Merge remote-tracking branch 'refs/remotes/origin/master' into wsfb-6366597

windows/keep-secure/enable-pua-windows-defender-for-windows-10.md

@@ -30,11 +30,11 @@ These applications can increase the risk of your network being infected with mal
 
 Since the stakes are higher in an enterprise environment, the potential disaster and potential productivity and performance disruptions that PUA brings can be a cause of concern. Hence, it is important to deliver trusted protection in this field.
 
-**Enable PUA protection in SCCM and Intune**
+##Enable PUA protection in SCCM and Intune
 
 The PUA feature is available for enterprise users who are running System Center Configuration Manager (SCCM) or Microsoft Intune in their infrastructure.
 
-***Configure PUA in SCCM***
+###Configure PUA in SCCM
 
 For SCCM users, PUA is enabled by default. See the following topics for configuration details:
 
@@ -43,8 +43,8 @@ If you are using these versions | See these topics
 System Center Configuration Manager (current branch) version 1606 | [Create a new antimalware policy](https://technet.microsoft.com/en-US/library/mt613199.aspx#To-create-a-new-antimalware-policy)<br>[Real-time Protection Settings](https://technet.microsoft.com/en-US/library/mt613199.aspx#Real-time-Protection-Settings)
 System Center 2012 R2 Endpoint Protection<br>System Center 2012 Configuration Manager<br>System Center 2012 Configuration Manager SP1<br>System Center 2012 Configuration Manager SP2<br>System Center 2012 R2 Configuration Manager<br>System Center 2012 Endpoint Protection SP1<br>System Center 2012 Endpoint Protection<br>System Center 2012 R2 Configuration Manager SP1| [How to Deploy Potentially Unwanted Application Protection Policy for Endpoint Protection in Configuration Manager](https://technet.microsoft.com/library/hh508770.aspx#BKMK_PUA)
 
-
+<br>
-***Use PUA audit mode in SCCM***
+###Use PUA audit mode in SCCM
 
 You can use PowerShell to detect PUA without blocking them. In fact, you can run audit mode on individual machines. This feature is useful if your company is conducting an internal software security compliance check and you’d like to avoid any false positives.
 
@@ -66,16 +66,16 @@ You can use PowerShell to detect PUA without blocking them. In fact, you can run
 > PUA events are reported in the Windows Event Viewer and not in SCCM.  
 
 
-***Configure PUA in Intune***
+###Configure PUA in Intune
 
  PUA is not enabled by default. You need to [Create and deploy a PUA configuration policy to use it](https://docs.microsoft.com/en-us/intune/deploy-use/manage-settings-and-features-on-your-devices-with-microsoft-intune-policies). See the [Potentially Unwanted Application Detection policy setting](https://docs.microsoft.com/en-us/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune) for details.
 
 
- ***Use PUA audit mode in Intune***
+###Use PUA audit mode in Intune
 
  You can detect PUA without blocking them from your client. Gain insights into what can be blocked.
 
-**View PUA events**
+##View PUA events
 
 PUA events are reported in the Windows Event Viewer and not in SCCM or Intune. To view PUA events:
 
@@ -87,7 +87,7 @@ PUA events are reported in the Windows Event Viewer and not in SCCM or Intune. T
 You can find a complete list of the Microsoft antimalware event IDs, the symbol, and the description of each ID in [Windows Server Antimalware Events TechNet](https://technet.microsoft.com/library/dn913615.aspx).
 
 
-**What PUA notifications look like**
+##What PUA notifications look like
 
 When a detection occurs, end users who enabled the PUA detection feature will see the following notification:<br>
 
@@ -97,11 +97,11 @@ To see historical PUA detections that occurred on a PC, users can go to History,
 
 ![Image showing the potentally unwanted application detection history](images/pua2.png)
 
-**PUA threat file-naming convention**
+##PUA threat file-naming convention
 
 When enabled, potentially unwanted applications are identified with threat names that start with “PUA:”, such as, PUA:Win32/Creprote.
 
