mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 05:17:22 +00:00
branding and UI changes
This commit is contained in:
parent
7da923aa87
commit
576b72a649
@ -21,35 +21,27 @@ localizationpriority: high
|
|||||||
When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies.
|
When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies.
|
||||||
|
|
||||||
## In this section
|
## In this section
|
||||||
|
- [Create a code integrity policy based on a reference device](#create-ci-policy)
|
||||||
|
- [Create catalog files for your unsigned app](#create-catalog-files)
|
||||||
- [Create a code integrity policy based on a reference device](#create-ci-policy)
|
- [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal)
|
||||||
- [Create catalog files for your unsigned app](#create-catalog-files)
|
|
||||||
- [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal)
|
|
||||||
|
|
||||||
## <a href="" id="create-ci-policy"></a>Create a code integrity policy based on a reference device
|
## <a href="" id="create-ci-policy"></a>Create a code integrity policy based on a reference device
|
||||||
|
|
||||||
|
|
||||||
To add an unsigned app to a code integrity policy, your code integrity policy must be created from golden image machine. For more information, see [Create a Device Guard code integrity policy based on a reference device](https://technet.microsoft.com/library/mt243445.aspx).
|
To add an unsigned app to a code integrity policy, your code integrity policy must be created from golden image machine. For more information, see [Create a Device Guard code integrity policy based on a reference device](https://technet.microsoft.com/library/mt243445.aspx).
|
||||||
|
|
||||||
## <a href="" id="create-catalog-files"></a>Create catalog files for your unsigned app
|
## <a href="" id="create-catalog-files"></a>Create catalog files for your unsigned app
|
||||||
|
|
||||||
|
|
||||||
Creating catalog files starts the process for adding an unsigned app to a code integrity policy.
|
Creating catalog files starts the process for adding an unsigned app to a code integrity policy.
|
||||||
|
|
||||||
Before you get started, be sure to review these best practices and requirements:
|
Before you get started, be sure to review these best practices and requirements:
|
||||||
|
|
||||||
**Requirements**
|
**Requirements**
|
||||||
|
|
||||||
- You'll use Package Inspector during this process.
|
- You'll use Package Inspector during this process.
|
||||||
|
- Only perform this process with a code integrity policy running in audit mode. You should not perform this process on a system running an enforced Device Guard policy.
|
||||||
- Only perform this process with a code integrity policy running in audit mode. You should not perform this process on a system running an enforced Device Guard policy.
|
|
||||||
|
|
||||||
**Best practices**
|
**Best practices**
|
||||||
|
|
||||||
- **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
- **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
||||||
|
- **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted.
|
||||||
- **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted.
|
|
||||||
|
|
||||||
Copy the commands for each step into an elevated Windows PowerShell session. You'll use Package Inspector to find and trust all binaries in the app.
|
Copy the commands for each step into an elevated Windows PowerShell session. You'll use Package Inspector to find and trust all binaries in the app.
|
||||||
|
|
||||||
@ -85,34 +77,25 @@ After you're done, the files are saved to your desktop. You still need to sign t
|
|||||||
|
|
||||||
## <a href="" id="catalog-signing-device-guard-portal"></a>Catalog signing with Device Guard signing portal
|
## <a href="" id="catalog-signing-device-guard-portal"></a>Catalog signing with Device Guard signing portal
|
||||||
|
|
||||||
|
|
||||||
To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-windows-store-for-business.md).
|
To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-windows-store-for-business.md).
|
||||||
|
|
||||||
Catalog signing is a vital step to adding your unsigned apps to your code integrity policy.
|
Catalog signing is a vital step to adding your unsigned apps to your code integrity policy.
|
||||||
|
|
||||||
**To sign a catalog file with Device Guard signing portal**
|
**To sign a catalog file with Device Guard signing portal**
|
||||||
|
|
||||||
1. Sign in to the Store for Business
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
|
2. Click **Settings**, click **Store settings**, and then click **Device Guard**.
|
||||||
2. Click **Settings**, and then choose **Device Guard signing**.
|
3. Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files).
|
||||||
|
4. After the files are uploaded, click **Sign** to sign the catalog files.
|
||||||
3. Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files).
|
5. Click Download to download each item:
|
||||||
|
- signed catalog file
|
||||||
4. After the files are uploaded, click **Sign** to sign the catalog files.
|
- default policy
|
||||||
|
- root certificate for your organization
|
||||||
5. Click Download to download each item:
|
|
||||||
|
|
||||||
- signed catalog file
|
|
||||||
|
|
||||||
- default policy
|
|
||||||
|
|
||||||
- root certificate for your organization
|
|
||||||
|
|
||||||
When you use the Device Guard signing portal to sign a catalog file, the signing certificate is added to the default policy. When you download the signed catalog file, you should also download the default policy and merge this code integrity policy with your existing code integrity policies to protect machines running the catalog file. You need to do this step to trust and run your catalog files. For more information, see the Merging code integrity policies in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
When you use the Device Guard signing portal to sign a catalog file, the signing certificate is added to the default policy. When you download the signed catalog file, you should also download the default policy and merge this code integrity policy with your existing code integrity policies to protect machines running the catalog file. You need to do this step to trust and run your catalog files. For more information, see the Merging code integrity policies in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
||||||
|
|
||||||
6. Open the root certificate that you downloaded, and follow the steps in **Certificate Import wizard** to install the certificate in your machine's certificate store.
