deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

branding and UI changes

Browse Source
This commit is contained in:
Trudy Hakala 2017-04-30 14:54:13 -07:00
parent 7da923aa87
commit 576b72a649
12 changed files with 131 additions and 265 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
store-for-business/add-unsigned-app-to-code-integrity-policy.md
View File

@ -21,20 +21,14 @@ localizationpriority: high
When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies.
## In this section
- [Create a code integrity policy based on a reference device](#create-ci-policy)
- [Create catalog files for your unsigned app](#create-catalog-files)
- [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal)
## <a href="" id="create-ci-policy"></a>Create a code integrity policy based on a reference device
To add an unsigned app to a code integrity policy, your code integrity policy must be created from golden image machine. For more information, see [Create a Device Guard code integrity policy based on a reference device](https://technet.microsoft.com/library/mt243445.aspx).
## <a href="" id="create-catalog-files"></a>Create catalog files for your unsigned app
Creating catalog files starts the process for adding an unsigned app to a code integrity policy.
Before you get started, be sure to review these best practices and requirements:
@ -42,13 +36,11 @@ Before you get started, be sure to review these best practices and requirements:
**Requirements**
- You'll use Package Inspector during this process.
- Only perform this process with a code integrity policy running in audit mode. You should not perform this process on a system running an enforced Device Guard policy.
**Best practices**
- **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
- **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted.
Copy the commands for each step into an elevated Windows PowerShell session. You'll use Package Inspector to find and trust all binaries in the app.
@ -85,33 +77,24 @@ After you're done, the files are saved to your desktop. You still need to sign t
## <a href="" id="catalog-signing-device-guard-portal"></a>Catalog signing with Device Guard signing portal
To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-windows-store-for-business.md).
Catalog signing is a vital step to adding your unsigned apps to your code integrity policy.
**To sign a catalog file with Device Guard signing portal**
1. Sign in to the Store for Business
2. Click **Settings**, and then choose **Device Guard signing**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Settings**, click **Store settings**, and then click **Device Guard**.
3. Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files).
4. After the files are uploaded, click **Sign** to sign the catalog files.
5. Click Download to download each item:
- signed catalog file
- default policy
- root certificate for your organization
When you use the Device Guard signing portal to sign a catalog file, the signing certificate is added to the default policy. When you download the signed catalog file, you should also download the default policy and merge this code integrity policy with your existing code integrity policies to protect machines running the catalog file. You need to do this step to trust and run your catalog files. For more information, see the Merging code integrity policies in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
6. Open the root certificate that you downloaded, and follow the steps in **Certificate Import wizard** to install the certificate in your machine's certificate store.
7. Deploy signed catalogs to your managed devices. For more information, see Deploy catalog files with Group Policy, or Deploy catalog files with System Center Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
 

51
store-for-business/app-inventory-management-windows-store-for-business.md
View File

