mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 13:47:23 +00:00
resolved merge conflict
This commit is contained in:
martyav
commit
773b95cfb5
@ -1005,11 +1005,7 @@
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/configure-attack-surface-reduction",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/view-incidents-queue.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/configuration-score.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/configuration-score",
|
||||
@ -1611,12 +1607,22 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/preferences-setup-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/threat-protection/windows-defender-atp/preferences-setup-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/threat-protection/windows-defender-atp/preferences-setup-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/windows-defender-atp/preferences-setup-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/preferences-setup-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/use-apis",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/use-apis.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/preferences-setup",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
@ -1696,6 +1702,16 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/response-actions.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/response-actions-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/threat-protection/windows-defender-atp/response-actions-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/threat-protection/windows-defender-atp/response-actions-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/windows-defender-atp/response-actions-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
@ -1811,11 +1827,6 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/troubleshoot-overview.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-overview",
|
||||
"redirect_document_id": true
|
||||
@ -12036,11 +12047,6 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/preferences-setup-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/threat-protection/windows-defender-atp/preferences-setup-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies.md",
|
||||
"redirect_url": "/windows/device-security/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies",
|
||||
"redirect_document_id": true
|
||||
@ -12191,11 +12197,6 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/response-actions-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/threat-protection/windows-defender-atp/response-actions-windows-defender-advanced-threat-protection",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/keep-secure/restore-files-and-directories.md",
|
||||
"redirect_url": "/windows/device-security/security-policy-settings/restore-files-and-directories",
|
||||
"redirect_document_id": true
|
||||
@ -14446,11 +14447,6 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path":"windows/security/threat-protection/windows-defender-atp/use-apis.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/use-apis",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path":"windows/security/threat-protection/windows-defender-atp/exposed-apis-create-app-nativeapp.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp",
|
||||
"redirect_document_id": false
|
||||
@ -14796,6 +14792,11 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/get-started.md",
|
||||
"redirect_url": "/windows/security/threat-protection/index.md",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/get-package-sas-uri-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/windows-defender-atp/use-apis",
|
||||
"redirect_document_id": false
|
||||
@ -14956,11 +14957,6 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/incidents-queue.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/incidents-queue",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/get-ti-indicator-by-id-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/windows-defender-atp/use-apis",
|
||||
"redirect_document_id": false
|
||||
@ -15041,6 +15037,31 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/incidents-queue.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/incidents-queue",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/incidents-queue.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/view-incidents-queue",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/troubleshoot-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/troubleshoot-overview.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path":"windows/security/threat-protection/windows-defender-atp/use-apis.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/use-apis",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/user-alert-windows-defender-advanced-threat-protection-new.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/user",
|
||||
"source_path": "windows/deployment/planning/windows-10-fall-creators-deprecation.md",
|
||||
@ -15063,18 +15084,23 @@
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/microsoft-defender-atp/manage-allowed-blocked-list.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/manage-indicators",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/manage-indicators-windows-defender-advanced-threat-protection.md",
|
||||
"redirect_url": "/windows/security/threat-protection/windows-defender-atp/manage-indicators",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
"source_path": "windows/deployment/windows-10-enterprise-subscription-activation.md",
|
||||
"redirect_url": "/windows/deployment/windows-10-subscription-activation",
|
||||
"redirect_document_id": true
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/manage-indicators.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/manage-allowed-blocked-list",
|
||||
"redirect_document_id": false
|
||||
},
|
||||
{
|
||||
"source_path": "windows/security/threat-protection/windows-defender-atp/manage-indicators.md",
|
||||
"redirect_url": "/windows/security/threat-protection/microsoft-defender-atp/manage-indicators",
|
||||
"source_path": "windows/deployment/windows-10-enterprise-subscription-activation.md",
|
||||
"redirect_url": "/windows/deployment/windows-10-subscription-activation",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
|
||||
@ -1,45 +1,46 @@
|
||||
---
|
||||
author: eavena
|
||||
ms.author: eravena
|
||||
ms.date: 10/02/2018
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.prod: edge
|
||||
ms.topic: include
|
||||
---
|
||||
|
||||
<!-- ## Allow Adobe Flash -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-adobe-flash-shortdesc](../shortdesc/allow-adobe-flash-shortdesc.md)]
|
||||
|
||||
### Supported values
|
||||
|
||||
| Group Policy | MDM | Registry | Description |
|
||||
|-----------------------|:---:|:--------:|-------------|
|
||||
| Disabled | 0 | 0 | Prevented |
|
||||
| Enabled **(default)** | 1 | 1 | Allowed |
|
||||
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Adobe Flash
|
||||
- **GP name:** AllowFlash
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowFlash](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser\#browser-allowflash)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowAdobeFlash
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Addons
|
||||
- **Value name:** FlashPlayerEnabled
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
||||
---
|
||||
author: eavena
|
||||
ms.author: eravena
|
||||
ms.date: 10/02/2018
|
||||
ms.reviewer:
|
||||
audience: itpro
|
||||
manager: dansimp
|
||||
ms.prod: edge
|
||||
ms.topic: include
|
||||
---
|
||||
|
||||
<!-- ## Allow Adobe Flash -->
|
||||
>*Supported versions: Microsoft Edge on Windows 10*<br>
|
||||
>*Default setting: Enabled or not configured (Allowed)*
|
||||
|
||||
[!INCLUDE [allow-adobe-flash-shortdesc](../shortdesc/allow-adobe-flash-shortdesc.md)]
|
||||
|
||||
### Supported values
|
||||
|
||||
| Group Policy | MDM | Registry | Description |
|
||||
|-----------------------|:---:|:--------:|-------------|
|
||||
| Disabled | 0 | 0 | Prevented |
|
||||
| Enabled **(default)** | 1 | 1 | Allowed |
|
||||
|
||||
---
|
||||
|
||||
### ADMX info and settings
|
||||
|
||||
#### ADMX info
|
||||
- **GP English name:** Allow Adobe Flash
|
||||
- **GP name:** AllowFlash
|
||||
- **GP path:** Windows Components/Microsoft Edge
|
||||
- **GP ADMX file name:** MicrosoftEdge.admx
|
||||
|
||||
#### MDM settings
|
||||
- **MDM name:** Browser/[AllowFlash](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser\#browser-allowflash)
|
||||
- **Supported devices:** Desktop
|
||||
- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowFlash
|
||||
- **Data type:** Integer
|
||||
|
||||
#### Registry settings
|
||||
- **Path:** HKLM\Software\Policies\Microsoft\MicrosoftEdge\Addons
|
||||
- **Value name:** FlashPlayerEnabled
|
||||
- **Value type:** REG_DWORD
|
||||
|
||||
<hr>
|
||||
|
||||
@ -1,265 +1,266 @@
|
||||
---
|
||||
title: Deploy Microsoft Edge kiosk mode
|
||||
description: Microsoft Edge kiosk mode works with assigned access to allow IT admins to create a tailored browsing experience designed for kiosk devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access.
|
||||
ms.assetid:
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
author: eavena
|
||||
ms.author: eravena
|
||||
ms.prod: edge
|
||||
ms.sitesec: library
|
||||
ms.topic: get-started-article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 10/29/2018
|
||||
---
|
||||
|
||||
# Deploy Microsoft Edge kiosk mode
|
||||
|
||||
>Applies to: Microsoft Edge on Windows 10, version 1809
|
||||
>Professional, Enterprise, and Education
|
||||
|
||||
In the Windows 10 October 2018 Update, we added the capability to use Microsoft Edge as a kiosk using assigned access. With assigned access, you create a tailored browsing experience locking down a Windows 10 device to only run as a single-app or multi-app kiosk. Assigned access restricts a local standard user account so that it only has access to one or more Windows app, such as Microsoft Edge in kiosk mode.
|
||||
|
||||
In this topic, you learn how to configure the behavior of Microsoft Edge when it's running in kiosk mode with assigned access. You also learn how to set up your kiosk device using either Windows Setting or Microsoft Intune or other MDM service.
|
||||
|
||||
At the end of this topic, you can find a list of [supported policies](#supported-policies-for-kiosk-mode) for kiosk mode and a [feature comparison](#feature-comparison-of-kiosk-mode-and-kiosk-browser-app) of the kiosk mode policy and kiosk browser app. You also find instructions on how to provide us feedback or get support.
|
||||
|
||||
|
||||
## Kiosk mode configuration types
|
||||
|
||||
>**Policy** = Configure kiosk mode (ConfigureKioskMode)
|
||||
|
||||
Microsoft Edge kiosk mode supports four configurations types that depend on how Microsoft Edge is set up with assigned access, either as a single-app or multi-app kiosk. These configuration types help you determine what is best suited for your kiosk device or scenario.
|
||||
|
||||
- Learn about [creating a kiosk experience](https://docs.microsoft.com/windows-hardware/customize/enterprise/create-a-kiosk-image)
|
||||
|
||||
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://docs.microsoft.com/windows/configuration/setup-kiosk-digital-signage)
|
||||
|
||||
- [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/windows/configuration/lock-down-windows-10-to-specific-apps).
|
||||
|
||||
- Learn about configuring a more secure kiosk experience: [Other settings to lock down](https://docs.microsoft.com/windows/configuration/setup-kiosk-digital-signage#other-settings-to-lock-down).
|
||||
|
||||
|
||||
### Important things to remember before getting started
|
||||
|
||||
- The public browsing kiosk types run Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for public kiosks.
|
||||
|
||||
- Microsoft Edge kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue, and if no user activity Microsoft Edge resets the session to the default URL. By default, the idle timer is 5 minutes, but you can choose a value of your own.
|
||||
|
||||
- Optionally, you can define a single URL for the Home button, Start page, and New Tab page. See [Supported policies for kiosk mode](#supported-policies-for-kiosk-mode) to learn more.
|
||||
|
||||
- No matter which configuration type you choose, you must set up Microsoft Edge in assigned access; otherwise, Microsoft Edge ignores the settings in this policy (Configure kiosk mode/ConfigureKioskMode).<p>Learn more about assigned access:
|
||||
|
||||
- [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
|
||||
|
||||
- [Kiosk apps for assigned access best practices](https://aka.ms/H1s8y4).
|
||||
|
||||
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3).
|
||||
|
||||
|
||||
### Supported configuration types
|
||||
|
||||
[!INCLUDE [configure-kiosk-mode-supported-values-include](includes/configure-kiosk-mode-supported-values-include.md)]
|
||||
|
||||
## Set up Microsoft Edge kiosk mode
|
||||
|
||||
Now that you're familiar with the different kiosk mode configurations and have the one you want to use in mind, you can use one of the following methods to set up Microsoft Edge kiosk mode:
|
||||
|
||||
- **Windows Settings.** Use only to set up a couple of single-app devices because you perform these steps physically on each device. For a multi-app kiosk device, use Microsoft Intune or other MDM service.
|
||||
|
||||
- **Microsoft Intune or other MDM service.** Use to set up several single-app or multi-app kiosk devices. Microsoft Intune and other MDM service providers offer more options for customizing the Microsoft Edge kiosk mode experience using any of the [Supported policies for kiosk mode](#supported-policies-for-kiosk-mode).
|
||||
|
||||
|
||||
### Prerequisites
|
||||
|
||||
- Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and Education).
|
||||
|
||||
- URL to load when the kiosk launches. The URL that you provide sets the Home button, Start page, and New Tab page.
|
||||
|
||||
- _**For Microsoft Intune or other MDM service**_, you must have the AppUserModelID (AUMID) to set up Microsoft Edge:
|
||||
|
||||
```
|
||||
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge
|
||||
```
|
||||
|
||||
|
||||
### Use Windows Settings
|
||||
|
||||
Windows Settings is the simplest and the only way to set up one or a couple of single-app devices.
|
||||
|
||||
|
||||
1. On the kiosk device, open Windows Settings, and in the search field type **kiosk** and then select **Set up a kiosk (assigned access)**.
|
||||
|
||||
2. On the **Set up a kiosk** page, click **Get started**.
|
||||
|
||||
3. Type a name to create a new kiosk account, or choose an existing account from the populated list and click **Next**.
|
||||
|
||||
4. On the **Choose a kiosk app** page, select **Microsoft Edge** and then click **Next**.
|
||||
|
||||
5. Select how Microsoft Edge displays when running in kiosk mode:
|
||||
|
||||
- **As a digital sign or interactive display** - Displays a specific site in full-screen mode, running Microsoft Edge InPrivate protecting user data.
|
||||
|
||||
- **As a public browser** - Runs a limited multi-tab version of Microsoft Edge, protecting user data.
|
||||
|
||||
6. Select **Next**.
|
||||
|
||||
7. Type the URL to load when the kiosk launches.
|
||||
|
||||
8. Accept the default value of **5 minutes** for the idle time or provide a value of your own.
|
||||
|
||||
9. Click **Next**.
|
||||
|
||||
10. Close the **Settings** window to save and apply your choices.
|
||||
|
||||
11. Restart the kiosk device and sign in with the local kiosk account to validate the configuration.
|
||||
|
||||
**_Congratulations!_** <p>You’ve just finished setting up a single-app kiosk device using Windows Settings.
|
||||
|
||||
**_What's next?_**
|
||||
|
||||
- User your new kiosk device. <p>
|
||||
OR<p>
|
||||
- Make changes to your kiosk device. In Windows Settings, on the **Set up a kiosk** page, make your changes to **Choose a kiosk mode** and **Set up Microsoft Edge**.
|
||||
|
||||
---
|
||||
|
||||
|
||||
### Use Microsoft Intune or other MDM service
|
||||
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge kiosk mode in assigned access and how it behaves on a kiosk device. To learn about a few app fundamentals and requirements before adding them to Intune, see [Add apps to Microsoft Intune](https://docs.microsoft.com/intune/apps-add).
|
||||
|
||||
>[!IMPORTANT]
|
||||
>If you are using a local account as a kiosk account in Microsoft Intune, make sure to sign into this account and then sign out before configuring the kiosk device.
|
||||
|
||||
1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps.
|
||||
|
||||
2. Configure the following MDM settings to setup Microsoft Edge kiosk mode on the kiosk device and then restart the device.
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets the user's session.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URLs, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New Tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **[SetHomeButtonURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
| **[SetNewTabPageURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**<p> | Set a custom URL for the New Tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
|
||||
|
||||
**_Congratulations!_** <p>You’ve just finished setting up a kiosk or digital signage with policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.
|
||||
|
||||
**_What's next?_** <p>Now it's time to use your new kiosk device. Sign into the device with the kiosk account selected to run Microsoft Edge kiosk mode.
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Supported policies for kiosk mode
|
||||
|
||||
Use any of the Microsoft Edge policies listed below to enhance the kiosk experience depending on the Microsoft Edge kiosk mode type you configure. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser).
|
||||
|
||||
Make sure to check with your provider for instructions.
|
||||
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal<br>mode** |
|
||||
|------------------|:---------:|:---------:|:---------:|:---------:|
|
||||
| [AllowAddressBarDropdown](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) |  |  |  |  |
|
||||
| [AllowAutofill](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) |  |  |  |  |
|
||||
| [AllowBrowser](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowbrowser) |  |  |  |  |
|
||||
| [AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) |  |  |  |  |
|
||||
| [AllowCookies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) |  |  |  |  |
|
||||
| [AllowDeveloperTools](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) |  |  |  |  |
|
||||
| [AllowDoNotTrack](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) |  |  |  |  |
|
||||
| [AllowExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) |  |  |  |  |
|
||||
| [AllowFlash](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflash) |  |  |  |  |
|
||||
| [AllowFlashClickToRun](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | <sup>2</sup> |  |  |  |
|
||||
| [AllowFullscreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowfullscreenmode)\* |  |  |  |  |
|
||||
| [AllowInPrivate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) |  |  |  |  |
|
||||
| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) |  |  | <sup>1</sup> |  |
|
||||
| [AllowPasswordManager](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) |  |  |  |  |
|
||||
| [AllowPopups](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) |  |  |  |  |
|
||||
| [AllowPrelaunch](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowprelaunch)\* |  |  |  |  |
|
||||
| [AllowPrinting](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowprinting)\* |  |  |  |  |
|
||||
| [AllowSavingHistory](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsavinghistory)\* |  |  |  |  |
|
||||
| [AllowSearchEngineCustomization](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSideloadingExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsideloadingofextensions)\* |  |  |  |  |
|
||||
| [AllowSmartScreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) |  |  |  |  |
|
||||
| [AllowSyncMySettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) |  |  |  |  |
|
||||
| [AllowTabPreloading](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading)\* |  |  |  |  |
|
||||
| [AllowWebContentOnNewTabPage](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowwebcontentonnewtabpage)\* |  |  |  |  |
|
||||
| [AlwaysEnabledBooksLibrary](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) |  |  |  |  |
|
||||
| [ClearBrowsingDataOnExit](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) |  |  |  |  |
|
||||
| [ConfigureAdditionalSearchEngines](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) |  |  |  |  |
|
||||
| [ConfigureFavoritesBar](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurefavoritesbar)\* |  |  |  |  |
|
||||
| [ConfigureHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)\* |  |  |  |  |
|
||||
| [ConfigureKioskMode](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)\* |  |  |  |  |
|
||||
| [ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)\* |  |  |  |  |
|
||||
| [ConfigureOpenEdgeWith](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configureopenmicrosoftedgewith)\* |  |  |  |  |
|
||||
| [ConfigureTelemetryForMicrosoft365Analytics](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configuretelemetryformicrosoft365analytics)\* |  |  |  |  |
|
||||
| [DisableLockdownOfStartPages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) |  |  |  |  |
|
||||
| [Experience/DoNotSyncBrowserSettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-donotsyncbrowsersetting)\* and [Experience/PreventTurningOffRequiredExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* |  |  |  |  |
|
||||
| [EnableExtendedBooksTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) |  |  |  |  |
|
||||
| [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) |  |  | <sup>1</sup> |  |
|
||||
| [FirstRunURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) |  |  |  |  |
|
||||
| [HomePages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-homepages) |  |  |  |  |
|
||||
| [LockdownFavorites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) |  |  |  |  |
|
||||
| [PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) |  |  |  |  |
|
||||
| [PreventCertErrorOverrides](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventcerterroroverrides)\* |  |  |  |  |
|
||||
| [PreventFirstRunPage](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) |  | |  |  |
|
||||
| [PreventLiveTileDataCollection](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) |  |  |  |  |
|
||||
| [PreventSmartScreenPromptOverride](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) |  |  |  |  |
|
||||
| [PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) |  |  |  |  |
|
||||
| [PreventTurningOffRequiredExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* |  |  |  |  |
|
||||
| [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) |  |  |  |  |
|
||||
| [ProvisionFavorites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) |  |  |  |  |
|
||||
| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) |  |  | <sup>1</sup> |  |
|
||||
| [SetDefaultSearchEngine](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) |  |  |  |  |
|
||||
| [SetHomeButtonURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)\* |  |  |  |  |
|
||||
| [SetNewTabPageURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)\* |  |  |  |  |
|
||||
| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) |  |  | <sup>1</sup> |  |
|
||||
| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) |  |  | <sup>1</sup> |  |
|
||||
| [UnlockHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-unlockhomebutton)\* |  |  |  |  |
|
||||
| [UseSharedFolderForBooks](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) |  |  |  |  |
|
||||
|
||||
|
||||
*\* New policy as of Windows 10, version 1809.*<p>
|
||||
*1) For multi-app assigned access, you must configure Internet Explorer 11.*<br>
|
||||
*2) For digital/interactive signage to enable Flash, set [AllowFlashClickToRun](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) to 0.*
|
||||
|
||||
**Legend:**<p>
|
||||
 = Not applicable or not supported <br>
|
||||
 = Supported
|
||||
|
||||
---
|
||||
|
||||
## Feature comparison of kiosk mode and kiosk browser app
|
||||
In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.