|
6. Open the root certificate that you downloaded, and follow the steps in **Certificate Import wizard** to install the certificate in your machine's certificate store.
|
||||||
|
7. Deploy signed catalogs to your managed devices. For more information, see Deploy catalog files with Group Policy, or Deploy catalog files with System Center Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
||||||
7. Deploy signed catalogs to your managed devices. For more information, see Deploy catalog files with Group Policy, or Deploy catalog files with System Center Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -9,16 +9,14 @@ ms.pagetype: store
|
|||||||
author: TrudyHa
|
author: TrudyHa
|
||||||
---
|
---
|
||||||
|
|
||||||
# App inventory management for Windows Store for Business and Education
|
# App inventory management for Microsoft Store for Business and Education
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
You can manage all apps that you've acquired on your **Apps & software** page.
|
You can manage all apps that you've acquired on your **Apps & software** page. This page shows all of the content you've acquired, including apps that from Microsoft Store, and line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role.
|
||||||
|
|
||||||
**Apps & software** shows content you've acquired. This includes all apps that you've acquired from Microsoft Store, and the line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role.
|
|
||||||
|
|
||||||
All of these apps are treated the same once they are in your inventory and you can perform app lifecycle tasks for them: distribute apps, add apps to private store, review license details, and reclaim app licenses.
|
All of these apps are treated the same once they are in your inventory and you can perform app lifecycle tasks for them: distribute apps, add apps to private store, review license details, and reclaim app licenses.
|
||||||
|
|
||||||
@ -45,18 +43,12 @@ The last modified date does not correspond to when an app was last updated in Mi
|
|||||||
|
|
||||||
There are a couple of ways to find specific apps, or groups of apps in your inventory.
|
There are a couple of ways to find specific apps, or groups of apps in your inventory.
|
||||||
|
|
||||||
**Search** - Use the Search box to search for an app.
|
**Search** - Use the Search box to search for an app.<br>
|
||||||
|
|
||||||
**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
|
**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
|
||||||
|
|
||||||
- **License type** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model).
|
- **License type** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model).
|
||||||
|
|
||||||
- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
|
- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
|
||||||
|
|
||||||
- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
|
- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
|
||||||
|
|
||||||
- **Product type** - Product categories, such as app, or game.
|
- **Product type** - Product categories, such as app, or game.
|
||||||
|
|
||||||
- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
|
- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
|
||||||
|
|
||||||
## Manage apps in your inventory
|
## Manage apps in your inventory
|
||||||
@ -87,14 +79,9 @@ Once an app is in your private store, people in your org can install the app on
|
|||||||
|
|
||||||
1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Apps & software**.
|
2. Click **Manage**, and then choose **Apps & software**.
|
||||||
|
|
||||||
<!---  -->
|
|
||||||
|
|
||||||
3. Use **Refine results** to search for online-licensed apps under **License type**.
|
3. Use **Refine results** to search for online-licensed apps under **License type**.
|
||||||
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
|
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
|
||||||
|
|
||||||
<!---  -->
|
|
||||||
|
|
||||||
The value under **Private store** for the app will change to pending. It will take approximately twelve hours before the app is available in the private store.
|
The value under **Private store** for the app will change to pending. It will take approximately twelve hours before the app is available in the private store.
|
||||||
Employees can claim apps that admins added to the private store by doing the following.
|
Employees can claim apps that admins added to the private store by doing the following.
|
||||||
|
|
||||||
@ -110,7 +97,7 @@ If you decide that you don't want an app available for employees to install on t
|
|||||||
|
|
||||||
**To remove an app from the private store**
|
**To remove an app from the private store**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Apps & software**.
|
2. Click **Manage**, and then choose **Apps & software**.
|
||||||
3. Find an app, click the ellipses under **Action**, choose **Remove from private store**, and then click **Remove**.
|
3. Find an app, click the ellipses under **Action**, choose **Remove from private store**, and then click **Remove**.
|
||||||
|
|
||||||
@ -118,7 +105,7 @@ The app will still be in your inventory, but your employees will not have access
|
|||||||
|
|
||||||
**To assign an app to an employee**
|
**To assign an app to an employee**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Inventory**.
|
2. Click **Manage**, and then choose **Inventory**.
|
||||||
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
||||||
4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
|
4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
|
||||||
@ -131,43 +118,29 @@ For each app in your inventory, you can view and manage license details. This gi
|
|||||||
|
|
||||||
**To view license details**
|
**To view license details**
|
||||||
|
|
||||||
1. Sign in to [Store for Busines.s](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com)
|
1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Apps & software**.
|
2. Click **Manage**, and then choose **Apps & software**.
|
||||||
3. Click the ellipses for an app, and then choose **View license details**.
|
3. Click an app you want to manage.
|
||||||
|
4. On the app page, you'll see the names of people in your organization who have installed the app and are using one of the licenses. From here, you can:
|
||||||
|
|
||||||
<!--- -->
|
- Assign the app to other people in your organization.
|
||||||
|
- Reclaim app licenses.
|
||||||
|
- View app details.
|
||||||
|
- Add the app to your private store, if it is not in the private store.
