Merge remote-tracking branch 'refs/remotes/origin/master' into live

This commit is contained in:
LizRoss 2017-02-21 09:54:56 -08:00
commit 548d1ffdb7
14 changed files with 14 additions and 14 deletions

View File

@ -5,7 +5,7 @@ ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Change history for Windows 10 for Education # Change history for Windows 10 for Education

View File

@ -5,7 +5,7 @@ keywords: school
ms.prod: W10 ms.prod: W10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: trudyha
--- ---
# Get Minecraft: Education Edition # Get Minecraft: Education Edition

View File

@ -5,7 +5,7 @@ keywords: ["school"]
ms.prod: W10 ms.prod: W10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: trudyha
--- ---
# For IT administrators - get Minecraft: Education Edition # For IT administrators - get Minecraft: Education Edition

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Technical reference for the Set up School PCs app # Technical reference for the Set up School PCs app

View File

@ -5,7 +5,7 @@ keywords: ["shared cart", "shared PC", "school"]
ms.prod: W10 ms.prod: W10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: CelesteDG
--- ---
# Set up student PCs to join domain # Set up student PCs to join domain

View File

@ -5,7 +5,7 @@ keywords: ["shared cart", "shared PC", "school"]
ms.prod: W10 ms.prod: W10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: CelesteDG
--- ---
# Provision student PCs with apps # Provision student PCs with apps

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Provisioning options for Windows 10 # Provisioning options for Windows 10

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Take a Test app technical reference # Take a Test app technical reference

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Set up Take a Test on multiple PCs # Set up Take a Test on multiple PCs

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Set up Take a Test on a single PC # Set up Take a Test on a single PC

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Take tests in Windows 10 # Take tests in Windows 10

View File

@ -5,7 +5,7 @@ keywords: ["school"]
ms.prod: W10 ms.prod: W10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
author: jdeckerMS author: trudyha
--- ---
# For teachers - get Minecraft: Education Edition # For teachers - get Minecraft: Education Edition

View File

@ -6,7 +6,7 @@ ms.prod: w10
ms.mktglfcycl: plan ms.mktglfcycl: plan
ms.sitesec: library ms.sitesec: library
ms.pagetype: edu ms.pagetype: edu
author: jdeckerMS author: CelesteDG
--- ---
# Use the Set up School PCs app # Use the Set up School PCs app

View File

@ -40,7 +40,7 @@ To create a code integrity policy, copy each of the following commands into an e
> - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the code integrity policy. In contrast, if you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers, in other words, the whitelist will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from Device Guard. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application. > - When you specify the **-UserPEs** parameter (to include user mode executables in the scan), rule option **0 Enabled:UMCI** is automatically added to the code integrity policy. In contrast, if you do not specify **-UserPEs**, the policy will be empty of user mode executables and will only have rules for kernel mode binaries like drivers, in other words, the whitelist will not include applications. If you create such a policy and later add rule option **0 Enabled:UMCI**, all attempts to start applications will cause a response from Device Guard. In audit mode, the response is logging an event, and in enforced mode, the response is blocking the application.
> - You can add the **-Fallback** parameter to catch any applications not discovered using the primary file rule level specified by the *Level* parameter. For more information about file rule level options, see [Code integrity file rule levels](deploy-code-integrity-policies-policy-rules-and-file-rules.md#code-integrity-file-rule-levels) in “Deploy code integrity policies: policy rules and file rules.” > - You can add the **-Fallback** parameter to catch any applications not discovered using the primary file rule level specified by the **-Level** parameter. For more information about file rule level options, see [Code integrity file rule levels](deploy-code-integrity-policies-policy-rules-and-file-rules.md#code-integrity-file-rule-levels) in “Deploy code integrity policies: policy rules and file rules.”
> - To specify that the code integrity policy scan only a specific drive, include the **-ScanPath** parameter followed by a path. Without this parameter, the entire system is scanned. > - To specify that the code integrity policy scan only a specific drive, include the **-ScanPath** parameter followed by a path. Without this parameter, the entire system is scanned.