diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md index ed2878bc82..cc22c085d6 100644 --- a/browsers/edge/TOC.md +++ b/browsers/edge/TOC.md @@ -1,9 +1,10 @@ -#[Microsoft Edge - Deployment Guide for IT Pros](index.md) +#[Microsoft Edge - Deployment guidance for IT Pros](index.md) ##[New Microsoft Edge Group Policies and MDM settings](new-policies.md) +##[Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md) + ##Group Policy configuration options -###[Deploy Microsoft Edge kiosk mode](microsoft-edge-kiosk-mode-deploy.md) ###[Home button settings](group-policies/home-button-gp.md) ###[Prelaunch Microsoft Edge and preload tabs](group-policies/prelaunch-preload-gp.md) ###[Search engine customization](group-policies/search-engine-customization-gp.md) diff --git a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md index 4a3242f156..dc1470d929 100644 --- a/browsers/edge/microsoft-edge-kiosk-mode-deploy.md +++ b/browsers/edge/microsoft-edge-kiosk-mode-deploy.md @@ -7,7 +7,7 @@ ms.prod: edge ms.sitesec: library title: Deploy Microsoft Edge kiosk mode ms.localizationpriority: high -ms.date: 07/18/2018 +ms.date: 07/23/2018 --- # Deploy Microsoft Edge kiosk mode (Preview) @@ -56,6 +56,8 @@ The multi-app Microsoft Edge kiosk mode types include: ## Let’s get started! Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Edge in assigned access. You can set up Microsoft Edge kiosk mode in assigned access using: +- **Windows Settings.** (Build 17723) Best for physically setting up a single device as a kiosk. With this method, you set up assigned access and configure the kiosk or digital sign device using Settings. You can configure Microsoft Edge in single-app (kiosk type – Full-screen or public browsing) and define a single URL for the Home button, Start page, and New tab page. You can also set the reset after an idle timeout. + - **Microsoft Intune or other MDM service.** Best for setting up multiple devices as a kiosk. With this method, you configure Microsoft Edge in assigned access and configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access. >[!NOTE] @@ -74,6 +76,63 @@ Before you can configure Microsoft Edge kiosk mode, you must set up Microsoft Ed >[!Important] >If you are using a local account as a kiosk account in Intune or provisioning package, make sure to sign into this account and then sign out before configuring the assigned access single-app kiosk. + +### Use Windows Settings +>Preview build 17723 + + +Windows Settings is the simplest and easiest way to set up one or a couple of devices because you must perform these steps on each device. This method is ideal for small businesses. + +1. In Windows Settings, select **Accounts** \> **Other people**. + +2. Under **Set up a kiosk**, select **Assigned access**. + +3. Select **Get started**. + +4. Create a standard user account or choose an existing account for your kiosk. + +5. Select **Next**. + +6. On the **Choose a kiosk app** page, select **Microsoft Edge.** + +7. Select **Next**. + +8. Select how Microsoft Edge displays when running in kiosk mode: + + - **As a digital sign or interactive display**, the default URL shows in full screen, without browser controls. + + - **As a public browser**, the default URL shows in a browser view with limited browser controls. + +9. Select **Next**. + +10. Enter the URL that you want to load when the kiosk launches. + + >[!NOTE] + >The URL sets the Home button, Start page, and New tab page. + +11. Microsoft Edge in kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue. If **Continue** is not selected, Microsoft Edge resets to the default URL. You can accept the default value of **5 minutes**, or you can choose your own idle timer value. + +12. Select **Next**, and then select **Close**. + +13. Close **Settings** to save your choices automatically and apply them the next time the user account logs on. + +14. Configure the policies for Microsoft Edge kiosk mode. For details on the valid kiosk policy settings, see [Related policies](#related-policies). + +15. Validate the Microsoft Edge kiosk mode by restarting the device and signing in with the local kiosk account. + +**_Congratulations!_** You’ve finished setting up Microsoft Edge in assigned access and a kiosk or digital sign, and configured browser policies for Microsoft Edge kiosk mode. + +**_Next steps._** +- Use your new kiosk. Sign in to the device using the user account that you selected to run the kiosk app. +- If you want to make changes to your kiosk, you can quickly change the display option and default URL for Microsoft Edge. + + 1. Go to **Start** \> **Settings** \> **Accounts** \> **Other people**. + + 2. Under **Set up a kiosk**, select **Assigned access**. + + 3. Make your changes to **Choose a kiosk mode** and **Set up Microsoft Edge**. + + ### Use Microsoft Intune or other MDM service With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge kiosk mode in assigned access and how it behaves on a kiosk device. @@ -228,13 +287,13 @@ Use any of the Microsoft Edge policies listed below to enhance the kiosk experie --- -## Known issues with RS_PRERELEASE build 17713+ +## Known issues with RS_PRERELEASE build 17723 - When you set up Microsoft Edge kiosk mode on a single-app kiosk device you must set the “ConfigureKioskMode” policy because the default behavior is not honored. - **Expected behavior** – Microsoft Edge kiosk mode launches in full-screen mode. - **Actual behavior** – Normal Microsoft Edge launches. -- When you enable or set the “Configure Favorites bar” policy to 1, the favorites bar does not show in Microsoft Edge kiosk mode. +- When you enable or set the “ConfigureFavoritesBar” policy to 1, the favorites bar does not show in Microsoft Edge kiosk mode. - **Expected behavior** – Microsoft Edge kiosk mode shows the favorites bar. - **Actual behavior** – The favorites bar is hidden. diff --git a/browsers/edge/new-policies.md b/browsers/edge/new-policies.md index f289504471..79ef29fafe 100644 --- a/browsers/edge/new-policies.md +++ b/browsers/edge/new-policies.md @@ -46,7 +46,7 @@ We are discontinuing the use of the **Configure Favorites** group policy. Use th | [Configure Open Microsoft Edge With](#configure-open-microsoft-edge-with) | New | [ConfigureOpenEdgeWith](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureopenmicrosoftedgewith) | New | | [Do not sync browser settings](available-policies.md#do-not-sync-browser-settings) | -- | Experience/DoNotSyncBrowserSetting | New | | [Prevent certificate error overrides](#prevent-certificate-error-overrides) | New | [PreventCertErrorOverrides](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventcerterroroverrides) | New | -| [Prevent users from turning on browser syncing](#preventusersfromturningonbrowsersyncing) | New | PreventUsersFromTurningOnBrowserSyncing | New | +| [Prevent users from turning on browser syncing](#preventusersfromturningonbrowsersyncing) | New | Experience/PreventUsersFromTurningOnBrowserSyncing | New | | [Prevent turning off required extensions](#prevent-turning-off-required-extensions) | New | PreventTurningOffRequiredExtensions | New | | [Set Home button URL](#set-home-button-url) | New | [SetHomeButtonURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl) | New | | [Set New Tab page URL](#set-new-tab-page-url) | New | [SetNewTabPageURL](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl) | New | diff --git a/mdop/index.md b/mdop/index.md index 2eabdc2716..ef4167770e 100644 --- a/mdop/index.md +++ b/mdop/index.md @@ -7,7 +7,7 @@ ms.pagetype: mdop ms.mktglfcycl: manage ms.sitesec: library ms.prod: w10 -ms.date: 04/19/2017 +ms.date: 07/24/2018 --- # MDOP Information Experience @@ -36,14 +36,14 @@ The following table provides links to the product documentation for the MDOP pro