|
||||||
|
|
||||||
You'll see the names of people in your organization who have installed the app and are using one of the licenses.
|
You can assign the app to more people in your organization, or reclaim licenses.
|
||||||
|
|
||||||
<!--- -->
|
**To assign an app to more people**
|
||||||
|
|
||||||
On **Assigned licenses**, you can do several things:
|
- On the app page, click **Assign users**, type the email address for the person that you're assigning the app to, and click **Assign**.
|
||||||
|
|
||||||
- Assign the app to other people in your organization.
|
Micrososft Store updates the list of assigned licenses.
|
||||||
|
|
||||||
- Reclaim app licenses.
|
**To reclaim licenses**
|
||||||
|
|
||||||
- View app details.
|
- On the app page, choose the person you want to reclaim the license from, click the ellipses, and then click **Reclaim licenses**.
|
||||||
|
|
||||||
- Add the app to your private store, if it is not in the private store.
|
Microsoft Store updates the list of assigned licenses.
|
||||||
|
|
||||||
You can assign the app to more people in your organization, or reclaim licenses.
|
|
||||||
|
|
||||||
**To assign an app to more people**
|
|
||||||
|
|
||||||
- Click **Assign to people**, type the email address for the employee that you're assigning the app to, and click **Assign**.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
Store for Business updates the list of assigned licenses.
|
|
||||||
|
|
||||||
**To reclaim licenses**
|
|
||||||
|
|
||||||
- Choose the person you want to reclaim the license from, click **Reclaim licenses**, and then click **Reclaim licenses**.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
Store for Business updates the list of assigned licenses.
|
|
||||||
|
|
||||||
## Purchase additional licenses
|
## Purchase additional licenses
|
||||||
You can purchase additional licenses for apps in your Inventory.
|
You can purchase additional licenses for apps in your Inventory.
|
||||||
|
@ -12,49 +12,30 @@ localizationpriority: high
|
|||||||
|
|
||||||
# Configure an MDM provider
|
# Configure an MDM provider
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Windows Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content.
|
For companies or organizations using mobile device management (MDM) tools,those tools can synchronize with Windows Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content.
|
||||||
|
|
||||||
Your management tool needs to be installed and configured with Azure AD, in the same directory that you are using for Store for Business. Once that's done, you can configure it to work with Store for Business
|
Your management tool needs to be installed and configured with Azure AD, in the same directory that you are using for Store for Business. Once that's done, you can configure it to work with Store for Business
|
||||||
|
|
||||||
**To configure a management tool in Azure AD**
|
**To configure a management tool in Azure AD**
|
||||||
|
|
||||||
1. Sign in to the Azure Portal as an Administrator.
|
1. Sign in to the Azure Portal as an Administrator.
|
||||||
|
|
||||||
2. Click **Active Directory**, and then choose your directory.
|
2. Click **Active Directory**, and then choose your directory.
|
||||||
|
|
||||||
3. Click **Applications**, find the application, and add it to your directory.
|
3. Click **Applications**, find the application, and add it to your directory.
|
||||||
|
|
||||||
After your management tool is added to your Azure AD directory, you can configure it to work with Store for Business. You can configure multiple management tools - just repeat the following procedure.
|
After your management tool is added to your Azure AD directory, you can configure it to work with Microsoft Store. You can configure multiple management tools - just repeat the following procedure.
|
||||||
|
|
||||||
**To configure a management tool in Store for Business**
|
**To configure a management tool in Store for Business**
|
||||||
|
|
||||||
1. Log in to Store for Business.
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
|
||||||
|
2. Click **Manage**, click **Store settings**, and then click **Management tools**.
|
||||||
2. Click **Settings**, and then choose **Management tool**.
|
3. From the list of MDM tools, select the one you want to synchronize with Microsoft Store, and then click **Activate.**
|
||||||
|
|
||||||
You'll see a list of available MDM tools.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
3. Choose the MDM tool you want to synchronize with Store for Business, and then click **Activate.**
|
|
||||||
|
|
||||||
Your MDM tool is ready to use with Store for Business. Consult docs for your management tool to learn how to distribute apps from your synchronized inventory.
|
|
||||||
|
|
||||||
See [Manage apps you purchased from Windows Store for Business with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx), or [Manage apps from Windows Store for Business with System Center Configuration Manager](https://docs.microsoft.com/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) to learn how to configure synchroniztion and deploy apps.
|
|
||||||
|
|
||||||
For third-party MDM providers or management servers, check your product documentation.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Your MDM tool is ready to use with Microsoft Store. To learn how to configure synchroniztion and deploy apps, see these topics:
|
||||||
|
- [Manage apps you purchased from Windows Store for Business with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx)
|
||||||
|
- [Manage apps from Windows Store for Business with System Center Configuration Manager](https://docs.microsoft.com/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business)
|
||||||
|
|
||||||
|
For third-party MDM providers or management servers, check your product documentation.