@ -9,16 +9,14 @@ ms.pagetype: store
author: TrudyHa
---
# App inventory management for Windows Store for Business and Education
# App inventory management for Microsoft Store for Business and Education
**Applies to**
- Windows 10
- Windows 10 Mobile
You can manage all apps that you've acquired on your **Apps & software** page.
**Apps & software** shows content you've acquired. This includes all apps that you've acquired from Microsoft Store, and the line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role.
You can manage all apps that you've acquired on your **Apps & software** page. This page shows all of the content you've acquired, including apps that from Microsoft Store, and line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role.
All of these apps are treated the same once they are in your inventory and you can perform app lifecycle tasks for them: distribute apps, add apps to private store, review license details, and reclaim app licenses.
@ -45,18 +43,12 @@ The last modified date does not correspond to when an app was last updated in Mi
There are a couple of ways to find specific apps, or groups of apps in your inventory.
**Search** - Use the Search box to search for an app.
**Search** - Use the Search box to search for an app.<br>
**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
- **License type** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model).
- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
- **Product type** - Product categories, such as app, or game.
- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
## Manage apps in your inventory
@ -87,14 +79,9 @@ Once an app is in your private store, people in your org can install the app on
1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Apps & software**.
<!--- ![Image showing Manage menu in Windows Store for Business.](images/wsfb-manageinventory.png) -->
3. Use **Refine results** to search for online-licensed apps under **License type**.
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
<!--- ![Image showing options from Action for each app in Inventory.](images/wsfb-inventoryaddprivatestore.png) -->
The value under **Private store** for the app will change to pending. It will take approximately twelve hours before the app is available in the private store.
Employees can claim apps that admins added to the private store by doing the following.
@ -110,7 +97,7 @@ If you decide that you don't want an app available for employees to install on t
**To remove an app from the private store**
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Apps & software**.
3. Find an app, click the ellipses under **Action**, choose **Remove from private store**, and then click **Remove**.
@ -118,7 +105,7 @@ The app will still be in your inventory, but your employees will not have access
**To assign an app to an employee**
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Inventory**.
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
@ -131,43 +118,29 @@ For each app in your inventory, you can view and manage license details. This gi
**To view license details**
1. Sign in to [Store for Busines.s](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com)
1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Apps & software**.
3. Click the ellipses for an app, and then choose **View license details**.
<!--- ![Image showing Inventory page in Windows Store for Business.](images/wsfb-inventory-viewlicense.png)-->
You'll see the names of people in your organization who have installed the app and are using one of the licenses.
<!--- ![Image showing assigned licenses for an app.](images/wsfb-licensedetails.png)-->
On **Assigned licenses**, you can do several things:
3. Click an app you want to manage.
4. On the app page, you'll see the names of people in your organization who have installed the app and are using one of the licenses. From here, you can:
- Assign the app to other people in your organization.
- Reclaim app licenses.
- View app details.
- Add the app to your private store, if it is not in the private store.
You can assign the app to more people in your organization, or reclaim licenses.
**To assign an app to more people**
- Click **Assign to people**, type the email address for the employee that you're assigning the app to, and click **Assign**.
- On the app page, click **Assign users**, type the email address for the person that you're assigning the app to, and click **Assign**.
![Image showing Assign to people dialog for assigning app licenses to people in your organization.](images/wsfb-licenseassign.png)
Store for Business updates the list of assigned licenses.
Micrososft Store updates the list of assigned licenses.
**To reclaim licenses**
- Choose the person you want to reclaim the license from, click **Reclaim licenses**, and then click **Reclaim licenses**.
- On the app page, choose the person you want to reclaim the license from, click the ellipses, and then click **Reclaim licenses**.
![Image showing Assign to people dialog for reclaiming app licenses from people in your organization.](images/wsfb-licensereclaim.png)
Store for Business updates the list of assigned licenses.
Microsoft Store updates the list of assigned licenses.
## Purchase additional licenses
You can purchase additional licenses for apps in your Inventory.

33
store-for-business/configure-mdm-provider-windows-store-for-business.md
View File

@ -12,9 +12,7 @@ localizationpriority: high
# Configure an MDM provider
**Applies to**
- Windows 10
- Windows 10 Mobile
@ -25,36 +23,19 @@ Your management tool needs to be installed and configured with Azure AD, in the
**To configure a management tool in Azure AD**
1. Sign in to the Azure Portal as an Administrator.
2. Click **Active Directory**, and then choose your directory. 
3. Click **Applications**, find the application, and add it to your directory.
After your management tool is added to your Azure AD directory, you can configure it to work with Store for Business. You can configure multiple management tools - just repeat the following procedure.
After your management tool is added to your Azure AD directory, you can configure it to work with Microsoft Store. You can configure multiple management tools - just repeat the following procedure.
**To configure a management tool in Store for Business**
1. Log in to Store for Business.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
2. Click **Manage**, click **Store settings**, and then click **Management tools**.
3. From the list of MDM tools, select the one you want to synchronize with Microsoft Store, and then click **Activate.**
2. Click **Settings**, and then choose **Management tool**.
You'll see a list of available MDM tools.
![Screenshot showing page in Management tools page in Windows Store for Business](images/wsfb-settings-mgmt.png)
3. Choose the MDM tool you want to synchronize with Store for Business, and then click **Activate.**
Your MDM tool is ready to use with Store for Business. Consult docs for your management tool to learn how to distribute apps from your synchronized inventory.
See [Manage apps you purchased from Windows Store for Business with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx), or [Manage apps from Windows Store for Business with System Center Configuration Manager](https://docs.microsoft.com/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) to learn how to configure synchroniztion and deploy apps.
Your MDM tool is ready to use with Microsoft Store. To learn how to configure synchroniztion and deploy apps, see these topics:
- [Manage apps you purchased from Windows Store for Business with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx)
- [Manage apps from Windows Store for Business with System Center Configuration Manager](https://docs.microsoft.com/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business)
For third-party MDM providers or management servers, check your product documentation.
 