|
||||
|
||||
|
||||
| **Feature** | **Microsoft Edge kiosk mode** | **Microsoft Kiosk browser app** |
|
||||
|-----------------------------------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:-------------------------------------------------------------------------------------------------------------------------------------------------------:|
|
||||
| Print support |  |  |
|
||||
| Multi-tab support |  |  |
|
||||
| Allow/Block URL support |  <p>*\*For Microsoft Edge kiosk mode use* Windows Defender Firewall<em>. Microsoft kiosk browser has custom policy support.</em> |  |
|
||||
| Configure Home Button |  |  |
|
||||
| Set Start page(s) URL |  |  <p>*Same as Home button URL* |
|
||||
| Set New Tab page URL |  |  |
|
||||
| Favorites management |  |  |
|
||||
| End session button |  | <p>*In Microsoft Intune, you must create a custom URI to enable. Dedicated UI configuration introduced in version 1808.* |
|
||||
| Reset on inactivity |  |  |
|
||||
| Internet Explorer integration (Enterprise Mode site list) | <p>*Multi-app mode only* |  |
|
||||
| Available in Microsoft Store |  |  |
|
||||
| SKU availability | Windows 10 October 2018 Update<br>Professional, Enterprise, and Education | Windows 10 April 2018 Update<br>Professional, Enterprise, and Education |
|
||||
|
||||
**\*Windows Defender Firewall**<p>
|
||||
To prevent access to unwanted websites on your kiosk device, use Windows Defender Firewall to configure a list of allowed websites, blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
---
|
||||
|
||||
## Provide feedback or get support
|
||||
|
||||
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the subcategory.
|
||||
|
||||
**_For multi-app kiosk only._** If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the subcategory.
|
||||
|
||||
|
||||
|
||||
---
|
||||
title: Deploy Microsoft Edge kiosk mode
|
||||
description: Microsoft Edge kiosk mode works with assigned access to allow IT admins to create a tailored browsing experience designed for kiosk devices. To use Microsoft Edge kiosk mode, you must configure Microsoft Edge as an application in assigned access.
|
||||
ms.assetid:
|
||||
ms.reviewer:
|
||||
audience: itpro
|
||||
manager: dansimp
|
||||
author: eavena
|
||||
ms.author: eravena
|
||||
ms.prod: edge
|
||||
ms.sitesec: library
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 10/29/2018
|
||||
---
|
||||
|
||||
# Deploy Microsoft Edge kiosk mode
|
||||
|
||||
>Applies to: Microsoft Edge on Windows 10, version 1809
|
||||
>Professional, Enterprise, and Education
|
||||
|
||||
In the Windows 10 October 2018 Update, we added the capability to use Microsoft Edge as a kiosk using assigned access. With assigned access, you create a tailored browsing experience locking down a Windows 10 device to only run as a single-app or multi-app kiosk. Assigned access restricts a local standard user account so that it only has access to one or more Windows app, such as Microsoft Edge in kiosk mode.
|
||||
|
||||
In this topic, you learn how to configure the behavior of Microsoft Edge when it's running in kiosk mode with assigned access. You also learn how to set up your kiosk device using either Windows Setting or Microsoft Intune or other MDM service.
|
||||
|
||||
At the end of this topic, you can find a list of [supported policies](#supported-policies-for-kiosk-mode) for kiosk mode and a [feature comparison](#feature-comparison-of-kiosk-mode-and-kiosk-browser-app) of the kiosk mode policy and kiosk browser app. You also find instructions on how to provide us feedback or get support.
|
||||
|
||||
|
||||
## Kiosk mode configuration types
|
||||
|
||||
>**Policy** = Configure kiosk mode (ConfigureKioskMode)
|
||||
|
||||
Microsoft Edge kiosk mode supports four configurations types that depend on how Microsoft Edge is set up with assigned access, either as a single-app or multi-app kiosk. These configuration types help you determine what is best suited for your kiosk device or scenario.
|
||||
|
||||
- Learn about [creating a kiosk experience](https://docs.microsoft.com/windows-hardware/customize/enterprise/create-a-kiosk-image)
|
||||
|
||||
- [Set up a kiosk or digital signage on Windows 10 Pro, Enterprise, or Education](https://docs.microsoft.com/windows/configuration/setup-kiosk-digital-signage)
|
||||
|
||||
- [Create a Windows 10 kiosk that runs multiple apps](https://docs.microsoft.com/windows/configuration/lock-down-windows-10-to-specific-apps).
|
||||
|
||||
- Learn about configuring a more secure kiosk experience: [Other settings to lock down](https://docs.microsoft.com/windows/configuration/setup-kiosk-digital-signage#other-settings-to-lock-down).
|
||||
|
||||
|
||||
### Important things to remember before getting started
|
||||
|
||||
- The public browsing kiosk types run Microsoft Edge InPrivate mode to protect user data with a browsing experience designed for public kiosks.
|
||||
|
||||
- Microsoft Edge kiosk mode has a built-in timer to help keep data safe in public browsing sessions. When the idle time (no user activity) meets the time limit, a confirmation message prompts the user to continue, and if no user activity Microsoft Edge resets the session to the default URL. By default, the idle timer is 5 minutes, but you can choose a value of your own.
|
||||
|
||||
- Optionally, you can define a single URL for the Home button, Start page, and New Tab page. See [Supported policies for kiosk mode](#supported-policies-for-kiosk-mode) to learn more.
|
||||
|
||||
- No matter which configuration type you choose, you must set up Microsoft Edge in assigned access; otherwise, Microsoft Edge ignores the settings in this policy (Configure kiosk mode/ConfigureKioskMode).<p>Learn more about assigned access:
|
||||
|
||||
- [Configure kiosk and shared devices running Windows desktop editions](https://aka.ms/E489vw).
|
||||
|
||||
- [Kiosk apps for assigned access best practices](https://aka.ms/H1s8y4).
|
||||
|
||||
- [Guidelines for choosing an app for assigned access (kiosk mode)](https://aka.ms/Ul7dw3).
|
||||
|
||||
|
||||
### Supported configuration types
|
||||
|
||||
[!INCLUDE [configure-kiosk-mode-supported-values-include](includes/configure-kiosk-mode-supported-values-include.md)]
|
||||
|
||||
## Set up Microsoft Edge kiosk mode
|
||||
|
||||
Now that you're familiar with the different kiosk mode configurations and have the one you want to use in mind, you can use one of the following methods to set up Microsoft Edge kiosk mode:
|
||||
|
||||
- **Windows Settings.** Use only to set up a couple of single-app devices because you perform these steps physically on each device. For a multi-app kiosk device, use Microsoft Intune or other MDM service.
|
||||
|
||||
- **Microsoft Intune or other MDM service.** Use to set up several single-app or multi-app kiosk devices. Microsoft Intune and other MDM service providers offer more options for customizing the Microsoft Edge kiosk mode experience using any of the [Supported policies for kiosk mode](#supported-policies-for-kiosk-mode).
|
||||
|
||||
|
||||
### Prerequisites
|
||||
|
||||
- Microsoft Edge on Windows 10, version 1809 (Professional, Enterprise, and Education).
|
||||
|
||||
- URL to load when the kiosk launches. The URL that you provide sets the Home button, Start page, and New Tab page.
|
||||
|
||||
- _**For Microsoft Intune or other MDM service**_, you must have the AppUserModelID (AUMID) to set up Microsoft Edge:
|
||||
|
||||
```
|
||||
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge
|
||||
```
|
||||
|
||||
|
||||
### Use Windows Settings
|
||||
|
||||
Windows Settings is the simplest and the only way to set up one or a couple of single-app devices.
|
||||
|
||||
|
||||
1. On the kiosk device, open Windows Settings, and in the search field type **kiosk** and then select **Set up a kiosk (assigned access)**.
|
||||
|
||||
2. On the **Set up a kiosk** page, click **Get started**.
|
||||
|
||||
3. Type a name to create a new kiosk account, or choose an existing account from the populated list and click **Next**.
|
||||
|
||||
4. On the **Choose a kiosk app** page, select **Microsoft Edge** and then click **Next**.
|
||||
|
||||
5. Select how Microsoft Edge displays when running in kiosk mode:
|
||||
|
||||
- **As a digital sign or interactive display** - Displays a specific site in full-screen mode, running Microsoft Edge InPrivate protecting user data.
|
||||
|
||||
- **As a public browser** - Runs a limited multi-tab version of Microsoft Edge, protecting user data.
|
||||
|
||||
6. Select **Next**.
|
||||
|
||||
7. Type the URL to load when the kiosk launches.
|
||||
|
||||
8. Accept the default value of **5 minutes** for the idle time or provide a value of your own.
|
||||
|
||||
9. Click **Next**.
|
||||
|
||||
10. Close the **Settings** window to save and apply your choices.
|
||||
|
||||
11. Restart the kiosk device and sign in with the local kiosk account to validate the configuration.
|
||||
|
||||
**_Congratulations!_** <p>You’ve just finished setting up a single-app kiosk device using Windows Settings.
|
||||
|
||||
**_What's next?_**
|
||||
|
||||
- User your new kiosk device. <p>
|
||||
OR<p>
|
||||
- Make changes to your kiosk device. In Windows Settings, on the **Set up a kiosk** page, make your changes to **Choose a kiosk mode** and **Set up Microsoft Edge**.
|
||||
|
||||
---
|
||||
|
||||
|
||||
### Use Microsoft Intune or other MDM service
|
||||
|
||||
With this method, you can use Microsoft Intune or other MDM services to configure Microsoft Edge kiosk mode in assigned access and how it behaves on a kiosk device. To learn about a few app fundamentals and requirements before adding them to Intune, see [Add apps to Microsoft Intune](https://docs.microsoft.com/intune/apps-add).
|
||||
|
||||
>[!IMPORTANT]
|
||||
>If you are using a local account as a kiosk account in Microsoft Intune, make sure to sign into this account and then sign out before configuring the kiosk device.
|
||||
|
||||
1. In Microsoft Intune or other MDM service, configure [AssignedAccess](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) to prevent users from accessing the file system, running executables, or other apps.
|
||||
|
||||
2. Configure the following MDM settings to setup Microsoft Edge kiosk mode on the kiosk device and then restart the device.
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| **[ConfigureKioskMode](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)**<p> | Configure the display mode for Microsoft Edge as a kiosk app.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskMode<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**Single-app kiosk experience**<ul><li>**0** - Digital signage and interactive display</li><li>**1** - InPrivate Public browsing</li></ul></li><li>**Multi-app kiosk experience**<ul><li>**0** - Normal Microsoft Edge running in assigned access</li><li>**1** - InPrivate public browsing with other apps</li></ul></li></ul> |
|
||||
| **[ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)**<p> | Change the time in minutes from the last user activity before Microsoft Edge kiosk mode resets the user's session.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureKioskResetAfterIdleTimeout<p>**Data type:** Integer<p>**Allowed values:**<ul><li>**0** - No idle timer</li><li>**1-1440 (5 minutes is the default)** - Set reset on idle timer</li></ul> |
|
||||
| **[HomePages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-homepages)**<p> | Set one or more start pages, URLs, to load when Microsoft Edge launches.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/HomePages<p>**Data type:** String<p>**Allowed values:**<p>Enter one or more URLs, for example,<br> \<https://www.msn.com\>\<https:/www.bing.com\> |
|
||||
| **[ConfigureHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)**<p> | Configure how the Home Button behaves.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/ConfigureHomeButton<p>**Data type:** Integer<p> **Allowed values:**<ul><li>**0 (default)** - Not configured. Show home button, and load the default Start page.</li><li>**1** - Enabled. Show home button and load New Tab page</li><li>**2** - Enabled. Show home button & set a specific page.</li><li>**3** - Enabled. Hide the home button.</li></ul> |
|
||||
| **[SetHomeButtonURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)**<p> | If you set ConfigureHomeButton to 2, configure the home button URL.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetHomeButtonURL <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.bing.com |
|
||||
| **[SetNewTabPageURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)**<p> | Set a custom URL for the New Tab page.<p><p>**URI full path:** ./Vendor/MSFT/Policy/Config/Browser/SetNewTabPageURL <p>**Data type:** String<p>**Allowed values:** Enter a URL, for example, https://www.msn.com |
|
||||
|
||||
|
||||
**_Congratulations!_** <p>You’ve just finished setting up a kiosk or digital signage with policies for Microsoft Edge kiosk mode using Microsoft Intune or other MDM service.
|
||||
|
||||
**_What's next?_** <p>Now it's time to use your new kiosk device. Sign into the device with the kiosk account selected to run Microsoft Edge kiosk mode.
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Supported policies for kiosk mode
|
||||
|
||||
Use any of the Microsoft Edge policies listed below to enhance the kiosk experience depending on the Microsoft Edge kiosk mode type you configure. To learn more about these policies, see [Policy CSP - Browser](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser).
|
||||
|
||||
Make sure to check with your provider for instructions.
|
||||
|
||||
| **MDM Setting** | **Digital /<br>Interactive signage** | **Public browsing<br>single-app** | **Public browsing<br>multi-app** | **Normal<br>mode** |
|
||||
|------------------|:---------:|:---------:|:---------:|:---------:|
|
||||
| [AllowAddressBarDropdown](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) |  |  |  |  |
|
||||
| [AllowAutofill](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) |  |  |  |  |
|
||||
| [AllowBrowser](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowbrowser) |  |  |  |  |
|
||||
| [AllowConfigurationUpdateForBooksLibrary](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) |  |  |  |  |
|
||||
| [AllowCookies](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) |  |  |  |  |
|
||||
| [AllowDeveloperTools](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) |  |  |  |  |
|
||||
| [AllowDoNotTrack](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) |  |  |  |  |
|
||||
| [AllowExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) |  |  |  |  |
|
||||
| [AllowFlash](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflash) |  |  |  |  |
|
||||
| [AllowFlashClickToRun](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | <sup>2</sup> |  |  |  |
|
||||
| [AllowFullscreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowfullscreenmode)\* |  |  |  |  |
|
||||
| [AllowInPrivate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) |  |  |  |  |
|
||||
| [AllowMicrosoftCompatibilityList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) |  |  | <sup>1</sup> |  |
|
||||
| [AllowPasswordManager](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) |  |  |  |  |
|
||||
| [AllowPopups](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) |  |  |  |  |
|
||||
| [AllowPrelaunch](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowprelaunch)\* |  |  |  |  |
|
||||
| [AllowPrinting](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowprinting)\* |  |  |  |  |
|
||||
| [AllowSavingHistory](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsavinghistory)\* |  |  |  |  |
|
||||
| [AllowSearchEngineCustomization](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) |  |  |  |  |
|
||||
| [AllowSideloadingExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsideloadingofextensions)\* |  |  |  |  |
|
||||
| [AllowSmartScreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) |  |  |  |  |
|
||||
| [AllowSyncMySettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) |  |  |  |  |
|
||||
| [AllowTabPreloading](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowtabpreloading)\* |  |  |  |  |
|
||||
| [AllowWebContentOnNewTabPage](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowwebcontentonnewtabpage)\* |  |  |  |  |
|
||||
| [AlwaysEnabledBooksLibrary](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) |  |  |  |  |
|
||||
| [ClearBrowsingDataOnExit](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) |  |  |  |  |
|
||||
| [ConfigureAdditionalSearchEngines](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) |  |  |  |  |
|
||||
| [ConfigureFavoritesBar](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurefavoritesbar)\* |  |  |  |  |
|
||||
| [ConfigureHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurehomebutton)\* |  |  |  |  |
|
||||
| [ConfigureKioskMode](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskmode)\* |  |  |  |  |
|
||||
| [ConfigureKioskResetAfterIdleTimeout](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configurekioskresetafteridletimeout)\* |  |  |  |  |
|
||||
| [ConfigureOpenEdgeWith](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configureopenmicrosoftedgewith)\* |  |  |  |  |
|
||||
| [ConfigureTelemetryForMicrosoft365Analytics](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-configuretelemetryformicrosoft365analytics)\* |  |  |  |  |
|
||||
| [DisableLockdownOfStartPages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) |  |  |  |  |
|
||||
| [Experience/DoNotSyncBrowserSettings](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-experience#experience-donotsyncbrowsersetting)\* and [Experience/PreventTurningOffRequiredExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* |  |  |  |  |
|
||||
| [EnableExtendedBooksTelemetry](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) |  |  |  |  |
|
||||
| [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) |  |  | <sup>1</sup> |  |
|
||||
| [FirstRunURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-firstrunurl) |  |  |  |  |
|
||||
| [HomePages](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-homepages) |  |  |  |  |
|
||||
| [LockdownFavorites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) |  |  |  |  |
|
||||
| [PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) |  |  |  |  |
|
||||
| [PreventCertErrorOverrides](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventcerterroroverrides)\* |  |  |  |  |
|
||||
| [PreventFirstRunPage](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) |  | |  |  |
|
||||
| [PreventLiveTileDataCollection](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) |  |  |  |  |
|
||||
| [PreventSmartScreenPromptOverride](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) |  |  |  |  |
|
||||
| [PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) |  |  |  |  |
|
||||
| [PreventTurningOffRequiredExtensions](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventturningoffrequiredextensions)\* |  |  |  |  |
|
||||
| [PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) |  |  |  |  |
|
||||
| [ProvisionFavorites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) |  |  |  |  |
|
||||
| [SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) |  |  | <sup>1</sup> |  |
|
||||
| [SetDefaultSearchEngine](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) |  |  |  |  |
|
||||
| [SetHomeButtonURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-sethomebuttonurl)\* |  |  |  |  |
|
||||
| [SetNewTabPageURL](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-setnewtabpageurl)\* |  |  |  |  |
|
||||
| [ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) |  |  | <sup>1</sup> |  |
|
||||
| [SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) |  |  | <sup>1</sup> |  |
|
||||
| [UnlockHomeButton](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-unlockhomebutton)\* |  |  |  |  |
|
||||
| [UseSharedFolderForBooks](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) |  |  |  |  |
|
||||
|
||||
|
||||
*\* New policy as of Windows 10, version 1809.*<p>
|
||||
*1) For multi-app assigned access, you must configure Internet Explorer 11.*<br>
|
||||
*2) For digital/interactive signage to enable Flash, set [AllowFlashClickToRun](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) to 0.*
|
||||
|
||||
**Legend:**<p>
|
||||
 = Not applicable or not supported <br>
|
||||
 = Supported
|
||||
|
||||
---
|
||||
|
||||
## Feature comparison of kiosk mode and kiosk browser app
|
||||
In the following table, we show you the features available in both Microsoft Edge kiosk mode and Kiosk Browser app available in Microsoft Store. Both kiosk mode and kiosk browser app work in assigned access.
