From 79546fcd6b3c8da27f6c59e4b4f3175465a8be8e Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Thu, 21 Oct 2021 15:17:28 -0400 Subject: [PATCH 01/11] Win11 SE --- windows/whats-new/TOC.yml | 2 + .../windows-11-se-administrators-overview.md | 89 +++++++++++++++++++ 2 files changed, 91 insertions(+) create mode 100644 windows/whats-new/windows-11-se-administrators-overview.md diff --git a/windows/whats-new/TOC.yml b/windows/whats-new/TOC.yml index b7b6b4220a..04efa335ab 100644 --- a/windows/whats-new/TOC.yml +++ b/windows/whats-new/TOC.yml @@ -5,6 +5,8 @@ items: - name: What's new in Windows 11 href: windows-11-whats-new.md + - name: Windows 11 SE + href: windows-11-se-administrators-overview.md - name: Windows 11 requirements href: windows-11-requirements.md - name: Plan for Windows 11 diff --git a/windows/whats-new/windows-11-se-administrators-overview.md b/windows/whats-new/windows-11-se-administrators-overview.md new file mode 100644 index 0000000000..5c46ab4730 --- /dev/null +++ b/windows/whats-new/windows-11-se-administrators-overview.md @@ -0,0 +1,89 @@ +--- +title: What is Windows 11 SE +description: Learn more about Windows 11 SE, and the apps that are included with the operating system. Read about the features IT professionals and administrators should know about Windows 11 SE, including adding your own apps. +ms.reviewer: +manager: dougeby +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: mobile +ms.author: mandia +author: MandiOhlinger +ms.localizationpriority: medium +ms.topic: article +--- + +**10.19.2021 status: Per iroliver@microsoft.com**: + +From: Iris Oliver +Sent: Tuesday, October 19, 2021 6:46 PM +To: Mandi Ohlinger ; Anson Ho ; Kirsten Rue ; Liz Cox ; Doug Eby ; Heidi Payne ; Laura Newsad +Cc: Kate O'Leary ; Matt McGinnis ; Teebah Alsaleh (CELA) +Subject: Re: IT Admin documentation needs for Windows SE + +Hi everyone! + +I am closing the loop on the first entry in the table. We confirmed today that we do not need this article by 11/9. We can resume work on it in December/January timeframe, if that works for the group, and I can re-engage then. Also - we would probably not write a new article. The plan would be to just amend the one here: [Windows Privacy Compliance Guide - Windows Privacy](https://docs.microsoft.com/windows/privacy/windows-10-and-privacy-compliance). + +# Windows 11 SE overview, and what admins should know + +**Applies to**: + +- Windows 11 SE + +Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps, and comes preinstalled with Microsoft Office 365. + +For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: + +- A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning, and student privacy is prioritized. +- Admins can remotely manage Windows 11 SE devices using modern management, including [Microsoft Endpoint Manager](/mem/endpoint-manager-overview). +- It's built for low-cost computers, and automates & limits the app experience. For example, it's designed to only run essential apps, and limits the number of apps that can be snapped. + +## Get Windows 11 SE + +Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. For a list of some OEMs, see [INSERT LINK TO OEMS](). + +## Available apps + +If your school district has a Microsoft account manager, then you can add apps created by your app developers. For more information, see [INSERT LINK TO GETTING ACCOUNT MANAGERS FOR SCHOOL DISTRICTS, IF IT EXISTS?](). + +If you want to deploy more apps to your Windows 11 SE devices, you can use Endpoint Manager. For more information, see [ADD LINK TO LAURA'S ARTICLE](). + +### Native apps + +The following apps are automatically enabled to run on Windows 11 SE: + +--- +| Application | Min Version | Vendor | +| --- | --- | --- | +| Read and Write | 12.0.71 | Texthelp Systems Ltd. | +| Dragon Assistant | 3.2.98.061 | Nuance Communications | +| Dragon Professional Individual | 15.00.100 | Nuance Communications | +| e-Speaking Voice and Speech recognition | 4.4.0.8 | e-speaking | +| Free NaturalReader | 16.1.2 | Natural Soft | +| Jaws for Windows | 2022.2109.84 ILM | Freedom Scientific | +| NextUp Talker | 1.0.49 | NextUp Technologies, LLC. | +| NonVisual Desktop Access | 2021.2 | NV Access | +| SuperNova Magnifier & Screen Reader | 20.03 | Dolphin Computer Access | +| SuperNova Magnifier & Speech | 20.03 | Dolphin Computer Access | +| Text Aloud | 4.0.64 | Nextup.com | +| Zoomtext Fusion by AiSquared | 2022.2109.10 | ORF Fusion | +| ZoomText Magnifier/Reader | 2022.2109.25ILM | AI Squared | + +--- + +### Allowed apps + +| App type | Allowed | +| --- | --- | +| Apps that run in a browser | ✔️

Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | +| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails. If there are specific installation-type of apps you want to allow, then you can add them to an exception list. For more information, see [NEED LINK](). | + +## Next steps + +Insert article links to other Windows 11 SE articles: + +- How-to deploy app using Intune/Endpoint Manager --> CAT PM will write +- Error list --> PM will send error list, what errors mean, and resolutions +- Article about Intune & SE --> Liz and Laura are writing +- Support.com article --> Iris is writing? From 20c62503f59b20d5259ec8eaabd51b90b5f1a16a Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 25 Oct 2021 14:01:20 -0400 Subject: [PATCH 02/11] added ppt info --- .../windows-11-se-administrators-overview.md | 75 +++++++++++++------ 1 file changed, 51 insertions(+), 24 deletions(-) diff --git a/windows/whats-new/windows-11-se-administrators-overview.md b/windows/whats-new/windows-11-se-administrators-overview.md index 5c46ab4730..bdec0fd1aa 100644 --- a/windows/whats-new/windows-11-se-administrators-overview.md +++ b/windows/whats-new/windows-11-se-administrators-overview.md @@ -13,18 +13,6 @@ ms.localizationpriority: medium ms.topic: article --- -**10.19.2021 status: Per iroliver@microsoft.com**: - -From: Iris Oliver -Sent: Tuesday, October 19, 2021 6:46 PM -To: Mandi Ohlinger ; Anson Ho ; Kirsten Rue ; Liz Cox ; Doug Eby ; Heidi Payne ; Laura Newsad -Cc: Kate O'Leary ; Matt McGinnis ; Teebah Alsaleh (CELA) -Subject: Re: IT Admin documentation needs for Windows SE - -Hi everyone! - -I am closing the loop on the first entry in the table. We confirmed today that we do not need this article by 11/9. We can resume work on it in December/January timeframe, if that works for the group, and I can re-engage then. Also - we would probably not write a new article. The plan would be to just amend the one here: [Windows Privacy Compliance Guide - Windows Privacy](https://docs.microsoft.com/windows/privacy/windows-10-and-privacy-compliance). - # Windows 11 SE overview, and what admins should know **Applies to**: @@ -35,23 +23,17 @@ Windows 11 SE is a new edition of Windows that's designed for education. It runs For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: -- A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning, and student privacy is prioritized. -- Admins can remotely manage Windows 11 SE devices using modern management, including [Microsoft Endpoint Manager](/mem/endpoint-manager-overview). +- A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning. Student privacy is prioritized. +- Admins remotely manage Windows 11 SE devices using [Microsoft Intune](/mem/intune/fundamentals/what-is-intune). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). - It's built for low-cost computers, and automates & limits the app experience. For example, it's designed to only run essential apps, and limits the number of apps that can be snapped. ## Get Windows 11 SE -Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. For a list of some OEMs, see [INSERT LINK TO OEMS](). +Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. ## Available apps -If your school district has a Microsoft account manager, then you can add apps created by your app developers. For more information, see [INSERT LINK TO GETTING ACCOUNT MANAGERS FOR SCHOOL DISTRICTS, IF IT EXISTS?](). - -If you want to deploy more apps to your Windows 11 SE devices, you can use Endpoint Manager. For more information, see [ADD LINK TO LAURA'S ARTICLE](). - -### Native apps - -The following apps are automatically enabled to run on Windows 11 SE: +Windows 11 SE comes with some preinstalled apps. The following apps are automatically installed and enabled to run on Windows 11 SE: --- | Application | Min Version | Vendor | @@ -77,13 +59,58 @@ The following apps are automatically enabled to run on Windows 11 SE: | App type | Allowed | | --- | --- | | Apps that run in a browser | ✔️

Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | -| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails. If there are specific installation-type of apps you want to allow, then you can add them to an exception list. For more information, see [NEED LINK](). | +| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

