mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-18 11:53:37 +00:00
Merge branch 'master' into v-tea-CI-103321
This commit is contained in:
Teresa-Motiv
@ -12,7 +12,7 @@
|
||||
#### [Site planning for Surface Hub 2S](surface-hub-2s-site-planning.md)
|
||||
#### [Surface Hub 2S quick start](surface-hub-2s-quick-start.md)
|
||||
#### [Install and mount Surface Hub 2S](surface-hub-2s-install-mount.md)
|
||||
#### [Customizing installation of Surface Hub 2S](surface-hub-2s-custom-install.md)
|
||||
#### [Customize wall mount of Surface Hub 2S](surface-hub-2s-custom-install.md)
|
||||
#### [Setup worksheet](setup-worksheet-surface-hub.md)
|
||||
#### [Surface Hub 2S ports and keypad overview](surface-hub-2s-port-keypad-overview.md)
|
||||
#### [Connect devices to Surface Hub 2S](surface-hub-2s-connect.md)
|
||||
|
||||
@ -498,7 +498,7 @@ if (![System.String]::IsNullOrEmpty($strRegPoolEntry))
|
||||
$strRegPool = $strRegPoolEntry
|
||||
}
|
||||
|
||||
# Try to SfB-enable the account. Note that it may not work right away as the account needs to propogate to active directory
|
||||
# Try to SfB-enable the account. Note that it may not work right away as the account needs to propagate to active directory
|
||||
PrintAction "Enabling Skype for Business..."
|
||||
Start-Sleep -s 10
|
||||
$Error.Clear()
|
||||
@ -878,7 +878,7 @@ if (![System.String]::IsNullOrEmpty($strRegPoolEntry))
|
||||
}
|
||||
#>
|
||||
|
||||
# Try to SfB-enable the account. Note that it may not work right away as the account needs to propogate to active directory
|
||||
# Try to SfB-enable the account. Note that it may not work right away as the account needs to propagate to active directory
|
||||
PrintAction "Enabling Skype for Business on $strRegPool"
|
||||
Start-Sleep -s 10
|
||||
$Error.Clear()
|
||||
@ -1352,7 +1352,7 @@ Validate -Test "ActiveSync devices are allowed" -Condition ($strDefaultAccessLev
|
||||
|
||||
# Check if there exists a device access rule that bans the device type Windows Mail
|
||||
$blockingRules = Get-ActiveSyncDeviceAccessRule | where {($_.AccessLevel -eq 'Block' -or $_.AccessLevel -eq 'Quarantine') -and $_.Characteristic -eq 'DeviceType'-and $_.QueryString -eq 'WindowsMail'}
|
||||
Validate -Test "Windows mail devices are not blocked or quarantined" -Condition ($blockingRules -eq $null -or $blockingRules.Length -eq 0) -FailureMsg "DeviceType Windows Mail is accessible - devices are blocked or quaratined - the surface hub will not be able to send mail or sync its calendar."
|
||||
Validate -Test "Windows mail devices are not blocked or quarantined" -Condition ($blockingRules -eq $null -or $blockingRules.Length -eq 0) -FailureMsg "DeviceType Windows Mail is accessible - devices are blocked or quarantined - the surface hub will not be able to send mail or sync its calendar."
|
||||
|
||||
## End Exchange ##
|
||||
|
||||
@ -1411,7 +1411,7 @@ if ($fHasOnline)
|
||||
}
|
||||
}
|
||||
|
||||
#If there is an on-prem component, we can get the authorative AD user from mailbox
|
||||
#If there is an on-prem component, we can get the authoritative AD user from mailbox
|
||||
if ($fHasOnPrem)
|
||||
{
|
||||
$accountOnPrem = $null
|
||||
|
||||
@ -127,13 +127,13 @@ The administrative features in Windows 10 Enterprise, such as the Microsoft Mana
|
||||
|
||||
### Remote management and monitoring
|
||||
|
||||
Surface Hub supports remote management through mobile device management (MDM), and monitoring through Operations Management Suite (OMS).
|
||||
Surface Hub supports remote management through mobile device management (MDM) solutions such as [Microsoft Intune](https://docs.microsoft.com/en-us/intune/) and monitoring through [Azure Monitor](https://azure.microsoft.com/services/monitor/).
|
||||
|
||||
*Organization policies that this may affect:* <br> Surface Hub doesn't support installing Win32 agents required by most traditional PC management and monitoring tools, such as System Center Operations Manager.
|
||||
|
||||
### Group policy
|
||||
### Group Policy
|
||||
|
||||
Surface Hub does not support group policy, including auditing. Instead, use MDM to apply policies to your Surface Hub. For more information about MDM, see [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md).
