From cc29c4ba47afe8c261e643e9dade3e19b0a6875c Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 23 Jun 2017 13:07:27 -0700 Subject: [PATCH 1/6] clarified TPM 2.0 requirement --- windows/device-security/tpm/tpm-recommendations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/device-security/tpm/tpm-recommendations.md b/windows/device-security/tpm/tpm-recommendations.md index 1b874b2988..0ccddbb144 100644 --- a/windows/device-security/tpm/tpm-recommendations.md +++ b/windows/device-security/tpm/tpm-recommendations.md @@ -84,7 +84,7 @@ For end consumers, TPM is behind the scenes but is still very relevant. TPM is u ### Windows 10 for desktop editions (Home, Pro, Enterprise, and Education) -- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). +- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. Windows 10 features such as [Windows Hello for Business](https://docs.microsoft.com/windows/access-protection/hello-for-business/hello-manage-in-organization#prerequisites) and [BitLocker](https://docs.microsoft.com/windows/device-security/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) do not require TPM 2.0. ### IoT Core From afc2e557d3fd7084faf8ffdde80dadf3f110e940 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 23 Jun 2017 13:46:15 -0700 Subject: [PATCH 2/6] added link to feature table --- windows/device-security/tpm/tpm-recommendations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/device-security/tpm/tpm-recommendations.md b/windows/device-security/tpm/tpm-recommendations.md index 0ccddbb144..d0283a1020 100644 --- a/windows/device-security/tpm/tpm-recommendations.md +++ b/windows/device-security/tpm/tpm-recommendations.md @@ -84,7 +84,7 @@ For end consumers, TPM is behind the scenes but is still very relevant. TPM is u ### Windows 10 for desktop editions (Home, Pro, Enterprise, and Education) -- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn915086(v=vs.85).aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. Windows 10 features such as [Windows Hello for Business](https://docs.microsoft.com/windows/access-protection/hello-for-business/hello-manage-in-organization#prerequisites) and [BitLocker](https://docs.microsoft.com/windows/device-security/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) do not require TPM 2.0. +- Since July 28, 2016, all new device models, lines or series (or if you are updating the hardware configuration of a existing model, line or series with a major update, such as CPU, graphic cards) must implement and enable by default TPM 2.0 (details in section 3.7 of the [Minimum hardware requirements](https://msdn.microsoft.com/library/windows/hardware/dn91508.aspx) page). The requirement to enable TPM 2.0 only applies to the manufacturing of new devices. For TPM recommendations for specific Windows features, see [TPM and Windows Features](#tpm-and-windows-features). ### IoT Core From ffdfba211abe8cf403b209e67b5262a11d3ec371 Mon Sep 17 00:00:00 2001 From: Nicholas Brower Date: Tue, 27 Jun 2017 21:34:50 +0000 Subject: [PATCH 3/6] Merged PR 1963: Merge nibr-BitLocker-12344168 to master added note about XTS-AES encryption only being supported on desktop --- .../mdm/policy-configuration-service-provider.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c829fb36e4..e5cb50ad68 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1781,12 +1781,15 @@ ADMX Info:

Specifies the BitLocker Drive Encryption method and cipher strength. +> [!NOTE] +> XTS-AES 128-bit and XTS-AES 256-bit values are only supported on Windows 10 for desktop. +