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Device Guard signing (Windows 10)
|
title: Device Guard signing (Windows 10)
|
||||||
description: Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business.
|
description: Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business and Microsoft Store for Education.
|
||||||
ms.assetid: 8D9CD2B9-5FC6-4C3D-AA96-F135AFEEBB78
|
ms.assetid: 8D9CD2B9-5FC6-4C3D-AA96-F135AFEEBB78
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -18,7 +18,7 @@ localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
Device Guard signing is a Device Guard feature that is available in Microsoft Store for Business. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.
|
Device Guard signing is a Device Guard feature that is available in Microsoft Store for Business and Education. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files,they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.
|
||||||
|
|
||||||
Device Guard is a feature set that consists of both hardware and software system integrity hardening features. These features use new virtualization-based security options and the trust-nothing mobile device operating system model. A key feature in this model is called configurable code integrity, which allows your organization to choose exactly which software or trusted software publishers are allowed to run code on your client machines. Also, Device Guard offers organizations a way to sign existing line-of-business (LOB) applications so that they can trust their own code, without the requirement that the application be repackaged. Also, this same method of signing allows organizations to trust individual third-party applications. For more information, see [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
Device Guard is a feature set that consists of both hardware and software system integrity hardening features. These features use new virtualization-based security options and the trust-nothing mobile device operating system model. A key feature in this model is called configurable code integrity, which allows your organization to choose exactly which software or trusted software publishers are allowed to run code on your client machines. Also, Device Guard offers organizations a way to sign existing line-of-business (LOB) applications so that they can trust their own code, without the requirement that the application be repackaged. Also, this same method of signing allows organizations to trust individual third-party applications. For more information, see [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
||||||
|
|
||||||
@ -30,8 +30,6 @@ Device Guard is a feature set that consists of both hardware and software system
|
|||||||
| [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) | Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal. |
|
| [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) | Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal. |
|
||||||
|
|
||||||
## File and size limits
|
## File and size limits
|
||||||
|
|
||||||
|
|
||||||
When you're uploading files for Device Guard signing, there are a few limits for files and file size:
|
When you're uploading files for Device Guard signing, there are a few limits for files and file size:
|
||||||
|
|
||||||
| Description | Limit |
|
| Description | Limit |
|
||||||
@ -40,11 +38,7 @@ When you're uploading files for Device Guard signing, there are a few limits for
|
|||||||
| Maximum size for multiple files (uploaded in a group) | 4 MB |
|
| Maximum size for multiple files (uploaded in a group) | 4 MB |
|
||||||
| Maximum number of files per upload | 15 files |
|
| Maximum number of files per upload | 15 files |
|
||||||
|
|
||||||
|
## File types
|
||||||
|
|
||||||
## File types
|
|
||||||
|
|
||||||
|
|
||||||
Catalog and policy files have required files types.
|
Catalog and policy files have required files types.
|
||||||
|
|
||||||
| File | Required file type |
|
| File | Required file type |
|
||||||
@ -52,23 +46,8 @@ Catalog and policy files have required files types.
|
|||||||
| catalog files | .cat |
|
| catalog files | .cat |
|
||||||
| policy files | .bin |
|
| policy files | .bin |
|
||||||
|
|
||||||
|
## Store for Business roles and permissions
|
||||||
|
|
||||||
## Store for Business roles and permissions
|
|
||||||
|
|
||||||
|
|
||||||
Signing code integrity policies and access to Device Guard portal requires the Device Guard signer role.
|
Signing code integrity policies and access to Device Guard portal requires the Device Guard signer role.
|
||||||
|
|
||||||
## Device Guard signing certificates
|
## Device Guard signing certificates
|
||||||
|
All certificates generated by the Device Guard signing service are unique per customer and are independent of the Microsoft production code signing certificate authorities. All Certification Authority (CA) keys are stored within the cryptographic boundary of Federal Information Processing Standards (FIPS) publication 140-2 compliant hardware security modules. After initial generation, root certificate keys and top level CA keys are removed from the online signing service, encrypted, and stored offline.
|
||||||
|
|
||||||
All certificates generated by the Device Guard signing service are unique per customer and are independent of the Microsoft production code signing certificate authorities. All Certification Authority (CA) keys are stored within the cryptographic boundary of Federal Information Processing Standards (FIPS) publication 140-2 compliant hardware security modules. After initial generation, root certificate keys and top level CA keys are removed from the online signing service, encrypted, and stored offline.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Manage access to private store (Windows 10)
|
title: Manage access to private store (Windows 10)
|
||||||
description: You can manage access to your private store in Windows Store for Business.
|
description: You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
|
||||||
ms.assetid: 4E00109C-2782-474D-98C0-02A05BE613A5
|
ms.assetid: 4E00109C-2782-474D-98C0-02A05BE613A5
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -17,13 +17,13 @@ author: TrudyHa
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
You can manage access to your private store in Windows Store for Business.
|
You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
|
||||||
|
|
||||||
Organizations might want control the set of apps that are available to their employees, and not show the full set of applications that are in the Windows Store. Using the private store with the Store for Business, an administrator can curate the set of apps that are available to their employees.
|
You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in the Windows Store. Using the private store with the Micrososft Store for Business and Eduction, admins can curate the set of apps that are available.
|
||||||
|
|
||||||
The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this:
|
The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this:
|
||||||
|
|
||||||

|
<!---  -->
|
||||||
|
|
||||||
Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store.
|
Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store.
