connect your own data, build your own custom Power BI cards and Answer Pages for Cortana, and how to share the cards with everyone in your organization, see [Use Power BI to create a custom Answer Page for Cortana](https://powerbi.microsoft.com/documentation/powerbi-service-cortana-desktop-entity-cards/).
|
||||
|
||||
@ -49,7 +49,7 @@ While these aren't line-of-business apps, we've worked to make sure to implement
|
||||
|
||||
2. Click on **Connected Services**, click **Uber**, and then click **Connect**.
|
||||
|
||||
|
||||
|
||||
|
||||
**To use the voice-enabled commands with Cortana**
|
||||
1. Click on the **Cortana** icon in the taskbar, and then click the **Microphone** icon (to the right of the **Search** box).
|
||||
|
||||
@ -161,7 +161,7 @@ When you have the Start layout that you want your users to see, use the [Export-
|
||||
|
||||
A partial Start layout enables you to add one or more customized tile groups to users' Start screens or menus, while still allowing users to make changes to other parts of the Start layout. All groups that you add are *locked*, meaning users cannot change the contents of those tile groups, however users can change the location of those groups. Locked groups are identified with an icon, as shown in the following image.
|
||||
|
||||
|
||||
|
||||
|
||||
When a partial Start layout is applied for the first time, the new groups are added to the users' existing Start layouts. If an app tile is in both an existing group and in a new locked group, the duplicate app tile is removed from the existing (unlocked) group.
|
||||
|
||||
|
||||
@ -92,13 +92,13 @@ This procedure adds the customized Start and taskbar layout to the user configur
|
||||
|
||||
2. Go to **User Configuration** or **Computer Configuration** > **Administrative Templates** >**Start Menu and Taskbar**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Right-click **Start Layout** in the right pane, and click **Edit**.
|
||||
|
||||
This opens the **Start Layout** policy settings.
|
||||
|
||||
|
||||
|
||||
|
||||
4. Enter the following settings, and then click **OK**:
|
||||
|
||||
|
||||
@ -87,7 +87,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
|
||||
7. Open the customizations.xml file in a text editor. The **<Customizations>** section will look like this:
|
||||
|
||||
|
||||
|
||||
|
||||
7. Replace **layout.xml** with the text from the layout.xml file, [with markup characters replaced with escape characters](#escape).
|
||||
|
||||
|
||||
@ -50,7 +50,7 @@ To get the names and AUMIDs for all apps installed for the current user, perform
|
||||
|
||||
3. In the **Choose Details** window, select **AppUserModelId**, and then select **OK**. (You might need to change the **View** setting from **Tiles** to **Details**.)
|
||||
|
||||
|
||||
|
||||
|
||||
## To find the AUMID of an installed app for the current user by using the registry
|
||||
|
||||
|
||||
@ -24,13 +24,13 @@ Some desktop devices in an enterprise serve a special purpose, such as a PC in t
|
||||
|
||||
A single-app kiosk is ideal for public use. Using [Shell Launcher](kiosk-shelllauncher.md), you can configure a kiosk device that runs a Windows desktop application as the user interface. The application that you specify replaces the default shell (explorer.exe) that usually runs when a user logs on. This type of single-app kiosk does not run above the lockscreen.
|
||||
|
||||
|
||||
|
||||
|
||||
- **A multi-app kiosk**, which runs one or more apps from the desktop. People using the kiosk see a customized Start that shows only the tiles for the apps that are allowed. With this approach, you can configure a locked-down experience for different account types.
|
||||
|
||||
A multi-app kiosk is appropriate for devices that are shared by multiple people. When you configure a multi-app kiosk, [specific policies are enforced](kiosk-policies.md) that will affect **all** non-administrator users on the device.
|
||||
|
||||
|
||||
|
||||
|
||||
Kiosk configurations are based on **Assigned Access**, a feature in Windows 10 that allows an administrator to manage the user's experience by limiting the application entry points exposed to the user.
|
||||
|
||||
@ -38,25 +38,25 @@ There are several kiosk configuration methods that you can choose from, dependin
|
||||
|
||||
- **Which type of app will your kiosk run?**
|
||||
|
||||
|
||||
|
||||
|
||||
Your kiosk can run a Universal Windows Platform (UWP) app or a Windows desktop application. For [digital signage](setup-digital-signage.md), simply select a digital sign player as your kiosk app. [Check out the guidelines for kiosk apps.](guidelines-for-assigned-access-app.md)
|
||||
|
||||
- **Which type of kiosk do you need?**
|
||||
|
||||
|
||||
|
||||
|
||||
If you want your kiosk to run a single app for anyone to see or use, consider a single-app kiosk that runs either a [Universal Windows Platform (UWP) app](#uwp) or a [Windows desktop application](#classic). For a kiosk that people can sign in to with their accounts or that runs more than one app, choose [a multi-app kiosk](#desktop).
|
||||
|
||||
- **Which edition of Windows 10 will the kiosk run?**
|
||||
|
||||
|
||||
|
||||
|
||||
All of the configuration methods work for Windows 10 Enterprise and Education; some of the methods work for Windows 10 Pro. Kiosk mode is not available on Windows 10 Home.
|
||||
|
||||
- **Which type of user account will be the kiosk account?**
|
||||
|
||||
|
||||
|
||||
|
||||
The kiosk account can be a local standard user account, a local administrator account, a domain account, or an Azure Active Directory (Azure AD) account, depending on the method that you use to configure the kiosk. If you want people to sign in and authenticate on the device, you should use a multi-app kiosk configuration. The single-app kiosk configuration doesn't require people to sign in to the device, although they can sign in to the kiosk app if you select an app that has a sign-in method.
|
||||
|
||||
|
||||
@ -54,7 +54,7 @@ Disable removable media. | Go to **Group Policy Editor** > **Computer Con
|
||||
|
||||
Logs can help you [troubleshoot issues](./kiosk-troubleshoot.md) kiosk issues. Logs about configuration and runtime issues can be obtained by enabling the **Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational** channel, which is disabled by default.
|
||||
|
||||
|
||||
|
||||
|
||||
## Automatic logon
|
||||
|
||||
@ -257,7 +257,7 @@ A single-app kiosk configuration runs an app above the lock screen. It doesn't w
|
||||
|
||||
When you connect to a VM configured as a single-app kiosk, you need a *basic* session rather than an enhanced session. In the following image, notice that **Enhanced session** is not selected in the **View** menu; that means it's a basic session.
|
||||
|
||||
|
||||
|
||||
|
||||
To connect to a VM in a basic session, do not select **Connect** in the connection dialog, as shown in the following image, but instead, select the **X** button in the upper-right corner to cancel the dialog.
|
||||
|
||||
|
||||
@ -137,7 +137,7 @@ The OMA-URI path is `./Device/Vendor/MSFT/AssignedAccess/ShellLauncher`.