If there are specific installation-type of apps you want to allow, then add them to an exception list. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | + +### Add your own apps + +If your school district has a Microsoft account manager, then contact your account manager to add other apps, or apps created by your app developers. If you don't have a Microsoft account manager, you can submit a form request at [aka.ms/edusupport](https://aka.ms/edusupport). + +These apps are automatically added to an exception list in your Intune organization tenant. To deploy and manage apps on your Windows 11 SE devices, you must use the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). + +These apps: + +- Must be a `.MSIX` or `.APPX` package file. For more information, see [What is MSIX?](/windows/msix/overview). + +- Must be in the following app categories:​ + - Content Filtering apps​ + - Test Taking solutions​ + - Accessibility apps​ + - Effective classroom communication apps​ + - Essential diagnostics, management, and supportability apps + +- Must meet the performance requirement of Win 11 SE. --> **What are the perf requirements? Are we documenting these requirements somewhere else? If yes, I need the link to that content. If no, we can document them here, or in another article.** + +- Must meet the security requirements of Windows 11 code integrity. For example: + - All app binaries are code-signed​. + - All files include the `OriginalFileName` in the resource file header​. + - All kernel drivers are WHQL-signed. + + --> **Is there more information on Windows 11 code integrity? Hopefully an article somewhere?** + +- Must have an installer, and don't have an equivalent web application​. + +- Can run on Google Chromebooks. + +- Don't invoke or deny any of the following processes: + - CDB.exe​ + - KD.exe​ + - MSBuild.exe​ + - Dnx.exe​ + - Powershell.exe​ + - Reg.exe + +## 0x87D300D9 error with an app + +When you deploy an app using Endpoint Manager, you may get a `0x87D300D9` error code with a `Failed` state in the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). If you have an app that fails with this error, then: + +- Make sure your app is on the app exception list in your Intune tenant organization. For more information, see [ADD LINK TO LAURA'S ARTICLE](). +- If the app is on the exception list, then it's possible the app is packaged wrong. Apps must be a `.MSIX` or `.APPX` package file. For more requirements, see [Add your own apps](#add-your-own-apps) (in this article). +- If the app isn't on the exception list, then it won't run on Windows 11 SE. To get apps on the exception list, see [Add your own apps](#add-your-own-apps) (in this article). Or, use an app that runs in a web browser, such as a web app or PWA. ## Next steps Insert article links to other Windows 11 SE articles: - How-to deploy app using Intune/Endpoint Manager --> CAT PM will write -- Error list --> PM will send error list, what errors mean, and resolutions - Article about Intune & SE --> Liz and Laura are writing - Support.com article --> Iris is writing? From e66df60c8d2356c1058f7a59abe2bf6a4d36957c Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Thu, 28 Oct 2021 13:41:08 -0400 Subject: [PATCH 03/11] PM review updates --- .../windows-11-se-administrators-overview.md | 28 +++++++------------ 1 file changed, 10 insertions(+), 18 deletions(-) diff --git a/windows/whats-new/windows-11-se-administrators-overview.md b/windows/whats-new/windows-11-se-administrators-overview.md index bdec0fd1aa..880488d441 100644 --- a/windows/whats-new/windows-11-se-administrators-overview.md +++ b/windows/whats-new/windows-11-se-administrators-overview.md @@ -38,7 +38,6 @@ Windows 11 SE comes with some preinstalled apps. The following apps are automati --- | Application | Min Version | Vendor | | --- | --- | --- | -| Read and Write | 12.0.71 | Texthelp Systems Ltd. | | Dragon Assistant | 3.2.98.061 | Nuance Communications | | Dragon Professional Individual | 15.00.100 | Nuance Communications | | e-Speaking Voice and Speech recognition | 4.4.0.8 | e-speaking | @@ -46,6 +45,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps are automati | Jaws for Windows | 2022.2109.84 ILM | Freedom Scientific | | NextUp Talker | 1.0.49 | NextUp Technologies, LLC. | | NonVisual Desktop Access | 2021.2 | NV Access | +| Read and Write | 12.0.71 | Texthelp Systems Ltd. | | SuperNova Magnifier & Screen Reader | 20.03 | Dolphin Computer Access | | SuperNova Magnifier & Speech | 20.03 | Dolphin Computer Access | | Text Aloud | 4.0.64 | Nextup.com | @@ -63,48 +63,40 @@ Windows 11 SE comes with some preinstalled apps. The following apps are automati ### Add your own apps -If your school district has a Microsoft account manager, then contact your account manager to add other apps, or apps created by your app developers. If you don't have a Microsoft account manager, you can submit a form request at [aka.ms/edusupport](https://aka.ms/edusupport). +If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](aka.ms/eduapprequest). Be sure to sign in with your school account, such as `user@contoso.edu`. + +If your school district has a Microsoft account manager, then contact your account manager to add other apps, or apps created by your app developers. These apps are automatically added to an exception list in your Intune organization tenant. To deploy and manage apps on your Windows 11 SE devices, you must use the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). These apps: -- Must be a `.MSIX` or `.APPX` package file. For more information, see [What is MSIX?](/windows/msix/overview). +- Can be any native Windows app type, such as a Microsoft Store app, Win32 app, `.MSIX`, `.APPX`, and more. - Must be in the following app categories:​ - Content Filtering apps​ - Test Taking solutions​ - - Accessibility apps​ + - Accessibility tool apps - Effective classroom communication apps​ - Essential diagnostics, management, and supportability apps -- Must meet the performance requirement of Win 11 SE. --> **What are the perf requirements? Are we documenting these requirements somewhere else? If yes, I need the link to that content. If no, we can document them here, or in another article.** +- Must meet the performance requirements of Windows 11. For more specific information, see [Windows 11 requirements](/windows/whats-new/windows-11-requirements). -- Must meet the security requirements of Windows 11 code integrity. For example: +- Must meet minimum security requirements, such as: - All app binaries are code-signed​. - All files include the `OriginalFileName` in the resource file header​. - All kernel drivers are WHQL-signed. - --> **Is there more information on Windows 11 code integrity? Hopefully an article somewhere?** - - Must have an installer, and don't have an equivalent web application​. -- Can run on Google Chromebooks. - -- Don't invoke or deny any of the following processes: - - CDB.exe​ - - KD.exe​ - - MSBuild.exe​ - - Dnx.exe​ - - Powershell.exe​ - - Reg.exe +- Must not invoke any processes that can be used to jailbreak a device, automate jailbreaks, or present a security risk. For example, processes such as Reg.exe, CBE.exe, CMD.exe, and KD.exe are blocked on Windows 11 SE. ## 0x87D300D9 error with an app When you deploy an app using Endpoint Manager, you may get a `0x87D300D9` error code with a `Failed` state in the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). If you have an app that fails with this error, then: - Make sure your app is on the app exception list in your Intune tenant organization. For more information, see [ADD LINK TO LAURA'S ARTICLE](). -- If the app is on the exception list, then it's possible the app is packaged wrong. Apps must be a `.MSIX` or `.APPX` package file. For more requirements, see [Add your own apps](#add-your-own-apps) (in this article). +- If the app is on the exception list, then it's possible the app is packaged wrong. For more requirements, see [Add your own apps](#add-your-own-apps) (in this article). - If the app isn't on the exception list, then it won't run on Windows 11 SE. To get apps on the exception list, see [Add your own apps](#add-your-own-apps) (in this article). Or, use an app that runs in a web browser, such as a web app or PWA. ## Next steps From 5a66c16185d8ca9a9bfb6a25efdc1d26ab18047a Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Thu, 28 Oct 2021 13:46:48 -0400 Subject: [PATCH 04/11] fixed link --- windows/whats-new/windows-11-se-administrators-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/windows-11-se-administrators-overview.md b/windows/whats-new/windows-11-se-administrators-overview.md index 880488d441..9698bc9a29 100644 --- a/windows/whats-new/windows-11-se-administrators-overview.md +++ b/windows/whats-new/windows-11-se-administrators-overview.md @@ -63,7 +63,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps are automati ### Add your own apps -If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](aka.ms/eduapprequest). Be sure to sign in with your school account, such as `user@contoso.edu`. +If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](https://aka.ms/eduapprequest). Be sure to sign in with your school account, such as `user@contoso.edu`. If your school district has a Microsoft account manager, then contact your account manager to add other apps, or apps created by your app developers. From cd875605b7ed93497791839c43acd6a6214cafcc Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 1 Nov 2021 13:42:47 -0400 Subject: [PATCH 05/11] PM updates; Moved article to Edu TOC --- education/windows/TOC.yml | 2 + .../windows/windows-11-se-overview.md | 37 ++++++++++--------- windows/whats-new/TOC.yml | 2 - 3 files changed, 22 insertions(+), 19 deletions(-) rename windows/whats-new/windows-11-se-administrators-overview.md => education/windows/windows-11-se-overview.md (68%) diff --git a/education/windows/TOC.yml b/education/windows/TOC.yml index 6571e40f23..b812d479ae 100644 --- a/education/windows/TOC.yml +++ b/education/windows/TOC.yml @@ -1,3 +1,5 @@ +- name: Windows 11 SE for Education + href: windows-11-se-overview.md - name: Windows 10 for Education href: index.md items: diff --git a/windows/whats-new/windows-11-se-administrators-overview.md b/education/windows/windows-11-se-overview.md similarity index 68% rename from windows/whats-new/windows-11-se-administrators-overview.md rename to education/windows/windows-11-se-overview.md index 9698bc9a29..9756414852 100644 --- a/windows/whats-new/windows-11-se-administrators-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -13,13 +13,13 @@ ms.localizationpriority: medium ms.topic: article --- -# Windows 11 SE overview, and what admins should know +# Windows 11 SE for Education **Applies to**: - Windows 11 SE -Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps, and comes preinstalled with Microsoft Office 365. +Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps, and comes with Microsoft Office 365 preinstalled. For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: @@ -29,26 +29,29 @@ For education customers seeking cost-effective devices, Microsoft Windows 11 SE ## Get Windows 11 SE -Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. +Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. For example, you'll be able to purchase Windows Surface devices with Windows 11 SE already installed. ## Available apps -Windows 11 SE comes with some preinstalled apps. The following apps are automatically installed and enabled to run on Windows 11 SE: +Windows 11 SE comes with some preinstalled apps. The following apps can also run on Windows 11 SE, and are deployed using