|
||||
|
||||
|
||||
| **Feature** | **Microsoft Edge kiosk mode** | **Microsoft Kiosk browser app** |
|
||||
|-----------------------------------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------:|:-------------------------------------------------------------------------------------------------------------------------------------------------------:|
|
||||
| Print support |  |  |
|
||||
| Multi-tab support |  |  |
|
||||
| Allow/Block URL support |  <p>*\*For Microsoft Edge kiosk mode use* Windows Defender Firewall<em>. Microsoft kiosk browser has custom policy support.</em> |  |
|
||||
| Configure Home Button |  |  |
|
||||
| Set Start page(s) URL |  |  <p>*Same as Home button URL* |
|
||||
| Set New Tab page URL |  |  |
|
||||
| Favorites management |  |  |
|
||||
| End session button |  | <p>*In Microsoft Intune, you must create a custom URI to enable. Dedicated UI configuration introduced in version 1808.* |
|
||||
| Reset on inactivity |  |  |
|
||||
| Internet Explorer integration (Enterprise Mode site list) | <p>*Multi-app mode only* |  |
|
||||
| Available in Microsoft Store |  |  |
|
||||
| SKU availability | Windows 10 October 2018 Update<br>Professional, Enterprise, and Education | Windows 10 April 2018 Update<br>Professional, Enterprise, and Education |
|
||||
|
||||
**\*Windows Defender Firewall**<p>
|
||||
To prevent access to unwanted websites on your kiosk device, use Windows Defender Firewall to configure a list of allowed websites, blocked websites or both. For more details, see [Windows Defender Firewall with Advanced Security Deployment](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide).
|
||||
|
||||
---
|
||||
|
||||
## Provide feedback or get support
|
||||
|
||||
To provide feedback on Microsoft Edge kiosk mode in Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the subcategory.
|
||||
|
||||
**_For multi-app kiosk only._** If you have set up the Feedback Hub in assigned access, you can you submit the feedback from the device running Microsoft Edge in kiosk mode in which you can include diagnostic logs. In the Feedback Hub, select **Microsoft Edge** as the **Category**, and **All other issues** as the subcategory.
|
||||
|
||||
|
||||
|
||||
|
||||
@ -171,13 +171,13 @@ You can determine which zones or domains are used for data collection, using Pow
|
||||
|
||||
**To set up data collection using a domain allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`.
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`.
|
||||
|
||||
>**Important**<br>Wildcards, like \*.microsoft.com, aren’t supported.
|
||||
|
||||
**To set up data collection using a zone allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`.
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`.
|
||||
|
||||
>**Important**<br>Only Computer, Intranet, TrustedSites, Internet, and RestrictedSites are supported.
|
||||
|
||||
|
||||
@ -1,188 +1,188 @@
|
||||
#[IE11 Deployment Guide for IT Pros](ie11-deploy-guide/index.md)
|
||||
# [IE11 Deployment Guide for IT Pros](ie11-deploy-guide/index.md)
|
||||
|
||||
##[Change history for the Internet Explorer 11 (IE11) Deployment Guide](ie11-deploy-guide/change-history-for-internet-explorer-11.md)
|
||||
## [Change history for the Internet Explorer 11 (IE11) Deployment Guide](ie11-deploy-guide/change-history-for-internet-explorer-11.md)
|
||||
|
||||
##[System requirements and language support for Internet Explorer 11](ie11-deploy-guide/system-requirements-and-language-support-for-ie11.md)
|
||||
## [System requirements and language support for Internet Explorer 11](ie11-deploy-guide/system-requirements-and-language-support-for-ie11.md)
|
||||
|
||||
##[List of updated features and tools - Internet Explorer 11 (IE11)](ie11-deploy-guide/updated-features-and-tools-with-ie11.md)
|
||||
## [List of updated features and tools - Internet Explorer 11 (IE11)](ie11-deploy-guide/updated-features-and-tools-with-ie11.md)
|
||||
|
||||
##[Install and Deploy Internet Explorer 11 (IE11)](ie11-deploy-guide/install-and-deploy-ie11.md)
|
||||
###[Customize Internet Explorer 11 installation packages](ie11-deploy-guide/customize-ie11-install-packages.md)
|
||||
####[Using IEAK 11 to create packages](ie11-deploy-guide/using-ieak11-to-create-install-packages.md)
|
||||
####[Create packages for multiple operating systems or languages](ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md)
|
||||
####[Using .INF files to create packages](ie11-deploy-guide/using-inf-files-to-create-install-packages.md)
|
||||
###[Choose how to install Internet Explorer 11 (IE11)](ie11-deploy-guide/choose-how-to-install-ie11.md)
|
||||
####[Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager](ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md)
|
||||
####[Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)](ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md)
|
||||
####[Install Internet Explorer 11 (IE11) - Microsoft Intune](ie11-deploy-guide/install-ie11-using-microsoft-intune.md)
|
||||
####[Install Internet Explorer 11 (IE11) - Network](ie11-deploy-guide/install-ie11-using-the-network.md)
|
||||
####[Install Internet Explorer 11 (IE11) - Operating system deployment systems](ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md)
|
||||
####[Install Internet Explorer 11 (IE11) - Third-party tools](ie11-deploy-guide/install-ie11-using-third-party-tools.md)
|
||||
###[Choose how to deploy Internet Explorer 11 (IE11)](ie11-deploy-guide/choose-how-to-deploy-ie11.md)
|
||||
####[Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS)](ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md)
|
||||
####[Deploy Internet Explorer 11 using software distribution tools](ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md)
|
||||
###[Virtualization and compatibility with Internet Explorer 11](ie11-deploy-guide/virtualization-and-compatibility-with-ie11.md)
|
||||
## [Install and Deploy Internet Explorer 11 (IE11)](ie11-deploy-guide/install-and-deploy-ie11.md)
|
||||
### [Customize Internet Explorer 11 installation packages](ie11-deploy-guide/customize-ie11-install-packages.md)
|
||||
#### [Using IEAK 11 to create packages](ie11-deploy-guide/using-ieak11-to-create-install-packages.md)
|
||||
#### [Create packages for multiple operating systems or languages](ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md)
|
||||
#### [Using .INF files to create packages](ie11-deploy-guide/using-inf-files-to-create-install-packages.md)
|
||||
### [Choose how to install Internet Explorer 11 (IE11)](ie11-deploy-guide/choose-how-to-install-ie11.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager](ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)](ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - Microsoft Intune](ie11-deploy-guide/install-ie11-using-microsoft-intune.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - Network](ie11-deploy-guide/install-ie11-using-the-network.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - Operating system deployment systems](ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md)
|
||||
#### [Install Internet Explorer 11 (IE11) - Third-party tools](ie11-deploy-guide/install-ie11-using-third-party-tools.md)
|
||||
### [Choose how to deploy Internet Explorer 11 (IE11)](ie11-deploy-guide/choose-how-to-deploy-ie11.md)
|
||||
#### [Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS)](ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md)
|
||||
#### [Deploy Internet Explorer 11 using software distribution tools](ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md)
|
||||
### [Virtualization and compatibility with Internet Explorer 11](ie11-deploy-guide/virtualization-and-compatibility-with-ie11.md)
|
||||
|
||||
##[Collect data using Enterprise Site Discovery](ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md)
|
||||
## [Collect data using Enterprise Site Discovery](ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md)
|
||||
|
||||
##[Enterprise Mode for Internet Explorer 11 (IE11)](ie11-deploy-guide/enterprise-mode-overview-for-ie11.md)
|
||||
###[Tips and tricks to manage Internet Explorer compatibility](ie11-deploy-guide/tips-and-tricks-to-manage-ie-compatibility.md)
|
||||
###[Enterprise Mode and the Enterprise Mode Site List](ie11-deploy-guide/what-is-enterprise-mode.md)
|
||||
###[Set up Enterprise Mode logging and data collection](ie11-deploy-guide/set-up-enterprise-mode-logging-and-data-collection.md)
|
||||
###[Turn on Enterprise Mode and use a site list](ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list.md)
|
||||
###[Enterprise Mode schema v.2 guidance](ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md)
|
||||
###[Enterprise Mode schema v.1 guidance](ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md)
|
||||
###[Check for a new Enterprise Mode site list xml file](ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md)
|
||||
###[Turn on local control and logging for Enterprise Mode](ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode.md)
|
||||
###[Use the Enterprise Mode Site List Manager](ie11-deploy-guide/use-the-enterprise-mode-site-list-manager.md)
|
||||
####[Add single sites to the Enterprise Mode site list using the Enterprise Mode Site List Manager (schema v.2)](ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md)
|
||||
####[Add single sites to the Enterprise Mode site list using the Enterprise Mode Site List Manager (schema v.1)](ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md)
|
||||
####[Add multiple sites to the Enterprise Mode site list using a file and the Enterprise Mode Site List Manager (schema v.2)](ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md)
|
||||
####[Add multiple sites to the Enterprise Mode site list using a file and the Enterprise Mode Site List Manager (schema v.1)](ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md)
|
||||
####[Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager](ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md)
|
||||
####[Fix validation problems using the Enterprise Mode Site List Manager](ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md)
|
||||
####[Search your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
####[Save your site list to XML in the Enterprise Mode Site List Manager](ie11-deploy-guide/save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md)
|
||||
####[Export your Enterprise Mode site list from the Enterprise Mode Site List Manager](ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md)
|
||||
####[Import your Enterprise Mode site list to the Enterprise Mode Site List Manager](ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md)
|
||||
####[Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
####[Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
###[Use the Enterprise Mode Site List Portal](ie11-deploy-guide/use-the-enterprise-mode-portal.md)
|
||||
####[Set up the Enterprise Mode Site List Portal](ie11-deploy-guide/set-up-enterprise-mode-portal.md)
|
||||
#####[Use the Settings page to finish setting up the Enterprise Mode Site List Portal](ie11-deploy-guide/configure-settings-enterprise-mode-portal.md)
|
||||
#####[Add employees to the Enterprise Mode Site List Portal](ie11-deploy-guide/add-employees-enterprise-mode-portal.md)
|
||||
####[Workflow-based processes for employees using the Enterprise Mode Site List Portal](ie11-deploy-guide/workflow-processes-enterprise-mode-portal.md)
|
||||
#####[Create a change request using the Enterprise Mode Site List Portal](ie11-deploy-guide/create-change-request-enterprise-mode-portal.md)
|
||||
#####[Verify your changes using the Enterprise Mode Site List Portal](ie11-deploy-guide/verify-changes-preprod-enterprise-mode-portal.md)
|
||||
#####[Approve a change request using the Enterprise Mode Site List Portal](ie11-deploy-guide/approve-change-request-enterprise-mode-portal.md)
|
||||
#####[Schedule approved change requests for production using the Enterprise Mode Site List Portal](ie11-deploy-guide/schedule-production-change-enterprise-mode-portal.md)
|
||||
#####[Verify the change request update in the production environment using the Enterprise Mode Site List Portal](ie11-deploy-guide/verify-changes-production-enterprise-mode-portal.md)
|
||||
#####[View the apps currently on the Enterprise Mode Site List](ie11-deploy-guide/view-apps-enterprise-mode-site-list.md)
|
||||
#####[View the available Enterprise Mode reports from the Enterprise Mode Site List Portal](ie11-deploy-guide/view-enterprise-mode-reports-for-portal.md)
|
||||
###[Using IE7 Enterprise Mode or IE8 Enterprise Mode](ie11-deploy-guide/using-enterprise-mode.md)
|
||||
###[Fix web compatibility issues using document modes and the Enterprise Mode site list](ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md)
|
||||
###[Remove sites from a local Enterprise Mode site list](ie11-deploy-guide/remove-sites-from-a-local-enterprise-mode-site-list.md)
|
||||
###[Remove sites from a local compatibility view list](ie11-deploy-guide/remove-sites-from-a-local-compatibililty-view-list.md)
|
||||
###[Turn off Enterprise Mode](ie11-deploy-guide/turn-off-enterprise-mode.md)
|
||||
## [Enterprise Mode for Internet Explorer 11 (IE11)](ie11-deploy-guide/enterprise-mode-overview-for-ie11.md)
|
||||
### [Tips and tricks to manage Internet Explorer compatibility](ie11-deploy-guide/tips-and-tricks-to-manage-ie-compatibility.md)
|
||||
### [Enterprise Mode and the Enterprise Mode Site List](ie11-deploy-guide/what-is-enterprise-mode.md)
|
||||
### [Set up Enterprise Mode logging and data collection](ie11-deploy-guide/set-up-enterprise-mode-logging-and-data-collection.md)
|
||||
### [Turn on Enterprise Mode and use a site list](ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list.md)
|
||||
### [Enterprise Mode schema v.2 guidance](ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md)
|
||||
### [Enterprise Mode schema v.1 guidance](ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md)
|
||||
### [Check for a new Enterprise Mode site list xml file](ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md)
|
||||
### [Turn on local control and logging for Enterprise Mode](ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode.md)
|
||||
### [Use the Enterprise Mode Site List Manager](ie11-deploy-guide/use-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Add single sites to the Enterprise Mode site list using the Enterprise Mode Site List Manager (schema v.2)](ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md)
|
||||
#### [Add single sites to the Enterprise Mode site list using the Enterprise Mode Site List Manager (schema v.1)](ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md)
|
||||
#### [Add multiple sites to the Enterprise Mode site list using a file and the Enterprise Mode Site List Manager (schema v.2)](ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md)
|
||||
#### [Add multiple sites to the Enterprise Mode site list using a file and the Enterprise Mode Site List Manager (schema v.1)](ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md)
|
||||
#### [Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager](ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Fix validation problems using the Enterprise Mode Site List Manager](ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Search your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Save your site list to XML in the Enterprise Mode Site List Manager](ie11-deploy-guide/save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Export your Enterprise Mode site list from the Enterprise Mode Site List Manager](ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Import your Enterprise Mode site list to the Enterprise Mode Site List Manager](ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
#### [Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager](ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)
|
||||
### [Use the Enterprise Mode Site List Portal](ie11-deploy-guide/use-the-enterprise-mode-portal.md)
|
||||
#### [Set up the Enterprise Mode Site List Portal](ie11-deploy-guide/set-up-enterprise-mode-portal.md)
|
||||
##### [Use the Settings page to finish setting up the Enterprise Mode Site List Portal](ie11-deploy-guide/configure-settings-enterprise-mode-portal.md)
|
||||
##### [Add employees to the Enterprise Mode Site List Portal](ie11-deploy-guide/add-employees-enterprise-mode-portal.md)
|
||||
#### [Workflow-based processes for employees using the Enterprise Mode Site List Portal](ie11-deploy-guide/workflow-processes-enterprise-mode-portal.md)
|
||||
##### [Create a change request using the Enterprise Mode Site List Portal](ie11-deploy-guide/create-change-request-enterprise-mode-portal.md)
|
||||
##### [Verify your changes using the Enterprise Mode Site List Portal](ie11-deploy-guide/verify-changes-preprod-enterprise-mode-portal.md)
|
||||
##### [Approve a change request using the Enterprise Mode Site List Portal](ie11-deploy-guide/approve-change-request-enterprise-mode-portal.md)
|
||||
##### [Schedule approved change requests for production using the Enterprise Mode Site List Portal](ie11-deploy-guide/schedule-production-change-enterprise-mode-portal.md)
|
||||
##### [Verify the change request update in the production environment using the Enterprise Mode Site List Portal](ie11-deploy-guide/verify-changes-production-enterprise-mode-portal.md)
|
||||
##### [View the apps currently on the Enterprise Mode Site List](ie11-deploy-guide/view-apps-enterprise-mode-site-list.md)
|
||||
##### [View the available Enterprise Mode reports from the Enterprise Mode Site List Portal](ie11-deploy-guide/view-enterprise-mode-reports-for-portal.md)
|
||||
### [Using IE7 Enterprise Mode or IE8 Enterprise Mode](ie11-deploy-guide/using-enterprise-mode.md)
|
||||
### [Fix web compatibility issues using document modes and the Enterprise Mode site list](ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md)
|
||||
### [Remove sites from a local Enterprise Mode site list](ie11-deploy-guide/remove-sites-from-a-local-enterprise-mode-site-list.md)
|
||||
### [Remove sites from a local compatibility view list](ie11-deploy-guide/remove-sites-from-a-local-compatibililty-view-list.md)
|
||||
### [Turn off Enterprise Mode](ie11-deploy-guide/turn-off-enterprise-mode.md)
|
||||
|
||||
|
||||