|
||||||
|
|
||||||
@ -41,7 +41,7 @@ For more information on configuring an MDM provider, see [Configure an MDM provi
|
|||||||
|
|
||||||
## Show private store only using Group Policy
|
## Show private store only using Group Policy
|
||||||
|
|
||||||
If you're using Windows Store for Business and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
|
If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
|
||||||
|
|
||||||
**Only display the private store within the Windows Store app** group policy is supported on the following Windows 10 editions:
|
**Only display the private store within the Windows Store app** group policy is supported on the following Windows 10 editions:
|
||||||
- Enterprise
|
- Enterprise
|
||||||
@ -63,9 +63,7 @@ You can also prevent employees from using the Windows Store. For more informatio
|
|||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
|
||||||
|
|
||||||
[Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
[Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
||||||
|
|
||||||
[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Manage app orders in Windows Store for Business (Windows 10)
|
title: Manage app orders in Microsoft Store for Business or Microsoft Store for Education (Windows 10)
|
||||||
description: You can view your order history with Windows Store for Business.
|
description: You can view your order history with Windows Store for Business.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -9,9 +9,9 @@ author: TrudyHa
|
|||||||
localizationpriority: high
|
localizationpriority: high
|
||||||
---
|
---
|
||||||
|
|
||||||
# Manage app orders in Windows Store for Business
|
# Manage app orders in Microsoft Store for Business or Education
|
||||||
|
|
||||||
After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can buy more license for an app, view invoices, and request refunds.
|
After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can view invoices, and request refunds.
|
||||||
|
|
||||||
**Order history** lists orders in chronological order and shows:
|
**Order history** lists orders in chronological order and shows:
|
||||||
- Date ordered
|
- Date ordered
|
||||||
@ -31,18 +31,6 @@ Click to expand an order, and the following info is available:
|
|||||||
|
|
||||||
Invoices for orders are available approximatley 24 hours after your purchase. The link opens a .pdf that you can save for your records.
|
Invoices for orders are available approximatley 24 hours after your purchase. The link opens a .pdf that you can save for your records.
|
||||||
|
|
||||||
## Buy more licenses
|
|
||||||
|
|
||||||
You can purchase more copies of apps that are in your order history.
|
|
||||||
|
|
||||||
**To buy more licenses**
|
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
|
|
||||||
2. Click **Manage**, and then choose **Order history**.
|
|
||||||
3. Click an order, and then click **Buy more**.
|
|
||||||
|
|
||||||
You can buy more copies of the app from the product page.
|
|
||||||
|
|
||||||
## Refund an order
|
## Refund an order
|
||||||
|
|
||||||
Refunds work a little differently for free apps, and apps that have a price. In both cases, you must reclaim licenses before requesting a refund.
|
Refunds work a little differently for free apps, and apps that have a price. In both cases, you must reclaim licenses before requesting a refund.
|
||||||
@ -61,13 +49,12 @@ Refunds work a little differently for free apps, and apps that have a price. In
|
|||||||
**To refund an order**
|
**To refund an order**
|
||||||
|
|
||||||
Reclaim licenses, and then request a refund. If you haven't assigned licenses, start on step 5.
|
Reclaim licenses, and then request a refund. If you haven't assigned licenses, start on step 5.
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Inventory**.
|
2. Click **Manage**, and then choose **Apps & software**.
|
||||||
3. Find the app you want to refund, click the ellipses under **Action**, and then choose **View license details**.
|
3. Find the app you want to refund, click the ellipses under **Actions**, and then choose **View license details**.
|
||||||
4. Select the number of licenses you need to reclaim, and then click **Reclaim licenses**.
|
4. Select the the people who you want to reclaim license from, click the ellipses under **Actions**, and then choose **Reclaim licenses**.
|
||||||
5. Click **Manage**, and then choose **Order history**.
|
5. Click **Order history**, click the order you want to refund, and click **Refund order**.
|
||||||
6. Click the order you want to refund, and click **Refund order**.
|
|
||||||
|
|
||||||
For free apps, the app will be removed from your inventory.
|
For free apps, the app will be removed from your inventory in **Apps & software**.
|
||||||
|
|
||||||
For apps with a price, your payment option will be refunded with the cost of the app, and the app will be removed from your inventory.
|
For apps with a price, your payment option will be refunded with the cost of the app, and the app will be removed from your inventory.
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Manage private store settings (Windows 10)
|
title: Manage private store settings (Windows 10)
|
||||||
description: The private store is a feature in the Windows Store for Business that organizations receive during the sign up process.
|
description: The private store is a feature in the Microsoft Store for Business and Microsoft Store for Education that organizations receive during the sign up process.
|
||||||
ms.assetid: 2D501538-0C6E-4408-948A-2BF5B05F7A0C
|
ms.assetid: 2D501538-0C6E-4408-948A-2BF5B05F7A0C
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -12,32 +12,25 @@ localizationpriority: high
|
|||||||
|
|
||||||
# Manage private store settings
|
# Manage private store settings
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
The private store is a feature in the Windows Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
|
The private store is a feature in the Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
|
||||||
|
|
||||||
The name of your private store is shown on a tab in the Windows Store app.
|
The name of your private store is shown on a tab in the Windows Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com).