|
||||
|
||||
For the value, you can select data type `String` and paste the desired configuration file content into the value box. If you wish to upload the xml instead of pasting the content, choose data type `String (XML file)`.
|
||||
|
||||
|
||||
|
||||
|
||||
After you configure the profile containing the custom Shell Launcher setting, select **All Devices** or selected groups of devices to apply the profile to. Don't assign the profile to users or user groups.
|
||||
|
||||
|
||||
@ -24,7 +24,7 @@ ms.topic: article
|
||||
|
||||
A single-app kiosk uses the Assigned Access feature to run a single app above the lockscreen. When the kiosk account signs in, the app is launched automatically. The person using the kiosk cannot do anything on the device outside of the kiosk app.
|
||||
|
||||
|
||||
|
||||
|
||||
>[!IMPORTANT]
|
||||
>[User account control (UAC)](/windows/security/identity-protection/user-account-control/user-account-control-overview) must be turned on to enable kiosk mode.
|
||||
@ -66,7 +66,7 @@ When your kiosk is a local device that is not managed by Active Directory or Azu
|
||||
|
||||
- If you do not want the kiosk account signed in automatically when the device restarts, you must change the default setting before you configure the device as a kiosk. Sign in with the account that you will assign as the kiosk account, go to **Settings** > **Accounts** > **Sign-in options**, and toggle the **Use my sign-in info to automatically finish setting up my device after an update or restart** setting to **Off**. After you change the setting, you can apply the kiosk configuration to the device.
|
||||
|
||||
|
||||
|
||||
|
||||
### Instructions for Windows 10, version 1809
|
||||
|
||||
@ -98,7 +98,7 @@ To remove assigned access, select the account tile on the **Set up a kiosk** pag
|
||||
|
||||
When you set up a kiosk (also known as *assigned access*) in **Settings** for Windows 10, version 1803 and earlier, you must select an existing local standard user account. [Learn how to create a local standard user account.](https://support.microsoft.com/help/4026923/windows-create-a-local-user-or-administrator-account-in-windows-10)
|
||||
|
||||
|
||||
|
||||
|
||||
**To set up assigned access in PC settings**
|
||||
|
||||
@ -131,7 +131,7 @@ To remove assigned access, choose **Turn off assigned access and sign out of the
|
||||
>
|
||||
>Account type: Local standard user
|
||||
|
||||
|
||||
|
||||
|
||||
You can use any of the following PowerShell cmdlets to set up assigned access on multiple devices.
|
||||
|
||||
@ -191,7 +191,7 @@ Clear-AssignedAccess
|
||||
>
|
||||
>Account type: Local standard user, Active Directory
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
>[!IMPORTANT]
|
||||
|
||||
@ -53,7 +53,7 @@ For example:
|
||||
3. Verify that the configuration XML file is authored and formatted correctly. Correct any configuration errors, then create and apply a new provisioning package. Sign out and sign in again to check the new configuration.
|
||||
4. Additional logs about configuration and runtime issues can be obtained by enabling the **Applications and Services Logs\Microsoft\Windows\AssignedAccess\Operational** channel, which is disabled by default.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Automatic logon issues
|
||||
|
||||
@ -34,7 +34,7 @@ AppLocker rules are organized into collections based on file format. If no AppLo
|
||||
|
||||
This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy.
|
||||
|
||||
|
||||
|
||||
|
||||
## Install apps
|
||||
|
||||
@ -50,13 +50,13 @@ After you install the desired apps, set up AppLocker rules to only allow specifi
|
||||
|
||||
2. Go to **Security Settings** > **Application Control Policies** > **AppLocker**, and select **Configure rule enforcement**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Check **Configured** under **Executable rules**, and then click **OK**.
|
||||
|
||||
4. Right-click **Executable Rules** and then click **Automatically generate rules**.
|
||||
|
||||
|
||||
|
||||
|
||||
5. Select the folder that contains the apps that you want to permit, or select C:\\ to analyze all apps.
|
||||
|
||||
@ -68,7 +68,7 @@ After you install the desired apps, set up AppLocker rules to only allow specifi
|
||||
|
||||
9. Read the message and click **Yes**.
|
||||
|
||||
|
||||
|
||||
|
||||
10. (optional) If you want a rule to apply to a specific set of users, right-click on the rule and select **Properties**. Then use the dialog to choose a different user or group of users.
|
||||
|
||||
|
||||
@ -81,7 +81,7 @@ Let's start by looking at the basic structure of the XML file.
|
||||
|
||||
- A profile has no effect if it’s not associated to a config section.
|
||||
|
||||
|
||||
|
||||
|
||||
You can start your file by pasting the following XML (or any other examples in this topic) into a XML editor, and saving the file as *filename*.xml. Each section of this XML is explained in this topic. You can see a full sample version in the [Assigned access XML reference.](kiosk-xml.md)
|
||||
|
||||
@ -271,7 +271,7 @@ This example pins Groove Music, Movies & TV, Photos, Weather, Calculator, Paint,
|
||||
>[!NOTE]
|
||||
>If an app is not installed for the user but is included in the Start layout XML, the app will not be shown on the Start screen.
|
||||
|
||||
|
||||
|
||||
|
||||
##### Taskbar
|
||||
|
||||
@ -494,7 +494,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
|
||||
7. In the center pane, click **Browse** to locate and select the assigned access configuration XML file that you created.
|
||||
|
||||
|
||||
|
||||
|
||||
8. (**Optional**: If you want to apply the provisioning package after device initial setup and there is an admin user already available on the kiosk device, skip this step.) Create an admin user account in **Runtime settings** > **Accounts** > **Users**. Provide a **UserName** and **Password**, and select **UserGroup** as **Administrators**. With this account, you can view the provisioning status and logs if needed.
|
||||
|
||||
@ -544,7 +544,7 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. Insert the USB drive. Windows Setup will recognize the drive and ask if you want to set up the device. Select **Set up**.
|
||||
|
||||
@ -552,11 +552,11 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
3. The next screen asks you to select a provisioning source. Select **Removable Media** and tap **Next**.
|
||||
|
||||
|
||||
|
||||
|
||||
4. Select the provisioning package (\*.ppkg) that you want to apply, and tap **Next**.
|
||||
|
||||
|
||||
|
||||
|
||||
5. Select **Yes, add it**.
|
||||
|
||||
@ -570,7 +570,7 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
>[!NOTE]
|
||||
>if your provisioning package doesn’t include the assigned access user account creation, make sure the account you specified in the multi-app configuration XML exists on the device.
|
||||
|
||||
|
||||
|
||||
|
||||
<span id="alternate-methods" />
|
||||
### Use MDM to deploy the multi-app configuration
|
||||
|
||||
@ -46,7 +46,7 @@ You can manage your Wi-Fi Sense settings by using Group Policy and your Group Po
|
||||
|
||||
1. Open your Group Policy editor and go to the `Computer Configuration\Administrative Templates\Network\WLAN Service\WLAN Settings\Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services` setting.