the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more information on adding and deploying education apps, see [ADD LINK TO LAURA'S ARTICLE](). --- -| Application | Min Version | Vendor | +| Application | Min version | Vendor | | --- | --- | --- | +| Chrome | 95.0.4638.54 | Google | | Dragon Assistant | 3.2.98.061 | Nuance Communications | | Dragon Professional Individual | 15.00.100 | Nuance Communications | | e-Speaking Voice and Speech recognition | 4.4.0.8 | e-speaking | | Free NaturalReader | 16.1.2 | Natural Soft | | Jaws for Windows | 2022.2109.84 ILM | Freedom Scientific | +| Kite Student Portal | 8.0.1 | Dynamic Learning Maps | | NextUp Talker | 1.0.49 | NextUp Technologies, LLC. | | NonVisual Desktop Access | 2021.2 | NV Access | | Read and Write | 12.0.71 | Texthelp Systems Ltd. | | SuperNova Magnifier & Screen Reader | 20.03 | Dolphin Computer Access | | SuperNova Magnifier & Speech | 20.03 | Dolphin Computer Access | | Text Aloud | 4.0.64 | Nextup.com | +| Zoom | 5.8.3 (1581) | Zoom Inc | | Zoomtext Fusion by AiSquared | 2022.2109.10 | ORF Fusion | | ZoomText Magnifier/Reader | 2022.2109.25ILM | AI Squared | @@ -63,33 +66,33 @@ Windows 11 SE comes with some preinstalled apps. The following apps are automati ### Add your own apps -If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](https://aka.ms/eduapprequest). Be sure to sign in with your school account, such as `user@contoso.edu`. +If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](https://aka.ms/eduapprequest). Anyone from the school district can submit the request. In the form, sign in with your school account, such as `user@contoso.edu`. We'll update you using this email account. -If your school district has a Microsoft account manager, then contact your account manager to add other apps, or apps created by your app developers. +Microsoft reviews every app request to make sure each app meets the following requirements: -These apps are automatically added to an exception list in your Intune organization tenant. To deploy and manage apps on your Windows 11 SE devices, you must use the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). +- Apps can be any native Windows app type, such as a Microsoft Store app, Win32 app, `.MSIX`, `.APPX`, and more. -These apps: - -- Can be any native Windows app type, such as a Microsoft Store app, Win32 app, `.MSIX`, `.APPX`, and more. - -- Must be in the following app categories:​ +- Apps must be in one of the following app categories:​ - Content Filtering apps​ - Test Taking solutions​ - Accessibility tool apps - Effective classroom communication apps​ - Essential diagnostics, management, and supportability apps -- Must meet the performance requirements of Windows 11. For more specific information, see [Windows 11 requirements](/windows/whats-new/windows-11-requirements). +- Apps must meet the performance requirements of Windows 11. For more specific information, see [Windows 11 requirements](/windows/whats-new/windows-11-requirements). -- Must meet minimum security requirements, such as: +- Apps must meet the following security requirements: - All app binaries are code-signed​. - All files include the `OriginalFileName` in the resource file header​. - All kernel drivers are WHQL-signed. -- Must have an installer, and don't have an equivalent web application​. +- Apps can't have an equivalent web application​. -- Must not invoke any processes that can be used to jailbreak a device, automate jailbreaks, or present a security risk. For example, processes such as Reg.exe, CBE.exe, CMD.exe, and KD.exe are blocked on Windows 11 SE. +- Apps can't invoke any processes that can be used to jailbreak a device, automate jailbreaks, or present a security risk. For example, processes such as Reg.exe, CBE.exe, CMD.exe, and KD.exe are blocked on Windows 11 SE. + +If the app meets the requirements, Microsoft also works with the Independent Software Vendor (ISV) to test the app, and make sure the app works as expected on Windows 11 SE. + +When the app is ready, Microsoft will update you. Then, you add the app to the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), and deploy it to your Windows 11 SE devices. For more information on adding and deploying education apps, see [ADD LINK TO LAURA'S ARTICLE](). ## 0x87D300D9 error with an app diff --git a/windows/whats-new/TOC.yml b/windows/whats-new/TOC.yml index 04efa335ab..b7b6b4220a 100644 --- a/windows/whats-new/TOC.yml +++ b/windows/whats-new/TOC.yml @@ -5,8 +5,6 @@ items: - name: What's new in Windows 11 href: windows-11-whats-new.md - - name: Windows 11 SE - href: windows-11-se-administrators-overview.md - name: Windows 11 requirements href: windows-11-requirements.md - name: Plan for Windows 11 From 1d85602884d40a27fd57b9e43c315aa1e28436cb Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 1 Nov 2021 16:03:57 -0400 Subject: [PATCH 06/11] review updates --- education/windows/windows-11-se-overview.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 9756414852..1a1687efd3 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -25,11 +25,12 @@ For education customers seeking cost-effective devices, Microsoft Windows 11 SE - A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning. Student privacy is prioritized. - Admins remotely manage Windows 11 SE devices using [Microsoft Intune](/mem/intune/fundamentals/what-is-intune). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). -- It's built for low-cost computers, and automates & limits the app experience. For example, it's designed to only run essential apps, and limits the number of apps that can be snapped. +- It's built for low-cost computers. +- It has a curated app experience, and is designed to only run essential education apps. ## Get Windows 11 SE -Windows 11 SE is preinstalled on devices from OEMs, and is available to everyone. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. For example, you'll be able to purchase Windows Surface devices with Windows 11 SE already installed. +Windows 11 SE is only available preinstalled on devices from OEMs. The OEM installs Windows 11 SE, and makes the devices available for you to purchase. For example, you'll be able to purchase Microsoft Surface devices with Windows 11 SE already installed. ## Available apps @@ -66,7 +67,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps can also run ### Add your own apps -If your apps aren't shown in the [Allowed apps list](#allowed-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](https://aka.ms/eduapprequest). Anyone from the school district can submit the request. In the form, sign in with your school account, such as `user@contoso.edu`. We'll update you using this email account. +If the apps you need aren't shown in the [available apps list](#available-apps) (in this article), then you can submit an application request at [aka.ms/eduapprequest](https://aka.ms/eduapprequest). Anyone from a school district can submit the request. In the form, sign in with your school account, such as `user@contoso.edu`. We'll update you using this email account. Microsoft reviews every app request to make sure each app meets the following requirements: @@ -75,18 +76,18 @@ Microsoft reviews every app request to make sure each app meets the following re - Apps must be in one of the following app categories:​ - Content Filtering apps​ - Test Taking solutions​ - - Accessibility tool apps - - Effective classroom communication apps​ + - Accessibility tools + - Classroom communication apps​ - Essential diagnostics, management, and supportability apps -- Apps must meet the performance requirements of Windows 11. For more specific information, see [Windows 11 requirements](/windows/whats-new/windows-11-requirements). +- Apps must meet the performance [requirements of Windows 11](/windows/whats-new/windows-11-requirements). - Apps must meet the following security requirements: - All app binaries are code-signed​. - All files include the `OriginalFileName` in the resource file header​. - All kernel drivers are WHQL-signed. -- Apps can't have an equivalent web application​. +- Apps don't have an equivalent web application​. - Apps can't invoke any processes that can be used to jailbreak a device, automate jailbreaks, or present a security risk. For example, processes such as Reg.exe, CBE.exe, CMD.exe, and KD.exe are blocked on Windows 11 SE. @@ -94,7 +95,7 @@ If the app meets the requirements, Microsoft also works with the Independent Sof When the app is ready, Microsoft will update you. Then, you add the app to the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), and deploy it to your Windows 11 SE devices. For more information on adding and deploying education apps, see [ADD LINK TO LAURA'S ARTICLE](). -## 0x87D300D9 error with an app +### 0x87D300D9 error with an app When you deploy an app using Endpoint Manager, you may get a `0x87D300D9` error code with a `Failed` state in the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). If you have an app that fails with this error, then: From 51679f37e9327dadb570efbbf42af887d8b56854 Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Tue, 2 Nov 2021 17:22:24 -0400 Subject: [PATCH 07/11] Added Intune for EDU info --- education/windows/windows-11-se-overview.md | 23 +++++++++++---------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 1a1687efd3..d56b9e48c9 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -1,6 +1,6 @@ --- title: What is Windows 11 SE -description: Learn more about Windows 11 SE, and the apps that are included with the operating system. Read about the features IT professionals and administrators should know about Windows 11 SE, including adding your own apps. +description: Learn more about Windows 11 SE, and the apps that are included with the operating system. Read about the features IT professionals and administrators should know about Windows 11 SE. Add and deploy your apps using Microsoft Intune for Education. ms.reviewer: manager: dougeby ms.prod: w10 @@ -18,13 +18,14 @@ ms.topic: article **Applies to**: - Windows 11 SE +- Microsoft Intune for Education Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps, and comes with Microsoft Office 365 preinstalled. For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: - A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning. Student privacy is prioritized. -- Admins remotely manage Windows 11 SE devices using [Microsoft Intune](/mem/intune/fundamentals/what-is-intune). For more specific information, see [ADD LINK TO LAURA'S ARTICLE](). +- Admins remotely manage Windows 11 SE devices using [Microsoft Intune for Education](/intune-education/what-is-intune-for-education). - It's built for low-cost computers. - It has a curated app experience, and is designed to only run essential education apps. @@ -34,7 +35,7 @@ Windows 11 SE is only available preinstalled on devices from OEMs. The OEM insta ## Available apps -Windows 11 SE comes with some preinstalled apps. The following apps can also run on Windows 11 SE, and are deployed using the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more information on adding and deploying education apps, see [ADD LINK TO LAURA'S ARTICLE](). +Windows 11 SE comes with some preinstalled apps. The following apps can also run on Windows 11 SE, and are deployed using the [Intune for Education portal](https://intuneeducation.portal.azure.com). For more information on adding and deploying education apps, see [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). --- | Application | Min version | Vendor | @@ -63,7 +64,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps can also run | App type | Allowed | | --- | --- | | Apps that run in a browser | ✔️

Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | -| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

If there are specific installation-type of apps you want to allow, then add them to an exception list. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | +| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

If there are specific installation-type of apps you want to allow, then work with Microsoft to get them added. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | ### Add your own apps @@ -91,22 +92,22 @@ Microsoft reviews every app request to make sure each app meets the following re - Apps can't invoke any processes that can be used to jailbreak a device, automate jailbreaks, or present a security risk. For example, processes such as Reg.exe, CBE.exe, CMD.exe, and KD.exe are blocked on Windows 11 SE. -If the app meets the requirements, Microsoft also works with the Independent Software Vendor (ISV) to test the app, and make sure the app works as expected on Windows 11 SE. +If the app meets the requirements, Microsoft works with the Independent Software Vendor (ISV) to test the app, and make sure the app works as expected on Windows 11 SE. -When the app is ready, Microsoft will update you. Then, you add the app to the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), and deploy it to your Windows 11 SE devices. For more information on adding and deploying education apps, see [ADD LINK TO LAURA'S ARTICLE](). +When the app is ready, Microsoft will update you. Then, you add the app to the [Intune for Education portal](https://intuneeducation.portal.azure.com), and [assign](/intune-education/assign-apps) it to your Windows 11 SE devices. For more information on adding and deploying education apps, see [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). ### 0x87D300D9 error with an app -When you deploy an app using Endpoint Manager, you may get a `0x87D300D9` error code with a `Failed` state in the [Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). If you have an app that fails with this error, then: +When you deploy an app using Intune for Education, you may get a `0x87D300D9` error code with a `Failed` state in the [Intune for Education portal](https://intuneeducation.portal.azure.com). If you have an app that fails with this error, then: -- Make sure your app is on the app exception list in your Intune tenant organization. For more information, see [ADD LINK TO LAURA'S ARTICLE](). -- If the app is on the exception list, then it's possible the app is packaged wrong. For more requirements, see [Add your own apps](#add-your-own-apps) (in this article). -- If the app isn't on the exception list, then it won't run on Windows 11 SE. To get apps on the exception list, see [Add your own apps](#add-your-own-apps) (in this article). Or, use an app that runs in a web browser, such as a web app or PWA. +- Make sure the app is on the [available apps list](#available-apps) (in this article). Or, make sure your app is [approved for Windows 11 SE](#add-your-own-apps) (in this article). +- If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-apps) (in this article) and [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). +- If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-apps) (in this article). Or, use an app that runs in a web browser, such as a web app or PWA. ## Next steps Insert article links to other Windows 11 SE articles: - How-to deploy app using Intune/Endpoint Manager --> CAT PM will write -- Article about Intune & SE --> Liz and Laura are writing +- [Use Intune for Education to manage devices running Windows 11 SE](/intune-education/windows-11-se-overview) --> Liz and Laura are writing - Support.com article --> Iris is writing? From f14278dea11b8d741abbc47594ec0827bb53589b Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Thu, 4 Nov 2021 18:42:33 -0400 Subject: [PATCH 08/11] intune updates --- education/windows/windows-11-se-overview.md | 26 ++++++++++----------- 1 file changed, 12 insertions(+), 14 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index d56b9e48c9..9070b1d1bb 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -20,7 +20,7 @@ ms.topic: article - Windows 11 SE - Microsoft Intune for Education -Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps, and comes with Microsoft Office 365 preinstalled. +Windows 11 SE is a new edition of Windows that's designed for education. It runs on web-first devices that use essential education apps. Microsoft Office 365 is preinstalled. For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: @@ -35,7 +35,7 @@ Windows 11 SE is only available preinstalled on devices from OEMs. The OEM insta ## Available apps -Windows 11 SE comes with some preinstalled apps. The following apps can also run on Windows 11 SE, and are deployed using the [Intune for Education portal](https://intuneeducation.portal.azure.com). For more information on adding and deploying education apps, see [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). +Windows 11 SE comes with some preinstalled apps. The following apps can also run on Windows 11 SE, and are deployed using the [Intune for Education portal](https://intuneeducation.portal.azure.com). For more information, see [Manage devices running Windows 11 SE](/intune-education/windows-11-se-overview). --- | Application | Min version | Vendor | @@ -59,12 +59,12 @@ Windows 11 SE comes with some preinstalled apps. The following apps can also run --- -### Allowed apps +### Enabled apps -| App type | Allowed | +| App type | Enabled | | --- | --- | | Apps that run in a browser | ✔️

Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | -| Apps that require installation | ❌

Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

If there are specific installation-type of apps you want to allow, then work with Microsoft to get them added. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | +| Apps that require installation | ❌ Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

✔️ If there are specific installation-type of apps you want to enable, then work with Microsoft to get them enabled. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | ### Add your own apps @@ -77,7 +77,7 @@ Microsoft reviews every app request to make sure each app meets the following re - Apps must be in one of the following app categories:​ - Content Filtering apps​ - Test Taking solutions​ - - Accessibility tools + - Assistive technologies - Classroom communication apps​ - Essential diagnostics, management, and supportability apps @@ -94,20 +94,18 @@ Microsoft reviews every app request to make sure each app meets the following re If the app meets the requirements, Microsoft works with the Independent Software Vendor (ISV) to test the app, and make sure the app works as expected on Windows 11 SE. -When the app is ready, Microsoft will update you. Then, you add the app to the [Intune for Education portal](https://intuneeducation.portal.azure.com), and [assign](/intune-education/assign-apps) it to your Windows 11 SE devices. For more information on adding and deploying education apps, see [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). +When the app is ready, Microsoft will update you. Then, you add the app to the [Intune for Education portal](https://intuneeducation.portal.azure.com), and [assign](/intune-education/assign-apps) it to your Windows 11 SE devices. + +For more information on Intune requirements for adding education apps, see [Manage devices running Windows 11 SE](/intune-education/windows-11-se-overview). ### 0x87D300D9 error with an app When you deploy an app using Intune for Education, you may get a `0x87D300D9` error code with a `Failed` state in the [Intune for Education portal](https://intuneeducation.portal.azure.com). If you have an app that fails with this error, then: - Make sure the app is on the [available apps list](#available-apps) (in this article). Or, make sure your app is [approved for Windows 11 SE](#add-your-own-apps) (in this article). -- If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-apps) (in this article) and [Add apps in Intune for Education](/intune-education/add-desktop-apps-edu). +- If the app is approved, then it's possible the app is packaged wrong. For more information, see [Add your own apps](#add-your-own-apps) (in this article) and [Manage devices running Windows 11 SE](/intune-education/windows-11-se-overview). - If the app isn't approved, then it won't run on Windows 11 SE. To get apps approved, see [Add your own apps](#add-your-own-apps) (in this article). Or, use an app that runs in a web browser, such as a web app or PWA. -## Next steps +## Related articles -Insert article links to other Windows 11 SE articles: - -- How-to deploy app using Intune/Endpoint Manager --> CAT PM will write -- [Use Intune for Education to manage devices running Windows 11 SE](/intune-education/windows-11-se-overview) --> Liz and Laura are writing -- Support.com article --> Iris is writing? +- [Use Intune for Education to manage devices running Windows 11 SE](/intune-education/windows-11-se-overview) From 0ba8e56174e489226efe207f56823d957f577718 Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 8 Nov 2021 14:10:22 -0500 Subject: [PATCH 09/11] final updates, hopefully --- education/windows/windows-11-se-overview.md | 6 +++--- windows/whats-new/windows-11-whats-new.md | 12 ++++++++---- 2 files changed, 11 insertions(+), 7 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 9070b1d1bb..342ce437b3 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -24,9 +24,9 @@ Windows 11 SE is a new edition of Windows that's designed for education. It runs For education customers seeking cost-effective devices, Microsoft Windows 11 SE is a great choice. Windows 11 SE includes the following benefits: -- A simplified and secure experience for students, with a focus on students in grades 4-8. Students focus on learning. Student privacy is prioritized. +- A simplified and secure experience for students. Student privacy is prioritized. - Admins remotely manage Windows 11 SE devices using [Microsoft Intune for Education](/intune-education/what-is-intune-for-education). -- It's built for low-cost computers. +- It's built for low-cost devices. - It has a curated app experience, and is designed to only run essential education apps. ## Get Windows 11 SE @@ -63,7 +63,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps can also run | App type | Enabled | | --- | --- | -| Apps that run in a browser | ✔️

Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | +| Apps that run in a browser | ✔️ Apps that run in a browser, like Progressive Web Apps (PWA) and Web apps, can run on Windows 11 SE without any changes or limitations. | | Apps that require installation | ❌ Apps that require an installation, including Microsoft Store apps and Win32 apps can't be installed. If students try to install these apps, the installation fails.