 

29
store-for-business/device-guard-signing-portal.md
View File

@ -1,6 +1,6 @@
---
title: Device Guard signing (Windows 10)
description: Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business.
description: Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business and Microsoft Store for Education.
ms.assetid: 8D9CD2B9-5FC6-4C3D-AA96-F135AFEEBB78
ms.prod: w10
ms.mktglfcycl: manage
@ -18,7 +18,7 @@ localizationpriority: high
- Windows 10
- Windows 10 Mobile
Device Guard signing is a Device Guard feature that is available in Microsoft Store for Business. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.
Device Guard signing is a Device Guard feature that is available in Microsoft Store for Business and Education. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files,they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.
Device Guard is a feature set that consists of both hardware and software system integrity hardening features. These features use new virtualization-based security options and the trust-nothing mobile device operating system model. A key feature in this model is called configurable code integrity, which allows your organization to choose exactly which software or trusted software publishers are allowed to run code on your client machines. Also, Device Guard offers organizations a way to sign existing line-of-business (LOB) applications so that they can trust their own code, without the requirement that the application be repackaged. Also, this same method of signing allows organizations to trust individual third-party applications. For more information, see [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
@ -30,8 +30,6 @@ Device Guard is a feature set that consists of both hardware and software system
| [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) | Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal. |
## File and size limits
When you're uploading files for Device Guard signing, there are a few limits for files and file size:
| Description | Limit |
@ -40,11 +38,7 @@ When you're uploading files for Device Guard signing, there are a few limits for
| Maximum size for multiple files (uploaded in a group) | 4 MB |
| Maximum number of files per upload | 15 files |
 
## File types
 ## File types
Catalog and policy files have required files types.
| File | Required file type |
@ -52,23 +46,8 @@ Catalog and policy files have required files types.
| catalog files | .cat |
| policy files | .bin |
 
## Store for Business roles and permissions
 ## Store for Business roles and permissions
Signing code integrity policies and access to Device Guard portal requires the Device Guard signer role.
## Device Guard signing certificates
All certificates generated by the Device Guard signing service are unique per customer and are independent of the Microsoft production code signing certificate authorities. All Certification Authority (CA) keys are stored within the cryptographic boundary of Federal Information Processing Standards (FIPS) publication 140-2 compliant hardware security modules. After initial generation, root certificate keys and top level CA keys are removed from the online signing service, encrypted, and stored offline.
 
 

12
store-for-business/manage-access-to-private-store.md
View File

@ -1,6 +1,6 @@
---
title: Manage access to private store (Windows 10)
description: You can manage access to your private store in Windows Store for Business.
description: You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
ms.assetid: 4E00109C-2782-474D-98C0-02A05BE613A5
ms.prod: w10
ms.mktglfcycl: manage
@ -17,13 +17,13 @@ author: TrudyHa
- Windows 10
- Windows 10 Mobile
You can manage access to your private store in Windows Store for Business.
You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
Organizations might want control the set of apps that are available to their employees, and not show the full set of applications that are in the Windows Store. Using the private store with the Store for Business, an administrator can curate the set of apps that are available to their employees.
You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in the Windows Store. Using the private store with the Micrososft Store for Business and Eduction, admins can curate the set of apps that are available.
The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this:
![Image showing the Windows Store app, with a private store tab highlighted.](images/wsfb-wsappprivatestore.png)
<!--- ![Image showing the Windows Store app, with a private store tab highlighted.](images/wsfb-wsappprivatestore.png) -->
Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store.
@ -41,7 +41,7 @@ For more information on configuring an MDM provider, see [Configure an MDM provi
## Show private store only using Group Policy
If you're using Windows Store for Business and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
**Only display the private store within the Windows Store app** group policy is supported on the following Windows 10 editions:
- Enterprise
@ -63,9 +63,7 @@ You can also prevent employees from using the Windows Store. For more informatio
## Related topics
[Distribute apps using your private store](distribute-apps-from-your-private-store.md)
[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)
 