|
||||
|
||||
|
||||
|
||||
|
||||
2. Turn Wi-Fi Sense on (enabled) or off (disabled), based on your company's environment.
|
||||
|
||||
@ -60,7 +60,7 @@ You can manage your Wi-Fi Sense settings by using registry keys and the Registry
|
||||
2. Create and set a new **DWORD (32-bit) Value** named, **AutoConnectAllowedOEM**, with a **Value data** of **0 (zero)**.
|
||||
<p>Setting this value to <strong>0</strong> turns off Wi-Fi Sense and all Wi-Fi sense features. When turned off, the Wi-Fi Sense settings still appear on the <strong>Wi-Fi Settings</strong> screen, but can't be controlled by the employee and all of the Wi-Fi Sense features are turned off. For more info, see <a href="/troubleshoot/windows-client/networking/configure-wifi-sense-and-paid-wifi-service" data-raw-source="[How to configure Wi-Fi Sense on Windows 10 in an enterprise](/troubleshoot/windows-client/networking/configure-wifi-sense-and-paid-wifi-service)">How to configure Wi-Fi Sense on Windows 10 in an enterprise</a>.
|
||||
|
||||
|
||||
|
||||
|
||||
### Using the Windows Provisioning settings
|
||||
You can manage your Wi-Fi Sense settings by changing the Windows provisioning setting, **WiFISenseAllowed**.
|
||||
@ -81,7 +81,7 @@ If your company still uses Unattend, you can manage your Wi-Fi Sense settings by
|
||||
### How employees can change their own Wi-Fi Sense settings
|
||||
If you don’t turn off the ability for your employees to use Wi-Fi Sense, they can turn it on locally by selecting **Settings > Network & Internet > Wi-Fi > Manage Wi-Fi settings**, and then turning on **Connect to suggested open hotspots**.
|
||||
|
||||
|
||||
|
||||
|
||||
**Important**<br>The service that was used to share networks with Facebook friends, Outlook.com contacts, or Skype contacts is no longer available. This means:
|
||||
|
||||
|
||||
@ -62,7 +62,7 @@ The settings for the Default role and other roles must be listed in your XML fil
|
||||
|
||||
## Action Center
|
||||
|
||||
|
||||
|
||||
|
||||
The Action Center setting controls whether the user can open the Action Center on the device. When the Action Center is disabled, notifications on the lockscreen and toasts are also disabled. You can use optional attributes with the Action Center element to change that behavior for either notifications, toasts, or both.
|
||||
|
||||
@ -92,7 +92,7 @@ The following example is a complete lockdown XML file that disables Action Cente
|
||||
|
||||
## Apps
|
||||
|
||||
|
||||
|
||||
|
||||
The Apps setting serves as an allow list and specifies the applications that will be available in the All apps list. Apps that are not included in this setting are hidden from the user and blocked from running.
|
||||
|
||||
@ -110,7 +110,7 @@ The following example makes Outlook Calendar available on the device.
|
||||
|
||||
When you list an app, you can also set the app to be pinned to the Start screen by specifying the tile size and location. Tip: draw a grid and mark your app tiles on it to make sure you get the result you want. The width (X axis) in the following example is the limit for Windows 10 Mobile, but the length (Y axis) is unlimited. The number of columns available to you depends on the value for [StartScreenSize](#start-screen-size).
|
||||
|
||||
|
||||
|
||||
|
||||
Tile sizes are:
|
||||
* Small: 1x1
|
||||
@ -152,7 +152,7 @@ In the following example, Outlook Calendar and Outlook Mail are pinned to the St
|
||||
|
||||
That layout would appear on a device like this:
|
||||
|
||||
|
||||
|
||||
|
||||
You can create and pin folders to Start by using the Apps setting. Each folder requires a **folderId**, which must be a consecutive positive integer starting with `1`. You can also specify a **folderName** (optional) which will be displayed on Start.
|
||||
|
||||
@ -203,7 +203,7 @@ When an app is contained in a folder, its **PinToStart** configuration (tile siz
|
||||
|
||||
## Buttons
|
||||
|
||||
|
||||
|
||||
|
||||
In the Buttons setting, you use ButtonLockdownList to disable hardware buttons and ButtonRemapList to change button events to open an app that you specify.
|
||||
|
||||
@ -213,11 +213,11 @@ When a user taps a button that is in the lockdown list, nothing will happen. The
|
||||
|
||||
Button | Press | PressAndHold | All
|
||||
---|:---:|:---:|:--:|-
|
||||
Start |  |  | 
|
||||
Back |  |  | 
|
||||
Search |  |  | 
|
||||
Camera |  |  | 
|
||||
Custom 1, 2, and 3 |  |  | 
|
||||
Start |  |  | 
|
||||
Back |  |  | 
|
||||
Search |  |  | 
|
||||
Camera |  |  | 
|
||||
Custom 1, 2, and 3 |  |  | 
|
||||
|
||||
> [!NOTE]
|
||||
> Custom buttons are hardware buttons that can be added to devices by OEMs.
|
||||
@ -270,7 +270,7 @@ In the following example, when a user presses the Search button, the phone diale
|
||||
|
||||
## CSPRunner
|
||||
|
||||
|
||||
|
||||
|
||||
You can use CSPRunner to include settings that are not defined in AssignedAccessXML. For example, you can include settings from other sections of EnterpriseAssignedAccess CSP, such as lockscreen, theme, and time zone. You can also include settings from other CSPs, such as [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) or [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider).
|
||||
|
||||
@ -317,7 +317,7 @@ SyncML entry | Description
|
||||
|
||||
## Menu items
|
||||
|
||||
|
||||
|
||||
|
||||
Use DisableMenuItems to prevent use of the context menu, which is displayed when a user presses and holds an application in the All Apps list. You can include this entry in the default profile and in any additional user role profiles that you create.
|
||||
|
||||
@ -329,7 +329,7 @@ Use DisableMenuItems to prevent use of the context menu, which is displayed when
|
||||
|
||||
## Settings
|
||||
|
||||
|
||||
|
||||
|
||||
The **Settings** section contains an `allow` list of pages in the Settings app and quick actions. The following example allows all settings.
|
||||
|
||||
@ -363,7 +363,7 @@ For a list of the settings and quick actions that you can allow or block, see [S
|
||||
|
||||
## Tiles
|
||||
|
||||
|
||||
|
||||
|
||||
By default, under Assigned Access, tile manipulation is turned off (blocked) and only available if enabled in the user’s profile. If tile manipulation is enabled in the user’s profile, they can pin/unpin, move, and resize tiles based on their preferences. When multiple people use one device and you want to enable tile manipulation for multiple users, you must enable it for each user in their user profile.