The following list shows the supported values: -- 3- AES 128-bit -- 4- AES 256 -- 6 -XTS 128 -- 7 - XTS 256 +- 3 - AES-CBC 128-bit +- 4 - AES-CBC 256-bit +- 6 - XTS-AES 128-bit (Desktop only) +- 7 - XTS-AES 256-bit (Desktop only) From ad242b728526302c75bbfaf57fcbb42332e404ae Mon Sep 17 00:00:00 2001 From: Trudy Hakala Date: Wed, 28 Jun 2017 08:37:24 -0700 Subject: [PATCH 4/6] more 1705 updates --- .../windows-store-for-business-overview.md | 188 +----------------- 1 file changed, 8 insertions(+), 180 deletions(-) diff --git a/store-for-business/windows-store-for-business-overview.md b/store-for-business/windows-store-for-business-overview.md index 430cd5c616..5bc9195325 100644 --- a/store-for-business/windows-store-for-business-overview.md +++ b/store-for-business/windows-store-for-business-overview.md @@ -157,7 +157,8 @@ For more information, see [Manage settings in the Store for Business](manage-set Microsoft Store for Business and Education is currently available in these markets. - -### Support for free and paid apps - - - - - - - - - - -
Support for free and paid apps
-
    -
  • Algeria
    • -
  • Angola
    • -
  • Argentina
    • -
  • Australia
    • -
  • Austria
    • -
  • Bahamas
    • -
  • Bahrain
    • -
  • Bangladesh
    • -
  • Barbados
    • -
  • Belgium
    • -
  • Belize
    • -
  • Bermuda
    • -
  • Bolivia
    • -
  • Botswana
    • -
  • Brunei Darussalam
    • -
  • Bulgaria
    • -
  • Cameroon
    • -
  • Canada
    • -
  • Republic of Cabo Verde
    • -
  • Cayman Islands
    • -
  • Chile
    • -
  • Colombia
    • -
  • Costa Rica
    • -
  • Côte D'ivoire
    • -
  • Croatia
    • -
  • Curçao
    • -
  • Cyprus
    • -
  • Czech Republic
    • -
  • Denmark
    • -
- 		-
    -
  • Dominican Republic
    • -
  • Ecuador
    • -
  • Egypt
    • -
  • El Salvador
    • -
  • Estonia
    • -
  • Faroe Islands
    • -
  • Fiji
    • -
  • Finland
    • -
  • France
    • -
  • Germany
    • -
  • Ghana
    • -
  • Greece
    • -
  • Guatemala
    • -
  • Honduras
    • -
  • Hong Kong SAR
    • -
  • Hungary
    • -
  • Iceland
    • -
  • Indonesia
    • -
  • Iraq
    • -
  • Ireland
    • -
  • Israel
    • -
  • Italy
    • -
  • Jamaica
    • -
  • Japan
    • -
  • Jordan
    • -
  • Kenya
    • -
  • Kuwait
    • -
  • Latvia
    • -
  • Lebanon
    • -
- 		-
    -
  • Libya
    • -
  • Liechtenstein
    • -
  • Lithuania
    • -
  • Luxembourg
    • -
  • Malaysia
    • -
  • Malta
    • -
  • Mauritius
    • -
  • Mexico
    • -
  • Mongolia
    • -
  • Montenegro
    • -
  • Morocco
    • -
  • Namibia
    • -
  • Netherlands
    • -
  • New Zealand
    • -
  • Nicaragua
    • -
  • Nigeria
    • -
  • Norway
    • -
  • Oman
    • -
  • Pakistan
    • -
  • Palestinian Authority
    • -
  • Panama
    • -
  • Paraguay
    • -
  • Peru
    • -
  • Philippines
    • -
  • Poland
    • -
  • Portugal
    • -
  • Puerto Rico
    • -
  • Qatar
    • -
  • Romania
    • -
- 		-
    -
  • Rwanda
    • -
  • Saint Kitts and Nevis
    • -
  • Saudi Arabia
    • -
  • Senegal
    • -
  • Serbia
    • -
  • Singapore
    • -
  • Slovakia
    • -
  • Slovenia
    • -
  • South Africa
    • -
  • Spain
    • -
  • Sweden
    • -
  • Switzerland
    • -
  • Tanzania
    • -
  • Thailand
    • -
  • Trinidad and Tobago
    • -
  • Tunisia
    • -
  • Turkey
    • -
  • Uganda
    • -
  • United Arab Emirates
    • -
  • United Kingdom
    • -
  • United States
    • -
  • Uruguay
    • -
  • Vietnam
    • -
  • Virgin Islands, U.S.