|
||||
Surface Hub does not support Windows Group Policy, including auditing. Instead, use MDM to apply policies to your Surface Hub. For more information about MDM, see [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md).
|
||||
|
||||
*Organization policies that this may affect:* <br> Use MDM to manage Surface Hub rather than group policy.
|
||||
|
||||
|
||||
@ -88,7 +88,7 @@ This screen is shown only if the device fails to detect a wired network. If you
|
||||
- You can select one of the wireless networks shown. If the network is secured, you'll be taken to a login page. See [Wireless network setup](#wireless) for details.
|
||||
- Click **Skip this step** to skip connecting to a network. You'll be taken to the [Set up for you page](#set-up-for-you).
|
||||
>[!NOTE]
|
||||
>If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including system updates and email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
|
||||
>If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including system updates and email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network management](wireless-network-management-for-surface-hub.md)).
|
||||
|
||||
|
||||
|
||||
@ -123,7 +123,7 @@ This page will be shown when the device detects a wired connection with limited
|
||||
|
||||
- You can select a wireless network to use instead of the limited wired connection.
|
||||
- You can skip connecting to a network by selecting **Skip this step**. You'll be taken to the [Set up for you page](#set-up-for-you).
|
||||
**Note** If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
|
||||
**Note** If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network management](wireless-network-management-for-surface-hub.md)).
|
||||
|
||||
|
||||
|
||||
@ -149,7 +149,7 @@ When you click **Next**, the device will attempt to connect to the proxy server.
|
||||
You can skip connecting to a network by selecting **Skip this step**. You'll be taken to the [Set up for you page](#set-up-for-you).
|
||||
|
||||
>[!NOTE]
|
||||
>If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
|
||||
>If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network management](wireless-network-management-for-surface-hub.md)).
|
||||
|
||||
|
||||
|
||||
@ -203,7 +203,7 @@ If you skip setting it up now, you can add a device account later by using the S
|
||||
|
||||
If you click **Skip setting up a device account**, the device will display a dialog box showing what will happen if the device doesn't have a device account. If you choose **Yes, skip this**, you will be sent to the [Name this device page](#name-this-device).
|
||||
|
||||
|
||||
|
||||
|
||||
### What happens?
|
||||
|
||||
|
||||
@ -21,7 +21,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/get-started-blue.svg" alt="Get started icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/get-started-blue.svg" alt="Get started icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -40,7 +40,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/task-checklist-planning-blue.svg" alt="Plan icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/task-checklist-planning-blue.svg" alt="Plan icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -59,7 +59,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/deploy-blue.svg" alt="Deploy icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/deploy-blue.svg" alt="Deploy icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -81,7 +81,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/process-flow-blue.svg" alt="Manage icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/process-flow-blue.svg" alt="Manage icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -99,7 +99,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/security-blue.svg" alt="Secure icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/security-blue.svg" alt="Secure icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -117,7 +117,7 @@ Surface Hub 2S is an all-in-one digital interactive whiteboard, meetings platfor
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/connector-blue.svg" alt="Support icon" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/connector-blue.svg" alt="Support icon" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
|
||||
@ -19,7 +19,7 @@ ms.localizationpriority: medium
|
||||
You can install additional apps on your Surface Hub to fit your team or organization's needs. There are different methods for installing apps depending on whether you are developing and testing an app, or deploying a released app. This topic describes methods for installing apps for either scenario.
|
||||
|
||||
A few things to know about apps on Surface Hub:
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp). Apps created using the [Desktop App Converter](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-run-desktop-app-converter) will not run on Surface Hub. See a [list of apps that work with Surface Hub](https://support.microsoft.com/help/4040382/surface-Apps-that-work-with-Microsoft-Surface-Hub).
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp). Apps created using the [Desktop App Converter](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-run-desktop-app-converter) will not run on Surface Hub.
|
||||
- Apps must be targeted for the [Universal device family](https://msdn.microsoft.com/library/windows/apps/dn894631) or Windows Team device family.
|
||||
- Surface Hub only supports [offline-licensed apps](https://docs.microsoft.com/microsoft-store/distribute-offline-apps) from Microsoft Store for Business.
|
||||
- By default, apps must be Store-signed to be installed. During testing and development, you can also choose to run developer-signed UWP apps by placing the device in developer mode.