AGPM 4.0 - Windows Vista SP1, Windows 7, Windows Server 2008, Windows Server 2008 R2

AGPM 3.0- Windows Vista SP1, Windows Server 2008

AGPM 2.5 - Windows Vista, Windows Server 2003

-

[Overview of Microsoft Advanced Group Policy Management](https://go.microsoft.com/fwlink/p/?LinkId=232980)(https://go.microsoft.com/fwlink/p/?LinkId=232980)

-

[AGPM 4.0 SP3](https://technet.microsoft.com/library/mt346468.aspx) (https://technet.microsoft.com/library/mt346468.aspx)

-

[AGPM 4.0 SP2](https://go.microsoft.com/fwlink/p/?LinkId=325035) (https://go.microsoft.com/fwlink/p/?LinkId=325035)

+

[Overview of Microsoft Advanced Group Policy Management](agpm/index.md)

+

[AGPM 4.0 SP3](agpm/whats-new-in-agpm-40-sp3.md)

+

[AGPM 4.0 SP2](agpm/whats-new-in-agpm-40-sp2.md)

[AGPM 4.0 SP1](https://go.microsoft.com/fwlink/p/?LinkId=286715) (https://go.microsoft.com/fwlink/p/?LinkId=286715)

-

[AGPM 4.0](https://go.microsoft.com/fwlink/p/?LinkId=232964) (https://go.microsoft.com/fwlink/p/?LinkId=232964)

-

[AGPM 3.0](https://go.microsoft.com/fwlink/p/?LinkId=232967) (https://go.microsoft.com/fwlink/p/?LinkId=232967)