    • -
  • Zambia
    • -
  • Zimbabwe
          
    • -
-
- ### Support for free apps Customers in these markets can use Microsoft Store for Business and Education to acquire free apps: - India @@ -489,11 +311,17 @@ Customers in these markets can use Microsoft Store for Business and Education to ### Support for free apps and Minecraft: Education Edition Customers in these markets can use Microsoft Store for Business and Education to acquire free apps and Minecraft: Education Edition: - Albania +- Aremenia +- Azerbaijan +- Belarus - Bosnia - Brazil - Georgia +- Kazakhstan - Korea +- Republic of Moldova - Taiwan +- Tajikistan - Ukraine This table summarize what customers can purchase, depending on which Microsoft Store they are using. From 99ada674b6961e47957504972675354b2b4d58ab Mon Sep 17 00:00:00 2001 From: Jan Backstrom Date: Wed, 28 Jun 2017 15:57:07 +0000 Subject: [PATCH 5/6] Merged PR 1971: Surface Data Eraser updates article updates --- .../surface/microsoft-surface-data-eraser.md | 24 ++++++++++++++++++- 1 file changed, 23 insertions(+), 1 deletion(-) diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index b04f01e727..c744876e01 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -23,6 +23,12 @@ Find out how the Microsoft Surface Data Eraser tool can help you securely wipe d Compatible Surface devices include: +- Surface Studio + +- Surface Pro + +- Surface Laptop + - Surface Book - Surface Pro 4 @@ -35,6 +41,9 @@ Compatible Surface devices include: - Surface Pro 2 +>[!NOTE] +>Surface Pro devices with 1 TB storage are not currently supported by Microsoft Surface Data Eraser. + Some scenarios where Microsoft Surface Data Eraser can be helpful include: - Prepare a Surface device to be sent for repair @@ -137,7 +146,20 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo 8. Click the **Yes** button to continue erasing data on the Surface device. -  +## Changes and updates + +Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: + +### Version 3.2.36 + +This version of Microsoft Surface Data Eraser adds support for the following: + +- Surface Pro + +- Surface Laptop + +>[!NOTE] +>The Microsoft Surface Data Eraser USB drive creation tool is unable to run on Windows 10 S. To wipe a Surface Laptop running Windows 10 S, you must first create the Microsoft Surface Data Eraser USB drive on another computer with Windows 10 Pro or Windows 10 Enterprise.   From e7d0780b9f83acd57fdd60322971ab9297613356 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 28 Jun 2017 16:14:29 +0000 Subject: [PATCH 6/6] Merged PR 1972: Merge maricia-12523476 to master --- .../mdm/configuration-service-provider-reference.md | 10 +++++++--- .../mdm/new-in-windows-mdm-enrollment-management.md | 6 +++++- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 498d52cb2a..b9c1c1cd51 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/27/2017 --- # Configuration service provider reference @@ -26,6 +26,10 @@ Additional lists: - [List of CSPs supported in Windows 10 S](#windows10s) The following tables show the configuration service providers support in Windows 10. +Footnotes: +- 1 - Added in Windows 10, version 1607 +- 2 - Added in Windows 10, version 1703 +- 3 - Added in Windows 10, version 1709

@@ -836,8 +840,8 @@ The following tables show the configuration service providers support in Windows cross mark check mark2 check mark2 - check mark2 - check mark2 + cross mark + cross mark diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 46d1d00429..ecc0734eb3 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 06/27/2017 --- # What's new in MDM enrollment and management @@ -1257,6 +1257,10 @@ Also Added [Firewall DDF file](firewall-ddf-file.md).
  • DeviceTagging/Criticality
    • + +[DynamicManagement CSP](dynamicmanagement-csp.md) +The DynamicManagement CSP is not supported in Windows 10 Mobile and Mobile Enterprise. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. +