-**PUA blocking conditions**
+##PUA blocking conditions
 
 PUA protection quarantines the file so they won’t run. PUA will be blocked only at download or install-time. A file will be included for blocking if it has been identified as PUA and meets one of the following conditions:
 *	The file is being scanned from the browser

windows/keep-secure/run-cmd-scan-windows-defender-for-windows-10.md

@@ -50,5 +50,5 @@ Command | Description
 \-AddDynamicSignature [-Path] | Loads a dynamic signature
 \-ListAllDynamicSignature [-Path] | Lists the loaded dynamic signatures
 \-RemoveDynamicSignature [-SignatureSetID] | Removes a dynamic signature
-
+<br>
 The command-line utility provides detailed information on the other commands supported by the tool. 

windows/keep-secure/windows-defender-in-windows-10.md

@@ -71,6 +71,8 @@ Topic | Description
 [Configure updates for Windows Defender in Windows 10](configure-windows-defender-in-windows-10.md)|Configure definition updates and cloud-based protection with Active Directory and Windows Server Update Services.
 [Windows Defender Offline in Windows 10](windows-defender-offline.md)|Manually run an offline scan directly from winthin Windows without having to download and create bootable media.
 [Use PowerShell cmdlets for Windows Defender](use-powershell-cmdlets-windows-defender-for-windows-10.md)|Run scans and configure Windows Defender options with Windows PowerShell cmdlets in Windows 10.
-[Enable the Black at First Sight feature in Windows 10](windows-defender-block-at-first-sight.md)|Use the Block at First Sight feature to leverage the Windows Defender cloud.
+[Enable the Block at First Sight feature in Windows 10](windows-defender-block-at-first-sight.md)|Use the Block at First Sight feature to leverage the Windows Defender cloud.
 [Configure enhanced notifications for Windows Defender in Windows 10](windows-defender-enhanced-notifications.md)|Enable or disable enhanced notifications on endpoints running Windows Defender for greater details about threat detections and removal.
+[Run a Windows Defender scan from the command line](run-cmd-scan-windows-defender-for-windows-10.md)|Use the command-line utility to run a Windows Defender scan.
+[Detect and block Potentially Unwanted Applications with Windows Defender](enable-pua-windows-defender-for-windows-10.md)|Use the Potentially Unwanted Application (PUA) feature in Managed Windows Defender to identify and block unwanted software during download and install time.
 [Troubleshoot Windows Defender in Windows 10](troubleshoot-windows-defender-in-windows-10.md)|Review event IDs in Windows Defender for Windows 10 and take the appropriate actions.

windows/manage/index.md

@@ -40,34 +40,43 @@ Learn about managing and updating Windows 10.
 <td align="left"><p>[Windows Spotlight on the lock screen](windows-spotlight.md)</p></td>
 <td align="left"><p>Windows Spotlight is an option for the lock screen background that displays different background images and occasionally offers suggestions on the lock screen.</p></td>
 </tr>
-<tr class="odd">
+<tr class="even">
 <td align="left"><p>[Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md)</p></td>
 <td align="left"><p>Organizations might want to deploy a customized Start screen and menu to devices running Windows 10 Enterprise or Windows 10 Education. A standard Start layout can be useful on devices that are common to multiple users and devices that are locked down for specialized purposes.</p></td>
 </tr>
-<tr class="even">
+<tr class="odd">
 <td align="left"><p>[Lock down Windows 10](lock-down-windows-10.md)</p></td>
 <td align="left"><p>Enterprises often need to manage how people use corporate devices. Windows 10 provides a number of features and methods to help you lock down specific parts of a Windows 10 device.</p></td>
 </tr>
-<tr class="odd">
+<tr class="even">
 <td align="left"><p>[Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md)</p></td>
 <td align="left"><p>Devices running Windows 10 Mobile can join Azure Active Directory (Azure AD) when the device is configured during the out-of-box experience (OOBE).</p></td>
 </tr>
-<tr class="even">
+<tr class="odd">
 <td align="left"><p>[Configure devices without MDM](configure-devices-without-mdm.md)</p></td>
 <td align="left"><p>Create a runtime provisioning package to apply settings, profiles, and file assets to a device running Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile, or Windows 10 Mobile Enterprise.</p></td>
 </tr>
-<tr class="odd">
+<tr class="even">
 <td align="left"><p>[Windows 10 servicing options](introduction-to-windows-10-servicing.md)</p></td>
 <td align="left"><p>This article describes the new servicing options available in Windows 10, Windows 10 Mobile, and Windows 10 IoT Core (IoT Core) and how they enable enterprises to keep their devices current with the latest feature upgrades. It also covers related topics, such as how enterprises can make better use of Windows Update, and what the new servicing options mean for support lifecycles.</p></td>
 </tr>
-<tr class="even">
+<tr class="odd">
 <td align="left"><p>[Application development for Windows as a service](application-development-for-windows-as-a-service.md)</p></td>
 <td align="left"><p>In today’s environment, where user expectations frequently are set by device-centric experiences, complete product cycles need to be measured in months, not years. Additionally, new releases must be made available on a continual basis, and must be deployable with minimal impact on users. Microsoft designed Windows 10 to meet these requirements by implementing a new approach to innovation, development, and delivery called [Windows as a service (WaaS)](introduction-to-windows-10-servicing.md). The key to enabling significantly shorter product cycles while maintaining high quality levels is an innovative community-centric approach to testing that Microsoft has implemented for Windows 10. The community, known as Windows Insiders, is comprised of millions of users around the world. When Windows Insiders opt in to the community, they test many builds over the course of a product cycle and provide feedback to Microsoft through an iterative methodology called flighting.</p></td>
 </tr>
+<tr class="even">
+<td align="left"><p>[Application Virtualization for Windows (App-V)](appv-for-windows.md)</p></td>
+<td align="left"><p>When you deploy Application Virtualization (App-V) in your orgnazation, you can deliver Win32 applications to users as virtual applications. Virtual applications are installed on centrally managed servers and delivered to users as a service – in real time and on as as-needed basis. Users launch virtual applications from familiar access points, including the Windows Store, and interact with them as if they were installed locally.</p></td>
+</tr>
 <tr class="odd">
+<td align="left"><p>[User Experience Virtualization for Windows (UE-V)](uev-for-windows.md)</p></td>
+<td align="left"><p>When you deploy User Experience Virtualization (UE-V) in your organization, you can synchronize users' personalized application and operating system settings across all the devices they work from. UE-V allows you to capture user-customized application and Windows settings and store them on a centrally managed network file share. When users log on, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they log on to.</p></td>
+</tr>
+<tr class="even">
 <td align="left"><p>[Windows Store for Business](windows-store-for-business.md)</p></td>
 <td align="left"><p>Welcome to the Windows Store for Business! You can use the Store for Business, to find, acquire, distribute, and manage apps for your organization.</p></td>
-</tr><tr class="odd">
+</tr>
+<tr class="odd">
 <td align="left"><p>[Change history for Manage and update Windows 10](change-history-for-manage-and-update-windows-10.md)</p></td>
 <td align="left"><p>This topic lists new and updated topics in the Manage and update Windows 10 documentation for [Windows 10 and Windows 10 Mobile](../index.md).</p></td>
 </tr>
@@ -76,5 +85,6 @@ Learn about managing and updating Windows 10.
  
 ## Related topics
 [Windows 10 and Windows 10 Mobile](../index.md)
+
  
- [Learn how Microsoft does IT at the IT Showcase](https://www.microsoft.com/itshowcase)
+[Learn how Microsoft does IT at the IT Showcase](https://www.microsoft.com/itshowcase)

windows/manage/manage-tips-and-suggestions.md

@@ -30,7 +30,8 @@ Since its inception, Windows 10 has included a number of user experience feature
 
 * **Microsoft account notifications**.  For users who have a connected Microsoft account, toast notifications about their account like parental control notifications or subscription expiration. 
 
-Windows 10 tips, tricks, and suggestions and Windows Store suggestions can be turned on or off by users.  For example, users are able to select personal photos for the lock screen as opposed to the images provided by Microsoft, or turn off tips, tricks, or suggestions as they use Windows.   
+>[!TIP]
+> On all Windows desktop editions, users can directly enable and disable Windows 10 tips, tricks, and suggestions and Windows Store suggestions.  For example, users are able to select personal photos for the lock screen as opposed to the images provided by Microsoft, or turn off tips, tricks, or suggestions as they use Windows.   
 
 Windows 10, version 1607 (also known as the Anniversary Update), provides organizations the ability to centrally manage the type of content provided by these features through Group Policy or mobile device management (MDM). The following table describes how administrators can manage suggestions and tips in Windows 10 commercial and education editions.  
 

windows/manage/uev-upgrade-uev-from-previous-releases.md

@@ -20,7 +20,7 @@ If you’re already using UE-V 2.x and you’re planning to upgrade user devices
 
 3.	Enable the UE-V service on user devices.
 
-4.	Install the UE-V template generator.
+4.	Install the UE-V template generator if you want to synchronize application settings for custom applications.
 
 > **Important**  You can upgrade your existing UE-V installation to Windows 10, version 1607 from UE-V versions 2.1 or 2.0 only. If you are using a previous version of UE-V, you’ll need to upgrade from that version to UE-V 2.x before you upgrade to Windows 10, version 1607..   
 
@@ -30,17 +30,17 @@ Performing an in-place upgrade on user devices automatically installs the UE-V s
 
 ## Verify that UE-V settings were migrated correctly 
 
-After upgrading a user device to Windows 10, it’s important to verify that UE-V settings and template registrations were migrated correctly during the upgrade. You can verify UE-V settings using Windows Powershell or the device’s registry.
+After upgrading a user device to Windows 10, version 1607, it’s important to verify that UE-V settings and template registrations were migrated correctly during the upgrade. You can verify UE-V settings using Windows Powershell or the device’s registry.
 
 **To verify UE-V settings using Windows PowerShell**
 
-1.	Run PowerShell as Administrator and type **Get-UEVConfiguration** to view current configurations.
+1.	Run PowerShell as Administrator, type **Get-UEVConfiguration**, and press ENTER to view current configurations.
 
 2.	Check that the settings were successfully updated.
 
-3.	Type **Get-UEVTemplate** to check that your templates are still registered.
+3.	Type **Get-UEVTemplate** and press ENTER to check that your templates are still registered.
 
-    > **Note** You’ll need to register the Notepad template again after you upgrade the device to Windows 10. 
+    > **Note** You’ll need to register the NotePad template again after you upgrade the device to Windows 10. 
 
 **To verify UE-V settings using the device’s registry**
 
@@ -54,7 +54,7 @@ After upgrading a user device to Windows 10, it’s important to verify that UE-
 
 The UE-V service is the client-side component that captures user-personalized application and Windows settings and saves them in settings packages. Settings packages are built, locally stored, and copied to the settings storage location. 
 
-With Windows 10, version 1607 and later, the UE-V service is installed on user devices and no longer requires a separate download and installation. Enable the service to start using UE-V. You can enable the service with the Group Policy editor or with Windows PowerShell. 
+With Windows 10, version 1607 and later, the UE-V service replaces the UE-V Agent and no longer requires a separate download and installation. Enable the service on user devices to start using UE-V. You can enable the service with the Group Policy editor or with Windows PowerShell. 
 
 > **Important**  The UE-V Agent used in prior releases of UE-V is replaced with the UE service. The UE-V service included with Windows 10, version 1607 and later releases, does not include the agent user interface and is configurable through cmdlets or registry settings only.
 
@@ -70,11 +70,11 @@ With Windows 10, version 1607 and later, the UE-V service is installed on user d
 
 **To enable the UE-V service with Windows PowerShell**
 
-1.	Run PowerShell as Administrator and enter **Enable-UEV**.
+1.	Run PowerShell as Administrator, type **Enable-UEV**, and press ENTER.
 
 2.	Restart the device.
 
-3.	Type **Get-UEVStatus** to verify that the service was successfully enabled.
+3.	Type **Get-UEVStatus** and press ENTER to verify that the service was successfully enabled.
 
 ## Install the UE-V template generator
 
@@ -88,7 +88,7 @@ The UE-V template generator is included in the Windows Assessment and Deployment
 
     ![Selecting UE-V features in ADK](images/uev-adk-select-uev-feature.png)
  
-3.	To open the generator, select **Microsoft User Experience Virtualization Generator** from the **Start** menu. 
+3.	To open the generator, open the **Start** menu and navigate to **Windows Kits** > **Microsoft User Experience Virtualization (UE-V) Template Generator**. 
 
 
 ## Other resources for this feature

windows/manage/uev-whats-new-in-uev-for-windows.md

@@ -101,3 +101,5 @@ Add or vote on suggestions [here](http://uev.uservoice.com/forums/280428-microso
 - [Prepare a UE-V Deployment](uev-prepare-for-deployment.md)
 
 - [User Experience Virtualization (UE-V) Release Notes](uev-release-notes-1607.md) for Windows 10, version 1607
+
+- [Upgrade to UE-V for Windows 10](uev-upgrade-uev-from-previous-releases.md)