|
||||
|
||||
@ -446,7 +446,7 @@ Use the Windows ICD tool included in the Windows Assessment and Deployment Kit (
|
||||
|
||||
3. In the center pane, click **Browse** to locate and select the lockdown XML file that you created.
|
||||
|
||||
|
||||
|
||||
|
||||
4. On the **File** menu, select **Save.**
|
||||
|
||||
|
||||
@ -16,7 +16,7 @@ manager: dansimp
|
||||
|
||||
# Use the Lockdown Designer app to create a Lockdown XML file
|
||||
|
||||
|
||||
|
||||
|
||||
Windows 10 Mobile allows enterprises to lock down a device, define multiple user roles, and configure custom layouts on a device. For example, the enterprise can lock down a device so that only applications and settings in an allow list are available. This is accomplished using Lockdown XML, an XML file that contains settings for Windows 10 Mobile.
|
||||
|
||||
@ -55,7 +55,7 @@ Perform these steps on the device running Windows 10 Mobile that you will use to
|
||||
>[!IMPORTANT]
|
||||
>Check **Settings > Personalization > Start > Show more tiles** on the test mobile device. If **Show more tiles** is **On**, you must select **Large** on the [**Start screen** page](#start) in Lockdown Designer. If you want to apply a **Small** layout, set **Show more tiles** on the test mobile device to **Off**.
|
||||
>
|
||||
>
|
||||
>
|
||||
|
||||
## Prepare the PC
|
||||
|
||||
@ -89,7 +89,7 @@ If you want to connect the PC and the test mobile device using a USB cable, perf
|
||||
|
||||
3. Click **Pair**.
|
||||
|
||||
|
||||
|
||||
|
||||
**Connect to remote device** appears.
|
||||
|
||||
@ -99,7 +99,7 @@ If you want to connect the PC and the test mobile device using a USB cable, perf
|
||||
|
||||
6. Next, click **Sync** to pull information from the device in to Lockdown Designer.
|
||||
|
||||
|
||||
|
||||
|
||||
7. Click the **Save** icon and enter a name for your project.
|
||||
|
||||
@ -113,7 +113,7 @@ If you want to connect the PC and the test mobile device using a USB cable, perf
|
||||
|
||||
3. On the **Project setting** > **General settings** page, click **Pair**.
|
||||
|
||||
|
||||
|
||||
|
||||
**Connect to remote device** appears.
|
||||
|
||||
@ -123,7 +123,7 @@ If you want to connect the PC and the test mobile device using a USB cable, perf
|
||||
|
||||
6. Next, click **Sync** to pull information from the device in to Lockdown Designer.
|
||||
|
||||
|
||||
|
||||
|
||||
7. Click the **Save** icon and enter a name for your project.
|
||||
|
||||
@ -134,13 +134,13 @@ The apps and settings available in the pages of Lockdown Designer should now be
|
||||
|
||||
| Page | Description |
|
||||
| --- | --- |
|
||||
|  | Each app from the test mobile device is listed. Select the apps that you want visible to users.</br></br>You can select an app to run automatically when a user signs in to the device. The **Select Auto-Run** menu is populated by the apps that you select to allow on the device. |
|
||||
|  | CSPRunner enables you to include settings and policies that are not defined in other sections of the app. To make use of CSPRunner, you must create the SyncML block that contains the settings, and then import the SyncML in Lockdown Designer. [Learn how to use CSPRunner and author SyncML.](lockdown-xml.md#csprunner) |
|
||||
|  | On this page, you select the settings that you want visible to users. See the [ms settings: URI scheme reference](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference) to see which Settings page maps to a URI. |
|
||||
|  | On this page, you select the settings that you want visible to users. |
|
||||
|  | Each hardware button on a mobile device has different actions that can be disabled. In addition, the behavior for **Search** button can be changed to open an app other than **Search**.</br></br>Some devices may have additional hardware buttons provided by the OEM. These are listed as Custom1, Custom2, and Custom3. If your device has custom hardware buttons, contact your equipment provider to identify how their custom buttons are defined. |
|
||||
|  | This page contains several settings that you can configure:</br></br>- The context menu is displayed when a user presses and holds an application in the All Apps list. You can enable or disable the context menu.</br></br>- Tile manipulation allows users to pin, unpin, move, and resize tiles on the Start screen. You can enable or disable tile manipulation.</br></br>- The Action Center setting controls whether the user can open the Action Center on the device. When the Action Center is disabled, notifications on the lockscreen and toasts are also disabled. You can use optional attributes with the Action Center element to change that behavior for either notifications, toasts, or both. |
|
||||
| <span id="start" /> | On this page, you can start a remote simulation session with the test mobile device. Click **Start remote simulation**. You will see a **Start screen remote simulation in progress** message on the PC. (If the **Start remote simulation** button is not active, [pair the mobile device with the PC again](#pair).)</br></br>On the test mobile device, tiles for the apps that you allowed on the **Applications** page are displayed on the screen. You can move, resize, or unpin these tiles to achieve the desired layout.</br></br>When you are done changing the layout on the test mobile device, click **Accept** on the PC. |
|
||||
|  | Each app from the test mobile device is listed. Select the apps that you want visible to users.</br></br>You can select an app to run automatically when a user signs in to the device. The **Select Auto-Run** menu is populated by the apps that you select to allow on the device. |
|
||||
|  | CSPRunner enables you to include settings and policies that are not defined in other sections of the app. To make use of CSPRunner, you must create the SyncML block that contains the settings, and then import the SyncML in Lockdown Designer. [Learn how to use CSPRunner and author SyncML.](lockdown-xml.md#csprunner) |
|
||||
|  | On this page, you select the settings that you want visible to users. See the [ms settings: URI scheme reference](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference) to see which Settings page maps to a URI. |
|
||||
|  | On this page, you select the settings that you want visible to users. |
|
||||
|  | Each hardware button on a mobile device has different actions that can be disabled. In addition, the behavior for **Search** button can be changed to open an app other than **Search**.</br></br>Some devices may have additional hardware buttons provided by the OEM. These are listed as Custom1, Custom2, and Custom3. If your device has custom hardware buttons, contact your equipment provider to identify how their custom buttons are defined. |
|
||||
|  | This page contains several settings that you can configure:</br></br>- The context menu is displayed when a user presses and holds an application in the All Apps list. You can enable or disable the context menu.</br></br>- Tile manipulation allows users to pin, unpin, move, and resize tiles on the Start screen. You can enable or disable tile manipulation.</br></br>- The Action Center setting controls whether the user can open the Action Center on the device. When the Action Center is disabled, notifications on the lockscreen and toasts are also disabled. You can use optional attributes with the Action Center element to change that behavior for either notifications, toasts, or both. |
|
||||
| <span id="start" /> | On this page, you can start a remote simulation session with the test mobile device. Click **Start remote simulation**. You will see a **Start screen remote simulation in progress** message on the PC. (If the **Start remote simulation** button is not active, [pair the mobile device with the PC again](#pair).)</br></br>On the test mobile device, tiles for the apps that you allowed on the **Applications** page are displayed on the screen. You can move, resize, or unpin these tiles to achieve the desired layout.</br></br>When you are done changing the layout on the test mobile device, click **Accept** on the PC. |
|
||||
|
||||
|
||||
## Validate and export
|
||||
@ -169,4 +169,4 @@ You can create additional roles for the device and have unique configurations fo