##[Group Policy and Internet Explorer 11 (IE11)](ie11-deploy-guide/group-policy-and-ie11.md)
|
||||
###[Group Policy management tools](ie11-deploy-guide/group-policy-objects-and-ie11.md)
|
||||
####[Group Policy and the Group Policy Management Console (GPMC)](ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md)
|
||||
####[Group Policy and the Local Group Policy Editor](ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md)
|
||||
####[Group Policy and Advanced Group Policy Management (AGPM)](ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md)
|
||||
####[Group Policy and Windows Powershell](ie11-deploy-guide/group-policy-windows-powershell-ie11.md)
|
||||
####[Group Policy and Shortcut Extensions](ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md)
|
||||
###[New group policy settings for Internet Explorer 11](ie11-deploy-guide/new-group-policy-settings-for-ie11.md)
|
||||
###[Set the default browser using Group Policy](ie11-deploy-guide/set-the-default-browser-using-group-policy.md)
|
||||
###[ActiveX installation using group policy](ie11-deploy-guide/activex-installation-using-group-policy.md)
|
||||
###[Group Policy and compatibility with Internet Explorer 11](ie11-deploy-guide/group-policy-compatibility-with-ie11.md)
|
||||
###[Group policy preferences and Internet Explorer 11](ie11-deploy-guide/group-policy-preferences-and-ie11.md)
|
||||
###[Administrative templates and Internet Explorer 11](ie11-deploy-guide/administrative-templates-and-ie11.md)
|
||||
###[Enable and disable add-ons using administrative templates and group policy](ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md)
|
||||
## [Group Policy and Internet Explorer 11 (IE11)](ie11-deploy-guide/group-policy-and-ie11.md)
|
||||
### [Group Policy management tools](ie11-deploy-guide/group-policy-objects-and-ie11.md)
|
||||
#### [Group Policy and the Group Policy Management Console (GPMC)](ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md)
|
||||
#### [Group Policy and the Local Group Policy Editor](ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md)
|
||||
#### [Group Policy and Advanced Group Policy Management (AGPM)](ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md)
|
||||
#### [Group Policy and Windows Powershell](ie11-deploy-guide/group-policy-windows-powershell-ie11.md)
|
||||
#### [Group Policy and Shortcut Extensions](ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md)
|
||||
### [New group policy settings for Internet Explorer 11](ie11-deploy-guide/new-group-policy-settings-for-ie11.md)
|
||||
### [Set the default browser using Group Policy](ie11-deploy-guide/set-the-default-browser-using-group-policy.md)
|
||||
### [ActiveX installation using group policy](ie11-deploy-guide/activex-installation-using-group-policy.md)
|
||||
### [Group Policy and compatibility with Internet Explorer 11](ie11-deploy-guide/group-policy-compatibility-with-ie11.md)
|
||||
### [Group policy preferences and Internet Explorer 11](ie11-deploy-guide/group-policy-preferences-and-ie11.md)
|
||||
### [Administrative templates and Internet Explorer 11](ie11-deploy-guide/administrative-templates-and-ie11.md)
|
||||
### [Enable and disable add-ons using administrative templates and group policy](ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md)
|
||||
|
||||
##[Manage Internet Explorer 11](ie11-deploy-guide/manage-ie11-overview.md)
|
||||
###[Auto detect settings Internet Explorer 11](ie11-deploy-guide/auto-detect-settings-for-ie11.md)
|
||||
###[Auto configuration settings for Internet Explorer 11](ie11-deploy-guide/auto-configuration-settings-for-ie11.md)
|
||||
###[Auto proxy configuration settings for Internet Explorer 11](ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md)
|
||||
## [Manage Internet Explorer 11](ie11-deploy-guide/manage-ie11-overview.md)
|
||||
### [Auto detect settings Internet Explorer 11](ie11-deploy-guide/auto-detect-settings-for-ie11.md)
|
||||
### [Auto configuration settings for Internet Explorer 11](ie11-deploy-guide/auto-configuration-settings-for-ie11.md)
|
||||
### [Auto proxy configuration settings for Internet Explorer 11](ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md)
|
||||
|
||||
##[Troubleshoot Internet Explorer 11 (IE11)](ie11-deploy-guide/troubleshoot-ie11.md)
|
||||
###[Setup problems with Internet Explorer 11](ie11-deploy-guide/setup-problems-with-ie11.md)
|
||||
###[Install problems with Internet Explorer 11](ie11-deploy-guide/install-problems-with-ie11.md)
|
||||
###[Problems after installing Internet Explorer 11](ie11-deploy-guide/problems-after-installing-ie11.md)
|
||||
###[Auto configuration and auto proxy problems with Internet Explorer 11](ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md)
|
||||
###[User interface problems with Internet Explorer 11](ie11-deploy-guide/user-interface-problems-with-ie11.md)
|
||||
###[Group Policy problems with Internet Explorer 11](ie11-deploy-guide/group-policy-problems-ie11.md)
|
||||
###[.NET Framework problems with Internet Explorer 11](ie11-deploy-guide/net-framework-problems-with-ie11.md)
|
||||
###[Enhanced Protected Mode problems with Internet Explorer](ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md)
|
||||
###[Fix font rendering problems by turning off natural metrics](ie11-deploy-guide/turn-off-natural-metrics.md)
|
||||
###[Intranet problems with Internet Explorer 11](ie11-deploy-guide/intranet-problems-and-ie11.md)
|
||||
###[Browser cache changes and roaming profiles](ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md)
|
||||
## [Troubleshoot Internet Explorer 11 (IE11)](ie11-deploy-guide/troubleshoot-ie11.md)
|
||||
### [Setup problems with Internet Explorer 11](ie11-deploy-guide/setup-problems-with-ie11.md)
|
||||
### [Install problems with Internet Explorer 11](ie11-deploy-guide/install-problems-with-ie11.md)
|
||||
### [Problems after installing Internet Explorer 11](ie11-deploy-guide/problems-after-installing-ie11.md)
|
||||
### [Auto configuration and auto proxy problems with Internet Explorer 11](ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md)
|
||||
### [User interface problems with Internet Explorer 11](ie11-deploy-guide/user-interface-problems-with-ie11.md)
|
||||
### [Group Policy problems with Internet Explorer 11](ie11-deploy-guide/group-policy-problems-ie11.md)
|
||||
### [.NET Framework problems with Internet Explorer 11](ie11-deploy-guide/net-framework-problems-with-ie11.md)
|
||||
### [Enhanced Protected Mode problems with Internet Explorer](ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md)
|
||||
### [Fix font rendering problems by turning off natural metrics](ie11-deploy-guide/turn-off-natural-metrics.md)
|
||||
### [Intranet problems with Internet Explorer 11](ie11-deploy-guide/intranet-problems-and-ie11.md)
|
||||
### [Browser cache changes and roaming profiles](ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md)
|
||||
|
||||
##[Out-of-date ActiveX control blocking](ie11-deploy-guide/out-of-date-activex-control-blocking.md)
|
||||
###[Blocked out-of-date ActiveX controls](ie11-deploy-guide/blocked-out-of-date-activex-controls.md)
|
||||
## [Out-of-date ActiveX control blocking](ie11-deploy-guide/out-of-date-activex-control-blocking.md)
|
||||
### [Blocked out-of-date ActiveX controls](ie11-deploy-guide/blocked-out-of-date-activex-controls.md)
|
||||
|
||||
##[Deprecated document modes and Internet Explorer 11](ie11-deploy-guide/deprecated-document-modes.md)
|
||||
## [Deprecated document modes and Internet Explorer 11](ie11-deploy-guide/deprecated-document-modes.md)
|
||||
|
||||
##[What is the Internet Explorer 11 Blocker Toolkit?](ie11-deploy-guide/what-is-the-internet-explorer-11-blocker-toolkit.md)
|
||||
###[Internet Explorer 11 delivery through automatic updates](ie11-deploy-guide/ie11-delivery-through-automatic-updates.md)
|
||||
###[Internet Explorer 11 Blocker Toolkit FAQ](ie11-faq/faq-ie11-blocker-toolkit.md)
|
||||
## [What is the Internet Explorer 11 Blocker Toolkit?](ie11-deploy-guide/what-is-the-internet-explorer-11-blocker-toolkit.md)
|
||||
### [Internet Explorer 11 delivery through automatic updates](ie11-deploy-guide/ie11-delivery-through-automatic-updates.md)
|
||||
### [Internet Explorer 11 Blocker Toolkit FAQ](ie11-faq/faq-ie11-blocker-toolkit.md)
|
||||
|
||||
##[Missing Internet Explorer Maintenance settings for Internet Explorer 11](ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md)
|
||||
## [Missing Internet Explorer Maintenance settings for Internet Explorer 11](ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md)
|
||||
|
||||
##[Missing the Compatibility View Button](ie11-deploy-guide/missing-the-compatibility-view-button.md)
|
||||
## [Missing the Compatibility View Button](ie11-deploy-guide/missing-the-compatibility-view-button.md)
|
||||
|
||||
##[Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013](ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md)
|
||||
## [Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013](ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md)
|
||||
|
||||
#[IE11 Frequently Asked Questions (FAQ) Guide for IT Pros](ie11-faq/faq-for-it-pros-ie11.md)
|
||||
# [IE11 Frequently Asked Questions (FAQ) Guide for IT Pros](ie11-faq/faq-for-it-pros-ie11.md)
|
||||
|
||||
#[Internet Explorer Administration Kit 11 (IEAK 11) - Administration Guide for IT Pros](ie11-ieak/index.md)
|
||||
##[What IEAK can do for you](ie11-ieak/what-ieak-can-do-for-you.md)
|
||||
##[Internet Explorer Administration Kit (IEAK) information and downloads](ie11-ieak/ieak-information-and-downloads.md)
|
||||
##[Before you start using IEAK 11](ie11-ieak/before-you-create-custom-pkgs-ieak11.md)
|
||||
###[Hardware and software requirements for IEAK 11](ie11-ieak/hardware-and-software-reqs-ieak11.md)
|
||||
###[Determine the licensing version and features to use in IEAK 11](ie11-ieak/licensing-version-and-features-ieak11.md)
|
||||
###[Security features and IEAK 11](ie11-ieak/security-and-ieak11.md)
|
||||
###[File types used or created by IEAK 11](ie11-ieak/file-types-ieak11.md)
|
||||
###[Tasks and references to consider before creating and deploying custom packages using IEAK 11](ie11-ieak/create-manage-deploy-custom-pkgs-ieak11.md)
|
||||
###[Create the build computer folder structure using IEAK 11](ie11-ieak/create-build-folder-structure-ieak11.md)
|
||||
###[Set up auto detection for DHCP or DNS servers using IEAK 11](ie11-ieak/auto-detection-dhcp-or-dns-servers-ieak11.md)
|
||||
###[Use proxy auto-configuration (.pac) files with IEAK 11](ie11-ieak/proxy-auto-config-examples.md)
|
||||
###[Customize the toolbar button and Favorites List icons using IEAK 11](ie11-ieak/guidelines-toolbar-and-favorites-list-ieak11.md)
|
||||
###[Use the uninstallation .INF files to uninstall custom components](ie11-ieak/create-uninstall-inf-files-for-custom-components.md)
|
||||
###[Add and approve ActiveX controls using the IEAK 11](ie11-ieak/add-and-approve-activex-controls-ieak11.md)
|
||||
###[Register an uninstall app for custom components using IEAK 11](ie11-ieak/register-uninstall-app-ieak11.md)
|
||||
###[Customize Automatic Search for Internet Explorer using IEAK 11](ie11-ieak/customize-automatic-search-for-ie.md)
|
||||
###[Create multiple versions of your custom package using IEAK 11](ie11-ieak/create-multiple-browser-packages-ieak11.md)
|
||||
###[Before you install your package over your network using IEAK 11](ie11-ieak/prep-network-install-with-ieak11.md)
|
||||
###[Use the RSoP snap-in to review policy settings](ie11-ieak/rsop-snapin-for-policy-settings-ieak11.md)
|
||||
###[IEAK 11 - Frequently Asked Questions](ie11-faq/faq-ieak11.md)
|
||||
###[Troubleshoot custom package and IEAK 11 problems](ie11-ieak/troubleshooting-custom-browser-pkg-ieak11.md)
|
||||
# [Internet Explorer Administration Kit 11 (IEAK 11) - Administration Guide for IT Pros](ie11-ieak/index.md)
|
||||
## [What IEAK can do for you](ie11-ieak/what-ieak-can-do-for-you.md)
|
||||
## [Internet Explorer Administration Kit (IEAK) information and downloads](ie11-ieak/ieak-information-and-downloads.md)
|
||||
## [Before you start using IEAK 11](ie11-ieak/before-you-create-custom-pkgs-ieak11.md)
|
||||
### [Hardware and software requirements for IEAK 11](ie11-ieak/hardware-and-software-reqs-ieak11.md)
|
||||
### [Determine the licensing version and features to use in IEAK 11](ie11-ieak/licensing-version-and-features-ieak11.md)
|
||||
### [Security features and IEAK 11](ie11-ieak/security-and-ieak11.md)
|
||||
### [File types used or created by IEAK 11](ie11-ieak/file-types-ieak11.md)
|
||||
### [Tasks and references to consider before creating and deploying custom packages using IEAK 11](ie11-ieak/create-manage-deploy-custom-pkgs-ieak11.md)
|
||||
### [Create the build computer folder structure using IEAK 11](ie11-ieak/create-build-folder-structure-ieak11.md)
|
||||
### [Set up auto detection for DHCP or DNS servers using IEAK 11](ie11-ieak/auto-detection-dhcp-or-dns-servers-ieak11.md)
|
||||
### [Use proxy auto-configuration (.pac) files with IEAK 11](ie11-ieak/proxy-auto-config-examples.md)
|
||||
### [Customize the toolbar button and Favorites List icons using IEAK 11](ie11-ieak/guidelines-toolbar-and-favorites-list-ieak11.md)
|
||||
### [Use the uninstallation .INF files to uninstall custom components](ie11-ieak/create-uninstall-inf-files-for-custom-components.md)
|
||||
### [Add and approve ActiveX controls using the IEAK 11](ie11-ieak/add-and-approve-activex-controls-ieak11.md)
|
||||
### [Register an uninstall app for custom components using IEAK 11](ie11-ieak/register-uninstall-app-ieak11.md)
|
||||
### [Customize Automatic Search for Internet Explorer using IEAK 11](ie11-ieak/customize-automatic-search-for-ie.md)
|
||||
### [Create multiple versions of your custom package using IEAK 11](ie11-ieak/create-multiple-browser-packages-ieak11.md)
|
||||
### [Before you install your package over your network using IEAK 11](ie11-ieak/prep-network-install-with-ieak11.md)
|
||||
### [Use the RSoP snap-in to review policy settings](ie11-ieak/rsop-snapin-for-policy-settings-ieak11.md)
|
||||
### [IEAK 11 - Frequently Asked Questions](ie11-faq/faq-ieak11.md)
|
||||
### [Troubleshoot custom package and IEAK 11 problems](ie11-ieak/troubleshooting-custom-browser-pkg-ieak11.md)
|
||||
|
||||
##[Internet Explorer Administration Kit 11 (IEAK 11) Customization Wizard options](ie11-ieak/ieak11-wizard-custom-options.md)
|
||||
###[Use the File Locations page in the IEAK 11 Wizard](ie11-ieak/file-locations-ieak11-wizard.md)
|
||||
###[Use the Platform Selection page in the IEAK 11 Wizard](ie11-ieak/platform-selection-ieak11-wizard.md)
|
||||
###[Use the Language Selection page in the IEAK 11 Wizard](ie11-ieak/language-selection-ieak11-wizard.md)
|
||||
###[Use the Package Type Selection page in the IEAK 11 Wizard](ie11-ieak/pkg-type-selection-ieak11-wizard.md)
|
||||
###[Use the Feature Selection page in the IEAK 11 Wizard](ie11-ieak/feature-selection-ieak11-wizard.md)
|
||||
###[Use the Automatic Version Synchronization page in the IEAK 11 Wizard](ie11-ieak/auto-version-sync-ieak11-wizard.md)
|
||||
###[Use the Custom Components page in the IEAK 11 Wizard](ie11-ieak/custom-components-ieak11-wizard.md)
|
||||
###[Use the Internal Install page in the IEAK 11 Wizard](ie11-ieak/internal-install-ieak11-wizard.md)
|
||||
###[Use the User Experience page in the IEAK 11 Wizard](ie11-ieak/user-experience-ieak11-wizard.md)
|
||||
###[Use the Browser User Interface page in the IEAK 11 Wizard](ie11-ieak/browser-ui-ieak11-wizard.md)
|
||||
###[Use the Search Providers page in the IEAK 11 Wizard](ie11-ieak/search-providers-ieak11-wizard.md)
|
||||
###[Use the Important URLs - Home Page and Support page in the IEAK 11 Wizard](ie11-ieak/important-urls-home-page-and-support-ieak11-wizard.md)
|
||||
###[Use the Accelerators page in the IEAK 11 Wizard](ie11-ieak/accelerators-ieak11-wizard.md)
|
||||
###[Use the Favorites, Favorites Bar, and Feeds page in the IEAK 11 Wizard](ie11-ieak/favorites-favoritesbar-and-feeds-ieak11-wizard.md)
|
||||
###[Use the Browsing Options page in the IEAK 11 Wizard](ie11-ieak/browsing-options-ieak11-wizard.md)
|
||||
###[Use the First Run Wizard and Welcome Page Options page in the IEAK 11 Wizard](ie11-ieak/first-run-and-welcome-page-ieak11-wizard.md)
|
||||
###[Use the Compatibility View page in the IEAK 11 Wizard](ie11-ieak/compat-view-ieak11-wizard.md)
|
||||
###[Use the Connection Manager page in the IEAK 11 Wizard](ie11-ieak/connection-mgr-ieak11-wizard.md)
|
||||
###[Use the Connection Settings page in the IEAK 11 Wizard](ie11-ieak/connection-settings-ieak11-wizard.md)
|
||||
###[Use the Automatic Configuration page in the IEAK 11 Wizard](ie11-ieak/auto-config-ieak11-wizard.md)
|
||||
###[Use the Proxy Settings page in the IEAK 11 Wizard](ie11-ieak/proxy-settings-ieak11-wizard.md)
|
||||
###[Use the Security and Privacy Settings page in the IEAK 11 Wizard](ie11-ieak/security-and-privacy-settings-ieak11-wizard.md)
|
||||
###[Use the Add a Root Certificate page in the IEAK 11 Wizard](ie11-ieak/add-root-certificate-ieak11-wizard.md)
|
||||
###[Use the Programs page in the IEAK 11 Wizard](ie11-ieak/programs-ieak11-wizard.md)
|
||||
###[Use the Additional Settings page in the IEAK 11 Wizard](ie11-ieak/additional-settings-ieak11-wizard.md)
|
||||
###[Use the Wizard Complete - Next Steps page in the IEAK 11 Wizard](ie11-ieak/wizard-complete-ieak11-wizard.md)
|
||||
## [Internet Explorer Administration Kit 11 (IEAK 11) Customization Wizard options](ie11-ieak/ieak11-wizard-custom-options.md)
|
||||
### [Use the File Locations page in the IEAK 11 Wizard](ie11-ieak/file-locations-ieak11-wizard.md)
|
||||
### [Use the Platform Selection page in the IEAK 11 Wizard](ie11-ieak/platform-selection-ieak11-wizard.md)
|
||||
### [Use the Language Selection page in the IEAK 11 Wizard](ie11-ieak/language-selection-ieak11-wizard.md)
|
||||
### [Use the Package Type Selection page in the IEAK 11 Wizard](ie11-ieak/pkg-type-selection-ieak11-wizard.md)
|
||||
### [Use the Feature Selection page in the IEAK 11 Wizard](ie11-ieak/feature-selection-ieak11-wizard.md)
|
||||
### [Use the Automatic Version Synchronization page in the IEAK 11 Wizard](ie11-ieak/auto-version-sync-ieak11-wizard.md)
|
||||
### [Use the Custom Components page in the IEAK 11 Wizard](ie11-ieak/custom-components-ieak11-wizard.md)
|