31
store-for-business/manage-orders-windows-store-for-business.md
View File

@ -1,5 +1,5 @@
---
title: Manage app orders in Windows Store for Business (Windows 10)
title: Manage app orders in Microsoft Store for Business or Microsoft Store for Education (Windows 10)
description: You can view your order history with Windows Store for Business.
ms.prod: w10
ms.mktglfcycl: manage
@ -9,9 +9,9 @@ author: TrudyHa
localizationpriority: high
---
# Manage app orders in Windows Store for Business
# Manage app orders in Microsoft Store for Business or Education
After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can buy more license for an app, view invoices, and request refunds.
After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can view invoices, and request refunds.
**Order history** lists orders in chronological order and shows:
- Date ordered
@ -31,18 +31,6 @@ Click to expand an order, and the following info is available:
Invoices for orders are available approximatley 24 hours after your purchase. The link opens a .pdf that you can save for your records.
## Buy more licenses
You can purchase more copies of apps that are in your order history.
**To buy more licenses**
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Order history**.
3. Click an order, and then click **Buy more**.
You can buy more copies of the app from the product page.
## Refund an order
Refunds work a little differently for free apps, and apps that have a price. In both cases, you must reclaim licenses before requesting a refund.
@ -61,13 +49,12 @@ Refunds work a little differently for free apps, and apps that have a price. In
**To refund an order**
Reclaim licenses, and then request a refund. If you haven't assigned licenses, start on step 5.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
2. Click **Manage**, and then choose **Inventory**.
3. Find the app you want to refund, click the ellipses under **Action**, and then choose **View license details**.
4. Select the number of licenses you need to reclaim, and then click **Reclaim licenses**.
5. Click **Manage**, and then choose **Order history**.
6. Click the order you want to refund, and click **Refund order**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then choose **Apps & software**.
3. Find the app you want to refund, click the ellipses under **Actions**, and then choose **View license details**.
4. Select the the people who you want to reclaim license from, click the ellipses under **Actions**, and then choose **Reclaim licenses**.
5. Click **Order history**, click the order you want to refund, and click **Refund order**.
For free apps, the app will be removed from your inventory.
For free apps, the app will be removed from your inventory in **Apps & software**.
For apps with a price, your payment option will be refunded with the cost of the app, and the app will be removed from your inventory.

23
store-for-business/manage-private-store-settings.md
View File

@ -1,6 +1,6 @@
---
title: Manage private store settings (Windows 10)
description: The private store is a feature in the Windows Store for Business that organizations receive during the sign up process.
description: The private store is a feature in the Microsoft Store for Business and Microsoft Store for Education that organizations receive during the sign up process.
ms.assetid: 2D501538-0C6E-4408-948A-2BF5B05F7A0C
ms.prod: w10
ms.mktglfcycl: manage
@ -12,32 +12,25 @@ localizationpriority: high
# Manage private store settings
**Applies to**
- Windows 10
- Windows 10 Mobile
The private store is a feature in the Windows Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
The private store is a feature in the Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
The name of your private store is shown on a tab in the Windows Store app.
The name of your private store is shown on a tab in the Windows Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com).
![Image showing Windows Store app with private store tab highlighted.](images/wsfb-wsappprivatestore.png)
You can change the name of your private store in Store for Business.
You can change the name of your private store in Microsoft Store.
## Change private store name
**To change the name of your private store**
1. Sign in to Store for Business.
2. Click **Settings**, and then choose **Private store**.
You'll see your private store name.
![Image showing Private store page in Windows Store for Business.](images/wsfb-privatestore.png)
3. Click **Change**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
2. Click **Manage**, click **Permissions**.
3. On the **Private store ** tab, click **Change**.
4. Type a new display name for your private store, and click **Save**.
![Image showing Private store dialog used to change private store display name.](images/wsfb-renameprivatestore.png)