|
||||
|
||||
4. Configure the settings for the role as above, but make sure on each page that you select the correct role.
|
||||
|
||||
|
||||
|
||||
@ -66,13 +66,13 @@ You can apply a provisioning package to a device running Windows 10 Mobile by us
|
||||
1. Insert an SD card containing the provisioning package into the device.
|
||||
2. Navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Click **Add**.
|
||||
|
||||
4. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
||||
|
||||
|
||||
|
||||
|
||||
### Copying the provisioning package to the device
|
||||
|
||||
@ -82,7 +82,7 @@ You can apply a provisioning package to a device running Windows 10 Mobile by us
|
||||
|
||||
3. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Related topics
|
||||
|
||||
@ -31,7 +31,7 @@ All Windows 10 Mobile Enterprise and Windows 10 Mobile images have the NFC provi
|
||||
|
||||
On all Windows devices, device provisioning during OOBE can be triggered by 5 fast taps on the Windows hardware key, which shows the **Provision this device** screen. In the **Provision this device** screen, select **NFC** for NFC-based provisioning.
|
||||
|
||||
|
||||
|
||||
|
||||
If there is an error during NFC provisioning, the device will show a message if any of the following errors occur:
|
||||
|
||||
|
||||
@ -168,28 +168,28 @@ Apps Corner lets you set up a custom Start screen on your Windows 10 Mobile or
|
||||
|
||||
**To set up Apps Corner**
|
||||
|
||||
1. On Start , swipe over to the App list, then tap **Settings**  > **Accounts** > **Apps Corner**.
|
||||
1. On Start , swipe over to the App list, then tap **Settings**  > **Accounts** > **Apps Corner**.
|
||||
|
||||
2. Tap **Apps**, tap to select the app that you want people to use in the kiosk mode, and then tap done .
|
||||
2. Tap **Apps**, tap to select the app that you want people to use in the kiosk mode, and then tap done .
|
||||
|
||||
3. If your phone doesn't already have a lock screen password, you can set one now to ensure that people can't get to your Start screen from Apps Corner. Tap **Protect my phone with a password**, click **Add**, type a PIN in the **New PIN** box, type it again in the **Confirm PIN** box, and then tap **OK**. Press **Back**  to the Apps Corner settings.
|
||||
3. If your phone doesn't already have a lock screen password, you can set one now to ensure that people can't get to your Start screen from Apps Corner. Tap **Protect my phone with a password**, click **Add**, type a PIN in the **New PIN** box, type it again in the **Confirm PIN** box, and then tap **OK**. Press **Back**  to the Apps Corner settings.
|
||||
|
||||
4. Turn **Action center** on or off, depending on whether you want people to be able to use these features when using the device in kiosk mode.
|
||||
|
||||
5. Tap **advanced**, and then turn features on or off, depending on whether you want people to be able to use them.
|
||||
|
||||
6. Press **Back**  when you're done.
|
||||
6. Press **Back**  when you're done.
|
||||
|
||||
**To use Apps Corner**
|
||||
|
||||
1. On Start , swipe over to the App list, then tap **Settings**  > **Accounts** > **Apps Corner** > launch .
|
||||
1. On Start , swipe over to the App list, then tap **Settings**  > **Accounts** > **Apps Corner** > launch .
|
||||
|
||||
>[!TIP]
|
||||
>Want to get to Apps Corner with one tap? In **Settings**, tap **Apps Corner** > **pin** to pin the Apps Corner tile to your Start screen.
|
||||
|
||||
2. Give the device to someone else, so they can use the device and only the one app you chose.
|
||||
|
||||
3. When they're done and you get the device back, press and hold Power , and then swipe right to exit Apps Corner.
|
||||
3. When they're done and you get the device back, press and hold Power , and then swipe right to exit Apps Corner.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
||||
@ -36,7 +36,7 @@ On Windows 10 Mobile, the customized Start works by:
|
||||
|
||||
The following diagrams show the default Windows 10, version 1607 Start layouts for single SIM and dual SIM devices with Cortana support, and single SIM and dual SIM devices with no Cortana support.
|
||||
|
||||
|
||||
|
||||
|
||||
The diagrams show:
|
||||
|
||||
|
||||
@ -53,11 +53,11 @@ For users who work in different locations, you can configure one APN to connect
|
||||
|
||||
5. Enter a name for the connection, and then click **Add**.
|
||||
|
||||
|
||||
|
||||
|
||||
6. The connection appears in the **Available customizations** pane. Select it to view the settings that you can configure for the connection.
|
||||
|
||||
|
||||
|
||||
|
||||
7. The following table describes the settings available for the connection.
|
||||
|
||||
|
||||
@ -38,7 +38,7 @@ Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/win
|
||||
|
||||
CSPs are behind many of the management tasks and policies for Windows 10, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider).
|
||||
|
||||
|
||||
|
||||
|
||||
CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Endpoint Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge.
|
||||
|
||||
@ -66,7 +66,7 @@ You can use Windows Configuration Designer to create [provisioning packages](./p
|
||||
|
||||
Many settings in Windows Configuration Designer will display documentation for that setting in the center pane, and will include a reference to the CSP if the setting uses one, as shown in the following image.
|
||||
|
||||
|
||||
|
||||
|
||||
[Provisioning packages in Windows 10](provisioning-packages.md) explains how to use the Windows Configuration Designer tool to create a runtime provisioning package.
|
||||
|
||||
@ -86,7 +86,7 @@ All CSPs in Windows 10 are documented in the [Configuration service provider ref
|
||||
|
||||
The [main CSP topic](/windows/client-management/mdm/configuration-service-provider-reference) tells you which CSPs are supported on each edition of Windows 10, and links to the documentation for each individual CSP.
|
||||
|
||||
|
||||
|
||||
|
||||
The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format.
|
||||
|
||||
@ -94,7 +94,7 @@ The full path to a specific configuration setting is represented by its Open Mob
|
||||
|
||||
The following example shows the diagram for the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied.
|
||||
|
||||
|
||||
|
||||
|
||||
The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp).
|
||||
|
||||
@ -104,7 +104,7 @@ The element in the tree diagram after the root node tells you the name of the CS
|
||||
|
||||
When an element in the diagram uses _italic_ font, it indicates a placeholder for specific information, such as the tenant ID in the following example.
|
||||
|
||||
|
||||
|
||||
|
||||
After the diagram, the documentation describes each element. For each policy or setting, the valid values are listed.