||||
### [Use the Internal Install page in the IEAK 11 Wizard](ie11-ieak/internal-install-ieak11-wizard.md)
|
||||
### [Use the User Experience page in the IEAK 11 Wizard](ie11-ieak/user-experience-ieak11-wizard.md)
|
||||
### [Use the Browser User Interface page in the IEAK 11 Wizard](ie11-ieak/browser-ui-ieak11-wizard.md)
|
||||
### [Use the Search Providers page in the IEAK 11 Wizard](ie11-ieak/search-providers-ieak11-wizard.md)
|
||||
### [Use the Important URLs - Home Page and Support page in the IEAK 11 Wizard](ie11-ieak/important-urls-home-page-and-support-ieak11-wizard.md)
|
||||
### [Use the Accelerators page in the IEAK 11 Wizard](ie11-ieak/accelerators-ieak11-wizard.md)
|
||||
### [Use the Favorites, Favorites Bar, and Feeds page in the IEAK 11 Wizard](ie11-ieak/favorites-favoritesbar-and-feeds-ieak11-wizard.md)
|
||||
### [Use the Browsing Options page in the IEAK 11 Wizard](ie11-ieak/browsing-options-ieak11-wizard.md)
|
||||
### [Use the First Run Wizard and Welcome Page Options page in the IEAK 11 Wizard](ie11-ieak/first-run-and-welcome-page-ieak11-wizard.md)
|
||||
### [Use the Compatibility View page in the IEAK 11 Wizard](ie11-ieak/compat-view-ieak11-wizard.md)
|
||||
### [Use the Connection Manager page in the IEAK 11 Wizard](ie11-ieak/connection-mgr-ieak11-wizard.md)
|
||||
### [Use the Connection Settings page in the IEAK 11 Wizard](ie11-ieak/connection-settings-ieak11-wizard.md)
|
||||
### [Use the Automatic Configuration page in the IEAK 11 Wizard](ie11-ieak/auto-config-ieak11-wizard.md)
|
||||
### [Use the Proxy Settings page in the IEAK 11 Wizard](ie11-ieak/proxy-settings-ieak11-wizard.md)
|
||||
### [Use the Security and Privacy Settings page in the IEAK 11 Wizard](ie11-ieak/security-and-privacy-settings-ieak11-wizard.md)
|
||||
### [Use the Add a Root Certificate page in the IEAK 11 Wizard](ie11-ieak/add-root-certificate-ieak11-wizard.md)
|
||||
### [Use the Programs page in the IEAK 11 Wizard](ie11-ieak/programs-ieak11-wizard.md)
|
||||
### [Use the Additional Settings page in the IEAK 11 Wizard](ie11-ieak/additional-settings-ieak11-wizard.md)
|
||||
### [Use the Wizard Complete - Next Steps page in the IEAK 11 Wizard](ie11-ieak/wizard-complete-ieak11-wizard.md)
|
||||
|
||||
##[Using Internet Settings (.INS) files with IEAK 11](ie11-ieak/using-internet-settings-ins-files.md)
|
||||
###[Use the Branding .INS file to create custom branding and setup info](ie11-ieak/branding-ins-file-setting.md)
|
||||
###[Use the BrowserToolbars .INS file to customize the Internet Explorer toolbar](ie11-ieak/browsertoolbars-ins-file-setting.md)
|
||||
###[Use the CabSigning .INS file to review the digital signatures for your apps](ie11-ieak/cabsigning-ins-file-setting.md)
|
||||
###[Use the ConnectionSettings .INS file to review the network connections for install](ie11-ieak/connectionsettings-ins-file-setting.md)
|
||||
###[Use the CustomBranding .INS file to specify the custom branding location](ie11-ieak/custombranding-ins-file-setting.md)
|
||||
###[Use the ExtRegInf .INS file to specify installation files and mode](ie11-ieak/extreginf-ins-file-setting.md)
|
||||
###[Use the FavoritesEx .INS file for your Favorites icon and URLs](ie11-ieak/favoritesex-ins-file-setting.md)
|
||||
###[Use the HideCustom .INS file to hide GUIDs](ie11-ieak/hidecustom-ins-file-setting.md)
|
||||
###[Use the ISP_Security .INS file to add your root certificate](ie11-ieak/isp-security-ins-file-setting.md)
|
||||
###[Use the Media .INS file to specify your install media](ie11-ieak/media-ins-file-setting.md)
|
||||
###[Use the Proxy .INS file to specify a proxy server](ie11-ieak/proxy-ins-file-setting.md)
|
||||
###[Use the Security Imports .INS file to import security info](ie11-ieak/security-imports-ins-file-setting.md)
|
||||
###[Use the URL .INS file to use an auto-configured proxy server](ie11-ieak/url-ins-file-setting.md)
|
||||
## [Using Internet Settings (.INS) files with IEAK 11](ie11-ieak/using-internet-settings-ins-files.md)
|
||||
### [Use the Branding .INS file to create custom branding and setup info](ie11-ieak/branding-ins-file-setting.md)
|
||||
### [Use the BrowserToolbars .INS file to customize the Internet Explorer toolbar](ie11-ieak/browsertoolbars-ins-file-setting.md)
|
||||
### [Use the CabSigning .INS file to review the digital signatures for your apps](ie11-ieak/cabsigning-ins-file-setting.md)
|
||||
### [Use the ConnectionSettings .INS file to review the network connections for install](ie11-ieak/connectionsettings-ins-file-setting.md)
|
||||
### [Use the CustomBranding .INS file to specify the custom branding location](ie11-ieak/custombranding-ins-file-setting.md)
|
||||
### [Use the ExtRegInf .INS file to specify installation files and mode](ie11-ieak/extreginf-ins-file-setting.md)
|
||||
### [Use the FavoritesEx .INS file for your Favorites icon and URLs](ie11-ieak/favoritesex-ins-file-setting.md)
|
||||
### [Use the HideCustom .INS file to hide GUIDs](ie11-ieak/hidecustom-ins-file-setting.md)
|
||||
### [Use the ISP_Security .INS file to add your root certificate](ie11-ieak/isp-security-ins-file-setting.md)
|
||||
### [Use the Media .INS file to specify your install media](ie11-ieak/media-ins-file-setting.md)
|
||||
### [Use the Proxy .INS file to specify a proxy server](ie11-ieak/proxy-ins-file-setting.md)
|
||||
### [Use the Security Imports .INS file to import security info](ie11-ieak/security-imports-ins-file-setting.md)
|
||||
### [Use the URL .INS file to use an auto-configured proxy server](ie11-ieak/url-ins-file-setting.md)
|
||||
|
||||
##[IExpress Wizard for Windows Server 2008 R2 with SP1](ie11-ieak/iexpress-wizard-for-win-server.md)
|
||||
###[IExpress Wizard command-line options](ie11-ieak/iexpress-command-line-options.md)
|
||||
###[Internet Explorer Setup command-line options and return codes](ie11-ieak/ie-setup-command-line-options-and-return-codes.md)
|
||||
## [IExpress Wizard for Windows Server 2008 R2 with SP1](ie11-ieak/iexpress-wizard-for-win-server.md)
|
||||
### [IExpress Wizard command-line options](ie11-ieak/iexpress-command-line-options.md)
|
||||
### [Internet Explorer Setup command-line options and return codes](ie11-ieak/ie-setup-command-line-options-and-return-codes.md)
|
||||
|
||||
|
||||
@ -1,482 +1,483 @@
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7.
|
||||
author: dansimp
|
||||
ms.prod: ie11
|
||||
ms.assetid: a145e80f-eb62-4116-82c4-3cc35fd064b6
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.author: dansimp
|
||||
title: Collect data using Enterprise Site Discovery
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
# Collect data using Enterprise Site Discovery
|
||||
|
||||
**Applies to:**
|
||||
|
||||
- Windows 10
|
||||
- Windows 8.1
|
||||
- Windows 7 with Service Pack 1 (SP1)
|
||||
|
||||
Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades.
|
||||
|
||||
>**Upgrade Readiness and Windows upgrades**<br>
|
||||
>You can use Upgrade Readiness to help manage your Windows 10 upgrades on devices running Windows 8.1 and Windows 7 (SP1). You can also use Upgrade Readiness to review several site discovery reports. For more information, see [Manage Windows upgrades with Upgrade Readiness](https://docs.microsoft.com/windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness).
|
||||
|
||||
|
||||
## Before you begin
|
||||
Before you start, you need to make sure you have the following:
|
||||
|
||||
- Latest cumulative security update (for all supported versions of Internet Explorer):
|
||||
|
||||
1. Go to the [Microsoft Security Bulletin](https://go.microsoft.com/fwlink/p/?LinkID=718223) page, and change the filter to **Windows Internet Explorer 11**.
|
||||
|
||||
|
||||
|
||||
2. Click the title of the latest cumulative security update, and then scroll down to the **Affected software** table.
|
||||
|
||||
|
||||
|
||||
3. Click the link that represents both your operating system version and Internet Explorer 11, and then follow the instructions in the **How to get this update** section.
|
||||
|
||||
- [Setup and configuration package](https://go.microsoft.com/fwlink/p/?LinkId=517719), including:
|
||||
|
||||
- Configuration-related PowerShell scripts
|
||||
|
||||
- IETelemetry.mof file
|
||||
|
||||
- Sample System Center 2012 report templates
|
||||
|
||||
You must use System Center 2012 R2 Configuration Manager or later for these samples to work.
|
||||
|
||||
Both the PowerShell script and the Managed Object Format (.MOF) file need to be copied to the same location on the client device, before you run the scripts.
|
||||
|
||||
## What data is collected?
|
||||
Data is collected on the configuration characteristics of IE and the sites it browses, as shown here.
|
||||
|
||||
|Data point |IE11 |IE10 |IE9 |IE8 |Description |
|
||||
|------------------------|-----|-----|-----|-----|------------------------------------------------------------------------|
|
||||
|URL | X | X | X | X |URL of the browsed site, including any parameters included in the URL. |
|
||||
|Domain | X | X | X | X |Top-level domain of the browsed site. |
|
||||
|ActiveX GUID | X | X | X | X |GUID of the ActiveX controls loaded by the site. |
|
||||
|Document mode | X | X | X | X |Document mode used by IE for a site, based on page characteristics. |
|
||||
|Document mode reason | X | X | | |The reason why a document mode was set by IE. |
|
||||
|Browser state reason | X | X | | |Additional information about why the browser is in its current state. Also called, browser mode. |
|
||||
|Hang count | X | X | X | X |Number of visits to the URL when the browser hung. |
|
||||
|Crash count | X | X | X | X |Number of visits to the URL when the browser crashed. |
|
||||
|Most recent navigation failure (and count) | X | X | X | X |Description of the most recent navigation failure (like, a 404 bad request or 500 internal server error) and the number of times it happened. |
|
||||
|Number of visits | X | X | X | X |Number of times a site has been visited. |
|
||||
|Zone | X | X | X | X |Zone used by IE to browse sites, based on browser settings. |
|
||||
|
||||
|
||||
>**Important**<br>By default, IE doesn’t collect this data; you have to turn this feature on if you want to use it. After you turn on this feature, data is collected on all sites visited by IE, except during InPrivate sessions. Additionally, the data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
|
||||
|
||||
### Understanding the returned reason codes
|
||||
The following tables provide more info about the Document mode reason, Browser state reason, and the Zone codes that are returned as part of your data collection.
|
||||
|
||||
#### DocMode reason
|
||||
The codes in this table can tell you what document mode was set by IE for a webpage.<br>These codes only apply to Internet Explorer 10 and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|3 |Page state is set by the `FEATURE_DOCUMENT_COMPATIBLE_MODE` feature control key.|
|
||||
|4 |Page is using an X-UA-compatible meta tag. |
|
||||
|5 |Page is using an X-UA-compatible HTTP header. |
|
||||
|6 |Page appears on an active **Compatibility View** list. |
|
||||
|7 |Page is using native XML parsing. |
|
||||
|8 |Page is using a special Quirks Mode Emulation (QME) mode that uses the modern layout engine, but the quirks behavior of Internet Explorer 5. |
|
||||
|9 |Page state is set by the browser mode and the page's DOCTYPE.|
|
||||
|
||||
#### Browser state reason
|
||||
The codes in this table can tell you why the browser is in its current state. Also called “browser mode”.<br>These codes only apply to Internet Explorer 10 and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|1 |Site is on the intranet, with the **Display intranet sites in Compatibility View** box checked. |
|
||||
|2 |Site appears on an active **Compatibility View** list, created in Group Policy. |
|
||||
|3 |Site appears on an active **Compatibility View** list, created by the user. |
|
||||
|4 |Page is using an X-UA-compatible tag. |
|
||||
|5 |Page state is set by the **Developer** toolbar. |
|
||||
|6 |Page state is set by the `FEATURE_BROWSER_EMULATION` feature control key. |
|
||||
|7 |Site appears on the Microsoft **Compatibility View (CV)** list. |
|
||||
|8 |Site appears on the **Quirks** list, created in Group Policy. |
|
||||
|11 |Site is using the default browser. |
|
||||
|
||||
#### Zone
|
||||
The codes in this table can tell you what zone is being used by IE to browse sites, based on browser settings.<br>These codes apply to Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|-1 |Internet Explorer is using an invalid zone. |
|
||||
|0 |Internet Explorer is using the Local machine zone. |
|
||||
|1 |Internet Explorer is using the Local intranet zone. |
|
||||
|2 |Internet Explorer is using the Trusted sites zone. |
|
||||
|3 |Internet Explorer is using the Internet zone. |
|
||||
|4 |Internet Explorer is using the Restricted sites zone. |
|
||||
|
||||
## Where is the data stored and how do I collect it?
|
||||
The data is stored locally, in an industry-standard WMI class, .MOF file or in an XML file, depending on your configuration. This file remains on the client computer until it’s collected. To collect the files, we recommend:
|
||||
|
||||
- **WMI file**. Use Microsoft Configuration Manager or any agent that can read the contents of a WMI class on your computer.
|
||||
|
||||
- **XML file**. Any agent that works with XML can be used.
|
||||
|
||||
## WMI Site Discovery suggestions
|
||||
We recommend that you collect your data for at most a month at a time, to capture a user’s typical workflow. We don’t recommend collecting data longer than that because the data is stored in a WMI provider and can fill up your computer’s hard drive. You may also want to collect data only for pilot users or a representative sample of people, instead of turning this feature on for everyone in your company.
|
||||
|
||||
On average, a website generates about 250bytes of data for each visit, causing only a minor impact to Internet Explorer’s performance. Over the course of a month, collecting data from 20 sites per day from 1,000 users, you’ll get about 150MB of data:<p>250 bytes (per site visit) X 20 sites/day X 30 days = (approximately) 150KB X 1000 users = (approximately) 150MB
|
||||
|
||||
>**Important**<br>The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
|
||||
|
||||
## Getting ready to use Enterprise Site Discovery
|
||||
Before you can start to collect your data, you must run the provided PowerShell script (IETelemetrySetUp.ps1) on your client devices to start generating the site discovery data and to set up a place to store this data locally. Then, you must start collecting the site discovery data from the client devices, using one of these three options:
|
||||
|
||||
- Collect your hardware inventory using the MOF Editor, while connecting to a client device.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the MOF Editor with a .MOF import file.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
|
||||
### WMI only: Running the PowerShell script to compile the .MOF file and to update security privileges
|
||||
You need to set up your computers for data collection by running the provided PowerShell script (IETelemetrySetUp.ps1) to compile the .mof file and to update security privileges for the new WMI classes.
|
||||
|
||||
>**Important**<br>You must run this script if you’re using WMI as your data output. It's not necessary if you're using XML as your data output.
|
||||
|
||||
**To set up Enterprise Site Discovery**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1 by by-passing the PowerShell execution policy, using this command: `powershell -ExecutionPolicy Bypass .\IETelemetrySetUp.ps1`. For more info, see [about Execution Policies](https://go.microsoft.com/fwlink/p/?linkid=517460).
|
||||
|
||||
### WMI only: Set up your firewall for WMI data
|
||||
If you choose to use WMI as your data output, you need to make sure that your WMI data can travel through your firewall for the domain. If you’re sure, you can skip this section; otherwise, follow these steps:
|
||||
|
||||
**To set up your firewall**
|
||||
|
||||
1. In **Control Panel**, click **System and Security**, and then click **Windows Firewall**.
|
||||
|
||||
2. In the left pane, click **Allow an app or feature through Windows Firewall** and scroll down to check the box for **Windows Management Instrumentation (WMI)**.
|
||||
|
||||
3. Restart your computer to start collecting your WMI data.
|
||||
|
||||
## Use PowerShell to finish setting up Enterprise Site Discovery
|
||||
You can determine which zones or domains are used for data collection, using PowerShell. If you don’t want to use PowerShell, you can do this using Group Policy. For more info, see [Use Group Policy to finish setting up Enterprise Site Discovery](#use-group-policy-to-finish-setting-up-enterprise-site-discovery).
|
||||
|
||||
>**Important**<br>The .ps1 file updates turn on Enterprise Site Discovery and WMI collection for all users on a device.
|
||||
|
||||
- **Domain allow list.** If you have a domain allow list, a comma-separated list of domains that should have this feature turned on, you should use this process.
|
||||
|
||||
- **Zone allow list.** If you have a zone allow list, a comma-separated list of zones that should have this feature turned on, you should use this process.
|
||||
|
||||
**To set up data collection using a domain allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`.
|
||||
|
||||
>**Important**<br>Wildcards, like \*.microsoft.com, aren’t supported.
|
||||
|
||||
**To set up data collection using a zone allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`.
|
||||
|
||||
>**Important**<br>Only Computer, Intranet, TrustedSites, Internet, and RestrictedSites are supported.
|
||||
|
||||
## Use Group Policy to finish setting up Enterprise Site Discovery
|
||||
You can use Group Policy to finish setting up Enterprise Site Discovery. If you don’t want to use Group Policy, you can do this using PowerShell. For more info, see [Use Powershell to finish setting up Enterprise Site Discovery](#use-powershell-to-finish-setting-up-enterprise-site-discovery).
|
||||
|
||||
>**Note**<br> All of the Group Policy settings can be used individually or as a group.