✔️ If there are specific installation-type of apps you want to enable, then work with Microsoft to get them enabled. For more information, see [Add your own apps](#add-your-own-apps) (in this article). | ### Add your own apps diff --git a/windows/whats-new/windows-11-whats-new.md b/windows/whats-new/windows-11-whats-new.md index 4eafe42218..9d1c9d36b5 100644 --- a/windows/whats-new/windows-11-whats-new.md +++ b/windows/whats-new/windows-11-whats-new.md @@ -1,6 +1,6 @@ --- title: Windows 11, what's new and overview for administrators -description: Learn more about what's new in Windows 11. Read about see the features IT professionals and administrators should know about Windows 11, including security, using apps, using Android apps, the new desktop, and deploying and servicing PCs. +description: Learn more about what's new in Windows 11. Read about the features IT professionals and administrators should know about Windows 11, including security, using apps, using Android apps, the new desktop, and deploying and servicing PCs. ms.reviewer: manager: dougeby ms.audience: itpro @@ -21,7 +21,7 @@ ms.custom: - Windows 11 -Windows 11 is the next client operating system, and includes features that organizations should know. Windows 11 is built on the same foundation as Windows 10. If you use Windows 10, then Windows 11 is a natural transition and update to what you know, and what you're familiar with. +Windows 11 is the next client operating system, and includes features that organizations should know. Windows 11 is built on the same foundation as Windows 10. If you use Windows 10, then Windows 11 is a natural transition. It's an update to what you know, and what you're familiar with. It offers innovations focused on enhancing end-user productivity, and is designed to support today's hybrid work environment. @@ -41,7 +41,7 @@ The security and privacy features in Windows 11 are similar to Windows 10. Secur For more information, see [Windows security baselines](/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines). -- **Microsoft Defender Antivirus** is built into Windows, and helps protect devices using next-generation security. When used with Microsoft Defender for Endpoint, your organization gets strong endpoint protection, and advanced endpoint protection & response. If your devices are managed with Endpoint Manager, you can create policies based on threat levels found in Microsoft Defender for Endpoint. +- **Microsoft Defender Antivirus** is built into Windows, and helps protect devices using next-generation security. When used with Microsoft Defender for Endpoint, your organization gets strong endpoint protection, and advanced endpoint protection & response. If you use Endpoint Manager to manage devices, then you can create policies based on threat levels in Microsoft Defender for Endpoint. For more information, see: @@ -194,7 +194,7 @@ For more information on the security features you can configure, manage, and enf - **Microsoft Endpoint Manager** is a mobile application management (MAM) and mobile device management (MDM) provider. It helps manage devices, and manage apps on devices in your organization. You configure policies, and then deploy these policies to users and groups. You can create and deploy policies that install apps, configure device features, enforce PIN requirements, block compromised devices, and more. - If you currently use Group Policy to manage your Windows 10 devices, you can also use Group Policy to manage Windows 11 devices. In Endpoint Manager, there are [administrative templates](/mem/intune/configuration/administrative-templates-windows) and the [settings catalog](/mem/intune/configuration/settings-catalog) that include many of the same policies. [Group Policy analytics](/mem/intune/configuration/group-policy-analytics) analyze your on-premises group policy objects. + If you use Group Policy to manage your Windows 10 devices, then you can also use Group Policy to manage Windows 11 devices. In Endpoint Manager, there are [administrative templates](/mem/intune/configuration/administrative-templates-windows) and the [settings catalog](/mem/intune/configuration/settings-catalog) that include many of the same policies. [Group Policy analytics](/mem/intune/configuration/group-policy-analytics) analyze your on-premises group policy objects. - **Windows Updates and Delivery optimization** helps manage updates, and manage features on your devices. Starting with Windows 11, the OS feature updates are installed annually. For more information on servicing channels, and what they are, see [Servicing channels](/windows/deployment/update/waas-overview#servicing-channels). @@ -211,6 +211,10 @@ For more information on the security features you can configure, manage, and enf - [Installation & updates](https://support.microsoft.com/office/installation-updates-2f9c1819-310d-48a7-ac12-25191269903c#PickTab=Windows_11) - [Manage updates in Windows](https://support.microsoft.com/windows/manage-updates-in-windows-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe) +## Education and apps + +Windows 11 SE is a new edition of Windows that's designed for education. It runs on low-cost devices, and runs essential apps, including Microsoft 365. For more information, see [Windows 11 SE for Education](/education/windows/windows-11-se-overview). + ## Next steps - [Windows 11 requirements](windows-11-requirements.md) From 66eb7edc6db637f776c632eabcea00c4e6e787aa Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 22 Nov 2021 16:08:01 -0500 Subject: [PATCH 10/11] added new article --- education/windows/TOC.yml | 6 +- .../windows/windows-11-se-settings-list.md | 67 +++++++++++++++++++ 2 files changed, 72 insertions(+), 1 deletion(-) create mode 100644 education/windows/windows-11-se-settings-list.md diff --git a/education/windows/TOC.yml b/education/windows/TOC.yml index b812d479ae..3a592b8263 100644 --- a/education/windows/TOC.yml +++ b/education/windows/TOC.yml @@ -1,5 +1,9 @@ - name: Windows 11 SE for Education - href: windows-11-se-overview.md + items: + - name: Overview + href: windows-11-se-overview.md + - name: Settings and CSP list + href: windows-11-se-settings-list.md - name: Windows 10 for Education href: index.md items: diff --git a/education/windows/windows-11-se-settings-list.md b/education/windows/windows-11-se-settings-list.md new file mode 100644 index 0000000000..2bc1a56fd1 --- /dev/null +++ b/education/windows/windows-11-se-settings-list.md @@ -0,0 +1,67 @@ +--- +title: Windows 11 SE settings list +description: Windows 11 SE automatically configures settings in the operating system. Learn more about the settings you can control and manage, and the settings you can't change. +ms.reviewer: +manager: dougeby +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: mobile +ms.author: mandia +author: MandiOhlinger +ms.localizationpriority: medium +ms.topic: article +--- + +# Windows 11 SE for Education settings list + +**Applies to**: + +- Windows 11 SE +- Microsoft Intune for Education + +Windows 11 SE automatically configures settings and features in the operating system. These settings use the Configuration Service Provider (CSPs) provided by Microsoft. You can use an MDM provider to configure these settings. + +This article lists the settings automatically configured. For more information on Windows 11 SE, see [Windows 11 SE for Education overview](windows-11-se-overview.md). + +## Settings that can be changed + +The following table lists and describes the settings that can be changed by administrators. + +| Setting | Description | +| --- | --- | +| Block manual unenrollment | Default: Blocked

Users can't unenroll their devices from device management services. | +| Allow option to Show Network | Default: Allowed

Gives users the option to see the **Show Network** folder in File Explorer. | +| Allow option to Show This PC | Default: Allowed

Gives user the option to see the **Show This PC** folder in File Explorer. | +| Set Allowed Folder location | Default folders: Documents, Desktop, Pictures, and Downloads

Gives user access to these folders. | +| Set Allowed Storage Locations | Default: Blocks Local Drives and Network Drives

Blocks user access to these storage locations. | +| Allow News and Interests | Default: Hide

Hides Widgets. | +| Disable advertising ID | Default: Disabled

Blocks apps from using usage data to tailor advertisements.