-

[AGPM 2.5](https://go.microsoft.com/fwlink/p/?LinkId=232969) (https://go.microsoft.com/fwlink/p/?LinkId=232969)

-

[AGPM Whitepapers on the Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=232275) (https://go.microsoft.com/fwlink/p/?LinkId=232275)

+

[AGPM 4.0](agpm/whats-new-in-agpm-40-sp1.md)

+

[AGPM 3.0](agpm/whats-new-in-agpm-30.md)

+

[AGPM 2.5](agpm/agpm-25-navengl.md)

+

[AGPM Whitepapers on the Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=232275)

Microsoft Application Virtualization (App-V) lets you make applications available to end user computers without installing the applications directly on those computers.

@@ -57,14 +57,13 @@ The following table provides links to the product documentation for the MDOP pro

[About Microsoft Application Virtualization 4.6 SP1](appv-v4/about-microsoft-application-virtualization-46-sp1.md)

[About Microsoft Application Virtualization 4.6](appv-v4/about-microsoft-application-virtualization-46.md)

[About Microsoft Application Virtualization 4.5](appv-v4/about-microsoft-application-virtualization-45.md)

-

[SoftGrid](https://go.microsoft.com/fwlink/p/?LinkId=232981) (https://go.microsoft.com/fwlink/p/?LinkId=232981)

-

[App-V Whitepapers on the Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=231902) (https://go.microsoft.com/fwlink/p/?LinkId=231902)

+

[App-V Whitepapers on the Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=231902)

[App-V 5.0 eBooks](https://go.microsoft.com/fwlink/p/?LinkId=309570) (https://go.microsoft.com/fwlink/p/?LinkId=309570)

Microsoft BitLocker Administration and Monitoring (MBAM) provides an administrative interface to enterprise-wide BitLocker drive encryption.

[Microsoft BitLocker Administration and Monitoring 2.5](mbam-v25/index.md)

-

[MBAM 2.5 Video Demonstration: Deploying MBAM 2.5](https://go.microsoft.com/fwlink/?LinkId=518206) (https://go.microsoft.com/fwlink/?LinkId=518206)

+

[MBAM 2.5 Video Demonstration: Deploying MBAM 2.5](https://go.microsoft.com/fwlink/?LinkId=518206)

[About MBAM 2.5 SP1](mbam-v25/about-mbam-25-sp1.md)

[About MBAM 2.0 SP1](mbam-v2/about-mbam-20-sp1.md)

[Microsoft BitLocker Administration and Monitoring 2 Administrator's Guide](mbam-v2/index.md)

@@ -105,7 +104,7 @@ The following table provides links to the product documentation for the MDOP pro

[Microsoft Enterprise Desktop Virtualization 2.0](medv-v2/index.md)

[About MED-V 1.0 SP1](medv-v1/about-med-v-10-sp1.md)

[Microsoft Enterprise Desktop Virtualization 1.0](medv-v1/index.md)

-

[MED-V Whitepapers on the Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=231903) (https://go.microsoft.com/fwlink/p/?LinkId=231903)

+

Microsoft User Experience Virtualization (UE-V) captures settings to apply to computers accessed by the user including desktop computers, laptop computers, and VDI sessions.

@@ -141,10 +140,6 @@ In addition to the product documentation available online, supplemental product - -

MDOP Videos

-

For a list of available MDOP videos, go to [Microsoft Desktop Optimization Pack Technologies Videos](https://go.microsoft.com/fwlink/p/?LinkId=234275) (https://go.microsoft.com/fwlink/p/?LinkId=234275).

-

MDOP Virtual Labs

For a list of available MDOP virtual labs, go to [Microsoft Desktop Optimization Pack (MDOP) Virtual Labs](https://go.microsoft.com/fwlink/p/?LinkId=234276) (https://go.microsoft.com/fwlink/p/?LinkId=234276).

@@ -168,9 +163,6 @@ In addition to the product documentation available online, supplemental product MDOP is a suite of products that can help streamline desktop deployment, management, and support across the enterprise. MDOP is available as an additional subscription for Software Assurance customers. -**Evaluate MDOP** -MDOP is also available for test and evaluation to [MSDN](http://msdn.microsoft.com/subscriptions/downloads/default.aspx?PV=42:178) and [TechNet](http://technet.microsoft.com/subscriptions/downloads/default.aspx?PV=42:178) subscribers in accordance with MDSN and TechNet agreements. - **Download MDOP** MDOP subscribers can download the software at the [Microsoft Volume Licensing website (MVLS)](https://go.microsoft.com/fwlink/p/?LinkId=166331). diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index eb7feeca2d..2f7d533bf3 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: MariciaAlforque -ms.date: 07/16/2018 +ms.date: 07/23 /2018 --- # What's new in MDM enrollment and management @@ -1638,6 +1638,14 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware +[WindowsLicensing CSP](windowslicensing-csp.md) +

Added S mode settings.

+ + +[SUPL CSP](supl-csp.md) +

Added 3 new certificate nodes.

+ + [Defender CSP](defender-csp.md)

Added a new node Health/ProductStatus.

@@ -1655,9 +1663,18 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

Recent changes:

@@ -1718,7 +1735,6 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • Update/EngagedRestartTransitionScheduleForFeatureUpdates
  • Update/SetDisablePauseUXAccess
  • Update/SetDisableUXWUAccess
    • -
  • Update/UpdateNotificationKioskMode
    • diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index aef2cd4bcd..6ff4d2dc96 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -3419,9 +3419,6 @@ The following diagram shows the Policy configuration service provider in tree fo
    Update/SetEDURestart
    -
    - Update/UpdateNotificationKioskMode -
    Update/UpdateServiceUrl
    @@ -4871,7 +4868,6 @@ The following diagram shows the Policy configuration service provider in tree fo - [Update/SetDisablePauseUXAccess](./policy-csp-update.md#update-setdisablepauseuxaccess) - [Update/SetDisableUXWUAccess](./policy-csp-update.md#update-setdisableuxwuaccess) - [Update/SetEDURestart](./policy-csp-update.md#update-setedurestart) -- [Update/UpdateNotificationKioskMode](./policy-csp-update.md#update-updatenotificationkioskmode) - [Update/UpdateServiceUrl](./policy-csp-update.md#update-updateserviceurl) - [Update/UpdateServiceUrlAlternate](./policy-csp-update.md#update-updateserviceurlalternate) - [UserRights/AccessCredentialManagerAsTrustedCaller](./policy-csp-userrights.md#userrights-accesscredentialmanagerastrustedcaller) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index ac056f8813..7f6dde9d31 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -177,9 +177,6 @@ ms.date: 07/18/2018
    Update/SetEDURestart
    -
    - Update/UpdateNotificationKioskMode -
    Update/UpdateServiceUrl
    @@ -3398,74 +3395,6 @@ The following list shows the supported values:
    - -**Update/UpdateNotificationKioskMode** - - - - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    cross markcheck mark5check mark5check mark5check mark5
    - - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -This policy allows you to define what Windows Update notifications users see. This policy doesn’t control how and when updates are downloaded and installed. - -Valid values: -- 0 (default) – Use the default Windows Update notifications -- 1 – Turn off all notifications, excluding restart warnings -- 2 – Turn off all notifications, including restart warnings - -> [!Important] -> If you choose not to get update notifications and also define the policy “Configure Automatic Updates” so that devices aren’t automatically getting updates, neither you nor device users will be aware of critical security, quality, or feature updates, and your devices may be at risk. - - - -ADMX Info: -- GP English name: *Display options for update notifications* -- GP name: *UpdateNotificationKioskMode* -- GP path: *Windows Components/Windows Update* -- GP ADMX file name: *WindowsUpdate.admx* - - - - - - - - - - - - - -
    - **Update/UpdateServiceUrl** @@ -3648,7 +3577,6 @@ Footnote: - [Update/ScheduledInstallTime](#update-scheduledinstalltime) - [Update/SetDisablePauseUXAccess](#update-setdisablepauseuxaccess) - [Update/SetDisableUXWUAccess](#update-setdisableuxwuaccess) -- [Update/UpdateNotificationKioskMode](#update-updatenotificationkioskmode) - [Update/UpdateServiceUrl](#update-updateserviceurl) diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index ce3bdd55b7..b726f5ba97 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -29,7 +29,7 @@ Windows Update for Business enables information technology administrators to kee Specifically, Windows Update for Business allows for: -- The creation of deployment rings, where administrators can specify which devices go first in an update wave, and which ones will come later (to ensure any quality bars are met). +- The creation of deployment rings, where administrators can specify which devices go first in an update wave, and which ones will come later (to allow for reliability and performance testing on a subset of systems before rolling out updates across the organization). - Selectively including or excluding drivers as part of Microsoft-provided updates - Integration with existing management tools such as Windows Server Update Services (WSUS), System Center Configuration Manager, and Microsoft Intune. - Peer-to-peer delivery for Microsoft updates, which optimizes bandwidth efficiency and reduces the need for an on-site server caching solution.