|
||||
|
||||
@ -140,7 +140,7 @@ The following tables include info on Windows 10 settings that have been validate
|
||||
| Setting | Details | CSP reference | Supported with<br>Intune? | Supported with<br>Configuration Manager? | Supported with<br>SyncML\*? |
|
||||
|-------------------|----------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------|-------------------------------------------------|-----------------------------|
|
||||
| Defender policies | Use to configure various Defender settings, including a scheduled scan time. | Defender/*`<name of policy>`* <br> See [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx) | Yes <br> [Use a custom policy.](#example-intune) | Yes.<br> [Use a custom setting.](#example-sccm) | Yes |
|
||||
| Defender status | Use to initiate a Defender scan, force a Security intelligence update, query any threats detected. | [Defender CSP](https://msdn.microsoft.com/library/windows/hardware/mt187856.aspx) | No. | No. | Yes |
|
||||
| Defender status | Use to initiate a Defender scan, force a Security intelligence update, query any threats detected. | [Defender CSP](https://msdn.microsoft.com/library/windows/hardware/mt187856.aspx) | Yes | Yes | Yes |
|
||||
|
||||
\*Settings supported with SyncML can also be configured in a Windows Configuration Designer provisioning package.
|
||||
|
||||
|
||||
@ -138,7 +138,7 @@ You'll need the workspace ID and primary key of your OMS workspace. You can get
|
||||
A confirmation dialog will appear telling you whether or not the OMS configuration was successfully applied to the device. If it was, the device will start sending data to OMS.
|
||||
|
||||
### Enroll using a provisioning package
|
||||
You can use a provisioning package to enroll your Surface Hub. For more infomation, see [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md).
|
||||
You can use a provisioning package to enroll your Surface Hub. For more information, see [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md).
|
||||
|
||||
### Enroll using a MDM provider
|
||||
You can enroll Surface Hub into OMS using the SurfaceHub CSP. Intune and Configuration Manager provide built-in experiences to help create policy templates for Surface Hub. For more information, see [Manage Surface Hub settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md).
|
||||
|
||||
@ -29,7 +29,7 @@ Review these dependencies to make sure Surface Hub features will work in your IT
|
||||
| Exchange (Exchange 2013 or later, or Exchange Online) and Exchange ActiveSync | <p>Exchange is used for enabling mail and calendar features, and also lets people who use the device send meeting requests to the Surface Hub, enabling one-touch meeting join.</p>ActiveSync is used to sync the device account’s calendar and mail to the Surface Hub. If the device cannot use ActiveSync, it will not show meetings on the welcome screen, and joining meetings and emailing whiteboards will not be enabled. |
|
||||
| Skype for Business (Lync Server 2013 or later, or Skype for Business Online) | Skype for Business is used for various conferencing features, like video calls, instant messaging, and screen sharing.|
|
||||
| Mobile device management (MDM) solution (Microsoft Intune, System Center Configuration Manager, or supported third-party MDM provider) | If you want to apply settings and install apps remotely, and to multiple devices at a time, you must set up a MDM solution and enroll the device to that solution. See [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md) for details. |
|
||||
| Microsoft Operations Managmement Suite (OMS) | OMS is used to monitor the health of Surface Hub devices. See [Monitor your Surface Hub](monitor-surface-hub.md) for details. |
|
||||
| Microsoft Operations Management Suite (OMS) | OMS is used to monitor the health of Surface Hub devices. See [Monitor your Surface Hub](monitor-surface-hub.md) for details. |
|
||||
| Network and Internet access | In order to function properly, the Surface Hub should have access to a wired or wireless network. Overall, a wired connection is preferred. 802.1X Authentication is supported for both wired and wireless connections.</br></br></br>**802.1X authentication:** In Windows 10, version 1703, 802.1X authentication for wired and wireless connections is enabled by default in Surface Hub. If your organization doesn't use 802.1X authentication, there is no configuration required and Surface Hub will continue to function as normal. If you use 802.1X authentication, you must ensure that the authentication certification is installed on Surface Hub. You can deliver the certificate to Surface Hub using the [ClientCertificateInstall CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/clientcertificateinstall-csp) in MDM, or you can [create a provisioning package](provisioning-packages-for-surface-hub.md) and install it during first run or through the Settings app. After the certificate is applied to Surface Hub, 802.1X authentication will start working automatically.</br>**Note:** For more information on enabling 802.1X wired authentication on Surface Hub, see [Enable 802.1x wired authentication](enable-8021x-wired-authentication.md).</br></br>**Dynamic IP:** The Surface Hub cannot be configured to use a static IP. It must use DHCP to assign an IP address.</br></br>**Proxy servers:** If your topology requires a connection to a proxy server to reach Internet services, then you can configure it during first run, or in Settings. Proxy credentials are stored across Surface Hub sessions and only need to be set once. |
|
||||
|
||||
Additionally, note that Surface Hub requires the following open ports:
|
||||
|
||||
@ -87,7 +87,7 @@ If you deployed Skype for Business Cloud PBX with one of the hybrid voice option
|
||||
Set-CalendarProcessing surfacehub2@adatum.com -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!"
|
||||
```
|
||||
|
||||
11. Enable the mailbox as a meeting device in Skype for Business Online. Run the following cmdlet which enables the acount as a meeting device.
|
||||
11. Enable the mailbox as a meeting device in Skype for Business Online. Run the following cmdlet which enables the account as a meeting device.
|
||||
|
||||
```
|
||||
Get-CsTenant | select registrarpool
|
||||
|
||||
@ -18,7 +18,7 @@ Creating a Surface Hub device account (also known as a Room mailbox) allows Surf
|
||||
|
||||
Unlike standard Room mailboxes that remain disabled by default, you need to enable the Surface Hub 2S device account to sign on to Microsoft Teams and Skype for Business. Surface Hub 2S relies on Exchange ActiveSync, which requires an ActiveSync mailbox policy on the device account. Apply the default ActiveSync mailbox policy that comes with Exchange Online.
|
||||
|
||||
Create the account using the Microsoft 365 admin center or by using PowerShell. You can use Exhange Online PowerShell to configure specific features including:
|
||||
Create the account using the Microsoft 365 admin center or by using PowerShell. You can use Exchange Online PowerShell to configure specific features including:
|
||||
|
||||
- Calendar processing for every Surface Hub device account.
|
||||
- Custom auto replies to scheduling requests.
|
||||
@ -45,7 +45,7 @@ Create the account using the Microsoft 365 admin center or by using PowerShell.
|
||||
### Finalize setup via PowerShell
|
||||
|
||||
- **Skype for Business:** For Skype for Business only (on-premises or online), you can enable the Skype for Business object by running **Enable-CsMeetingRoom** to enable features such as Meeting room prompt for audio and Lobby hold.
|
||||
- **Calling features:** Regardless of your Office 365 licensing configuration, run *Enable-CsMeetingRoom* to enable features such as **Meeting room prompt for audio** and **Lobby hold**.
|
||||
|
||||
- **Calendar:** Set **Calendar Auto processing** for this account.
|
||||
|
||||
## Create account using PowerShell
|
||||
@ -89,4 +89,4 @@ $SfBSession = New-CsOnlineSession -Credential (Get-Credential)
|
||||
Import-PSSession $SfBSession -AllowClobber
|
||||
Enable the Skype for Business meeting room
|
||||
Enable-CsMeetingRoom -Identity account@YourDomain.com -RegistrarPoo(Get-CsTenant).Registrarpool -SipAddressType EmailAddress
|
||||
```
|
||||
```
|
||||
|
||||
@ -79,7 +79,7 @@ Important considerations for mounting systems
|
||||
|
||||
## Mounting methods compatible with Surface Hub 2S
|
||||
|
||||
Rail mounts typically have multiple holes and a set of slots, enabling compatibility across a wide range of displays. A rail attached to the wall and two mounts attached to the display enable you to securely install Surface Hub 2S to a wall. When evaluating rail mounts for compatibility, ensure they meet versatility requirements listed earlier.
|
||||
Surface Hub 2S is compatible with mounts that allow you to place it at angles of 10-70 degrees from the vertical plane. Rail mounts typically have multiple holes and a set of slots, enabling compatibility across a wide range of displays. A rail attached to the wall and two mounts attached to the display enable you to securely install Surface Hub 2S to a wall. When evaluating rail mounts for compatibility, ensure they meet versatility requirements listed earlier.
|
||||
|
||||
<br>
|
||||
***Figure 6. Surface Hub 2S rail mounts***
|
||||
|
||||
@ -18,7 +18,7 @@ You can install additional apps to fit your team or organization's needs.
|
||||
|
||||
## Developer guidelines
|
||||
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp). Apps created using the [Desktop App Converter](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-run-desktop-app-converter) will not run on Surface Hub. See a [list of apps that work with Surface Hub](https://support.microsoft.com/help/4040382/surface-Apps-that-work-with-Microsoft-Surface-Hub).
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp). Apps created using the [Desktop App Converter](https://docs.microsoft.com/windows/uwp/porting/desktop-to-uwp-run-desktop-app-converter) will not run on Surface Hub.
|
||||
- Apps must be targeted for the [Universal device family](https://msdn.microsoft.com/library/windows/apps/dn894631) or Windows Team device family.
|
||||
- Surface Hub only supports [offline-licensed apps](https://docs.microsoft.com/microsoft-store/distribute-offline-apps) from Microsoft Store for Business.
|
||||
- By default, apps must be Store-signed to be installed. During testing and development, you can also choose to run developer-signed UWP apps by placing the device in developer mode.
|
||||
|
||||
@ -18,7 +18,7 @@ You can use Windows Configuration Designer (WCD) to create provisioning packages
|
||||
|
||||
### Install Windows Configuration Designer
|
||||
|
||||
Install Windows Configuration Designer from the Windows Assessment and Deployment Kit (ADK) for Windows 10. Download and install the [ADK for Windows 10, version 1703](https://go.microsoft.com/fwlink/p/?LinkId=845542). For more information, see [Download and install the Windows ADK](https://docs.microsoft.com/en-us/windows-hardware/get-started/adk-install).
|
||||
Install Windows Configuration Designer from the Windows Assessment and Deployment Kit (ADK) for Windows 10. Download and install the [ADK for Windows 10, version 1703](https://go.microsoft.com/fwlink/p/?LinkId=845542). For more information, see [Download and install the Windows ADK](https://docs.microsoft.com/windows-hardware/get-started/adk-install).
|
||||
|
||||
### Add certificates
|
||||
|
||||
|
||||
@ -22,7 +22,7 @@ For more information, see [Officially licensed third-party accessories](http://l
|
||||
|
||||
<br>
|
||||
|
||||
If you’re not using licensed accessories, see [Customizing installation of Surface Hub 2S](surface-hub-2s-connect.md).
|
||||
If you’re not using licensed accessories, see [Customize wall mount of Surface Hub 2S](surface-hub-2s-custom-install.md).
|
||||
|
||||
| 1. **Set up your mount first** | |
|
||||
|:------ |:-------- |
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: "Configure Easy Authentication for Surface Hub 2S"
|
||||
description: "Learn how to simplify signing in to Surface Hub 2S using Easy Authentication on your mobile device."
|
||||
title: "Configure password-less phone sign-in for Surface Hub 2S"
|
||||
description: "Learn how to simplify signing in to Surface Hub 2S using password-less phone sign-in on your mobile device."
|
||||
keywords: separate values with commas
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
@ -12,14 +12,14 @@ ms.date: 06/20/2019
|
||||
ms.localizationpriority: Normal
|
||||
---
|
||||
|
||||
# Configure Easy Authentication for Surface Hub 2S
|
||||
# Configure password-less phone sign-in for Surface Hub 2S
|
||||
|
||||
Easy Authentication simplifies signing-in to your meetings and files on Surface Hub 2S.
|
||||
Password-less phone sign-in simplifies signing-in to your meetings and files on Surface Hub 2S.
|
||||
|
||||
> [!NOTE]
|
||||
> Easy Authentication requires that your primary email address must match your UPN.
|
||||
> Password-less phone sign-in requires that your primary email address must match your UPN.
|
||||
|
||||
## To set up Easy Authentication
|
||||
## To set up password-less phone sign-in
|
||||
|
||||
1. Download the [Microsoft Authenticator](https://www.microsoft.com/en-us/account/authenticator) app for iPhone or Android to your phone.
|
||||
2. From your PC, go to [https://aka.ms/MFASetup](https://aka.ms/MFASetup) , sign in with your account, and select **Next.**
|
||||
@ -37,3 +37,6 @@ Easy Authentication simplifies signing-in to your meetings and files on Surface
|
||||
1. On Surface Hub, sign into **My meetings and files** and select **Send notification** when prompted.
|
||||
2. Match the number displayed on your phone with the number displayed on Surface Hub to approve your sign-in request.
|
||||
3. If prompted, enter the PIN or biometric ID on your phone to complete sign-in.
|
||||
|
||||
## Learn more
|
||||
For more information, see [Password-less phone sign-in with the Microsoft Authenticator app](https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-phone-sign-in).
|
||||
|
||||
@ -28,7 +28,7 @@ The figure below shows the location of ports and physical buttons on a keypad at
|
||||
|**Key**|**Component**|**Description**|**Key parameters**|
|
||||
|:--- |:--------- |:----------- |:-------------- |
|
||||
| 1 | **USB C** | **USB 3.1 Gen 1** <br> Use as a walk-up port for plugging in peripherals such as thumb-drives. Guest ports are on each side of the device (4).<br> <br> *NOTE: This is the recommended port for connecting an external camera. Additional camera mount features are incorporated into the design to help support retention of attached cameras.*<br> <br> NOTE: TouchBack and video ingest are not supported on these ports. | Type C <br> <br> 15 W Port (5V/3A) |
|
||||
| 2 | **AC power** | **100-240 V input** <br> Connect to standard AC power and Surface Hub 2S will auto switch to the local power standard such as110 volts in the US and Canada or 220 volts in the UK. <br> <br> *NOTE: When the AC cord is plugged in, the system remains in an off state in which only the system management controller (SMC), real-time clock (RTC), and keypad are running.* | IEC 60320 C14 |
|
||||
| 2 | **AC power** | **100-240 V input** <br> Connect to standard AC power and Surface Hub 2S will auto switch to the local power standard such as110 volts in the US and Canada or 220 volts in the UK. | IEC 60320 C14 |
|
||||
| 3 | **DC power** | **24V DC input port** <br> Use for connecting to mobile battery. | Xbox1 Dual barrel to Anderson connector |
|
||||
| 4 | **Ethernet** | **1000/100/10 Base-T** <br> Use for providing a continuous connection in a corporate environment and related scenarios requiring maximum stability or capacity. | RJ45 |
|
||||
| 5 | **USB-A** | **USB 3.1 Gen 1** <br> Use as a walk-up port for plugging in peripherals such as thumb-drives. | Type A<br>7.5 W Port (5V/1.5A) |
|
||||
|
||||
@ -16,34 +16,34 @@ ms.localizationpriority: Normal
|
||||
|
||||
## Office 365 readiness
|
||||
|
||||
You may use Exchange and Skype for Business on-premises with Surface Hub 2S. However, if you use Exchange Online, Skype for Business Online, Microsoft Teams or Microsoft Whiteboard, and intend to manage Surface Hub 2S with Intune, first review the [Office 365 requirements for endpoints](https://docs.microsoft.com/en-us/office365/enterprise/office-365-endpoints).