|
||||
|
||||
|
||||
@ -58,7 +58,7 @@ Provisioning packages can include management instructions and policies, installa
|
||||
> [!TIP]
|
||||
> Use the desktop wizard to create a package with the common settings, then switch to the advanced editor to add other settings, apps, policies, etc.
|
||||
>
|
||||
>
|
||||
>
|
||||
|
||||
## Create the provisioning package
|
||||
|
||||
@ -68,11 +68,11 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
|
||||
2. Click **Provision desktop devices**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Name your project and click **Finish**. The pages for desktop provisioning will walk you through the following steps.
|
||||
|
||||
|
||||
|
||||
|
||||
> [!IMPORTANT]
|
||||
> When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.
|
||||
|
||||
@ -46,7 +46,7 @@ Use the Windows Imaging and Configuration Designer (ICD) tool included in the Wi
|
||||
|
||||
2. Click **Advanced provisioning**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Name your project and click **Next**.
|
||||
|
||||
@ -73,19 +73,19 @@ Universal apps that you can distribute in the provisioning package can be line-o
|
||||
|
||||
2. For **DeviceContextApp**, specify the **PackageFamilyName** for the app. In Microsoft Store for Business, the package family name is listed in the **Package details** section of the download page.
|
||||
|
||||
|
||||
|
||||
|
||||
3. For **ApplicationFile**, click **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
||||
|
||||
4. For **DependencyAppxFiles**, click **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
||||
|
||||
|
||||
|
||||
|
||||
5. For **DeviceContextAppLicense**, enter the **LicenseProductID**.
|
||||
|
||||
- In Microsoft Store for Business, generate the unencoded license for the app on the app's download page, and change the extension of the license file from **.xml** to **.ms-windows-store-license**.
|
||||
|
||||
|
||||
|
||||
|
||||
- Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and click **Add**.
|
||||
|
||||
|
||||
@ -74,11 +74,11 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate
|
||||
|
||||
2. Enter a name for the first app, and then click **Add**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Configure the settings for the appropriate installer type.
|
||||
|
||||
|
||||
|
||||
|
||||
## Add a universal app to your package
|
||||
|
||||
@ -88,19 +88,19 @@ Universal apps that you can distribute in the provisioning package can be line-o
|
||||
|
||||
2. For **DeviceContextApp**, specify the **PackageFamilyName** for the app. In Microsoft Store for Business, the package family name is listed in the **Package details** section of the download page.
|
||||
|
||||
|
||||
|
||||
|
||||
3. For **ApplicationFile**, click **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
||||
|
||||
4. For **DependencyAppxFiles**, click **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
||||
|
||||
|
||||
|
||||
|
||||
5. For **DeviceContextAppLicense**, enter the **LicenseProductID**.
|
||||
|
||||
- In Microsoft Store for Business, generate the unencoded license for the app on the app's download page.
|
||||
|
||||
|
||||
|
||||
|
||||
- Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and click **Add**.
|
||||
|
||||
|
||||
@ -35,7 +35,7 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. Insert the USB drive. Windows Setup will recognize the drive and ask if you want to set up the device. Select **Set up**.
|
||||
|
||||
@ -43,11 +43,11 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
3. The next screen asks you to select a provisioning source. Select **Removable Media** and tap **Next**.
|
||||
|
||||
|
||||
|
||||
|
||||
4. Select the provisioning package (\*.ppkg) that you want to apply, and tap **Next**.
|
||||
|
||||
|
||||
|
||||
|
||||
5. Select **Yes, add it**.
|
||||
|
||||
@ -59,7 +59,7 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
Insert the USB drive to a desktop computer, navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install. For a provisioning package stored on a network folder or on a SharePoint site, navigate to the provisioning package and double-click it to begin installation.
|
||||
|
||||
|
||||
|
||||
|
||||
## Mobile editions
|
||||
|
||||
@ -68,13 +68,13 @@ Insert the USB drive to a desktop computer, navigate to **Settings** > **Account
|
||||
1. Insert an SD card containing the provisioning package into the device.
|
||||
2. Navigate to **Settings** > **Accounts** > **Access work or school** > **Add or remove a provisioning package** > **Add a package**, and select the package to install.
|
||||
|
||||
|
||||
|
||||
|
||||
3. Click **Add**.
|
||||
|
||||
4. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
||||
|
||||
|
||||
|
||||
|
||||
### Copying the provisioning package to the device
|
||||
|
||||
@ -84,7 +84,7 @@ Insert the USB drive to a desktop computer, navigate to **Settings** > **Account
|
||||
|
||||
3. On the device, the **Is this package from a source you trust?** message will appear. Tap **Yes, add it**.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -39,7 +39,7 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
||||
|
||||
2. Select your desired option on the **Start** page, which offers multiple options for creating a provisioning package, as shown in the following image:
|
||||
|
||||
|
||||
|
||||
|
||||
- The following wizard options provide a simple interface for configuring common settings for desktop, mobile, and kiosk devices:
|
||||
|
||||
@ -56,7 +56,7 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
||||
>[!TIP]
|
||||
> You can start a project in the simple wizard editor and then switch the project to the advanced editor.
|
||||
>
|
||||
> 
|
||||
> 
|
||||
|
||||
3. Enter a name for your project, and then select **Next**.
|
||||
|
||||
@ -87,7 +87,7 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
||||
|
||||
For an advanced provisioning project, Windows Configuration Designer opens the **Available customizations** pane. The example in the following image is based on **All Windows desktop editions** settings.
|
||||
|
||||
|
||||
|
||||
|
||||
The settings in Windows Configuration Designer are based on Windows 10 configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](./how-it-pros-can-use-configuration-service-providers.md).
|
||||
|
||||
@ -103,14 +103,14 @@ The process for configuring settings is similar for all settings. The following
|
||||
|
||||
For details on each specific setting, see [Windows Provisioning settings reference](../wcd/wcd.md). The reference topic for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Build package
|
||||
|
||||
1. After you're done configuring your customizations, select **Export**, and then select **Provisioning Package**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. In the **Describe the provisioning package** window, enter the following information, and then select **Next**:
|
||||
- **Name** - This field is pre-populated with the project name. You can change this value by entering a different name in the **Name** field.
|
||||
|
||||
@ -66,7 +66,7 @@ On devices running Windows 10, you can install [the Windows Configuration Design
|
||||
|
||||
6. On the **Select the features you want to install** page, clear all selections except **Configuration Designer**, and then click **Install**.
|
||||
|
||||
|
||||
|
||||
|
||||
## Current Windows Configuration Designer limitations
|
||||
|
||||
|
||||
@ -35,7 +35,7 @@ In the XML file, you provide an **Id**, or friendly name, for each **Target**. E
|
||||
|
||||
A **Target** can have more than one **TargetState**, and a **TargetState** can have more than one **Condition**.