|
||||
|
||||
**To set up Enterprise Site Discovery using Group Policy**
|
||||
|
||||
- Open your Group Policy editor, and go to these new settings:
|
||||
|
||||
|Setting name and location |Description |Options |
|
||||
|---------------------------|-------------|---------|
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output |Writes collected data to a WMI class, which can be aggregated using a client-management solution like Configuration Manager. |<ul><li>**On.** Turns on WMI recording.</li><li>**Off.** Turns off WMI recording.</li></ul> |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output |Writes collected data to an XML file, which is stored in your specified location. |<ul><li>**XML file path.** Including this turns on XML recording.</li><li>**Blank.** Turns off XML recording.</li></ul> |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by Zone |Manages which zone can collect data. |To specify which zones can collect data, you must include a binary number that represents your selected zones, based on this order:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>0 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 1:** Include only the Local Intranet zone<p>Binary representation: *00010*, based on:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>1 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 2:** Include only the Restricted Sites, Trusted Sites, and Local Intranet zones<p>Binary representation: *10110*, based on:<p>1 – Restricted Sites zone<br>0 – Internet zone<br>1 – Trusted Sites zone<br>1 – Local Intranet zone<br>1 – Local Machine zone |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by domain |Manages which domains can collect data |To specify which domains can collect data, you must include your selected domains, one domain per line, in the provided box. It should look like:<p>microsoft.sharepoint.com<br>outlook.com<br>onedrive.com<br>timecard.contoso.com<br>LOBApp.contoso.com |
|
||||
|
||||
### Combining WMI and XML Group Policy settings
|
||||
You can use both the WMI and XML settings individually or together:
|
||||
|
||||
**To turn off Enterprise Site Discovery**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>Off</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>Blank</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**Turn on WMI recording only**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>On</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>Blank</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**To turn on XML recording only**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>Off</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>XML file path</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<strong>To turn on both WMI and XML recording</strong>
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>On</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>XML file path</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
## Use Configuration Manager to collect your data
|
||||
After you’ve collected your data, you’ll need to get the local files off of your employee’s computers. To do this, use the hardware inventory process in Configuration Manager, using one of these options:
|
||||
|
||||
- Collect your hardware inventory using the MOF Editor, while connecting to a client device.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the MOF Editor with a .MOF import file.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
|
||||
### Collect your hardware inventory using the MOF Editor while connected to a client device
|
||||
You can collect your hardware inventory using the MOF Editor, while you’re connected to your client devices.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
|
||||
|
||||
|
||||
|
||||
2. Click **Add**, click **Connect**, and connect to a computer that has completed the setup process and has already existing classes.
|
||||
|
||||
3. Change the **WMI Namespace** to `root\cimv2\IETelemetry`, and click **Connect**.
|
||||
|
||||
|
||||
|
||||
4. Select the check boxes next to the following classes, and then click **OK**:
|
||||
|
||||
- IESystemInfo
|
||||
|
||||
- IEURLInfo
|
||||
|
||||
- IECountInfo
|
||||
|
||||
5. Click **OK** to close the default windows.<br>
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
### Collect your hardware inventory using the MOF Editor with a .MOF import file
|
||||
You can collect your hardware inventory using the MOF Editor and a .MOF import file.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
|
||||
|
||||
2. Click **Import**, choose the MOF file from the downloaded package we provided, and click **Open**.
|
||||
|
||||
3. Pick the inventory items to install, and then click **Import**.
|
||||
|
||||
4. Click **OK** to close the default windows.<br>
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
### Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
You can collect your hardware inventory using the using the Systems Management Server (SMS\DEF.MOF) file. Editing this file lets you collect your data for System Center Configuration Manager 2007. If you aren’t using this version of Configuration Manager, you won’t want to use this option.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. Using a text editor like Notepad, open the SMS\DEF.MOF file, located in your `<configmanager_install_location>\inboxes\clifiles.src\hinv` directory.
|
||||
|
||||
2. Add this text to the end of the file:
|
||||
|
||||
```
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IESystemInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IESystemInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IESystemInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String SystemKey;
|
||||
[SMS_Report (TRUE) ]
|
||||
String IEVer;
|
||||
};
|
||||
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IEURLInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IEURLInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IEURLInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String URL;
|
||||
[SMS_Report (TRUE) ]
|
||||
String Domain;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 DocMode;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 DocModeReason;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 Zone;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 BrowserStateReason;
|
||||
[SMS_Report (TRUE) ]
|
||||
String ActiveXGUID[];
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 CrashCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 HangCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NavigationFailureCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NumberOfVisits;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 MostRecentNavigationFailure;
|
||||
};
|
||||
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IECountInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IECountInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IECountInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String CountKey;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 CrashCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 HangCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NavigationFailureCount;
|
||||
};
|
||||
```
|
||||
|
||||
3. Save the file and close it to the same location.
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
## View the sample reports with your collected data
|
||||
The sample reports, **SCCM Report Sample – ActiveX.rdl** and **SCCM Report Sample – Site Discovery.rdl**, work with System Center 2012, so you can review your collected data.
|
||||
|
||||
### SCCM Report Sample – ActiveX.rdl
|
||||
Gives you a list of all of the ActiveX-related sites visited by the client computer.
|
||||
|
||||
|
||||
|
||||
### SCCM Report Sample – Site Discovery.rdl
|
||||
Gives you a list of all of the sites visited by the client computer.
|
||||
|
||||
|
||||
|
||||
## View the collected XML data
|
||||
After the XML files are created, you can use your own solutions to extract and parse the data. The data will look like:
|
||||
|
||||
``` xml
|
||||
<IETelemetry>
|
||||
<IECountInfo>
|
||||
<CrashCount>[dword]</CrashCount>
|
||||
<HangCount>[dword]</HangCount>
|
||||
<NavigationFailureCount>[dword]</NavigationFailureCount>
|
||||
</IECountInfo>
|
||||
<IEURLInfo>
|
||||
<URL>[string]</URL>
|
||||
<ActiveXGUID>
|
||||
<GUID>[guid]</GUID>
|
||||
</ActiveXGUID>
|
||||
<DocModeReason>[dword]</DocModeReason>
|
||||
<DocMode>[dword]</DocMode>
|
||||
<NumberOfVisits>[dword]</NumberOfVisits>
|
||||
<BrowserStateReason>[dword]</BrowserStateReason>
|
||||
<Zone>[dword]</Zone>
|
||||
<CrashCount>[dword]</CrashCount>
|
||||
<HangCount>[dword]</HangCount>
|
||||
<NavigationFailureCount>[dword]</NavigationFailureCount>
|
||||
<Domain>[string]</Domain>
|
||||
<MostRecentNavigationFailure>[dword]</MostRecentNavigationFailure>
|
||||
</IEURLInfo>
|
||||
<IEURLInfo>…</IEURLInfo>
|
||||
<IEURLInfo>…</IEURLInfo>
|
||||
</IETelemetry>
|
||||
```
|
||||
You can import this XML data into the correct version of the Enterprise Mode Site List Manager, automatically adding the included sites to your Enterprise Mode site list.
|
||||
|
||||
**To add your XML data to your Enterprise Mode site list**
|
||||
|
||||
1. Open the Enterprise Mode Site List Manager, click **File**, and then click **Bulk add from file**.
|
||||
|
||||
|
||||
|
||||
2. Go to your XML file to add the included sites to the tool, and then click **Open**.<br>Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager](fix-validation-problems-using-the-enterprise-mode-site-list-manager.md).
|
||||
|
||||
3. Click **OK** to close the **Bulk add sites to the list** menu.
|
||||
|
||||
## Turn off data collection on your client devices
|
||||
After you’ve collected your data, you’ll need to turn Enterprise Site Discovery off.
|
||||
|
||||
**To stop collecting data, using PowerShell**
|
||||
|
||||
- On your client computer, start Windows PowerShell in elevated mode (using admin privileges) and run `IETelemetrySetUp.ps1`, using this command: `powershell -ExecutionPolicy Bypass .\IETelemetrySetUp.ps1 –IEFeatureOff`.
|
||||
|
||||
>**Note**<br>Turning off data collection only disables the Enterprise Site Discovery feature – all data already written to WMI stays on your employee’s computer.
|
||||
|
||||
|
||||
**To stop collecting data, using Group Policy**
|
||||
|
||||
1. Open your Group Policy editor, go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output`, and click **Off**.
|
||||
|
||||
2. Go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output`, and clear the file path location.
|
||||
|
||||
### Delete already stored data from client computers
|
||||
You can completely remove the data stored on your employee’s computers.
|
||||
|
||||
**To delete all existing data**
|
||||
|
||||
- On the client computer, start PowerShell in elevated mode (using admin privileges) and run these four commands:
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IEURLInfo`
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IESystemInfo`
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IECountInfo`
|
||||
|
||||
- `Remove-Item -Path 'HKCU:\Software\Microsoft\Internet Explorer\WMITelemetry'`
|
||||
|
||||
## Related topics
|
||||
* [Enterprise Mode Site List Manager (schema v.2) download](https://go.microsoft.com/fwlink/?LinkId=746562)
|
||||
* [Enterprise Mode for Internet Explorer 11 (IE11)](enterprise-mode-overview-for-ie11.md)
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7.
|
||||
author: dansimp
|
||||
ms.prod: ie11
|
||||
ms.assetid: a145e80f-eb62-4116-82c4-3cc35fd064b6
|
||||
ms.reviewer:
|
||||
audience: itpro
|
||||
manager: dansimp
|
||||
ms.author: dansimp
|
||||
title: Collect data using Enterprise Site Discovery
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
# Collect data using Enterprise Site Discovery
|
||||
|
||||
**Applies to:**
|
||||
|
||||
- Windows 10
|
||||
- Windows 8.1
|
||||
- Windows 7 with Service Pack 1 (SP1)
|
||||
|
||||
Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades.
|
||||
|
||||
>**Upgrade Readiness and Windows upgrades**<br>
|
||||
>You can use Upgrade Readiness to help manage your Windows 10 upgrades on devices running Windows 8.1 and Windows 7 (SP1). You can also use Upgrade Readiness to review several site discovery reports. For more information, see [Manage Windows upgrades with Upgrade Readiness](https://docs.microsoft.com/windows/deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness).
|
||||
|
||||
|
||||
## Before you begin
|
||||
Before you start, you need to make sure you have the following:
|
||||
|
||||
- Latest cumulative security update (for all supported versions of Internet Explorer):
|
||||
|
||||
1. Go to the [Microsoft Security Bulletin](https://go.microsoft.com/fwlink/p/?LinkID=718223) page, and change the filter to **Windows Internet Explorer 11**.
|
||||
|
||||
|
||||
|
||||
2. Click the title of the latest cumulative security update, and then scroll down to the **Affected software** table.
|
||||
|
||||
|
||||
|
||||
3. Click the link that represents both your operating system version and Internet Explorer 11, and then follow the instructions in the **How to get this update** section.
|
||||
|
||||
- [Setup and configuration package](https://go.microsoft.com/fwlink/p/?LinkId=517719), including:
|
||||
|
||||
- Configuration-related PowerShell scripts
|
||||
|
||||
- IETelemetry.mof file
|
||||
|
||||
- Sample System Center 2012 report templates
|
||||
|
||||
You must use System Center 2012 R2 Configuration Manager or later for these samples to work.
|
||||
|
||||
Both the PowerShell script and the Managed Object Format (.MOF) file need to be copied to the same location on the client device, before you run the scripts.
|
||||
|
||||
## What data is collected?
|
||||
Data is collected on the configuration characteristics of IE and the sites it browses, as shown here.
|
||||
|
||||
|Data point |IE11 |IE10 |IE9 |IE8 |Description |
|
||||
|------------------------|-----|-----|-----|-----|------------------------------------------------------------------------|
|
||||
|URL | X | X | X | X |URL of the browsed site, including any parameters included in the URL. |
|
||||
|Domain | X | X | X | X |Top-level domain of the browsed site. |
|
||||
|ActiveX GUID | X | X | X | X |GUID of the ActiveX controls loaded by the site. |
|
||||
|Document mode | X | X | X | X |Document mode used by IE for a site, based on page characteristics. |
|
||||
|Document mode reason | X | X | | |The reason why a document mode was set by IE. |
|
||||
|Browser state reason | X | X | | |Additional information about why the browser is in its current state. Also called, browser mode. |
|
||||
|Hang count | X | X | X | X |Number of visits to the URL when the browser hung. |
|
||||
|Crash count | X | X | X | X |Number of visits to the URL when the browser crashed. |
|
||||
|Most recent navigation failure (and count) | X | X | X | X |Description of the most recent navigation failure (like, a 404 bad request or 500 internal server error) and the number of times it happened. |
|
||||
|Number of visits | X | X | X | X |Number of times a site has been visited. |
|
||||
|Zone | X | X | X | X |Zone used by IE to browse sites, based on browser settings. |
|
||||
|
||||
|
||||
>**Important**<br>By default, IE doesn’t collect this data; you have to turn this feature on if you want to use it. After you turn on this feature, data is collected on all sites visited by IE, except during InPrivate sessions. Additionally, the data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
|
||||
|
||||
### Understanding the returned reason codes
|
||||
The following tables provide more info about the Document mode reason, Browser state reason, and the Zone codes that are returned as part of your data collection.
|
||||
|
||||
#### DocMode reason
|
||||
The codes in this table can tell you what document mode was set by IE for a webpage.<br>These codes only apply to Internet Explorer 10 and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|3 |Page state is set by the `FEATURE_DOCUMENT_COMPATIBLE_MODE` feature control key.|
|
||||
|4 |Page is using an X-UA-compatible meta tag. |
|
||||
|5 |Page is using an X-UA-compatible HTTP header. |
|
||||
|6 |Page appears on an active **Compatibility View** list. |
|
||||
|7 |Page is using native XML parsing. |
|
||||
|8 |Page is using a special Quirks Mode Emulation (QME) mode that uses the modern layout engine, but the quirks behavior of Internet Explorer 5. |
|
||||
|9 |Page state is set by the browser mode and the page's DOCTYPE.|
|
||||
|
||||
#### Browser state reason
|
||||
The codes in this table can tell you why the browser is in its current state. Also called “browser mode”.<br>These codes only apply to Internet Explorer 10 and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|1 |Site is on the intranet, with the **Display intranet sites in Compatibility View** box checked. |
|
||||
|2 |Site appears on an active **Compatibility View** list, created in Group Policy. |
|
||||
|3 |Site appears on an active **Compatibility View** list, created by the user. |
|
||||
|4 |Page is using an X-UA-compatible tag. |
|
||||
|5 |Page state is set by the **Developer** toolbar. |
|
||||
|6 |Page state is set by the `FEATURE_BROWSER_EMULATION` feature control key. |
|
||||
|7 |Site appears on the Microsoft **Compatibility View (CV)** list. |
|
||||
|8 |Site appears on the **Quirks** list, created in Group Policy. |
|
||||
|11 |Site is using the default browser. |
|
||||
|
||||
#### Zone
|
||||
The codes in this table can tell you what zone is being used by IE to browse sites, based on browser settings.<br>These codes apply to Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11.
|
||||
|
||||
|Code |Description |
|
||||
|-----|------------|
|
||||
|-1 |Internet Explorer is using an invalid zone. |
|
||||
|0 |Internet Explorer is using the Local machine zone. |
|
||||
|1 |Internet Explorer is using the Local intranet zone. |
|
||||
|2 |Internet Explorer is using the Trusted sites zone. |
|
||||
|3 |Internet Explorer is using the Internet zone. |
|
||||
|4 |Internet Explorer is using the Restricted sites zone. |
|
||||
|
||||
## Where is the data stored and how do I collect it?
|
||||
The data is stored locally, in an industry-standard WMI class, .MOF file or in an XML file, depending on your configuration. This file remains on the client computer until it’s collected. To collect the files, we recommend:
|
||||
|
||||
- **WMI file**. Use Microsoft Configuration Manager or any agent that can read the contents of a WMI class on your computer.
|
||||
|
||||
- **XML file**. Any agent that works with XML can be used.
|
||||
|
||||
## WMI Site Discovery suggestions
|
||||
We recommend that you collect your data for at most a month at a time, to capture a user’s typical workflow. We don’t recommend collecting data longer than that because the data is stored in a WMI provider and can fill up your computer’s hard drive. You may also want to collect data only for pilot users or a representative sample of people, instead of turning this feature on for everyone in your company.
|
||||
|
||||
On average, a website generates about 250bytes of data for each visit, causing only a minor impact to Internet Explorer’s performance. Over the course of a month, collecting data from 20 sites per day from 1,000 users, you’ll get about 150MB of data:<p>250 bytes (per site visit) X 20 sites/day X 30 days = (approximately) 150KB X 1000 users = (approximately) 150MB
|
||||
|
||||
>**Important**<br>The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
|
||||
|
||||
## Getting ready to use Enterprise Site Discovery
|
||||
Before you can start to collect your data, you must run the provided PowerShell script (IETelemetrySetUp.ps1) on your client devices to start generating the site discovery data and to set up a place to store this data locally. Then, you must start collecting the site discovery data from the client devices, using one of these three options:
|
||||
|
||||
- Collect your hardware inventory using the MOF Editor, while connecting to a client device.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the MOF Editor with a .MOF import file.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
|
||||
### WMI only: Running the PowerShell script to compile the .MOF file and to update security privileges
|
||||
You need to set up your computers for data collection by running the provided PowerShell script (IETelemetrySetUp.ps1) to compile the .mof file and to update security privileges for the new WMI classes.
|
||||
|
||||
>**Important**<br>You must run this script if you’re using WMI as your data output. It's not necessary if you're using XML as your data output.
|
||||
|
||||
**To set up Enterprise Site Discovery**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1 by by-passing the PowerShell execution policy, using this command: `powershell -ExecutionPolicy Bypass .\IETelemetrySetUp.ps1`. For more info, see [about Execution Policies](https://go.microsoft.com/fwlink/p/?linkid=517460).
|
||||
|
||||
### WMI only: Set up your firewall for WMI data
|
||||
If you choose to use WMI as your data output, you need to make sure that your WMI data can travel through your firewall for the domain. If you’re sure, you can skip this section; otherwise, follow these steps:
|
||||
|
||||
**To set up your firewall**
|
||||
|
||||
1. In **Control Panel**, click **System and Security**, and then click **Windows Firewall**.
|
||||
|
||||
2. In the left pane, click **Allow an app or feature through Windows Firewall** and scroll down to check the box for **Windows Management Instrumentation (WMI)**.