8
store-for-business/manage-settings-windows-store-for-business.md
View File

@ -1,5 +1,5 @@
---
title: Manage settings for the Microsoft Store for Business (Windows 10)
title: Manage settings for the Microsoft Store for Business and Microsoft Store for Education (Windows 10)
description: You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant.
ms.assetid: E3283D77-4DB2-40A9-9479-DDBC33D5A895
ms.prod: w10
@ -10,7 +10,7 @@ author: TrudyHa
localizationpriority: high
---
# Manage settings for the Windows Store for Business
# Manage settings for the Microsoft Store for Business and Microsoft Store for Education
**Applies to**
@ -24,7 +24,7 @@ You can add users and groups, as well as update some of the settings associated
| Topic | Description |
| ----- | ----------- |
| [Update Microsoft Store for Business account settings](update-windows-store-for-business-account-settings.md) | The **Account information** page in Microsoft Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings. |
| [Manage user accounts in Microsoft Store for Business](manage-users-and-groups-windows-store-for-business.md) | Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. |
| [Update Microsoft Store for Business and Education account settings](update-windows-store-for-business-account-settings.md) | The **Account information** page in Microsoft Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings. |
| [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) | Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. |

16
store-for-business/manage-users-and-groups-windows-store-for-business.md
View File

@ -1,6 +1,6 @@
---
title: Manage user accounts in Windows Store for Business (Windows 10)
description: Windows Store for Business manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.
title: Manage user accounts in Microsoft Store for Business and Microsoft Store for Education (Windows 10)
description: Microsoft Store for Business and Microsoft Store for Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.
ms.assetid: 5E7FA071-CABD-4ACA-8AAE-F549EFCE922F
ms.prod: w10
ms.mktglfcycl: manage
@ -10,7 +10,7 @@ author: TrudyHa
localizationpriority: high
---
# Manage user accounts in Windows Store for Business
# Manage user accounts in Microsoft Store for Business and Education
**Applies to**
@ -18,34 +18,26 @@ localizationpriority: high
- Windows 10
- Windows 10 Mobile
Windows Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.
Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.
## Why Azure AD accounts?
For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Store for Business.
Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:
- Single sign-on to any cloud and on-premises web app.
- Works with multiple platforms and devices.
- Integrate with on-premises Active Directory.
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
## Add user accounts to your Azure AD directory
If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-windows-store-for-business.md)
You can use the [Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708616) or [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=691086) to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708617).
For more information, see:
- [Add user accounts using Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708618)
- [Add user accounts using Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708619)
 

21
store-for-business/sign-code-integrity-policy-with-device-guard-signing.md
View File

@ -12,7 +12,6 @@ localizationpriority: high
# Sign code integrity policy with Device Guard signing
**Applies to**
- Windows 10
@ -21,35 +20,19 @@ localizationpriority: high
Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal.
## Sign your code integrity policy
Before you get started, be sure to review these best practices:
**Best practices**
- Test your code integrity policies on a group of devices before deploying them to a large group of devices.
- Use rule options 9 and 10 during testing. For more information, see the section Code integrity policy rules in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).
**To sign a code integrity policy**
1. Sign in to the Windows Store for Business
2. Click **Settings**, and then choose **Device Guard signing**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, click **Store settings**, and then click **Device Guard**.
3. Click **Upload** to upload your code integrity policy.
4. After the files are uploaded, click **Sign** to sign the code integrity policy.
5. Click **Download** to download the signed code integrity policy.
When you sign a code integrity policy with the Device Guard signing portal, the signing certificate is added to the policy. This means you can't modify this policy. If you need to make changes, make them to an unsigned version of the policy, and then resign the policy.
 
 

13
store-for-business/troubleshoot-windows-store-for-business.md
View File

@ -1,6 +1,6 @@
---
title: Troubleshoot Windows Store for Business (Windows 10)
description: Troubleshooting topics for Windows Store for Business.
title: Troubleshoot Microsoft Store for Business (Windows 10)
description: Troubleshooting topics for Microsoft Store for Business.
ms.assetid: 243755A3-9B20-4032-9A77-2207320A242A
ms.prod: w10
ms.mktglfcycl: manage
@ -10,23 +10,18 @@ author: TrudyHa
localizationpriority: high
---
# Troubleshoot Windows Store for Business
# Troubleshoot Microsoft Store for Business
**Applies to**
- Windows 10
- Windows 10 Mobile
Troubleshooting topics for Windows Store for Business.
Troubleshooting topics for Microsoft Store for Business.
## Can't find apps in private store
The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back.
- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
**To sign in with organization account in Windows Store app**

48
store-for-business/update-windows-store-for-business-account-settings.md
View File