|
||||
|
||||
|
||||
|
||||
|
||||
The following table describes the logic for the target definition.
|
||||
|
||||
|
||||
@ -124,7 +124,7 @@ For details about the settings you can customize in provisioning packages, see [
|
||||
|
||||
Windows ICD for Windows 10, version 1607, simplified common provisioning scenarios.
|
||||
|
||||
|
||||
|
||||
|
||||
Windows ICD in Windows 10, version 1607, supported the following scenarios for IT administrators:
|
||||
|
||||
|
||||
@ -189,13 +189,13 @@ cmd /c InstallMyApp.bat
|
||||
|
||||
In Windows Configuration Designer, this looks like:
|
||||
|
||||
|
||||
|
||||
|
||||
You also need to add the relevant assets for that command line including the orchestrator script and any other assets it references such as installers or .cab files.
|
||||
|
||||
In Windows Configuration Designer, that is done by adding files under the `ProvisioningCommands/DeviceContext/CommandFiles` setting.
|
||||
|
||||
|
||||
|
||||
|
||||
When you are done, [build the package](provisioning-create-package.md#build-package).
|
||||
|
||||
|
||||
@ -108,13 +108,13 @@ You can configure Windows to be in shared PC mode in a couple different ways:
|
||||
8. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**.
|
||||
|
||||
> [!div class="mx-imgBorder"]
|
||||
> 
|
||||
> 
|
||||
|
||||
11. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 6**.
|
||||
|
||||
- A provisioning package created with the Windows Configuration Designer: You can apply a provisioning package when you initially set up the PC (also known as the out-of-box-experience or OOBE), or you can apply the provisioning package to a Windows 10 PC that is already in use. The provisioning package is created in Windows Configuration Designer. Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](/windows/client-management/mdm/sharedpc-csp), exposed in Windows Configuration Designer as **SharedPC**.
|
||||
|
||||
|
||||
|
||||
|
||||
- WMI bridge: Environments that use Group Policy can use the [MDM Bridge WMI Provider](/windows/win32/dmwmibridgeprov/mdm-bridge-wmi-provider-portal) to configure the [MDM_SharedPC class](/windows/win32/dmwmibridgeprov/mdm-sharedpc). For all device settings, the WMI Bridge client must be executed under local system user; for more information, see [Using PowerShell scripting with the WMI Bridge Provider](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider). For example, open PowerShell as an administrator and enter the following:
|
||||
|
||||
@ -189,7 +189,7 @@ You can apply the provisioning package to a PC during initial setup or to a PC t
|
||||
|
||||
1. Start with a PC on the setup screen.
|
||||
|
||||
|
||||
|
||||
|
||||
2. Insert the USB drive. If nothing happens when you insert the USB drive, press the Windows key five times.
|
||||
|
||||
@ -206,7 +206,7 @@ You can apply the provisioning package to a PC during initial setup or to a PC t
|
||||
|
||||
On a desktop computer, navigate to **Settings** > **Accounts** > **Work access** > **Add or remove a management package** > **Add a package**, and selects the package to install.
|
||||
|
||||
|
||||
|
||||
|
||||
> [!NOTE]
|
||||
> If you apply the setup file to a computer that has already been set up, existing accounts and data might be lost.
|
||||
|
||||
@ -42,7 +42,7 @@ When troubleshooting basic Start issues (and for the most part, all other Window
|
||||
- `get-AppXPackage -Name Microsoft.Windows.ShellExperienceHost`
|
||||
- `get-AppXPackage -Name Microsoft.Windows.Cortana`
|
||||
|
||||
|
||||
|
||||
|
||||
Failure messages will appear if they aren't installed
|
||||
|
||||
@ -188,7 +188,7 @@ Events for both PDC and Background Tasks Infrastructure Service will be recorded
|
||||
|
||||
### Symptom: Application tiles like Alarm, Calculator, and Edge are missing from Start menu and the Settings app fails to open on Windows 10, version 1709 when a local user profile is deleted
|
||||
|
||||
|
||||
|
||||
|
||||
**Cause**: This issue is known. The first-time sign-in experience is not detected and does not trigger the install of some apps.
|
||||
|
||||
@ -236,11 +236,11 @@ Specifically, behaviors include
|
||||
- If a new roaming user is created, the first sign-in appears normal, but on subsequent sign-ins, tiles are missing.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
*Working layout on first sign-in of a new roaming user profile*
|
||||
|
||||
|
||||
|
||||
|
||||
*Failing layout on subsequent sign-ins*
|
||||
|
||||
@ -256,15 +256,15 @@ Specifically, behaviors include
|
||||
|
||||
Before the upgrade:
|
||||
|
||||
|
||||
|
||||
|
||||
After the upgrade the user pinned tiles are missing:
|
||||
|
||||
|
||||
|
||||
|
||||
Additionally, users may see blank tiles if sign-in was attempted without network connectivity.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
**Resolution**: This issue was fixed in the [October 2017 update](https://support.microsoft.com/en-us/help/4041676).
|
||||
|
||||
@ -31,15 +31,15 @@ In a Start layout for Windows 10, version 1703, you can include secondary tiles
|
||||
|
||||
Suppose that the [Start layout that you export](customize-and-export-start-layout.md) had two secondary tiles, such as in the following image:
|
||||
|
||||
|
||||
|
||||
|
||||
In prior versions of Windows 10, when you applied the Start layout to a device, the tiles would display as shown in the following image:
|
||||
|
||||
|
||||
|
||||
|
||||
In Windows 10, version 1703, by using the PowerShell cmdlet `export-StartLayoutEdgeAssets` and the policy setting `ImportEdgeAssets`, the tiles will now display the same as they did on the device from which you exported the Start layout.
|
||||
|
||||
|
||||
|
||||
|
||||
**Example of secondary tiles in XML generated by Export-StartLayout**
|
||||
|
||||
@ -156,7 +156,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
|
||||
12. Open the customizations.xml file in a text editor. The **<Customizations>** section will look like this:
|
||||
|
||||
|
||||
|
||||
|
||||
13. Replace **layout.xml** with the text from the layout.xml file, [with markup characters replaced with escape characters](#escape).
|
||||
|
||||
|
||||
@ -121,7 +121,7 @@ UE-V for Windows 10, version 1607 includes a new template generator. If you are
|
||||
<img src="media/image1.png" width="537" height="394" />
|
||||
-->
|
||||
|
||||
|
||||
|
||||
|
||||
3. To open the generator, select **Microsoft Application Virtualization Generator** from the **Start** menu.
|
||||
|
||||
|
||||
@ -41,7 +41,7 @@ The diagram below illustrates how UE-V components work together to synchronize u
|
||||
<img src="images/uev-archdiagram.png" alt="UE-V architecture, with server share, desktop, and UE-V service" width="625" height="351" />
|
||||
|
||||
<!-- SIMPLER METHOD FOR CODING IMAGE
|
||||
|
||||
|
||||
-->
|
||||
|
||||
| **Component** | **Function** |
|
||||
@ -65,7 +65,7 @@ Use these UE-V components to create and manage custom templates for your third-p
|
||||
<img src="media/image2.gif" width="595" height="330" />
|
||||
-->
|
||||
|
||||
|
||||
|
||||
|
||||
## Settings synchronized by default
|
||||
|
||||
|
||||
@ -44,7 +44,7 @@ If you want to use UE-V to synchronize user-defined settings for custom applicat
|
||||
|
||||
The workflow diagram below illustrates a typical UE-V deployment and the decisions you need to be prepared to make.
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- PRESERVING ^ORIGINAL IMAGE CODING JUST IN CASE
|
||||
<img src="media/image1.png" width="446" height="362" />
|
||||
@ -171,13 +171,13 @@ If you’ve decided that you need to synchronize settings for custom application
|
||||
|
||||
| | **Description** |
|
||||
|-------|--------------------------|
|
||||
|  | Does this application contain settings that the user can customize? |
|
||||
|  | Is it important for the user that these settings are synchronized? |
|
||||
|  | Are these user settings already managed by an application management or settings policy solution? UE-V applies application settings at application startup and Windows settings at logon, unlock, or remote connect events. If you use UE-V with other settings sharing solutions, users might experience inconsistency across synchronized settings. |
|
||||
|  | Are the application settings specific to the computer? Application preferences and customizations that are associated with hardware or specific computer configurations do not consistently synchronize across sessions and can cause a poor application experience. |
|
||||
|  | Does the application store settings in the Program Files directory or in the file directory that is located in the **Users**\\ \[User name\] \\**AppData**\\**LocalLow** directory? Application data that is stored in either of these locations usually should not synchronize with the user, because this data is specific to the computer or because the data is too large to synchronize. |
|
||||
|  | Does the application store any settings in a file that contains other application data that should not synchronize? UE-V synchronizes files as a single unit. If settings are stored in files that include application data other than settings, then synchronizing this additional data can cause a poor application experience.|
|
||||
|  | How large are the files that contain the settings? The performance of the settings synchronization can be affected by large files. Including large files can affect the performance of settings synchronization. |
|
||||
|  | Does this application contain settings that the user can customize? |
|
||||
|  | Is it important for the user that these settings are synchronized? |
|
||||
|  | Are these user settings already managed by an application management or settings policy solution? UE-V applies application settings at application startup and Windows settings at logon, unlock, or remote connect events. If you use UE-V with other settings sharing solutions, users might experience inconsistency across synchronized settings. |
|
||||
|  | Are the application settings specific to the computer? Application preferences and customizations that are associated with hardware or specific computer configurations do not consistently synchronize across sessions and can cause a poor application experience. |
|
||||
|  | Does the application store settings in the Program Files directory or in the file directory that is located in the **Users**\\ \[User name\] \\**AppData**\\**LocalLow** directory? Application data that is stored in either of these locations usually should not synchronize with the user, because this data is specific to the computer or because the data is too large to synchronize. |
|
||||
|  | Does the application store any settings in a file that contains other application data that should not synchronize? UE-V synchronizes files as a single unit. If settings are stored in files that include application data other than settings, then synchronizing this additional data can cause a poor application experience.|
|
||||
|  | How large are the files that contain the settings? The performance of the settings synchronization can be affected by large files. Including large files can affect the performance of settings synchronization. |
|
||||
|
||||
## Other considerations when preparing a UE-V deployment
|
||||
|
||||
|
||||
@ -101,7 +101,7 @@ The UE-V template generator is included in the Windows Assessment and Deployment
|
||||
|
||||
2. Select the **Get Windows ADK for Windows 10** button on this page to start the ADK installer. On the screen pictured below, select **Microsoft User Experience Virtualization (UE-V) Template Generator** and then select **Install**.
|
||||
|
||||
|
||||
|
||||
|
||||
3. To open the generator, open the **Start** menu and navigate to **Windows Kits** > **Microsoft User Experience Virtualization (UE-V) Template Generator**.
|
||||
|
||||
|
||||
@ -87,11 +87,11 @@ $path="file path"
|
||||
|
||||
The following images show snippets of the ADMX file for Office 16 that are used in the examples in the procedures above. The first image highlights the category names.
|
||||
|
||||
|
||||
|
||||
|
||||
The next image highlights the specific policy.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Related topics
|
||||
|
||||
@ -71,7 +71,7 @@ For more information, see [Use MDM to customize Windows 10 Start and taskbar](cu
|
||||
|
||||
## Start menu policy settings
|
||||
|
||||
|
||||
|
||||
|
||||
The following list includes the different Start options, and any policy or local settings. The settings in the list can also be used in a provisioning package. If you use a provisioning package, see the [Windows Configuration Designer reference](./wcd/wcd-policies.md#start).
|
||||
|
||||
@ -180,7 +180,7 @@ The following example shows how apps are pinned. In OS configured to use a right
|
||||
- Apps pinned by the user in the center (orange triangle)
|
||||
- Apps that you pin using XML to the right (green square)
|
||||
|
||||
|
||||
|
||||
|
||||
If you apply the taskbar configuration to a clean install or an update, users can still:
|
||||
|
||||
|
||||
@ -40,20 +40,20 @@ For managed devices running Windows 10 Enterprise and Windows 10 Education, en
|
||||
|
||||
The Windows Spotlight displays a new image on the lock screen each day. The initial background image is included during installation. Additional images are downloaded on ongoing basis.
|
||||
|
||||
|
||||
|
||||
|
||||
- **Feature suggestions, fun facts, tips**
|
||||
|
||||
The lock screen background will occasionally make recommendations on how to enhance your productivity and enjoyment of Microsoft products including suggesting other relevant Microsoft products and services.
|
||||
|
||||
|
||||
|
||||
|
||||
## How do you turn off Windows Spotlight locally?
|
||||
|
||||
|
||||
To turn off Windows Spotlight locally, go to **Settings** > **Personalization** > **Lock screen** > **Background** > **Windows spotlight** > select a different lock screen background
|
||||
|
||||
|
||||
|
||||
|
||||
## How do you disable Windows Spotlight for managed devices?
|
||||
|
||||
@ -81,7 +81,7 @@ Windows Spotlight is enabled by default. Windows 10 provides Group Policy and mo
|
||||
>If you want to use a custom lock screen image that contains text, see [Resolution for custom lock screen image](#resolution-for-custom-lock-screen-image).
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Pay attention to the checkbox in **Options**. In addition to providing the path to the lock screen image, administrators can choose to allow or **Turn off fun facts, tips, tricks, and more on lock screen**. If the checkbox is not selected, users will see the lock screen image that is defined in the policy setting, and will also see occasional messages.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user