|
||||
You may use Exchange and Skype for Business on-premises with Surface Hub 2S. However, if you use Exchange Online, Skype for Business Online, Microsoft Teams or Microsoft Whiteboard, and intend to manage Surface Hub 2S with Intune, first review the [Office 365 requirements for endpoints](https://docs.microsoft.com/office365/enterprise/office-365-endpoints).
|
||||
|
||||
Office 365 endpoints help optimize your network by sending all trusted Office 365 network requests directly through your firewall, bypassing all additional packet level inspection or processing. This feature reduces latency and your perimeter capacity requirements.
|
||||
|
||||
Microsoft regularly updates the Office 365 service with new features and functionality, which may alter required ports, URLs, and IP addresses. To evaluate, configure, and stay up-to-date with changes, subscribe to the [Office 365 IP Address and URL Web service](https://docs.microsoft.com/en-us/office365/enterprise/office-365-ip-web-service).
|
||||
Microsoft regularly updates the Office 365 service with new features and functionality, which may alter required ports, URLs, and IP addresses. To evaluate, configure, and stay up-to-date with changes, subscribe to the [Office 365 IP Address and URL Web service](https://docs.microsoft.com/office365/enterprise/office-365-ip-web-service).
|
||||
|
||||
## Device affiliation
|
||||
|
||||
Use Device affiliation to manage user access to the Settings app on Surface Hub 2S.
|
||||
With the Windows 10 Team Edition operating system — that runs on Surface Hub 2S — only authorized users can adjust settings via the settings app. Since choosing the affiliation can impact feature availability, plan appropriately to ensure that users can access features as intended.
|
||||
With the Windows 10 Team Edition operating system — that runs on Surface Hub 2S — only authorized users can adjust settings via the Settings app. Since choosing the affiliation can impact feature availability, plan appropriately to ensure that users can access features as intended.
|
||||
|
||||
> [!NOTE]
|
||||
> You can only set Device affiliation during the initial out-of-box experience (OOBE) setup. If you need to reset Device affiliation, you’ll have to repeat OOBE setup.
|
||||
|
||||
## No affiliation
|
||||
|
||||
No affiliation is like having Surface Hub 2S in a workgroup with a different local Administrator account on each Surface Hub 2S. If you choose No affiliation, you must locally save the [Bitlocker Key to a USB thumb drive](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-key-management-faq). You can still enroll the device with Intune, however only the local admin can access the Settings app using the account credentials configured during OOBE. You can change the Administrator account password from the Settings app.
|
||||
No affiliation is like having Surface Hub 2S in a workgroup with a different local Administrator account on each Surface Hub 2S. If you choose No affiliation, you must locally save the [Bitlocker Key to a USB thumb drive](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-key-management-faq). You can still enroll the device with Intune, however only the local admin can access the Settings app using the account credentials configured during OOBE. You can change the Administrator account password from the Settings app.
|
||||
|
||||
## Active Directory Domain Services
|
||||
|
||||
If you affiliate Surface Hub 2S with on-premises Active Directory Domain Services, you need to manage access to the Settings app via a security group on your domain, ensuring that all SG members have permissions to change settings on Surface Hub 2S. Note also the following:
|
||||
If you affiliate Surface Hub 2S with on-premises Active Directory Domain Services, you need to manage access to the Settings app via a security group on your domain, ensuring that all security group members have permissions to change settings on Surface Hub 2S. Note also the following:
|
||||
|
||||
- When Surface Hub 2S affiliates with your on-premises Active Directory Domain Services, the Bitlocker key is saved in the AD Schema.