@ -1,6 +1,6 @@
---
title: Update Windows Store for Business account settings (Windows 10)
description: The Account information page in Windows Store for Business shows information about your organization that you can update, including country or region, organization name, default domain, and language preference.
title: Update Microsoft Store for Business and Microsoft Store for Education account settings (Windows 10)
description: The Account information page in Microsoft Store for Business and Microsoft Store for Education shows information about your organization that you can update, including country or region, organization name, default domain, and language preference.
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
@ -9,27 +9,30 @@ author: TrudyHa
localizationpriority: high
---
# Update Windows Store for Business account settings
# Update Microsoft Store for Business and Microsoft Store for Education account settings
**Applies to**
- Windows 10
- Windows 10 Mobile
The **Account information** page in Windows Store for Business allows you to manage organization information, payment options, and offline licensing settings. The organization information and payment options are required before you can acquire apps that have a price.
The **Payments & billing** page in Microsoft Store for Business allows you to manage organization information, billing information, and payment options. The organization information and payment options are required before you can acquire apps that have a price.
## Organization information
We’ll need your business address, email contact, and tax-exemption certificates that apply to your country or locale.
We need your business address, email contact, and tax-exemption certificates that apply to your country or locale.
**Business address and email contact**<br>Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address .
### Business address and email contact
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Windows Store for Business. If we don’t have an address,we’ll ask you to enter it during your first purchase.
Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address.
We need an email address in case we need to contact you about your Store for Business account. This email account should reach the admin for your organization’s O365 or Azure AD tenant that is used with Store for Business.
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase.
To update Organization information, click **Edit organization information**.
We need an email address in case we need to contact you about your Microsoft Store for Business and Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store.
**To update Organization information**
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
2. Click **Manage**, click **Payments & billing**, and then click **Edit**.
## Organization tax information
Taxes for Windows Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent:
@ -58,7 +61,7 @@ Taxes for Windows Store for Business purchases are determined by your business a
- Switzerland
- United Kingdom
These countries can provide their VAT number or local equivalent in **Account information**. However, they can only acquire free apps.
These countries can provide their VAT number or local equivalent in **Payments & billing**. However, they can only acquire free apps.
|Market| Tax identifier |
|------|----------------|
@ -66,8 +69,7 @@ These countries can provide their VAT number or local equivalent in **Account in
| India | CST ID, VAT ID |
| Taiwan | Unified business number|
**Tax-exempt status**
### Tax-exempt status
If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
@ -85,7 +87,7 @@ You’ll need this documentation:
| International organizations that hold tax exaemption | Certification / letter confirmation from local tax authorities |
**Calculating tax**
### Calculating tax
Sales taxes are calculated against the unit price, and then aggregated.
@ -109,21 +111,21 @@ You can purchase apps from the Windows Store for Business using your credit card
**To add a new payment option**
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
2. Click **Manage**, and then click **Account information**.
3. Under **My payment options**, tap or click **Show my payment options**, and then select the type of credit card that you want to add.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then click **Payments & billing**.
3. Under **Payment options**, click **Show my payment options**, and then select the type of credit card that you want to add.
4. Add information to any required fields, and then click **Next**.
Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
> [!NOTE]
> When adding credit or debit cards, you may be prompted to enter a CVV . The CVV is only used for verification purposes and is not stored in our systems after validation
> When adding credit or debit cards, you may be prompted to enter a CVV. The CVV is only used for verification purposes and is not stored in our systems after validation.
**To update a payment option**
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
2. Click **Manage**, and then click **Account information**.
3. Under **My payment options** > **Credit Cards**, select the payment option that you want to update, and then click **Update**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then click **Payments & billng**.
3. Under **Payment options** > **Show my payment options**, select the payment option that you want to update, and then click **Update**.
4. Enter any updated information in the appropriate fields, and then click **Next**.
Once you click **Next**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise,you will be prompted for additional information or notified if there are any problems.
@ -138,8 +140,8 @@ Admins can decide whether or not offline licenses are shown for apps in Windows
**To set offline license visibility**
1. Sign in to [Store for Business](http://businessstore.microsoft.com).
2. Click **Manage**, and then click **Account information**.
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then click **Payments & billing**.
3. Under **Offline licensing**, click **Show offline licensed apps to people shopping in the store** to show availability for both online and offline licenses.
You have the following distribution options for offline-licensed apps: