From 7d9e4abd38c4506746ea6a88e4a26b570415ed81 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 12:29:46 -0700 Subject: [PATCH 001/222] 24538295 - Adding CI Policy Command Docs --- .../TOC.yml | 2 + .../code-integrity-policy-commands.md | 192 ++++++++++++++++++ 2 files changed, 194 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.yml b/windows/security/threat-protection/windows-defender-application-control/TOC.yml index a7d64bd225..cc2387f639 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.yml +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.yml @@ -86,6 +86,8 @@ href: merge-windows-defender-application-control-policies.md - name: Enforce WDAC policies href: enforce-windows-defender-application-control-policies.md + - name: Code Integrity Policy, Token, and Miscellaneous Commands + href: code-integrity-policy-commands.md - name: Use code signing to simplify application control for classic Windows applications href: use-code-signing-to-simplify-application-control-for-classic-windows-applications.md items: diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md new file mode 100644 index 0000000000..ffc8f5349b --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -0,0 +1,192 @@ +--- +title: CI Policy, Token, and Miscellaneous Commands +description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands. +author: valemieux +ms.author: v-alemieux +ms.service: WDAC +ms.topic: how-to +ms.date: 08/07/2022 +ms.custom: template-how-to +--- + +# CIPolicyCommands + +Generates Policy Commands, Token Commands, and Miscellaneous Commands for user mode code and drivers. + +# Policy Commands + +| Command:| --update-policy /Path/To/Policy/File | +| Description: | Add or update a policy on the current system | +| Alias: | -up | + +| Command:| --remove-policy PolicyGUID | +| Description: | Remove a policy indicated by PolicyGUID from the system | +| Alias: | -rp | + +| Command:| --list-policies | +| Description: | Dump information about all policies on the system, whether they be active or not | +| Alias: | -lp | + +# Token Commands + +| Command:| --add-token Path/To/Token/File [--token-id ID] | +| Description: | Deploy a token onto the current system, with an optional specific ID. | +| Alias: | -at | +>[!NOTE] If [ID] is specified, a pre-existing token with [ID] should not exist. + +| Command:| --remove-token ID | +| Description: | Remove a Token indicated by ID from the system. | +| Alias: | -rt | + +| Command:| --list-tokens | +| Description: | Dump information about all tokens on the system | +| Alias: | -lt | + +# Miscellaneous Commands + +| Command:| --device-id | +| Description: | Dump the Code Integrity Device Id | +| Alias: | -id | + +| Command:| --refresh | +| Description: | Attempt to Refresh CI Policies | +| Alias: | -r | + +| Command:| --help | +| Description: | Display help | +| Alias: | -h | + +#Examples + +#Example 1: Update Policy/Deploy +Extract BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip into C:\windows\system32 +```powershell``` +PS C:\Users\[USER] cd \windows\system32 +PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up + +C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip +Usage: CiTool.exe COMMAND [-json] +Commands: +----------------------------- Policy Commands --------------------------------- + --update-policy /Path/To/Policy/File + Add or update a policy on the current system + aliases: -up + --remove-policy PolicyGUID + Remove a policy indicated by PolicyGUID from the system + aliases: -rp + --list-policies + Dump information about all policies on the system, whether they be active or not + aliases: -lp +----------------------------- Token Commands --------------------------------- + --add-token Path/To/Token/File [--token-id ID] + Deploy a token onto the current system, with an optional specific ID + If [ID] is specified, a pre-existing token with [ID] should not exist. + aliases:-at + --remove-token ID + Remove a Token indicated by ID from the system. + aliases: -rt + --list-tokens + Dump information about all tokens on the system + aliases: -lt +----------------------------- Misc Commands --------------------------------- + --device-id + Dump the Code Integrity Device Id + aliases: -id + --refresh + Attempt to Refresh CI Policies + aliases: -r + --help + Display this message + aliases: -h +----------------------------- Global Flags--------------------------------- + -json + Format output as json and suppress input +``` + +#Example 2: Refresh the policy +```powershell``` +PS C:\Users\[USER] cd \windows\system32 +PS C:\Windows\System32>.\CITool.exe --refresh +Operation Successful +``` + +#Example 3: Remove the policy +```powershell``` +PS C:\Users\[USER] cd \windows\system32 +PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} +Usage: CiTool.exe COMMAND [-json] +Commands: +----------------------------- Policy Commands --------------------------------- + --update-policy /Path/To/Policy/File + Add or update a policy on the current system + aliases: -up + --remove-policy PolicyGUID + Remove a policy indicated by PolicyGUID from the system + aliases: -rp + --list-policies + Dump information about all policies on the system, whether they be active or not + aliases: -lp +----------------------------- Token Commands --------------------------------- + --add-token Path/To/Token/File [--token-id ID] + Deploy a token onto the current system, with an optional specific ID + If [ID] is specified, a pre-existing token with [ID] should not exist. + aliases:-at + --remove-token ID + Remove a Token indicated by ID from the system. + aliases: -rt + --list-tokens + Dump information about all tokens on the system + aliases: -lt +----------------------------- Misc Commands --------------------------------- + --device-id + Dump the Code Integrity Device Id + aliases: -id + --refresh + Attempt to Refresh CI Policies + aliases: -r + --help + Display this message + aliases: -h +----------------------------- Global Flags--------------------------------- + -json + Format output as json and suppress input +Press Enter to Exit +``` + +#Example 4: Display help +```powershell``` +PS C:\Users\[USER] cd \windows\system32 +PS C:\windows\system32> .\CITool.exe -h + +----------------------------- Policy Commands --------------------------------- + --update-policy /Path/To/Policy/File + Add or update a policy on the current system + aliases: -up + --remove-policy PolicyGUID + Remove a policy indicated by PolicyGUID from the system + aliases: -rp + --list-policies + Dump information about all policies on the system, whether they be active or not + aliases: -lp +----------------------------- Token Commands --------------------------------- + --add-token Path/To/Token/File [--token-id ID] + Deploy a token onto the current system, with an optional specific ID + If [ID] is specified, a pre-existing token with [ID] should not exist. + aliases:-at + --remove-token ID + Remove a Token indicated by ID from the system. + aliases: -rt + --list-tokens + Dump information about all tokens on the system + aliases: -lt +----------------------------- Misc Commands --------------------------------- + --device-id + Dump the Code Integrity Device Id + aliases: -id + --refresh + Attempt to Refresh CI Policies + aliases: -r + --help + Display this message + aliases: -h +``` \ No newline at end of file From 7cf1059272a5cc7944c094549155dc2f401c6254 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 12:40:06 -0700 Subject: [PATCH 002/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index ffc8f5349b..0c216575ab 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -60,7 +60,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m #Example 1: Update Policy/Deploy Extract BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip into C:\windows\system32 -```powershell``` +```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up @@ -104,14 +104,14 @@ Commands: ``` #Example 2: Refresh the policy -```powershell``` +```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --refresh Operation Successful ``` #Example 3: Remove the policy -```powershell``` +```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} Usage: CiTool.exe COMMAND [-json] @@ -154,7 +154,7 @@ Press Enter to Exit ``` #Example 4: Display help -```powershell``` +```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\windows\system32> .\CITool.exe -h From 339a934dbe21a9544d55bb06b8f3bbc5a246269b Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 13:02:16 -0700 Subject: [PATCH 003/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 0c216575ab..ec6ca8c21b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -15,53 +15,53 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m # Policy Commands -| Command:| --update-policy /Path/To/Policy/File | +| Command:|--update-policy /Path/To/Policy/File | | Description: | Add or update a policy on the current system | | Alias: | -up | -| Command:| --remove-policy PolicyGUID | +| Command:|--remove-policy PolicyGUID | | Description: | Remove a policy indicated by PolicyGUID from the system | | Alias: | -rp | -| Command:| --list-policies | +| Command:|--list-policies | | Description: | Dump information about all policies on the system, whether they be active or not | | Alias: | -lp | # Token Commands -| Command:| --add-token Path/To/Token/File [--token-id ID] | +| Command:|--add-token Path/To/Token/File [--token-id ID] | | Description: | Deploy a token onto the current system, with an optional specific ID. | | Alias: | -at | >[!NOTE] If [ID] is specified, a pre-existing token with [ID] should not exist. -| Command:| --remove-token ID | +| Command:|--remove-token ID | | Description: | Remove a Token indicated by ID from the system. | | Alias: | -rt | -| Command:| --list-tokens | +| Command:|--list-tokens | | Description: | Dump information about all tokens on the system | | Alias: | -lt | # Miscellaneous Commands -| Command:| --device-id | +| Command:|--device-id | | Description: | Dump the Code Integrity Device Id | | Alias: | -id | -| Command:| --refresh | +| Command:|--refresh | | Description: | Attempt to Refresh CI Policies | | Alias: | -r | -| Command:| --help | +| Command:|--help | | Description: | Display help | | Alias: | -h | #Examples #Example 1: Update Policy/Deploy -Extract BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip into C:\windows\system32 +Extract policy file to C:\windows\system32 ```powershell -PS C:\Users\[USER] cd \windows\system32 +PS C:\Users\ cd \windows\system32 PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip From 5e833309c0555d2cfcd98a89073028fcbb49c98b Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 14:49:17 -0700 Subject: [PATCH 004/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index ec6ca8c21b..4c153b656b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -13,7 +13,7 @@ ms.custom: template-how-to Generates Policy Commands, Token Commands, and Miscellaneous Commands for user mode code and drivers. -# Policy Commands +## Policy Commands | Command:|--update-policy /Path/To/Policy/File | | Description: | Add or update a policy on the current system | @@ -27,7 +27,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Description: | Dump information about all policies on the system, whether they be active or not | | Alias: | -lp | -# Token Commands +## Token Commands | Command:|--add-token Path/To/Token/File [--token-id ID] | | Description: | Deploy a token onto the current system, with an optional specific ID. | @@ -42,7 +42,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Description: | Dump information about all tokens on the system | | Alias: | -lt | -# Miscellaneous Commands +## Miscellaneous Commands | Command:|--device-id | | Description: | Dump the Code Integrity Device Id | @@ -56,16 +56,16 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Description: | Display help | | Alias: | -h | -#Examples +## Examples -#Example 1: Update Policy/Deploy +1. Update Policy/Deploy Extract policy file to C:\windows\system32 ```powershell PS C:\Users\ cd \windows\system32 PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -Usage: CiTool.exe COMMAND [-json] +Usage: CiTool.exe COMMAND [Command-Options] [-json] Commands: ----------------------------- Policy Commands --------------------------------- --update-policy /Path/To/Policy/File @@ -103,18 +103,18 @@ Commands: Format output as json and suppress input ``` -#Example 2: Refresh the policy +2. Refresh the policy ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --refresh Operation Successful ``` -#Example 3: Remove the policy +3. Remove the policy ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} -Usage: CiTool.exe COMMAND [-json] +Usage: CiTool.exe COMMAND [Command-Options] [-json] Commands: ----------------------------- Policy Commands --------------------------------- --update-policy /Path/To/Policy/File @@ -153,7 +153,7 @@ Commands: Press Enter to Exit ``` -#Example 4: Display help +4. Display help ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\windows\system32> .\CITool.exe -h From 1c0742872c7cd22e4d65fb6523dd15ae6ac08f0f Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 15:50:13 -0700 Subject: [PATCH 005/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 54 +++++++------------ 1 file changed, 20 insertions(+), 34 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 4c153b656b..60d8c53ebe 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -3,7 +3,7 @@ title: CI Policy, Token, and Miscellaneous Commands description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands. author: valemieux ms.author: v-alemieux -ms.service: WDAC +ms.service: security ms.topic: how-to ms.date: 08/07/2022 ms.custom: template-how-to @@ -15,46 +15,32 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m ## Policy Commands -| Command:|--update-policy /Path/To/Policy/File | -| Description: | Add or update a policy on the current system | -| Alias: | -up | - -| Command:|--remove-policy PolicyGUID | -| Description: | Remove a policy indicated by PolicyGUID from the system | -| Alias: | -rp | - -| Command:|--list-policies | -| Description: | Dump information about all policies on the system, whether they be active or not | -| Alias: | -lp | +| Command | Description | Alias | +| | | | +|--------|---------|---------| +|--update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | +| --remove-policy PolicyGUID | Remove a policy indicated by PolicyGUID from the system | -rp | +| --list-policies | Dump information about all policies on the system, whether they be active or not | -lp | ## Token Commands -| Command:|--add-token Path/To/Token/File [--token-id ID] | -| Description: | Deploy a token onto the current system, with an optional specific ID. | -| Alias: | -at | ->[!NOTE] If [ID] is specified, a pre-existing token with [ID] should not exist. +| Command | Description | Alias | +| | | | +|--------|---------|---------| +|--add-token Path/To/Token/File [--token-id ID] | Deploy a token onto the current system, with an optional specific ID. | -at | +|--remove-token ID | Remove a Token indicated by ID from the system. | -rt | +|--list-tokens | Dump information about all tokens on the system | -lt | -| Command:|--remove-token ID | -| Description: | Remove a Token indicated by ID from the system. | -| Alias: | -rt | - -| Command:|--list-tokens | -| Description: | Dump information about all tokens on the system | -| Alias: | -lt | +>[!NOTE] Regarding --add-token, if <[ID]> is specified, a pre-existing token with [ID] should not exist. ## Miscellaneous Commands -| Command:|--device-id | -| Description: | Dump the Code Integrity Device Id | -| Alias: | -id | - -| Command:|--refresh | -| Description: | Attempt to Refresh CI Policies | -| Alias: | -r | - -| Command:|--help | -| Description: | Display help | -| Alias: | -h | +| Command | Description | Alias | +| | | | +|--------|---------|---------| +|--device-id | Dump the Code Integrity Device ID | -id | +|--refresh | Attempt to Refresh CI Policies | -r | +|--help | Display help | -h | ## Examples From 983d4176fc6500086c88ffb37f383860b4aa6eeb Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 15:54:18 -0700 Subject: [PATCH 006/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 60d8c53ebe..6e6a566a5b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -18,7 +18,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Command | Description | Alias | | | | | |--------|---------|---------| -|--update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | +| --update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | | --remove-policy PolicyGUID | Remove a policy indicated by PolicyGUID from the system | -rp | | --list-policies | Dump information about all policies on the system, whether they be active or not | -lp | @@ -27,9 +27,9 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Command | Description | Alias | | | | | |--------|---------|---------| -|--add-token Path/To/Token/File [--token-id ID] | Deploy a token onto the current system, with an optional specific ID. | -at | -|--remove-token ID | Remove a Token indicated by ID from the system. | -rt | -|--list-tokens | Dump information about all tokens on the system | -lt | +| --add-token Path/To/Token/File [--token-id ID] | Deploy a token onto the current system, with an optional specific ID. | -at | +| --remove-token ID | Remove a Token indicated by ID from the system. | -rt | +| --list-tokens | Dump information about all tokens on the system | -lt | >[!NOTE] Regarding --add-token, if <[ID]> is specified, a pre-existing token with [ID] should not exist. @@ -38,9 +38,9 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Command | Description | Alias | | | | | |--------|---------|---------| -|--device-id | Dump the Code Integrity Device ID | -id | -|--refresh | Attempt to Refresh CI Policies | -r | -|--help | Display help | -h | +| --device-id | Dump the Code Integrity Device ID | -id | +| --refresh | Attempt to Refresh CI Policies | -r | +| --help | Display help | -h | ## Examples From 1b6a574a3b1decfe56105fd33c1813a327a156c9 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 16:03:25 -0700 Subject: [PATCH 007/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 6e6a566a5b..5a2860c500 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -16,7 +16,6 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m ## Policy Commands | Command | Description | Alias | -| | | | |--------|---------|---------| | --update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | | --remove-policy PolicyGUID | Remove a policy indicated by PolicyGUID from the system | -rp | @@ -25,18 +24,16 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m ## Token Commands | Command | Description | Alias | -| | | | |--------|---------|---------| | --add-token Path/To/Token/File [--token-id ID] | Deploy a token onto the current system, with an optional specific ID. | -at | | --remove-token ID | Remove a Token indicated by ID from the system. | -rt | | --list-tokens | Dump information about all tokens on the system | -lt | ->[!NOTE] Regarding --add-token, if <[ID]> is specified, a pre-existing token with [ID] should not exist. +>[!NOTE] Regarding --add-token, if <[ID]> is specified, a pre-existing token with <[ID]> should not exist. ## Miscellaneous Commands | Command | Description | Alias | -| | | | |--------|---------|---------| | --device-id | Dump the Code Integrity Device ID | -id | | --refresh | Attempt to Refresh CI Policies | -r | From 50179c0bbd6ef5f34eec6eb54c18d9fe45ba329e Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 16:10:09 -0700 Subject: [PATCH 008/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 5a2860c500..8b250ca2cd 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -29,7 +29,8 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | --remove-token ID | Remove a Token indicated by ID from the system. | -rt | | --list-tokens | Dump information about all tokens on the system | -lt | ->[!NOTE] Regarding --add-token, if <[ID]> is specified, a pre-existing token with <[ID]> should not exist. +>[!NOTE] +>Regarding --add-token, if <[ID]> is specified, a pre-existing token with <[ID]> should not exist. ## Miscellaneous Commands From d3f84d880855ff613991931f6382308127c5a37e Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 8 Aug 2022 23:56:41 -0700 Subject: [PATCH 009/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 8b250ca2cd..0d60465937 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -30,7 +30,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | --list-tokens | Dump information about all tokens on the system | -lt | >[!NOTE] ->Regarding --add-token, if <[ID]> is specified, a pre-existing token with <[ID]> should not exist. +>Regarding --add-token, if [ID] is specified, a pre-existing token with [ID] should not exist. ## Miscellaneous Commands @@ -42,8 +42,11 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m ## Examples -1. Update Policy/Deploy -Extract policy file to C:\windows\system32 +>[!NOTE] +>The following examples assume you have extracted the policy file {BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip to C:\windows\system32 + +1. Update Policy + ```powershell PS C:\Users\ cd \windows\system32 PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up From ac2c8afe45fb23442416240ac05719e1e6361df9 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 22 Aug 2022 11:26:07 -0700 Subject: [PATCH 010/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 0d60465937..1f7042ee0c 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -2,14 +2,15 @@ title: CI Policy, Token, and Miscellaneous Commands description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands. author: valemieux -ms.author: v-alemieux +ms.author: jgeurten ms.service: security +ms.reviewer: jgeurten ms.topic: how-to ms.date: 08/07/2022 ms.custom: template-how-to --- -# CIPolicyCommands +# Manage WDAC Policies with CI Tool Generates Policy Commands, Token Commands, and Miscellaneous Commands for user mode code and drivers. @@ -19,7 +20,7 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m |--------|---------|---------| | --update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | | --remove-policy PolicyGUID | Remove a policy indicated by PolicyGUID from the system | -rp | -| --list-policies | Dump information about all policies on the system, whether they be active or not | -lp | +| --list-policies | Dump information about all policies on the system, whether they are active or not | -lp | ## Token Commands @@ -37,18 +38,17 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m | Command | Description | Alias | |--------|---------|---------| | --device-id | Dump the Code Integrity Device ID | -id | -| --refresh | Attempt to Refresh CI Policies | -r | -| --help | Display help | -h | +| --refresh | Attempt to Refresh WDAC Policies | -r | +| --help | Display the tool's help menu | -h | ## Examples >[!NOTE] >The following examples assume you have extracted the policy file {BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip to C:\windows\system32 -1. Update Policy +1. Deploy a WDAC policy onto the system ```powershell -PS C:\Users\ cd \windows\system32 PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip @@ -90,14 +90,14 @@ Commands: Format output as json and suppress input ``` -2. Refresh the policy +2. Refresh the WDAC policies in the \Windows\system32\CodeIntegrity\CiPolicies\Active folder ```powershell -PS C:\Users\[USER] cd \windows\system32 -PS C:\Windows\System32>.\CITool.exe --refresh +PS C:\Users\[USER] cd \Windows\system32\CodeIntegrity\CiPolicies\Active +PS C:\Windows\System32\CodeIntegrity\CiPolicies\Active>.\CITool --refresh Operation Successful ``` -3. Remove the policy +3. Remove a specific WDAC policy by GUID ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} @@ -140,7 +140,7 @@ Commands: Press Enter to Exit ``` -4. Display help +4. Display the help menu ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\windows\system32> .\CITool.exe -h From acfd907b5b12ca8cd8315e6c0d59eb4d60eff9c7 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 22 Aug 2022 11:37:43 -0700 Subject: [PATCH 011/222] Update code-integrity-policy-commands.md --- .../code-integrity-policy-commands.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md index 1f7042ee0c..b722b9fcff 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md @@ -2,9 +2,9 @@ title: CI Policy, Token, and Miscellaneous Commands description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands. author: valemieux -ms.author: jgeurten +ms.author: jogeurte ms.service: security -ms.reviewer: jgeurten +ms.reviewer: jogeurte ms.topic: how-to ms.date: 08/07/2022 ms.custom: template-how-to From 5162802ca0ba64302851eea4fe306b0002abb09e Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Sun, 11 Sep 2022 22:56:37 -0700 Subject: [PATCH 012/222] Updating descriptions, titles, file name, and capitalization --- ...egrity-policy-commands.md => citool-commands.md} | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) rename windows/security/threat-protection/windows-defender-application-control/{code-integrity-policy-commands.md => citool-commands.md} (94%) diff --git a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md similarity index 94% rename from windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md rename to windows/security/threat-protection/windows-defender-application-control/citool-commands.md index b722b9fcff..86d7700fd0 100644 --- a/windows/security/threat-protection/windows-defender-application-control/code-integrity-policy-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md @@ -1,6 +1,6 @@ --- -title: CI Policy, Token, and Miscellaneous Commands -description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands. +title: Managing CI Policies and Tokens with CiTool +description: Learn how to use Policy Commands, Token Commands, and Miscellaneous Commands in CiTool author: valemieux ms.author: jogeurte ms.service: security @@ -43,16 +43,13 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m ## Examples ->[!NOTE] ->The following examples assume you have extracted the policy file {BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip to C:\windows\system32 - 1. Deploy a WDAC policy onto the system ```powershell PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -Usage: CiTool.exe COMMAND [Command-Options] [-json] +Usage: CiTool COMMAND [Command-Options] [-json] Commands: ----------------------------- Policy Commands --------------------------------- --update-policy /Path/To/Policy/File @@ -90,14 +87,14 @@ Commands: Format output as json and suppress input ``` -2. Refresh the WDAC policies in the \Windows\system32\CodeIntegrity\CiPolicies\Active folder +2. Refresh the WDAC policies in the \Windows\System32\CodeIntegrity\CiPolicies\Active folder ```powershell PS C:\Users\[USER] cd \Windows\system32\CodeIntegrity\CiPolicies\Active PS C:\Windows\System32\CodeIntegrity\CiPolicies\Active>.\CITool --refresh Operation Successful ``` -3. Remove a specific WDAC policy by GUID +3. Remove a specific WDAC policy by its policy ID ```powershell PS C:\Users\[USER] cd \windows\system32 PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} From fbe5214a3d411a126818c7fd10650995b8a0607e Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Sun, 11 Sep 2022 23:02:01 -0700 Subject: [PATCH 013/222] Update TOC.yml --- .../windows-defender-application-control/TOC.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.yml b/windows/security/threat-protection/windows-defender-application-control/TOC.yml index cc2387f639..e38c8944b3 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.yml +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.yml @@ -86,8 +86,8 @@ href: merge-windows-defender-application-control-policies.md - name: Enforce WDAC policies href: enforce-windows-defender-application-control-policies.md - - name: Code Integrity Policy, Token, and Miscellaneous Commands - href: code-integrity-policy-commands.md + - name: Managing WDAC Policies with CI Tool + href: citool-commands.md - name: Use code signing to simplify application control for classic Windows applications href: use-code-signing-to-simplify-application-control-for-classic-windows-applications.md items: From eadad34b16f30d1a888db1a8b073a4e6c46f8cce Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Mon, 12 Sep 2022 22:14:44 -0700 Subject: [PATCH 014/222] Update citool-commands.md --- .../citool-commands.md | 97 +++---------------- 1 file changed, 12 insertions(+), 85 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/citool-commands.md b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md index 86d7700fd0..94c0be2807 100644 --- a/windows/security/threat-protection/windows-defender-application-control/citool-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md @@ -10,9 +10,10 @@ ms.date: 08/07/2022 ms.custom: template-how-to --- -# Manage WDAC Policies with CI Tool +# Manage Windows Defender Application Control (WDAC) Policies with CI Tool -Generates Policy Commands, Token Commands, and Miscellaneous Commands for user mode code and drivers. +CI Tool makes Windows Defender Application Control (WDAC) policy management easier for IT admins. CI Tool can be used to manage Windows Defender Application Control policies and CI Tokens. +This article will describe how to use CI Tool to update and manage policies. CI Tool is now included in box as part of Windows and can be interacted with in the command line. ## Policy Commands @@ -46,101 +47,27 @@ Generates Policy Commands, Token Commands, and Miscellaneous Commands for user m 1. Deploy a WDAC policy onto the system ```powershell -PS C:\windows\system32> .\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -up - -C:\Windows\System32>.\CITool.exe -update-policy \windows\system32\BF61FE40-8929-4FDF-9EC2-F7A767717F0B.cip -Usage: CiTool COMMAND [Command-Options] [-json] -Commands: ------------------------------ Policy Commands --------------------------------- - --update-policy /Path/To/Policy/File - Add or update a policy on the current system - aliases: -up - --remove-policy PolicyGUID - Remove a policy indicated by PolicyGUID from the system - aliases: -rp - --list-policies - Dump information about all policies on the system, whether they be active or not - aliases: -lp ------------------------------ Token Commands --------------------------------- - --add-token Path/To/Token/File [--token-id ID] - Deploy a token onto the current system, with an optional specific ID - If [ID] is specified, a pre-existing token with [ID] should not exist. - aliases:-at - --remove-token ID - Remove a Token indicated by ID from the system. - aliases: -rt - --list-tokens - Dump information about all tokens on the system - aliases: -lt ------------------------------ Misc Commands --------------------------------- - --device-id - Dump the Code Integrity Device Id - aliases: -id - --refresh - Attempt to Refresh CI Policies - aliases: -r - --help - Display this message - aliases: -h ------------------------------ Global Flags--------------------------------- - -json - Format output as json and suppress input +PS C:\Users\[USER] CITool --update-policy "\Windows\Temp\{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip" +Operation Successful +Press Enter to Continue ``` -2. Refresh the WDAC policies in the \Windows\System32\CodeIntegrity\CiPolicies\Active folder +2. Refresh the WDAC policies ```powershell -PS C:\Users\[USER] cd \Windows\system32\CodeIntegrity\CiPolicies\Active -PS C:\Windows\System32\CodeIntegrity\CiPolicies\Active>.\CITool --refresh +PS C:\Users\[USER] CITool --refresh Operation Successful ``` 3. Remove a specific WDAC policy by its policy ID ```powershell -PS C:\Users\[USER] cd \windows\system32 -PS C:\Windows\System32>.\CITool.exe --remove-policy {BF61FE40-8929-4FDF-9EC2-F7A767717F0B} -Usage: CiTool.exe COMMAND [Command-Options] [-json] -Commands: ------------------------------ Policy Commands --------------------------------- - --update-policy /Path/To/Policy/File - Add or update a policy on the current system - aliases: -up - --remove-policy PolicyGUID - Remove a policy indicated by PolicyGUID from the system - aliases: -rp - --list-policies - Dump information about all policies on the system, whether they be active or not - aliases: -lp ------------------------------ Token Commands --------------------------------- - --add-token Path/To/Token/File [--token-id ID] - Deploy a token onto the current system, with an optional specific ID - If [ID] is specified, a pre-existing token with [ID] should not exist. - aliases:-at - --remove-token ID - Remove a Token indicated by ID from the system. - aliases: -rt - --list-tokens - Dump information about all tokens on the system - aliases: -lt ------------------------------ Misc Commands --------------------------------- - --device-id - Dump the Code Integrity Device Id - aliases: -id - --refresh - Attempt to Refresh CI Policies - aliases: -r - --help - Display this message - aliases: -h ------------------------------ Global Flags--------------------------------- - -json - Format output as json and suppress input -Press Enter to Exit +PS C:\Users\[USER] CiTool --remove-policy "{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}" +Operation Successful +Press Enter to Continue ``` 4. Display the help menu ```powershell -PS C:\Users\[USER] cd \windows\system32 -PS C:\windows\system32> .\CITool.exe -h +PS C:\Users\[USER] CITool -h ----------------------------- Policy Commands --------------------------------- --update-policy /Path/To/Policy/File From 30e7ad000c70cb64450541aa6bbd65116883a712 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 14:13:48 -0400 Subject: [PATCH 015/222] [EDU] Windows 11 SE FAQ --- education/windows/TOC.yml | 2 + education/windows/windows-11-se-faq.yml | 65 +++++++++++++++++++++++++ 2 files changed, 67 insertions(+) create mode 100644 education/windows/windows-11-se-faq.yml diff --git a/education/windows/TOC.yml b/education/windows/TOC.yml index f90e7d595f..582d1706f7 100644 --- a/education/windows/TOC.yml +++ b/education/windows/TOC.yml @@ -14,6 +14,8 @@ items: href: windows-11-se-overview.md - name: Settings and CSP list href: windows-11-se-settings-list.md + - name: Frequently Asked Questions (FAQ) + href: windows-11-se-faq.md - name: Windows in S Mode items: - name: Test Windows 10 in S mode on existing Windows 10 education devices diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml new file mode 100644 index 0000000000..2232c7b22f --- /dev/null +++ b/education/windows/windows-11-se-faq.yml @@ -0,0 +1,65 @@ +### YamlMime:FAQ +metadata: + title: Windows 11 SE Frequently Asked Questions (FAQ) + description: Use these frequently asked questions (FAQ) to learn important details about Windows 11 SE. + ms.prod: windows + ms.technology: windows + author: paolomatarazzo + ms.author: paoloma + manager: aaroncz + ms.reviewer: + ms.collection: education + ms.topic: faq + localizationpriority: medium + ms.date: 09/14/2022 + appliesto: + - ✅ Windows 11 SE + +title: Common questions about Windows 11 SE +summary: Windows 11 SE combines the power and privacy of Windows 11 with educator feedback to create a simplified experience on devices built for education. This Frequently Asked Questions (FAQ) article is intended to help you learn more about Windows 11 SE so you can get to what matters most. + + + +sections: + - name: General + questions: + - question: What is Windows 11 SE? + answer: | + Windows 11 SE is a new cloud-first operating system that offers the power and reliability of Windows 11 with a simplified design and tools specially designed for schools. + To learn more, go to the [][]. + - question: Who uses Windows 11 SE? + answer: | + Windows 11 SE is designed for students in grades K-8 who use a laptop provided by their school. + - question: What are the major differences between Windows 11 and Windows 11 SE? + answer: | + Windows 11 SE was created based on feedback from educators who wanted a distraction-free experience for their students. Here are some of the differences that you'll find in Windows 11 SE: + - Experience a simplified user interface so you can stay focused on the important stuff + - Only IT admins can install apps. Users will not be able to access the Microsoft Store or download apps from the internet + - Use Snap Assist to maximize screen space on smaller screens with two-window snapping + - Store your Desktop, Documents, and Photos folders in the cloud using OneDrive, so your work is backed up and easy to find + - Express yourself and celebrate accomplishments with the *emoji and GIF panel* and *Stickers* + - name: Applications and settings + questions: + - question: Why is there no application store on Windows 11 SE? What apps will work on Windows 11 SE? + answer: | + The IT Admins at your school manage system settings (including application installation and the application store) to ensure all students have a safe, distraction-free experience. On your device you'll have pre-installed apps from Microsoft, from your IT admin, and from your device manufacturer. You can continue to use web apps on the Microsoft Edge browser, as web apps do not require installation. + To learn more, go to the [][]. + - question: Why is there no application store on Windows 11 SE? What apps will work on Windows 11 SE? + answer: | + The IT Admins at your school manage system settings (including application installation and the application store) to ensure all students have a safe, distraction-free experience. On your device you'll have pre-installed apps from Microsoft, from your IT admin, and from your device manufacturer. You can continue to use web apps on the Microsoft Edge browser, as web apps do not require installation. + To learn more, go to the [][]. + - name: Resources + questions: + - question: Where can I find more information how to deploy Windows 11 SE in my school? + answer: | + Here are some resources to get you started: [][]. + - question: Where can I learn more about Windows Autopilot? + answer: | + - [][] + - question: Where can I learn more about managing Windows SE devices with Microsoft Intune? + answer: | + - [][] + +additionalContent: | + ## Additional Content + Here's some optional text that can be placed at the end of the document. \ No newline at end of file From d8e8bb720eb42e6b3505283082922be7fd449e68 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 14:35:50 -0400 Subject: [PATCH 016/222] updates --- education/windows/TOC.yml | 2 +- education/windows/windows-11-se-faq.yml | 17 ++++++++++++++++- 2 files changed, 17 insertions(+), 2 deletions(-) diff --git a/education/windows/TOC.yml b/education/windows/TOC.yml index 582d1706f7..32ab158079 100644 --- a/education/windows/TOC.yml +++ b/education/windows/TOC.yml @@ -15,7 +15,7 @@ items: - name: Settings and CSP list href: windows-11-se-settings-list.md - name: Frequently Asked Questions (FAQ) - href: windows-11-se-faq.md + href: windows-11-se-faq.yml - name: Windows in S Mode items: - name: Test Windows 10 in S mode on existing Windows 10 education devices diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 2232c7b22f..b7a50ea193 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -48,6 +48,12 @@ sections: answer: | The IT Admins at your school manage system settings (including application installation and the application store) to ensure all students have a safe, distraction-free experience. On your device you'll have pre-installed apps from Microsoft, from your IT admin, and from your device manufacturer. You can continue to use web apps on the Microsoft Edge browser, as web apps do not require installation. To learn more, go to the [][]. + - name: Out-of-box experience (OOBE) + questions: + - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? + answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon + + on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? @@ -62,4 +68,13 @@ sections: additionalContent: | ## Additional Content - Here's some optional text that can be placed at the end of the document. \ No newline at end of file + Here's some optional text that can be placed at the end of the document. + + +------------------ +<--References--> + +[MEM-1]: /mem/intune/configuration/custom-settings-windows-10 + +[AZ-1]: /azure/active-directory/hybrid/how-to-connect-fed-saml-idp +[AZ-2]: /azure/active-directory/enterprise-users/licensing-groups-assign \ No newline at end of file From 851cf9172d0e5ae0c671af23699a07df74d453d1 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 14:42:04 -0400 Subject: [PATCH 017/222] updates --- education/windows/windows-11-se-faq.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index b7a50ea193..c7c45570a8 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -52,8 +52,8 @@ sections: questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon - - on the bottom-right corner of the screen. + + on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? @@ -72,7 +72,7 @@ additionalContent: | ------------------ -<--References--> + [MEM-1]: /mem/intune/configuration/custom-settings-windows-10 From c4d04b740fb2df770af2ab9dd954877eeb15446a Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 14:46:11 -0400 Subject: [PATCH 018/222] updates --- education/windows/windows-11-se-faq.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index c7c45570a8..d760c05187 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -71,8 +71,7 @@ additionalContent: | Here's some optional text that can be placed at the end of the document. ------------------- - + [MEM-1]: /mem/intune/configuration/custom-settings-windows-10 From 63eb312557648afb9f8fb419d287226561476403 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 14:54:24 -0400 Subject: [PATCH 019/222] updates --- education/windows/windows-11-se-faq.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index d760c05187..984da25340 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -71,8 +71,6 @@ additionalContent: | Here's some optional text that can be placed at the end of the document. - - [MEM-1]: /mem/intune/configuration/custom-settings-windows-10 [AZ-1]: /azure/active-directory/hybrid/how-to-connect-fed-saml-idp From 2f31101a344505bfe0e4e2d5177da87f5be6c784 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 15:05:35 -0400 Subject: [PATCH 020/222] updates --- education/windows/windows-11-se-faq.yml | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 984da25340..39cdc0a62b 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -68,10 +68,4 @@ sections: additionalContent: | ## Additional Content - Here's some optional text that can be placed at the end of the document. - - -[MEM-1]: /mem/intune/configuration/custom-settings-windows-10 - -[AZ-1]: /azure/active-directory/hybrid/how-to-connect-fed-saml-idp -[AZ-2]: /azure/active-directory/enterprise-users/licensing-groups-assign \ No newline at end of file + Here's some optional text that can be placed at the end of the document. \ No newline at end of file From e6b414cad9cd46d40793f9691a7612c0404ed291 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 15:32:02 -0400 Subject: [PATCH 021/222] updates --- .../windows/images/ic_fluent_accessibility_16_regular.svg | 3 +++ education/windows/windows-11-se-faq.yml | 5 ++--- 2 files changed, 5 insertions(+), 3 deletions(-) create mode 100644 education/windows/images/ic_fluent_accessibility_16_regular.svg diff --git a/education/windows/images/ic_fluent_accessibility_16_regular.svg b/education/windows/images/ic_fluent_accessibility_16_regular.svg new file mode 100644 index 0000000000..4f8de69055 --- /dev/null +++ b/education/windows/images/ic_fluent_accessibility_16_regular.svg @@ -0,0 +1,3 @@ + + + \ No newline at end of file diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 39cdc0a62b..0b616625b9 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -51,14 +51,13 @@ sections: - name: Out-of-box experience (OOBE) questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? - answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon - - on the bottom-right corner of the screen. + answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the **accessibility icon** :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? answer: | Here are some resources to get you started: [][]. + :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: - question: Where can I learn more about Windows Autopilot? answer: | - [][] From 0b721f0a9e3024d65d5cebacb0354295f025f703 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 15:41:37 -0400 Subject: [PATCH 022/222] updates --- education/windows/windows-11-se-faq.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 0b616625b9..b7175aa316 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -51,13 +51,14 @@ sections: - name: Out-of-box experience (OOBE) questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? - answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the **accessibility icon** :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: on the bottom-right corner of the screen. + answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the **accessibility icon** on the bottom-right corner of the screen. + :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? answer: | Here are some resources to get you started: [][]. - :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: + - question: Where can I learn more about Windows Autopilot? answer: | - [][] From 9944763e04c3d250edb4b419bfbb4ac505afc5b1 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 15:52:28 -0400 Subject: [PATCH 023/222] updates --- education/windows/windows-11-se-faq.yml | 4 ---- education/windows/windows-11-se-overview.md | 4 ++++ 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index b7175aa316..93f2a1beca 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -18,8 +18,6 @@ metadata: title: Common questions about Windows 11 SE summary: Windows 11 SE combines the power and privacy of Windows 11 with educator feedback to create a simplified experience on devices built for education. This Frequently Asked Questions (FAQ) article is intended to help you learn more about Windows 11 SE so you can get to what matters most. - - sections: - name: General questions: @@ -52,13 +50,11 @@ sections: questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the **accessibility icon** on the bottom-right corner of the screen. - :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? answer: | Here are some resources to get you started: [][]. - - question: Where can I learn more about Windows Autopilot? answer: | - [][] diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index c8bca008ef..9ed80d7a04 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -174,6 +174,10 @@ When you deploy an app using Intune for Education, you may get a `0x87D300D9` er - If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-applications) and [Configure applications with Microsoft Intune][EDUWIN-1] - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-applications). Or, use an app that runs in a web browser, such as a web app or PWA +To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon + + on the bottom-right corner of the screen. + ## Related articles - [Tutorial: deploy and manage Windows devices in a school][EDUWIN-2] From d5b5be9966bf8badcef1336dd0fcc8081b466781 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 16:05:23 -0400 Subject: [PATCH 024/222] updates --- education/windows/windows-11-se-overview.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 9ed80d7a04..5ed8b32328 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -174,9 +174,7 @@ When you deploy an app using Intune for Education, you may get a `0x87D300D9` er - If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-applications) and [Configure applications with Microsoft Intune][EDUWIN-1] - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-applications). Or, use an app that runs in a web browser, such as a web app or PWA -To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon - - on the bottom-right corner of the screen. +To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: on the bottom-right corner of the screen. ## Related articles From 9a5de45f7cf8b66f5c9a48b08fbb0eec5699c748 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 16:39:22 -0400 Subject: [PATCH 025/222] updates --- ...ic_fluent_accessibility_16_regular.svg => accessibility.svg} | 2 +- education/windows/windows-11-se-overview.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename education/windows/images/{ic_fluent_accessibility_16_regular.svg => accessibility.svg} (95%) diff --git a/education/windows/images/ic_fluent_accessibility_16_regular.svg b/education/windows/images/accessibility.svg similarity index 95% rename from education/windows/images/ic_fluent_accessibility_16_regular.svg rename to education/windows/images/accessibility.svg index 4f8de69055..b35ad23e33 100644 --- a/education/windows/images/ic_fluent_accessibility_16_regular.svg +++ b/education/windows/images/accessibility.svg @@ -1,3 +1,3 @@ - + \ No newline at end of file diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 5ed8b32328..0cb1ef8e16 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -174,7 +174,7 @@ When you deploy an app using Intune for Education, you may get a `0x87D300D9` er - If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-applications) and [Configure applications with Microsoft Intune][EDUWIN-1] - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-applications). Or, use an app that runs in a web browser, such as a web app or PWA -To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/ic_fluent_accessibility_16_regular.svg" border="false"::: on the bottom-right corner of the screen. +To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. ## Related articles From 4eee4954d8198633e5aabf014a29e2a6b1a4f586 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 16:55:42 -0400 Subject: [PATCH 026/222] updates --- education/windows/windows-11-se-faq.yml | 2 +- education/windows/windows-11-se-overview.md | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 93f2a1beca..eb42daa978 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -49,7 +49,7 @@ sections: - name: Out-of-box experience (OOBE) questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? - answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the **accessibility icon** on the bottom-right corner of the screen. + answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon ![accessibility icon](images/accessibility.svg] on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 0cb1ef8e16..c8bca008ef 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -174,8 +174,6 @@ When you deploy an app using Intune for Education, you may get a `0x87D300D9` er - If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-applications) and [Configure applications with Microsoft Intune][EDUWIN-1] - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-applications). Or, use an app that runs in a web browser, such as a web app or PWA -To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. - ## Related articles - [Tutorial: deploy and manage Windows devices in a school][EDUWIN-2] From 65613a75b14f2d4ae4239104d99baa1271ad3d83 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 17:21:19 -0400 Subject: [PATCH 027/222] updates --- education/windows/windows-11-se-faq.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index eb42daa978..4d53fe00ef 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -49,7 +49,10 @@ sections: - name: Out-of-box experience (OOBE) questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? - answer: To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon ![accessibility icon](images/accessibility.svg] on the bottom-right corner of the screen. + answer: | + To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. + + - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? From 679d36a057f17cc83fc58f7a6fb519d2279a1f78 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 17:52:35 -0400 Subject: [PATCH 028/222] update --- education/windows/windows-11-se-faq.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 4d53fe00ef..934b47eb18 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -50,9 +50,7 @@ sections: questions: - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? answer: | - To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. - - + To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? From 9a5ba9d2a0dbe1f5af149827d40f98adb2677226 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 14 Sep 2022 18:34:36 -0400 Subject: [PATCH 029/222] updates --- education/windows/images/accessibility.svg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/images/accessibility.svg b/education/windows/images/accessibility.svg index b35ad23e33..793a95cf87 100644 --- a/education/windows/images/accessibility.svg +++ b/education/windows/images/accessibility.svg @@ -1,3 +1,3 @@ - + \ No newline at end of file From 5090368490df98a7b2ce3019598992097b66a421 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Thu, 15 Sep 2022 06:06:46 -0700 Subject: [PATCH 030/222] Update citool-commands.md --- .../citool-commands.md | 108 +++++++++--------- 1 file changed, 54 insertions(+), 54 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/citool-commands.md b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md index 94c0be2807..846e91f229 100644 --- a/windows/security/threat-protection/windows-defender-application-control/citool-commands.md +++ b/windows/security/threat-protection/windows-defender-application-control/citool-commands.md @@ -19,20 +19,20 @@ This article will describe how to use CI Tool to update and manage policies. CI | Command | Description | Alias | |--------|---------|---------| -| --update-policy /Path/To/Policy/File | Add or update a policy on the current system | -up | -| --remove-policy PolicyGUID | Remove a policy indicated by PolicyGUID from the system | -rp | +| --update-policy | Add or update a policy on the current system | -up | +| --remove-policy | Remove a policy indicated by PolicyGUID from the system | -rp | | --list-policies | Dump information about all policies on the system, whether they are active or not | -lp | ## Token Commands | Command | Description | Alias | |--------|---------|---------| -| --add-token Path/To/Token/File [--token-id ID] | Deploy a token onto the current system, with an optional specific ID. | -at | -| --remove-token ID | Remove a Token indicated by ID from the system. | -rt | +| --add-token <--token-id ID> | Deploy a token onto the current system, with an optional specific ID. | -at | +| --remove-token | Remove a Token indicated by ID from the system. | -rt | | --list-tokens | Dump information about all tokens on the system | -lt | >[!NOTE] ->Regarding --add-token, if [ID] is specified, a pre-existing token with [ID] should not exist. +>Regarding --add-token, if is specified, a pre-existing token with should not exist. ## Miscellaneous Commands @@ -46,58 +46,58 @@ This article will describe how to use CI Tool to update and manage policies. CI 1. Deploy a WDAC policy onto the system -```powershell -PS C:\Users\[USER] CITool --update-policy "\Windows\Temp\{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip" -Operation Successful -Press Enter to Continue -``` + ```powershell + PS C:\Users\ CITool --update-policy "\Windows\Temp\{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}.cip" + Operation