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
You can change the name of your private store in Store for Business.
|
You can change the name of your private store in Microsoft Store.
|
||||||
|
|
||||||
|
## Change private store name
|
||||||
**To change the name of your private store**
|
**To change the name of your private store**
|
||||||
|
|
||||||
1. Sign in to Store for Business.
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
|
||||||
|
2. Click **Manage**, click **Permissions**.
|
||||||
2. Click **Settings**, and then choose **Private store**.
|
3. On the **Private store ** tab, click **Change**.
|
||||||
|
|
||||||
You'll see your private store name.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
3. Click **Change**.
|
|
||||||
|
|
||||||
4. Type a new display name for your private store, and click **Save**.
|
4. Type a new display name for your private store, and click **Save**.
|
||||||
|
|
||||||

|

|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Manage settings for the Microsoft Store for Business (Windows 10)
|
title: Manage settings for the Microsoft Store for Business and Microsoft Store for Education (Windows 10)
|
||||||
description: You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant.
|
description: You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant.
|
||||||
ms.assetid: E3283D77-4DB2-40A9-9479-DDBC33D5A895
|
ms.assetid: E3283D77-4DB2-40A9-9479-DDBC33D5A895
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
@ -10,7 +10,7 @@ author: TrudyHa
|
|||||||
localizationpriority: high
|
localizationpriority: high
|
||||||
---
|
---
|
||||||
|
|
||||||
# Manage settings for the Windows Store for Business
|
# Manage settings for the Microsoft Store for Business and Microsoft Store for Education
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
@ -24,7 +24,7 @@ You can add users and groups, as well as update some of the settings associated
|
|||||||
|
|
||||||
| Topic | Description |
|
| Topic | Description |
|
||||||
| ----- | ----------- |
|
| ----- | ----------- |
|
||||||
| [Update Microsoft Store for Business account settings](update-windows-store-for-business-account-settings.md) | The **Account information** page in Microsoft Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings. |
|
| [Update Microsoft Store for Business and Education account settings](update-windows-store-for-business-account-settings.md) | The **Account information** page in Microsoft Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings. |
|
||||||
| [Manage user accounts in Microsoft Store for Business](manage-users-and-groups-windows-store-for-business.md) | Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. |
|
| [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) | Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. |
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Manage user accounts in Windows Store for Business (Windows 10)
|
title: Manage user accounts in Microsoft Store for Business and Microsoft Store for Education (Windows 10)
|
||||||
description: Windows Store for Business manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.
|
description: Microsoft Store for Business and Microsoft Store for Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.
|
||||||
ms.assetid: 5E7FA071-CABD-4ACA-8AAE-F549EFCE922F
|
ms.assetid: 5E7FA071-CABD-4ACA-8AAE-F549EFCE922F
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -10,7 +10,7 @@ author: TrudyHa
|
|||||||
localizationpriority: high
|
localizationpriority: high
|
||||||
---
|
---
|
||||||
|
|
||||||
# Manage user accounts in Windows Store for Business
|
# Manage user accounts in Microsoft Store for Business and Education
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
@ -18,35 +18,27 @@ localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
Windows Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.
|
Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.
|
||||||
|
|
||||||
## Why Azure AD accounts?
|
## Why Azure AD accounts?
|
||||||
|
|
||||||
|
|
||||||
For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Store for Business.
|
For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Store for Business.
|
||||||
|
|
||||||
Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:
|
Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:
|
||||||
|
|
||||||
- Single sign-on to any cloud and on-premises web app.
|
- Single sign-on to any cloud and on-premises web app.
|
||||||
|
- Works with multiple platforms and devices.
|
||||||
- Works with multiple platforms and devices.
|
- Integrate with on-premises Active Directory.
|
||||||
|
|
||||||
- Integrate with on-premises Active Directory.
|
|
||||||
|
|
||||||
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
|
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
|
||||||
|
|
||||||
## Add user accounts to your Azure AD directory
|
## Add user accounts to your Azure AD directory
|
||||||
|
|
||||||
|
|
||||||
If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-windows-store-for-business.md)
|
If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-windows-store-for-business.md)
|
||||||
|
|
||||||
You can use the [Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708616) or [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=691086) to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708617).
|
You can use the [Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708616) or [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=691086) to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708617).
|
||||||
|
|
||||||
For more information, see:
|
For more information, see:
|
||||||
|
- [Add user accounts using Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708618)
|
||||||
- [Add user accounts using Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708618)
|
- [Add user accounts using Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708619)
|
||||||
|
|
||||||
- [Add user accounts using Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708619)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -12,7 +12,6 @@ localizationpriority: high
|
|||||||
|
|
||||||
# Sign code integrity policy with Device Guard signing
|
# Sign code integrity policy with Device Guard signing
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
@ -21,35 +20,19 @@ localizationpriority: high
|
|||||||
Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal.
|
Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal.
|
||||||
|
|
||||||
## Sign your code integrity policy
|
## Sign your code integrity policy
|
||||||
|
|
||||||
|
|
||||||
Before you get started, be sure to review these best practices:
|
Before you get started, be sure to review these best practices:
|
||||||
|
|
||||||
**Best practices**
|
**Best practices**
|
||||||
|
|
||||||
- Test your code integrity policies on a group of devices before deploying them to a large group of devices.
|
- Test your code integrity policies on a group of devices before deploying them to a large group of devices.
|
||||||
|
- Use rule options 9 and 10 during testing. For more information, see the section Code integrity policy rules in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
||||||
- Use rule options 9 and 10 during testing. For more information, see the section Code integrity policy rules in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
|
|
||||||
|
|
||||||
**To sign a code integrity policy**
|
**To sign a code integrity policy**
|
||||||
|
|
||||||
1. Sign in to the Windows Store for Business
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
|
2. Click **Manage**, click **Store settings**, and then click **Device Guard**.
|
||||||
2. Click **Settings**, and then choose **Device Guard signing**.
|
|
||||||
|
|
||||||
3. Click **Upload** to upload your code integrity policy.
|
3. Click **Upload** to upload your code integrity policy.
|
||||||
|
|
||||||
4. After the files are uploaded, click **Sign** to sign the code integrity policy.
|
4. After the files are uploaded, click **Sign** to sign the code integrity policy.
|
||||||
|
|
||||||
5. Click **Download** to download the signed code integrity policy.
|
5. Click **Download** to download the signed code integrity policy.
|
||||||
|
|
||||||
When you sign a code integrity policy with the Device Guard signing portal, the signing certificate is added to the policy. This means you can't modify this policy. If you need to make changes, make them to an unsigned version of the policy, and then resign the policy.
|
When you sign a code integrity policy with the Device Guard signing portal, the signing certificate is added to the policy. This means you can't modify this policy. If you need to make changes, make them to an unsigned version of the policy, and then resign the policy.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Troubleshoot Windows Store for Business (Windows 10)
|
title: Troubleshoot Microsoft Store for Business (Windows 10)
|
||||||
description: Troubleshooting topics for Windows Store for Business.
|
description: Troubleshooting topics for Microsoft Store for Business.
|
||||||
ms.assetid: 243755A3-9B20-4032-9A77-2207320A242A
|
ms.assetid: 243755A3-9B20-4032-9A77-2207320A242A
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
@ -10,24 +10,19 @@ author: TrudyHa
|
|||||||
localizationpriority: high
|
localizationpriority: high
|
||||||
---
|
---
|
||||||
|
|
||||||
# Troubleshoot Windows Store for Business
|
# Troubleshoot Microsoft Store for Business
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
Troubleshooting topics for Windows Store for Business.
|
Troubleshooting topics for Microsoft Store for Business.
|
||||||
|
|
||||||
## Can't find apps in private store
|
## Can't find apps in private store
|
||||||
|
|
||||||
|
|
||||||
The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
|
The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
|
||||||
|
- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back.
|
||||||
- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back.
|
- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
|
||||||
|
|
||||||
- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
|
|
||||||
|
|
||||||
**To sign in with organization account in Windows Store app**
|
**To sign in with organization account in Windows Store app**
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Update Windows Store for Business account settings (Windows 10)
|
title: Update Microsoft Store for Business and Microsoft Store for Education account settings (Windows 10)
|
||||||
description: The Account information page in Windows Store for Business shows information about your organization that you can update, including country or region, organization name, default domain, and language preference.
|
description: The Account information page in Microsoft Store for Business and Microsoft Store for Education shows information about your organization that you can update, including country or region, organization name, default domain, and language preference.
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -9,27 +9,30 @@ author: TrudyHa
|
|||||||
localizationpriority: high
|
localizationpriority: high
|
||||||
---
|
---
|
||||||
|
|
||||||
# Update Windows Store for Business account settings
|
# Update Microsoft Store for Business and Microsoft Store for Education account settings
|
||||||
|
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
|
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
The **Account information** page in Windows Store for Business allows you to manage organization information, payment options, and offline licensing settings. The organization information and payment options are required before you can acquire apps that have a price.
|
The **Payments & billing** page in Microsoft Store for Business allows you to manage organization information, billing information, and payment options. The organization information and payment options are required before you can acquire apps that have a price.
|
||||||
|
|
||||||
## Organization information
|
## Organization information
|
||||||
|
|
||||||
We’ll need your business address, email contact, and tax-exemption certificates that apply to your country or locale.
|
We need your business address, email contact, and tax-exemption certificates that apply to your country or locale.
|
||||||
|
|
||||||
**Business address and email contact**<br>Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address .
|
### Business address and email contact
|
||||||
|
|
||||||
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Windows Store for Business. If we don’t have an address,we’ll ask you to enter it during your first purchase.
|
Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address.
|
||||||
|
|
||||||
We need an email address in case we need to contact you about your Store for Business account. This email account should reach the admin for your organization’s O365 or Azure AD tenant that is used with Store for Business.
|
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase.
|
||||||
|
|
||||||
To update Organization information, click **Edit organization information**.
|
We need an email address in case we need to contact you about your Microsoft Store for Business and Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store.
|
||||||
|
|
||||||
|
**To update Organization information**
|
||||||
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
|
||||||
|
2. Click **Manage**, click **Payments & billing**, and then click **Edit**.
|
||||||
|
|
||||||
## Organization tax information
|
## Organization tax information
|
||||||
Taxes for Windows Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent:
|
Taxes for Windows Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent:
|
||||||
@ -58,7 +61,7 @@ Taxes for Windows Store for Business purchases are determined by your business a
|
|||||||
- Switzerland
|
- Switzerland
|
||||||
- United Kingdom
|
- United Kingdom
|
||||||
|
|
||||||
These countries can provide their VAT number or local equivalent in **Account information**. However, they can only acquire free apps.
|
These countries can provide their VAT number or local equivalent in **Payments & billing**. However, they can only acquire free apps.