[Privacy/DisableAdvertisingId](/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | +| Visible settings pages | Default:

| +| Enable App Install Control | Default: Turned On

Users can’t download apps from the internet. | +| Configure Storage Sense Cloud Content Dehydration Threshold | Default: 30 days

If a file hasn’t been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again.

[Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP](/windows/client-management/mdm/policy-csp-storage#storage-configstoragesensecloudcontentdehydrationthreshold) | +| Allow Telemetry | Default: Required Telemetry Only

Sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date.

[System/AllowTelemetry CSP](/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | +| Allow Experimentation | Default: Disabled

Microsoft can't experiment with the product to study user preferences or device behavior.

[System/AllowExperimentation CSP](/windows/client-management/mdm/policy-csp-system#system-allowexperimentation) | +| Block external extensions | Default: Blocked

In Microsoft Edge, users can't install external extensions. | +| Configure new tab page | Default: `Office.com`

In Microsoft Edge, the new tab page defaults to `office.com`. | +| Configure homepage | Default: `Office.com`

In Microsoft Edge, the homepage defaults to `office.com`. | +| Prevent SmartScreen prompt override | Default: Enabled

In Microsoft Edge, users can't override Windows Defender SmartScreen warnings. | + +## Settings that can't be changed + +The following settings can't be changed. + +| Category | Description | +| --- | --- | +| Visible Folders in File Explorer | By default, the Desktop, Downloads, Documents, and Pictures folders are visible to users in File Explorer. Users can make other folders, like **This PC**, visible in **View** > **Options**. | +| Launch Windows Maximized | All Windows are opened in the maximized view. | +| Windows Snapping | Windows snapping is limited to two Windows. | +| Allowed Account Types | Microsoft accounts and Azure AD accounts are allowed. | +| Virtual Desktops | Virtual Desktops are blocked. | +| Microsoft Store | The Microsoft Store is blocked. | +| Administrative tools | Administrative tools, such as the command prompt and Windows PowerShell, can't be opened. Windows PowerShell scripts deployed using Microsoft Endpoint Manager can run. | +| Apps | Only certain apps are allowed to run on Windows 11 SE. For more info on what apps can run on Windows 11 SE, see [Windows 11 SE for Education overview](windows-11-se-overview.md). | + +## Next steps + +[Windows 11 SE for Education overview](windows-11-se-overview.md) From be1c8ec1ac13909b4700cd697f86dde5734fdb9d Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 22 Nov 2021 18:48:00 -0500 Subject: [PATCH 11/11] added CSP links --- education/windows/windows-11-se-settings-list.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/education/windows/windows-11-se-settings-list.md b/education/windows/windows-11-se-settings-list.md index 2bc1a56fd1..0c7227041a 100644 --- a/education/windows/windows-11-se-settings-list.md +++ b/education/windows/windows-11-se-settings-list.md @@ -30,22 +30,22 @@ The following table lists and describes the settings that can be changed by admi | Setting | Description | | --- | --- | -| Block manual unenrollment | Default: Blocked

Users can't unenroll their devices from device management services. | +| Block manual unenrollment | Default: Blocked

Users can't unenroll their devices from device management services.

[Experience/AllowManualMDMUnenrollment CSP](/windows/client-management/mdm/policy-csp-experience#experience-allowmanualmdmunenrollment)| | Allow option to Show Network | Default: Allowed

Gives users the option to see the **Show Network** folder in File Explorer. | | Allow option to Show This PC | Default: Allowed

Gives user the option to see the **Show This PC** folder in File Explorer. | | Set Allowed Folder location | Default folders: Documents, Desktop, Pictures, and Downloads

Gives user access to these folders. | | Set Allowed Storage Locations | Default: Blocks Local Drives and Network Drives

Blocks user access to these storage locations. | | Allow News and Interests | Default: Hide

Hides Widgets. | -| Disable advertising ID | Default: Disabled

Blocks apps from using usage data to tailor advertisements.

[Privacy/DisableAdvertisingId](/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | +| Disable advertising ID | Default: Disabled

Blocks apps from using usage data to tailor advertisements.

[Privacy/DisableAdvertisingId CSP](/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | | Visible settings pages | Default:

| -| Enable App Install Control | Default: Turned On

Users can’t download apps from the internet. | +| Enable App Install Control | Default: Turned On

Users can’t download apps from the internet.

[SmartScreen/EnableAppInstallControl CSP](/windows/client-management/mdm/policy-csp-smartscreen#smartscreen-enableappinstallcontrol)| | Configure Storage Sense Cloud Content Dehydration Threshold | Default: 30 days

If a file hasn’t been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again.

[Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP](/windows/client-management/mdm/policy-csp-storage#storage-configstoragesensecloudcontentdehydrationthreshold) | | Allow Telemetry | Default: Required Telemetry Only

Sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date.

[System/AllowTelemetry CSP](/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | | Allow Experimentation | Default: Disabled

Microsoft can't experiment with the product to study user preferences or device behavior.

[System/AllowExperimentation CSP](/windows/client-management/mdm/policy-csp-system#system-allowexperimentation) | -| Block external extensions | Default: Blocked

In Microsoft Edge, users can't install external extensions. | -| Configure new tab page | Default: `Office.com`

In Microsoft Edge, the new tab page defaults to `office.com`. | -| Configure homepage | Default: `Office.com`

In Microsoft Edge, the homepage defaults to `office.com`. | -| Prevent SmartScreen prompt override | Default: Enabled

In Microsoft Edge, users can't override Windows Defender SmartScreen warnings. | +| Block external extensions | Default: Blocked

In Microsoft Edge, users can't install external extensions.

[BlockExternalExtensions](/DeployEdge/microsoft-edge-policies#blockexternalextensions)| +| Configure new tab page | Default: `Office.com`

In Microsoft Edge, the new tab page defaults to `office.com`.

[Configure the new tab page URL](/DeployEdge/microsoft-edge-policies#configure-the-new-tab-page-url)| +| Configure homepage | Default: `Office.com`

In Microsoft Edge, the homepage defaults to `office.com`.

[HomepageIsNewTabPage](/DeployEdge/microsoft-edge-policies#homepageisnewtabpage)| +| Prevent SmartScreen prompt override | Default: Enabled

In Microsoft Edge, users can't override Windows Defender SmartScreen warnings.

[PreventSmartScreenPromptOverride](/DeployEdge/microsoft-edge-policies#preventsmartscreenpromptoverride)| ## Settings that can't be changed