|
||||
|
||||
3. Restart your computer to start collecting your WMI data.
|
||||
|
||||
## Use PowerShell to finish setting up Enterprise Site Discovery
|
||||
You can determine which zones or domains are used for data collection, using PowerShell. If you don’t want to use PowerShell, you can do this using Group Policy. For more info, see [Use Group Policy to finish setting up Enterprise Site Discovery](#use-group-policy-to-finish-setting-up-enterprise-site-discovery).
|
||||
|
||||
>**Important**<br>The .ps1 file updates turn on Enterprise Site Discovery and WMI collection for all users on a device.
|
||||
|
||||
- **Domain allow list.** If you have a domain allow list, a comma-separated list of domains that should have this feature turned on, you should use this process.
|
||||
|
||||
- **Zone allow list.** If you have a zone allow list, a comma-separated list of zones that should have this feature turned on, you should use this process.
|
||||
|
||||
**To set up data collection using a domain allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`.
|
||||
|
||||
>**Important**<br>Wildcards, like \*.microsoft.com, aren’t supported.
|
||||
|
||||
**To set up data collection using a zone allow list**
|
||||
|
||||
- Start PowerShell in elevated mode (using admin privileges) and run IETelemetrySetUp.ps1, using this command: `.\IETelemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`.
|
||||
|
||||
>**Important**<br>Only Computer, Intranet, TrustedSites, Internet, and RestrictedSites are supported.
|
||||
|
||||
## Use Group Policy to finish setting up Enterprise Site Discovery
|
||||
You can use Group Policy to finish setting up Enterprise Site Discovery. If you don’t want to use Group Policy, you can do this using PowerShell. For more info, see [Use Powershell to finish setting up Enterprise Site Discovery](#use-powershell-to-finish-setting-up-enterprise-site-discovery).
|
||||
|
||||
>**Note**<br> All of the Group Policy settings can be used individually or as a group.
|
||||
|
||||
**To set up Enterprise Site Discovery using Group Policy**
|
||||
|
||||
- Open your Group Policy editor, and go to these new settings:
|
||||
|
||||
|Setting name and location |Description |Options |
|
||||
|---------------------------|-------------|---------|
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output |Writes collected data to a WMI class, which can be aggregated using a client-management solution like Configuration Manager. |<ul><li>**On.** Turns on WMI recording.</li><li>**Off.** Turns off WMI recording.</li></ul> |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output |Writes collected data to an XML file, which is stored in your specified location. |<ul><li>**XML file path.** Including this turns on XML recording.</li><li>**Blank.** Turns off XML recording.</li></ul> |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by Zone |Manages which zone can collect data. |To specify which zones can collect data, you must include a binary number that represents your selected zones, based on this order:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>0 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 1:** Include only the Local Intranet zone<p>Binary representation: *00010*, based on:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>1 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 2:** Include only the Restricted Sites, Trusted Sites, and Local Intranet zones<p>Binary representation: *10110*, based on:<p>1 – Restricted Sites zone<br>0 – Internet zone<br>1 – Trusted Sites zone<br>1 – Local Intranet zone<br>1 – Local Machine zone |
|
||||
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by domain |Manages which domains can collect data |To specify which domains can collect data, you must include your selected domains, one domain per line, in the provided box. It should look like:<p>microsoft.sharepoint.com<br>outlook.com<br>onedrive.com<br>timecard.contoso.com<br>LOBApp.contoso.com |
|
||||
|
||||
### Combining WMI and XML Group Policy settings
|
||||
You can use both the WMI and XML settings individually or together:
|
||||
|
||||
**To turn off Enterprise Site Discovery**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>Off</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>Blank</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**Turn on WMI recording only**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>On</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>Blank</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**To turn on XML recording only**
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>Off</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>XML file path</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<strong>To turn on both WMI and XML recording</strong>
|
||||
<table>
|
||||
<tr>
|
||||
<th>Setting name</th>
|
||||
<th>Option</th>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery WMI output</td>
|
||||
<td>On</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Turn on Site Discovery XML output</td>
|
||||
<td>XML file path</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
## Use Configuration Manager to collect your data
|
||||
After you’ve collected your data, you’ll need to get the local files off of your employee’s computers. To do this, use the hardware inventory process in Configuration Manager, using one of these options:
|
||||
|
||||
- Collect your hardware inventory using the MOF Editor, while connecting to a client device.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the MOF Editor with a .MOF import file.<p>
|
||||
-OR-
|
||||
- Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
|
||||
### Collect your hardware inventory using the MOF Editor while connected to a client device
|
||||
You can collect your hardware inventory using the MOF Editor, while you’re connected to your client devices.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
|
||||
|
||||
|
||||
|
||||
2. Click **Add**, click **Connect**, and connect to a computer that has completed the setup process and has already existing classes.
|
||||
|
||||
3. Change the **WMI Namespace** to `root\cimv2\IETelemetry`, and click **Connect**.
|
||||
|
||||
|
||||
|
||||
4. Select the check boxes next to the following classes, and then click **OK**:
|
||||
|
||||
- IESystemInfo
|
||||
|
||||
- IEURLInfo
|
||||
|
||||
- IECountInfo
|
||||
|
||||
5. Click **OK** to close the default windows.<br>
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
### Collect your hardware inventory using the MOF Editor with a .MOF import file
|
||||
You can collect your hardware inventory using the MOF Editor and a .MOF import file.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
|
||||
|
||||
2. Click **Import**, choose the MOF file from the downloaded package we provided, and click **Open**.
|
||||
|
||||
3. Pick the inventory items to install, and then click **Import**.
|
||||
|
||||
4. Click **OK** to close the default windows.<br>
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
### Collect your hardware inventory using the SMS\DEF.MOF file (System Center Configuration Manager 2007 only)
|
||||
You can collect your hardware inventory using the using the Systems Management Server (SMS\DEF.MOF) file. Editing this file lets you collect your data for System Center Configuration Manager 2007. If you aren’t using this version of Configuration Manager, you won’t want to use this option.
|
||||
|
||||
**To collect your inventory**
|
||||
|
||||
1. Using a text editor like Notepad, open the SMS\DEF.MOF file, located in your `<configmanager_install_location>\inboxes\clifiles.src\hinv` directory.
|
||||
|
||||
2. Add this text to the end of the file:
|
||||
|
||||
```
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IESystemInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IESystemInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IESystemInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String SystemKey;
|
||||
[SMS_Report (TRUE) ]
|
||||
String IEVer;
|
||||
};
|
||||
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IEURLInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IEURLInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IEURLInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String URL;
|
||||
[SMS_Report (TRUE) ]
|
||||
String Domain;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 DocMode;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 DocModeReason;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 Zone;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 BrowserStateReason;
|
||||
[SMS_Report (TRUE) ]
|
||||
String ActiveXGUID[];
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 CrashCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 HangCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NavigationFailureCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NumberOfVisits;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 MostRecentNavigationFailure;
|
||||
};
|
||||
|
||||
[SMS_Report (TRUE),
|
||||
SMS_Group_Name ("IECountInfo"),
|
||||
SMS_Class_ID ("MICROSOFT|IECountInfo|1.0"),
|
||||
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
|
||||
Class IECountInfo: SMS_Class_Template
|
||||
{
|
||||
[SMS_Report (TRUE), Key ]
|
||||
String CountKey;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 CrashCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 HangCount;
|
||||
[SMS_Report (TRUE) ]
|
||||
UInt32 NavigationFailureCount;
|
||||
};
|
||||
```
|
||||
|
||||
3. Save the file and close it to the same location.
|
||||
Your environment is now ready to collect your hardware inventory and review the sample reports.
|
||||
|
||||
## View the sample reports with your collected data
|
||||
The sample reports, **SCCM Report Sample – ActiveX.rdl** and **SCCM Report Sample – Site Discovery.rdl**, work with System Center 2012, so you can review your collected data.
|
||||
|
||||
### SCCM Report Sample – ActiveX.rdl
|
||||
Gives you a list of all of the ActiveX-related sites visited by the client computer.
|
||||
|
||||
|
||||
|
||||
### SCCM Report Sample – Site Discovery.rdl
|
||||
Gives you a list of all of the sites visited by the client computer.
|
||||
|
||||
|
||||
|
||||
## View the collected XML data
|
||||
After the XML files are created, you can use your own solutions to extract and parse the data. The data will look like:
|
||||
|
||||
``` xml
|
||||
<IETelemetry>
|
||||
<IECountInfo>
|
||||
<CrashCount>[dword]</CrashCount>
|
||||
<HangCount>[dword]</HangCount>
|
||||
<NavigationFailureCount>[dword]</NavigationFailureCount>
|
||||
</IECountInfo>
|
||||
<IEURLInfo>
|
||||
<URL>[string]</URL>
|
||||
<ActiveXGUID>
|
||||
<GUID>[guid]</GUID>
|
||||
</ActiveXGUID>
|
||||
<DocModeReason>[dword]</DocModeReason>
|
||||
<DocMode>[dword]</DocMode>
|
||||
<NumberOfVisits>[dword]</NumberOfVisits>
|
||||
<BrowserStateReason>[dword]</BrowserStateReason>
|
||||
<Zone>[dword]</Zone>
|
||||
<CrashCount>[dword]</CrashCount>
|
||||
<HangCount>[dword]</HangCount>
|
||||
<NavigationFailureCount>[dword]</NavigationFailureCount>
|
||||
<Domain>[string]</Domain>
|
||||
<MostRecentNavigationFailure>[dword]</MostRecentNavigationFailure>
|
||||
</IEURLInfo>
|
||||
<IEURLInfo>…</IEURLInfo>
|
||||
<IEURLInfo>…</IEURLInfo>
|
||||
</IETelemetry>
|
||||
```
|
||||
You can import this XML data into the correct version of the Enterprise Mode Site List Manager, automatically adding the included sites to your Enterprise Mode site list.
|
||||
|
||||
**To add your XML data to your Enterprise Mode site list**
|
||||
|
||||
1. Open the Enterprise Mode Site List Manager, click **File**, and then click **Bulk add from file**.
|
||||
|
||||
|
||||
|
||||
2. Go to your XML file to add the included sites to the tool, and then click **Open**.<br>Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager](fix-validation-problems-using-the-enterprise-mode-site-list-manager.md).
|
||||
|
||||
3. Click **OK** to close the **Bulk add sites to the list** menu.
|
||||
|
||||
## Turn off data collection on your client devices
|
||||
After you’ve collected your data, you’ll need to turn Enterprise Site Discovery off.
|
||||
|
||||
**To stop collecting data, using PowerShell**
|
||||
|
||||
- On your client computer, start Windows PowerShell in elevated mode (using admin privileges) and run `IETelemetrySetUp.ps1`, using this command: `powershell -ExecutionPolicy Bypass .\IETelemetrySetUp.ps1 –IEFeatureOff`.
|
||||
|
||||
>**Note**<br>Turning off data collection only disables the Enterprise Site Discovery feature – all data already written to WMI stays on your employee’s computer.
|
||||
|
||||
|
||||
**To stop collecting data, using Group Policy**
|
||||
|
||||
1. Open your Group Policy editor, go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output`, and click **Off**.
|
||||
|
||||
2. Go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output`, and clear the file path location.
|
||||
|
||||
### Delete already stored data from client computers
|
||||
You can completely remove the data stored on your employee’s computers.
|
||||
|
||||
**To delete all existing data**
|
||||
|
||||
- On the client computer, start PowerShell in elevated mode (using admin privileges) and run these four commands:
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IEURLInfo`
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IESystemInfo`
|
||||
|
||||
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IECountInfo`
|
||||
|
||||
- `Remove-Item -Path 'HKCU:\Software\Microsoft\Internet Explorer\WMITelemetry'`
|
||||
|
||||
## Related topics
|
||||
* [Enterprise Mode Site List Manager (schema v.2) download](https://go.microsoft.com/fwlink/?LinkId=746562)
|
||||
* [Enterprise Mode for Internet Explorer 11 (IE11)](enterprise-mode-overview-for-ie11.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -1,301 +1,302 @@
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
ms.pagetype: appcompat
|
||||
description: Use the Enterprise Mode Site List Manager to create and update your Enterprise Mode site list for devices running Windows 10.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: 909ca359-5654-4df9-b9fb-921232fc05f5
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Enterprise Mode schema v.2 guidance (Internet Explorer 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 12/04/2017
|
||||
---
|
||||
|
||||
|
||||
# Enterprise Mode schema v.2 guidance
|
||||
|
||||
**Applies to:**
|
||||
|
||||
- Windows 10
|
||||
- Windows 8.1
|
||||
- Windows 7
|
||||
|
||||
Use the Enterprise Mode Site List Manager to create and update your site list for devices running Windows 7, Windows 8.1, and Windows 10, using the version 2.0 (v.2) of the Enterprise Mode schema. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app.
|
||||
|
||||
**Important**<br>
|
||||
If you're running Windows 7 or Windows 8.1 and you've been using the version 1.0 (v.1) of the schema, you can continue to do so, but you won't get the benefits that come with the updated schema. For info about the v.1 schema, see [Enterprise Mode schema v.1 guidance](enterprise-mode-schema-version-1-guidance.md).
|
||||
|
||||
## Enterprise Mode schema v.2 updates
|
||||
Because of the schema changes, you can't combine the old version (v.1) with the new version (v.2) of the schema. If you look at your XML file, you can tell which version you're using by:
|
||||
|
||||
- <rules>. If your schema root node includes this key, you're using the v.1 version of the schema.
|
||||
|
||||
- <site-list>. If your schema root node includes this key, you're using the v.2 version of the schema.
|
||||
|
||||
You can continue to use the v.1 version of the schema on Windows 10, but you won't have the benefits of the new v.2 version schema updates and new features. Additionally, saving the v.1 version of the schema in the new Enterprise Mode Site List Manager (schema v.2) automatically updates the file to use the v.2 version of the schema.
|
||||
|
||||
### Enterprise Mode v.2 schema example
|
||||
The following is an example of the v.2 version of the Enterprise Mode schema.
|
||||
|
||||
**Important**<br>
|
||||
Make sure that you don't specify a protocol when adding your URLs. Using a URL like `<url="contoso.com">`, automatically applies to both https://contoso.com and https://contoso.com.
|
||||
|
||||
``` xml
|
||||
<site-list version="205">
|
||||
<!--- File creation header --->
|
||||
<created-by>
|
||||
<tool>EnterpriseSitelistManager</tool>
|
||||
<version>10240</version>
|
||||
<date-created>20150728.135021</date-created>
|
||||
</created-by>
|
||||
<!--- Begin Site List --->
|
||||
<site url="www.cpandl.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>MSEdge</open-in>
|
||||
</site>
|
||||
<site url="www.woodgrovebank.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="adatum.com">
|
||||
<compat-mode>IE7Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="contoso.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="relecloud.com"/>
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>none</open-in>
|
||||
<site url="relecloud.com/about">
|
||||
<compat-mode>IE8Enterprise"</compat-mode>
|
||||
</site>
|
||||
<site url="contoso.com/travel">
|
||||
<compat-mode>IE7</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="fabrikam.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="fabrikam.com/products">
|
||||
<compat-mode>IE7</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
</site-list>
|
||||
```
|
||||
|
||||
### Updated schema elements
|
||||
This table includes the elements used by the v.2 version of the Enterprise Mode schema.
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Element</th>
|
||||
<th>Description</th>
|
||||
<th>Supported browser</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><site-list></td>
|
||||
<td>A new root node with this text is using the updated v.2 version of the schema. It replaces <rules>.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site-list version="205">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
</site-list></pre></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><site></td>
|
||||
<td>A unique entry added for each site you want to put on the Enterprise Mode site list. The first <site> element will overrule any additional <site> elements that use the same value for the <url> element.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>none</open-in>
|
||||
</site></pre>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv4 ranges:<pre class="syntax"><site url="10.122.34.99:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv6 ranges:<pre class="syntax"><site url="[10.122.34.99]:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
You can also use the self-closing version, <url="contoso.com" />, which also sets:
|
||||
<ul>
|
||||
<li><compat-mode>default</compat-mode></li>
|
||||
<li><open-in>none</open-in></li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><compat-mode></td>
|
||||
<td>A child element that controls what compatibility setting is used for specific sites or domains. This element is only supported in IE11.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
</site></pre>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv4 ranges:<pre class="syntax"><site url="10.122.34.99:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv6 ranges:<pre class="syntax"><site url="[10.122.34.99]:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
Where:
|
||||
<ul>
|
||||
<li><b>IE8Enterprise.</b> Loads the site in IE8 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE8 Enterprise Mode.</li><p>
|
||||
<li><b>IE7Enterprise.</b> Loads the site in IE7 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE7 Enterprise Mode.<p><b>Important</b><br>This tag replaces the combination of the <code>"forceCompatView"="true"</code> attribute and the list of sites specified in the EmIE section of the v.1 version of the schema.</li><p>
|
||||
<li><b>IE<i>[x]</i>.</b> Where <i>[x]</i> is the document mode number into which the site loads.</li><p>
|
||||
<li><b>Default or not specified.</b> Loads the site using the default compatibility mode for the page. In this situation, X-UA-compatible meta tags or HTTP headers are honored.</li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><open-in></td>
|
||||
<td>A child element that controls what browser is used for sites. This element supports the <b>Open in IE11</b> or <b>Open in Microsoft Edge</b> experiences, for devices running Windows 10.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<open-in>none</open-in>
|
||||
</site></pre><p>
|
||||
Where:
|
||||
<ul>
|
||||
<li><b>IE11.</b> Opens the site in IE11, regardless of which browser is opened by the employee.</li><p>
|
||||
<li><b>MSEdge.</b> Opens the site in Microsoft Edge, regardless of which browser is opened by the employee.</li><p>
|
||||
<li><b>None or not specified.</b> Opens in whatever browser the employee chooses.</li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
### Updated schema attributes
|
||||
The <url> attribute, as part of the <site> element in the v.2 version of the schema, replaces the <domain> element from the v.1 version of the schema.
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Attribute</th>
|
||||
<th>Description</th>
|
||||
<th>Supported browser</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>allow-redirect</td>
|
||||
<td>A boolean attribute of the <open-in> element that controls the behavior for redirected sites. Setting this attribute to "true" indicates that the site will open in IE11 or Microsoft Edge even if the site is navigated to as part of a HTTP or meta refresh redirection chain. Omitting the attribute is equivalent to "false" (sites in redirect chain will not open in another browser).