|
||||||
|
|
||||||
|Market| Tax identifier |
|
|Market| Tax identifier |
|
||||||
|------|----------------|
|
|------|----------------|
|
||||||
@ -66,8 +69,7 @@ These countries can provide their VAT number or local equivalent in **Account in
|
|||||||
| India | CST ID, VAT ID |
|
| India | CST ID, VAT ID |
|
||||||
| Taiwan | Unified business number|
|
| Taiwan | Unified business number|
|
||||||
|
|
||||||
|
### Tax-exempt status
|
||||||
**Tax-exempt status**
|
|
||||||
|
|
||||||
If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
|
If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
|
||||||
|
|
||||||
@ -85,7 +87,7 @@ You’ll need this documentation:
|
|||||||
| International organizations that hold tax exaemption | Certification / letter confirmation from local tax authorities |
|
| International organizations that hold tax exaemption | Certification / letter confirmation from local tax authorities |
|
||||||
|
|
||||||
|
|
||||||
**Calculating tax**
|
### Calculating tax
|
||||||
|
|
||||||
Sales taxes are calculated against the unit price, and then aggregated.
|
Sales taxes are calculated against the unit price, and then aggregated.
|
||||||
|
|
||||||
@ -98,34 +100,34 @@ For example:<br>
|
|||||||
|
|
||||||
## Payment options
|
## Payment options
|
||||||
You can purchase apps from the Windows Store for Business using your credit card. You can enter your credit card information on Account Information, or when you purchase an app. We currently accept these credit cards:
|
You can purchase apps from the Windows Store for Business using your credit card. You can enter your credit card information on Account Information, or when you purchase an app. We currently accept these credit cards:
|
||||||
1. VISA
|
1. VISA
|
||||||
2. MasterCard
|
2. MasterCard
|
||||||
3. Discover
|
3. Discover
|
||||||
4. American Express
|
4. American Express
|
||||||
5. Japan Commercial Bureau (JCB)
|
5. Japan Commercial Bureau (JCB)
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Not all cards available in all countries. When you add a payment option, Store for Business shows which cards are available in your region.
|
> Not all cards available in all countries. When you add a payment option, Store for Business shows which cards are available in your region.
|
||||||
|
|
||||||
**To add a new payment option**
|
**To add a new payment option**
|
||||||
|
|
||||||
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, and then click **Account information**.
|
2. Click **Manage**, and then click **Payments & billing**.
|
||||||
3. Under **My payment options**, tap or click **Show my payment options**, and then select the type of credit card that you want to add.
|
3. Under **Payment options**, click **Show my payment options**, and then select the type of credit card that you want to add.
|
||||||
4. Add information to any required fields, and then click **Next**.
|
4. Add information to any required fields, and then click **Next**.
|
||||||
|
|
||||||
Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
|
Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> When adding credit or debit cards, you may be prompted to enter a CVV . The CVV is only used for verification purposes and is not stored in our systems after validation
|
> When adding credit or debit cards, you may be prompted to enter a CVV. The CVV is only used for verification purposes and is not stored in our systems after validation.
|
||||||
|
|
||||||
**To update a payment option**
|
**To update a payment option**
|
||||||
|
|
||||||
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, and then click **Account information**.
|
2. Click **Manage**, and then click **Payments & billng**.
|
||||||
3. Under **My payment options** > **Credit Cards**, select the payment option that you want to update, and then click **Update**.
|
3. Under **Payment options** > **Show my payment options**, select the payment option that you want to update, and then click **Update**.
|
||||||
4. Enter any updated information in the appropriate fields, and then click **Next**.
|
4. Enter any updated information in the appropriate fields, and then click **Next**.
|
||||||
Once you click **Next**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
|
Once you click **Next**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise,you will be prompted for additional information or notified if there are any problems.
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Certain actions, like updating or adding a payment option, require temporary “test authorization” transactions to validate the payment option. These may appear on your statement as $0.00 authorizations or as small pending transactions. These transactions are temporary and should not impact your account unless you make several changes in a short period of time, or have a low balance.
|
> Certain actions, like updating or adding a payment option, require temporary “test authorization” transactions to validate the payment option. These may appear on your statement as $0.00 authorizations or as small pending transactions. These transactions are temporary and should not impact your account unless you make several changes in a short period of time, or have a low balance.
|
||||||
@ -138,9 +140,9 @@ Admins can decide whether or not offline licenses are shown for apps in Windows
|
|||||||
|
|
||||||
**To set offline license visibility**
|
**To set offline license visibility**
|
||||||
|
|
||||||
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, and then click **Account information**.
|
2. Click **Manage**, and then click **Payments & billing**.
|
||||||
3. Under **Offline licensing**, click **Show offline licensed apps to people shopping in the store** to show availability for both online and offline licenses.
|
3. Under **Offline licensing**, click **Show offline licensed apps to people shopping in the store** to show availability for both online and offline licenses.
|
||||||
|
|
||||||
You have the following distribution options for offline-licensed apps:
|
You have the following distribution options for offline-licensed apps:
|
||||||
- Include the app in a provisioning package, and then use it as part of imaging a device.
|
- Include the app in a provisioning package, and then use it as part of imaging a device.
|
||||||
|
Loading…
x
Reference in New Issue
Block a user