Successful + Press Enter to Continue + ``` 2. Refresh the WDAC policies -```powershell -PS C:\Users\[USER] CITool --refresh -Operation Successful -``` + ```powershell + PS C:\Users\ CITool --refresh + Operation Successful + ``` 3. Remove a specific WDAC policy by its policy ID -```powershell -PS C:\Users\[USER] CiTool --remove-policy "{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}" -Operation Successful -Press Enter to Continue -``` + ```powershell + PS C:\Users\ CiTool --remove-policy "{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}" + Operation Successful + Press Enter to Continue + ``` 4. Display the help menu -```powershell -PS C:\Users\[USER] CITool -h - ------------------------------ Policy Commands --------------------------------- - --update-policy /Path/To/Policy/File - Add or update a policy on the current system - aliases: -up - --remove-policy PolicyGUID - Remove a policy indicated by PolicyGUID from the system - aliases: -rp - --list-policies - Dump information about all policies on the system, whether they be active or not - aliases: -lp ------------------------------ Token Commands --------------------------------- - --add-token Path/To/Token/File [--token-id ID] - Deploy a token onto the current system, with an optional specific ID - If [ID] is specified, a pre-existing token with [ID] should not exist. - aliases:-at - --remove-token ID - Remove a Token indicated by ID from the system. - aliases: -rt - --list-tokens - Dump information about all tokens on the system - aliases: -lt ------------------------------ Misc Commands --------------------------------- - --device-id - Dump the Code Integrity Device Id - aliases: -id - --refresh - Attempt to Refresh CI Policies - aliases: -r - --help - Display this message - aliases: -h -``` \ No newline at end of file + ```powershell + PS C:\Users\ CITool -h + + ----------------------------- Policy Commands --------------------------------- + --update-policy /Path/To/Policy/File + Add or update a policy on the current system + aliases: -up + --remove-policy PolicyGUID + Remove a policy indicated by PolicyGUID from the system + aliases: -rp + --list-policies + Dump information about all policies on the system, whether they be active or not + aliases: -lp + ----------------------------- Token Commands --------------------------------- + --add-token Path/To/Token/File <--token-id ID> + Deploy a token onto the current system, with an optional specific ID + If is specified, a pre-existing token with should not exist. + aliases:-at + --remove-token ID + Remove a Token indicated by ID from the system. + aliases: -rt + --list-tokens + Dump information about all tokens on the system + aliases: -lt + ----------------------------- Misc Commands --------------------------------- + --device-id + Dump the Code Integrity Device Id + aliases: -id + --refresh + Attempt to Refresh CI Policies + aliases: -r + --help + Display this message + aliases: -h + ``` \ No newline at end of file From 110539049b8be5224ecadcb627dc93c8bf1290a0 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 15 Sep 2022 09:07:30 -0400 Subject: [PATCH 031/222] updates --- .../images/{ => icons}/accessibility.svg | 2 +- .../windows/images/icons/group-policy.svg | 3 + education/windows/images/icons/intune.svg | 24 ++++ .../images/icons/provisioning-package.svg | 3 + education/windows/windows-11-se-faq.yml | 9 +- education/windows/windows-11-se-overview.md | 104 ++++++++++++++++++ 6 files changed, 142 insertions(+), 3 deletions(-) rename education/windows/images/{ => icons}/accessibility.svg (96%) create mode 100644 education/windows/images/icons/group-policy.svg create mode 100644 education/windows/images/icons/intune.svg create mode 100644 education/windows/images/icons/provisioning-package.svg diff --git a/education/windows/images/accessibility.svg b/education/windows/images/icons/accessibility.svg similarity index 96% rename from education/windows/images/accessibility.svg rename to education/windows/images/icons/accessibility.svg index 793a95cf87..1c57fce1fc 100644 --- a/education/windows/images/accessibility.svg +++ b/education/windows/images/icons/accessibility.svg @@ -1,3 +1,3 @@ - + \ No newline at end of file diff --git a/education/windows/images/icons/group-policy.svg b/education/windows/images/icons/group-policy.svg new file mode 100644 index 0000000000..59e4c20420 --- /dev/null +++ b/education/windows/images/icons/group-policy.svg @@ -0,0 +1,3 @@ + + + \ No newline at end of file diff --git a/education/windows/images/icons/intune.svg b/education/windows/images/icons/intune.svg new file mode 100644 index 0000000000..6e0d938aed --- /dev/null +++ b/education/windows/images/icons/intune.svg @@ -0,0 +1,24 @@ + + + + + + + + + + + + + + + + Icon-intune-329 + + + + + + + + \ No newline at end of file diff --git a/education/windows/images/icons/provisioning-package.svg b/education/windows/images/icons/provisioning-package.svg new file mode 100644 index 0000000000..c83dc20c3e --- /dev/null +++ b/education/windows/images/icons/provisioning-package.svg @@ -0,0 +1,3 @@ + + + \ No newline at end of file diff --git a/education/windows/windows-11-se-faq.yml b/education/windows/windows-11-se-faq.yml index 934b47eb18..eb3558ea24 100644 --- a/education/windows/windows-11-se-faq.yml +++ b/education/windows/windows-11-se-faq.yml @@ -36,6 +36,11 @@ sections: - Use Snap Assist to maximize screen space on smaller screens with two-window snapping - Store your Desktop, Documents, and Photos folders in the cloud using OneDrive, so your work is backed up and easy to find - Express yourself and celebrate accomplishments with the *emoji and GIF panel* and *Stickers* + - name: Deployment + questions: + - question: Can I load Win11SE on any hardware? + answer: | + Windows 11 SE ... - name: Applications and settings questions: - question: Why is there no application store on Windows 11 SE? What apps will work on Windows 11 SE? @@ -48,9 +53,9 @@ sections: To learn more, go to the [][]. - name: Out-of-box experience (OOBE) questions: - - question: My Windows 11 SE device is stuck in OOBE, how can I reset it? + - question: My Windows 11 SE device is stuck in OOBE, how can I troubleshoot it? answer: | - To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/accessibility.svg" border="false"::: on the bottom-right corner of the screen. + To access the Settings application during OOBE on a Windows 11 SE device, press Shift+F10, then select the accessibility icon :::image type="icon" source="images/icons/accessibility.svg"::: on the bottom-right corner of the screen. - name: Resources questions: - question: Where can I find more information how to deploy Windows 11 SE in my school? diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index c8bca008ef..ce736cd8d7 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -174,6 +174,110 @@ When you deploy an app using Intune for Education, you may get a `0x87D300D9` er - If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-applications) and [Configure applications with Microsoft Intune][EDUWIN-1] - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-applications). Or, use an app that runs in a web browser, such as a web app or PWA +## Enable federated sign-in on devices + +Before you can sign-in with a federated IdP, your devices must be configured with different policies. Follow the instructions below to configure your devices using either Microsoft Intune or a provisioning package (PPKG). + +#### [:::image type="icon" source="images/icons/intune.svg"::: **Intune**](#tab/intune) + +To configure federated sign-in using Microsoft Intune, use a custom profile. + +1. Sign in to the Microsoft Endpoint Manager admin center and [create a profile with custom settings][MEM-1] +1. Specify a **Name**, **Description**, and use the values for each policy in the following table: + + | Policy | + |--------| + |