|
||||
- When Surface Hub 2S affiliates with your on-premises Active Directory Domain Services, the Bitlocker key can be saved in the AD Schema. For more information, see [Prepare your organization for BitLocker: Planning and policies](https://docs.microsoft.com/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies).
|
||||
- Your organization’s Trusted Root CAs are pushed to the same container in Surface Hub 2S, which means you don’t need to import them using a provisioning package.
|
||||
- You can still enroll the device with Intune to centrally manage settings on your Surface Hub 2S.
|
||||
|
||||
## Azure Active Directory
|
||||
|
||||
When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S.
|
||||
When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Alternatively, you can configure the Device Administrator role to sign in to the Settings app. For more information, see [Administrator role permissions in Azure Active Directory](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#device-administrators). Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S.
|
||||
|
||||
If you enabled Intune Automatic Enrollment for your organization, Surface Hub 2S will automatically enroll itself with Intune. The device’s Bitlocker key is automatically saved in Azure AD. When affiliating Surface Hub 2S with Azure AD, single sign-on and Easy Authentication will not work.
|
||||
|
||||
@ -23,7 +23,7 @@ To begin, sign into Surface Hub 2S with admin credentials, open the **Settings**
|
||||
1. To reset, select **Get Started**.
|
||||
2. When the **Ready to reset this device** window appears, select **Reset**. Surface Hub 2S reinstalls the operating system from the recovery partition and may take up to one hour to complete.
|
||||
3. Run **the first time Setup program** to reconfigure the device.
|
||||
4. If you manage the device using Intune or other mobile device manager (MDM) solution, retire and delete the previous record and re-enroll the new device. For more information, see [Remove devices by using wipe, retire, or manually unenrolling the device](https://docs.microsoft.com/en-us/intune/devices-wipe).
|
||||
4. If you manage the device using Intune or other mobile device manager (MDM) solution, retire and delete the previous record and re-enroll the new device. For more information, see [Remove devices by using wipe, retire, or manually unenrolling the device](https://docs.microsoft.com/intune/devices-wipe).
|
||||
|
||||
<br>
|
||||
*Figure 1. Reset and recovery for Surface Hub 2S.*
|
||||
|
||||
@ -39,7 +39,7 @@ Use the Microsoft Surface UEFI Configurator to turn on or off the following UEFI
|
||||
|
||||
## Create UEFI configuration image
|
||||
|
||||
Unlike other Surface devices, you cannot use an MSI file or a Win PE image to apply these settings on Surface Hub 2S. Instead, you need to create a USB image to load into the device. To create a Surface Hub 2S UEFI configuration image, download and install the latest version of the Microsoft Surface UEFI Configurator from the [Surface Tools for IT](https://www.microsoft.com/download/details.aspx?id=46703) page in the Microsoft Download Center. For more information about using UEFI and SEMM, see [Microsoft Surface Enterprise Management Mode](https://docs.microsoft.com/en-us/surface/surface-enterprise-management-mode).
|
||||
Unlike other Surface devices, you cannot use an MSI file or a Win PE image to apply these settings on Surface Hub 2S. Instead, you need to create a USB image to load into the device. To create a Surface Hub 2S UEFI configuration image, download and install the latest version of the Microsoft Surface UEFI Configurator from the [Surface Tools for IT](https://www.microsoft.com/download/details.aspx?id=46703) page in the Microsoft Download Center. For more information about using UEFI and SEMM, see [Microsoft Surface Enterprise Management Mode](https://docs.microsoft.com/surface/surface-enterprise-management-mode).
|
||||
|
||||
## To configure UEFI on Surface Hub 2S
|
||||
|
||||
|
||||
@ -35,7 +35,7 @@ Whether mounted to a wall or installed on the mobile stand, the areas where you
|
||||
- Room temperatures no cooler than 10°C (50° F) and no hotter than 35°C (95° F).
|
||||
- Relative humidity no lower than 20 percent and no higher than 80 percent.
|
||||
|
||||
For detailed room planning guidance and more information about Microsoft Teams Rooms see [Plan Microsoft Teams Rooms.](https://docs.microsoft.com/en-us/MicrosoftTeams/room-systems/skype-room-systems-v2-0)
|
||||
For detailed room planning guidance and more information about Microsoft Teams Rooms see [Plan Microsoft Teams Rooms.](https://docs.microsoft.com/MicrosoftTeams/room-systems/skype-room-systems-v2-0)
|
||||
|
||||
## Managing Surface Hub 2S location
|
||||
|
||||
|
||||
@ -77,7 +77,7 @@ USB type A, side I/O |  | Provides 1 USB 3.0 connection for U
|
||||
USB type A, bottom I/O with blue insulator |  | Provides USB 3.0 connection.
|
||||
3.5mm, bottom I/O |  | Provides analog audio out.
|
||||
Display port, bottom I/O |  | Provides mirrored video out function to another display.
|
||||
IEC/EN60320-C13 receptable with hard switch |  | Provides AC input and compliance with EU power requirements.
|
||||
IEC/EN60320-C13 receptacle with hard switch |  | Provides AC input and compliance with EU power requirements.
|
||||
RJ45, bottom I/O |  | Connects to Ethernet.
|
||||
RJ11, bottom I/O |  | Connects to room control systems.
|
||||
|
||||
|
||||
@ -79,7 +79,7 @@ USB type A, side I/O |  | Provides 1 USB 3.0 connection for U
|
||||
USB type A, bottom I/O with blue insulator |  | Provides USB 3.0 connection.
|
||||
3.5mm, bottom I/O |  | Provides analog audio out.
|
||||
Display port, bottom I/O |  | Provides mirrored video out function to another display.
|
||||
IEC/EN60320-C13 receptable with hard switch |  | Provides AC input and compliance with EU power requirements.
|
||||
IEC/EN60320-C13 receptacle with hard switch |  | Provides AC input and compliance with EU power requirements.
|
||||
RJ45, bottom I/O |  | Connects to Ethernet.
|
||||
RJ11, bottom I/O |  | Connects to room control systems.
|
||||
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Use fully qualified doman name with Surface Hub
|
||||
title: Use fully qualified domain name with Surface Hub
|
||||
description: Troubleshoot common problems, including setup issues, Exchange ActiveSync errors.
|
||||
keywords: ["Troubleshoot common problems", "setup issues", "Exchange ActiveSync errors"]
|
||||
author: levinec
|
||||
|
||||
@ -76,7 +76,7 @@ In Replacement PC mode, the power states are only Ready and Off and only change
|
||||
| 0 | S5 | Off |
|
||||
| 5 | S0 | Ready |
|
||||
|
||||
For a control device, anything other than 5 / Ready should be considered off. Each PowerOn command results in two state changes and reponses.
|
||||
For a control device, anything other than 5 / Ready should be considered off. Each PowerOn command results in two state changes and responses.
|
||||
|
||||
| Command | State change| Response |
|
||||
| --- | --- | --- |
|
||||
|
||||
@ -21,7 +21,7 @@ Harness the power of Surface, Windows, and Office connected together through the
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/task-checklist-planning-blue.svg" alt="Plan" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/task-checklist-planning-blue.svg" alt="Plan" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -39,7 +39,7 @@ Harness the power of Surface, Windows, and Office connected together through the
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/deploy-blue.svg" alt="Deploy" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/deploy-blue.svg" alt="Deploy" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -58,7 +58,7 @@ Harness the power of Surface, Windows, and Office connected together through the
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/process-flow-blue.svg" alt="Manage" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/process-flow-blue.svg" alt="Manage" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -80,7 +80,7 @@ Harness the power of Surface, Windows, and Office connected together through the
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/security-blue.svg" alt="Secure" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/security-blue.svg" alt="Secure" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
@ -99,7 +99,7 @@ Harness the power of Surface, Windows, and Office connected together through the
|
||||
<div class="card">
|
||||
<div class="cardImageOuter">
|
||||
<div class="cardImage">
|
||||
<img src="https://docs.microsoft.com/en-us/office/media/icons/connector-blue.svg" alt="Support" />
|
||||
<img src="https://docs.microsoft.com/office/media/icons/connector-blue.svg" alt="Support" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="cardText">
|
||||
|
||||
@ -118,7 +118,7 @@ The following steps show you how to create a deployment share for Windows 10 tha
|
||||
|
||||
- Creation of rules and task sequences for Windows deployment
|
||||
|
||||
|
||||
|
||||
|
||||
*Figure 5. The Installation Progress window*
|
||||
|
||||
|
||||
@ -166,6 +166,13 @@ You can select to run a wide range of logs across applications, drivers, hardwar
|
||||
|
||||
|
||||
## Changes and updates
|
||||
### Version 2.41.139.0
|
||||
*Release date: June 24, 2019*<br>
|
||||
This version of Surface Diagnostic Toolkit for Business adds support for the following:
|
||||
- Driver version information included in logs and report.
|
||||
- Ability to provide feedback about the app <br>
|
||||
Please note that even though you turn off telemtry, windows update and feedback still connect to the internet.
|
||||
|
||||
### Version 2.36.139.0
|
||||
*Release date: April 26, 2019*<br>
|
||||
This version of Surface Diagnostic Toolkit for Business adds support for the following:
|
||||
|
||||
Reference in New Issue
Block a user