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com/travel">
|
||||
<open-in allow-redirect="true">IE11</open-in>
|
||||
</site></pre>
|
||||
In this example, if <a href="https://contoso.com/travel" data-raw-source="https://contoso.com/travel">https://contoso.com/travel</a> is encountered in a redirect chain in Microsoft Edge, it will be opened in Internet Explorer.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>version</td>
|
||||
<td>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the <site-list> element.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>url</td>
|
||||
<td>Specifies the URL (and port number using standard port conventions) to which the child elements apply. The URL can be a domain, sub-domain, or any path URL.
|
||||
<br><b>Note</b><br>
|
||||
Make sure that you don't specify a protocol. Using <site url="contoso.com"> applies to both <a href="https://contoso.com" data-raw-source="https://contoso.com">https://contoso.com</a> and <a href="https://contoso.com" data-raw-source="https://contoso.com">https://contoso.com</a>.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site></pre>
|
||||
In this example, going to <a href="https://contoso.com:8080" data-raw-source="https://contoso.com:8080">https://contoso.com:8080</a> using Microsoft Edge, causes the site to open in IE11 and load in IE8 Enterprise Mode.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
### Deprecated attributes
|
||||
These v.1 version schema attributes have been deprecated in the v.2 version of the schema:
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Deprecated attribute</th>
|
||||
<th>New attribute</th>
|
||||
<th>Replacement example</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><forceCompatView></td>
|
||||
<td><compat-mode></td>
|
||||
<td>Replace <forceCompatView="true"> with <compat-mode>IE7Enterprise</compat-mode></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><docMode></td>
|
||||
<td><compat-mode></td>
|
||||
<td>Replace <docMode="IE5"> with <compat-mode>IE5</compat-mode></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><doNotTransition></td>
|
||||
<td><open-in></td>
|
||||
<td>Replace <doNotTransition="true"> with <open-in>none</open-in></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><domain> and <path></td>
|
||||
<td><site></td>
|
||||
<td>Replace:
|
||||
<pre class="syntax">
|
||||
<emie>
|
||||
<domain exclude="false">contoso.com</domain>
|
||||
</emie></pre>
|
||||
With:
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com"/>
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
</site></pre>
|
||||
<b>-AND-</b><p>
|
||||
Replace:
|
||||
<pre class="syntax">
|
||||
<emie>
|
||||
<domain exclude="true">contoso.com
|
||||
<path exclude="false" forceCompatView="true">/about</path>
|
||||
</domain>
|
||||
</emie></pre>
|
||||
With:
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com/about">
|
||||
<compat-mode>IE7Enterprise</compat-mode>
|
||||
</site></pre></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
While the old, replaced attributes aren't supported in the v.2 version of the schema, they'll continue to work in the v.1 version of the schema. If, however, you're using the v.2 version of the schema and these attributes are still there, the v.2 version schema takes precedence. We don’t recommend combining the two schemas, and instead recommend that you move to the v.2 version of the schema to take advantage of the new features.
|
||||
|
||||
**Important**<br>
|
||||
Saving your v.1 version of the file using the new Enterprise Mode Site List Manager (schema v.2) automatically updates the XML to the new v.2 version of the schema.
|
||||
|
||||
### What not to include in your schema
|
||||
We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways:
|
||||
|
||||
- Don’t use protocols. For example, https://, https://, or custom protocols. They break parsing.
|
||||
- Don’t use wildcards.
|
||||
- Don’t use query strings, ampersands break parsing.
|
||||
|
||||
## Related topics
|
||||
- [Use the Enterprise Mode Site List Manager](use-the-enterprise-mode-site-list-manager.md)
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
ms.pagetype: appcompat
|
||||
description: Use the Enterprise Mode Site List Manager to create and update your Enterprise Mode site list for devices running Windows 10.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: 909ca359-5654-4df9-b9fb-921232fc05f5
|
||||
ms.reviewer:
|
||||
audience: itpro
|
||||
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Enterprise Mode schema v.2 guidance (Internet Explorer 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 12/04/2017
|
||||
---
|
||||
|
||||
|
||||
# Enterprise Mode schema v.2 guidance
|
||||
|
||||
**Applies to:**
|
||||
|
||||
- Windows 10
|
||||
- Windows 8.1
|
||||
- Windows 7
|
||||
|
||||
Use the Enterprise Mode Site List Manager to create and update your site list for devices running Windows 7, Windows 8.1, and Windows 10, using the version 2.0 (v.2) of the Enterprise Mode schema. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app.
|
||||
|
||||
**Important**<br>
|
||||
If you're running Windows 7 or Windows 8.1 and you've been using the version 1.0 (v.1) of the schema, you can continue to do so, but you won't get the benefits that come with the updated schema. For info about the v.1 schema, see [Enterprise Mode schema v.1 guidance](enterprise-mode-schema-version-1-guidance.md).
|
||||
|
||||
## Enterprise Mode schema v.2 updates
|
||||
Because of the schema changes, you can't combine the old version (v.1) with the new version (v.2) of the schema. If you look at your XML file, you can tell which version you're using by:
|
||||
|
||||
- <rules>. If your schema root node includes this key, you're using the v.1 version of the schema.
|
||||
|
||||
- <site-list>. If your schema root node includes this key, you're using the v.2 version of the schema.
|
||||
|
||||
You can continue to use the v.1 version of the schema on Windows 10, but you won't have the benefits of the new v.2 version schema updates and new features. Additionally, saving the v.1 version of the schema in the new Enterprise Mode Site List Manager (schema v.2) automatically updates the file to use the v.2 version of the schema.
|
||||
|
||||
### Enterprise Mode v.2 schema example
|
||||
The following is an example of the v.2 version of the Enterprise Mode schema.
|
||||
|
||||
**Important**<br>
|
||||
Make sure that you don't specify a protocol when adding your URLs. Using a URL like `<url="contoso.com">`, automatically applies to both https://contoso.com and https://contoso.com.
|
||||
|
||||
``` xml
|
||||
<site-list version="205">
|
||||
<!--- File creation header --->
|
||||
<created-by>
|
||||
<tool>EnterpriseSitelistManager</tool>
|
||||
<version>10240</version>
|
||||
<date-created>20150728.135021</date-created>
|
||||
</created-by>
|
||||
<!--- Begin Site List --->
|
||||
<site url="www.cpandl.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>MSEdge</open-in>
|
||||
</site>
|
||||
<site url="www.woodgrovebank.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="adatum.com">
|
||||
<compat-mode>IE7Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="contoso.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="relecloud.com"/>
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>none</open-in>
|
||||
<site url="relecloud.com/about">
|
||||
<compat-mode>IE8Enterprise"</compat-mode>
|
||||
</site>
|
||||
<site url="contoso.com/travel">
|
||||
<compat-mode>IE7</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="fabrikam.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
<site url="fabrikam.com/products">
|
||||
<compat-mode>IE7</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
</site-list>
|
||||
```
|
||||
|
||||
### Updated schema elements
|
||||
This table includes the elements used by the v.2 version of the Enterprise Mode schema.
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Element</th>
|
||||
<th>Description</th>
|
||||
<th>Supported browser</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><site-list></td>
|
||||
<td>A new root node with this text is using the updated v.2 version of the schema. It replaces <rules>.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site-list version="205">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site>
|
||||
</site-list></pre></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><site></td>
|
||||
<td>A unique entry added for each site you want to put on the Enterprise Mode site list. The first <site> element will overrule any additional <site> elements that use the same value for the <url> element.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>default</compat-mode>
|
||||
<open-in>none</open-in>
|
||||
</site></pre>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv4 ranges:<pre class="syntax"><site url="10.122.34.99:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv6 ranges:<pre class="syntax"><site url="[10.122.34.99]:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
You can also use the self-closing version, <url="contoso.com" />, which also sets:
|
||||
<ul>
|
||||
<li><compat-mode>default</compat-mode></li>
|
||||
<li><open-in>none</open-in></li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><compat-mode></td>
|
||||
<td>A child element that controls what compatibility setting is used for specific sites or domains. This element is only supported in IE11.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
</site></pre>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv4 ranges:<pre class="syntax"><site url="10.122.34.99:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
<strong>-or-</strong>
|
||||
<p>For IPv6 ranges:<pre class="syntax"><site url="[10.122.34.99]:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<site></pre><p>
|
||||
Where:
|
||||
<ul>
|
||||
<li><b>IE8Enterprise.</b> Loads the site in IE8 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE8 Enterprise Mode.</li><p>
|
||||
<li><b>IE7Enterprise.</b> Loads the site in IE7 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE7 Enterprise Mode.<p><b>Important</b><br>This tag replaces the combination of the <code>"forceCompatView"="true"</code> attribute and the list of sites specified in the EmIE section of the v.1 version of the schema.</li><p>
|
||||
<li><b>IE<i>[x]</i>.</b> Where <i>[x]</i> is the document mode number into which the site loads.</li><p>
|
||||
<li><b>Default or not specified.</b> Loads the site using the default compatibility mode for the page. In this situation, X-UA-compatible meta tags or HTTP headers are honored.</li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><open-in></td>
|
||||
<td>A child element that controls what browser is used for sites. This element supports the <b>Open in IE11</b> or <b>Open in Microsoft Edge</b> experiences, for devices running Windows 10.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com">
|
||||
<open-in>none</open-in>
|
||||
</site></pre><p>
|
||||
Where:
|
||||
<ul>
|
||||
<li><b>IE11.</b> Opens the site in IE11, regardless of which browser is opened by the employee.</li><p>
|
||||
<li><b>MSEdge.</b> Opens the site in Microsoft Edge, regardless of which browser is opened by the employee.</li><p>
|
||||
<li><b>None or not specified.</b> Opens in whatever browser the employee chooses.</li>
|
||||
</ul></td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
### Updated schema attributes
|
||||
The <url> attribute, as part of the <site> element in the v.2 version of the schema, replaces the <domain> element from the v.1 version of the schema.
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Attribute</th>
|
||||
<th>Description</th>
|
||||
<th>Supported browser</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>allow-redirect</td>
|
||||
<td>A boolean attribute of the <open-in> element that controls the behavior for redirected sites. Setting this attribute to "true" indicates that the site will open in IE11 or Microsoft Edge even if the site is navigated to as part of a HTTP or meta refresh redirection chain. Omitting the attribute is equivalent to "false" (sites in redirect chain will not open in another browser).
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com/travel">
|
||||
<open-in allow-redirect="true">IE11</open-in>
|
||||
</site></pre>
|
||||
In this example, if <a href="https://contoso.com/travel" data-raw-source="https://contoso.com/travel">https://contoso.com/travel</a> is encountered in a redirect chain in Microsoft Edge, it will be opened in Internet Explorer.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>version</td>
|
||||
<td>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the <site-list> element.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>url</td>
|
||||
<td>Specifies the URL (and port number using standard port conventions) to which the child elements apply. The URL can be a domain, sub-domain, or any path URL.
|
||||
<br><b>Note</b><br>
|
||||
Make sure that you don't specify a protocol. Using <site url="contoso.com"> applies to both <a href="https://contoso.com" data-raw-source="https://contoso.com">https://contoso.com</a> and <a href="https://contoso.com" data-raw-source="https://contoso.com">https://contoso.com</a>.
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com:8080">
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
<open-in>IE11</open-in>
|
||||
</site></pre>
|
||||
In this example, going to <a href="https://contoso.com:8080" data-raw-source="https://contoso.com:8080">https://contoso.com:8080</a> using Microsoft Edge, causes the site to open in IE11 and load in IE8 Enterprise Mode.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
### Deprecated attributes
|
||||
These v.1 version schema attributes have been deprecated in the v.2 version of the schema:
|
||||
|
||||
<table>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th>Deprecated attribute</th>
|
||||
<th>New attribute</th>
|
||||
<th>Replacement example</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><forceCompatView></td>
|
||||
<td><compat-mode></td>
|
||||
<td>Replace <forceCompatView="true"> with <compat-mode>IE7Enterprise</compat-mode></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><docMode></td>
|
||||
<td><compat-mode></td>
|
||||
<td>Replace <docMode="IE5"> with <compat-mode>IE5</compat-mode></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><doNotTransition></td>
|
||||
<td><open-in></td>
|
||||
<td>Replace <doNotTransition="true"> with <open-in>none</open-in></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><domain> and <path></td>
|
||||
<td><site></td>
|
||||
<td>Replace:
|
||||
<pre class="syntax">
|
||||
<emie>
|
||||
<domain exclude="false">contoso.com</domain>
|
||||
</emie></pre>
|
||||
With:
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com"/>
|
||||
<compat-mode>IE8Enterprise</compat-mode>
|
||||
</site></pre>
|
||||
<b>-AND-</b><p>
|
||||
Replace:
|
||||
<pre class="syntax">
|
||||
<emie>
|
||||
<domain exclude="true">contoso.com
|
||||
<path exclude="false" forceCompatView="true">/about</path>
|
||||
</domain>
|
||||
</emie></pre>
|
||||
With:
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com/about">
|
||||
<compat-mode>IE7Enterprise</compat-mode>
|
||||
</site></pre></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
While the old, replaced attributes aren't supported in the v.2 version of the schema, they'll continue to work in the v.1 version of the schema. If, however, you're using the v.2 version of the schema and these attributes are still there, the v.2 version schema takes precedence. We don’t recommend combining the two schemas, and instead recommend that you move to the v.2 version of the schema to take advantage of the new features.
|
||||
|
||||
**Important**<br>
|
||||
Saving your v.1 version of the file using the new Enterprise Mode Site List Manager (schema v.2) automatically updates the XML to the new v.2 version of the schema.
|
||||
|
||||
### What not to include in your schema
|
||||
We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways:
|
||||
|
||||
- Don’t use protocols. For example, https://, https://, or custom protocols. They break parsing.
|
||||
- Don’t use wildcards.
|
||||
- Don’t use query strings, ampersands break parsing.
|
||||
|
||||
## Related topics
|
||||
- [Use the Enterprise Mode Site List Manager](use-the-enterprise-mode-site-list-manager.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -1,54 +1,54 @@
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to add and deploy the Internet Explorer 11 update using Microsoft Intune.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: b2dfc08c-78af-4c22-8867-7be3b92b1616
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Install Internet Explorer 11 (IE11) using Microsoft Intune (Internet Explorer 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Install Internet Explorer 11 (IE11) using Microsoft Intune
|
||||
Internet Explorer 11 is available as an update in Microsoft Intune. Microsoft Intune uses Windows cloud services to help you manage updates, monitor and protect your computers, provide remote assistance, track hardware and software inventory, and set security policies. For more information, see the [Documentation Library for Microsoft Intune](https://go.microsoft.com/fwlink/p/?LinkId=301805).
|
||||
|
||||
## Adding and deploying the IE11 package
|
||||
You can add and then deploy the IE11 package to any computer that's managed by Microsoft Intune.
|
||||
|
||||
**To add the IE11 package**
|
||||
|
||||
1. From the Microsoft Intune administrator console, start the Microsoft Intune Software Publisher.
|
||||
|
||||
2. Add your IE11 package as either an external link or as a Windows installer package (.exe or .msi).
|
||||
|
||||
For more info about how to decide which one to use, and how to use it, see [Deploy and configure apps](https://go.microsoft.com/fwlink/p/?LinkId=301806).
|
||||
|
||||
**To automatically deploy and install the IE11 package**
|
||||
|
||||
1. From the Microsoft Intune administrator console, start and run through the Deploy Software wizard.
|
||||
|
||||
2. Deploy the package to any of your employee computers that are managed by Microsoft Intune.
|
||||
|
||||
3. After the package is on your employee's computers, the installation process runs, based on what you set up in your wizard.
|
||||
|
||||
For more info about this, see [Deploy and configure apps](https://go.microsoft.com/fwlink/p/?LinkId=301806).
|
||||
|
||||
**To let your employees install the IE11 package**
|
||||
|
||||
1. Install the package on your company's Microsoft Intune site, marking it as **Available** for the appropriate groups.
|
||||
|
||||
2. Any employee in the assigned group can now install the package.
|
||||
|
||||
For more info about this, see [Update apps using Microsoft Intune](https://go.microsoft.com/fwlink/p/?LinkId=301808)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to add and deploy the Internet Explorer 11 update using Microsoft Intune.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: b2dfc08c-78af-4c22-8867-7be3b92b1616
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Install Internet Explorer 11 (IE11) using Microsoft Intune (Internet Explorer 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Install Internet Explorer 11 (IE11) using Microsoft Intune
|
||||
Internet Explorer 11 is available as an update in Microsoft Intune. Microsoft Intune uses Windows cloud services to help you manage updates, monitor and protect your computers, provide remote assistance, track hardware and software inventory, and set security policies. For more information, see the [Documentation Library for Microsoft Intune](https://go.microsoft.com/fwlink/p/?LinkId=301805).
|
||||
|
||||
## Adding and deploying the IE11 package
|
||||
You can add and then deploy the IE11 package to any computer that's managed by Microsoft Intune.
|
||||
|
||||
**To add the IE11 package**
|
||||
|
||||
1. From the Microsoft Intune administrator console, start the Microsoft Intune Software Publisher.
|
||||
|
||||
2. Add your IE11 package as either an external link or as a Windows installer package (.exe or .msi).
|
||||
|
||||
For more info about how to decide which one to use, and how to use it, see [Deploy and configure apps](https://go.microsoft.com/fwlink/p/?LinkId=301806).
|
||||
|
||||
**To automatically deploy and install the IE11 package**
|
||||
|
||||
1. From the Microsoft Intune administrator console, start and run through the Deploy Software wizard.
|
||||
|
||||
2. Deploy the package to any of your employee computers that are managed by Microsoft Intune.
|
||||
|
||||
3. After the package is on your employee's computers, the installation process runs, based on what you set up in your wizard.
|
||||
|
||||
For more info about this, see [Deploy and configure apps](https://go.microsoft.com/fwlink/p/?LinkId=301806).
|
||||
|
||||
**To let your employees install the IE11 package**
|
||||
|
||||
1. Install the package on your company's Microsoft Intune site, marking it as **Available** for the appropriate groups.
|
||||
|
||||
2. Any employee in the assigned group can now install the package.
|
||||
|
||||
For more info about this, see [Update apps using Microsoft Intune](https://go.microsoft.com/fwlink/p/?LinkId=301808)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -1,35 +1,35 @@
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to use the Platform Selection page in the IEAK 11 Customization Wizard to pick the specs for your employee devices that will get the install package.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: 9cbf5abd-86f7-42b6-9810-0b606bbe8218
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Use the Platform Selection page in the IEAK 11 Wizard (Internet Explorer Administration Kit 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Use the Platform Selection page in the IEAK 11 Wizard
|
||||
The **Platform Selection** page of the Internet Explorer Customization Wizard 11 lets you pick the operating system and architecture (32-bit or 64-bit) for the devices on which you’re going to install the custom installation package.
|
||||
|
||||
**To use the Platform Selection page**
|
||||
|
||||
1. Pick the operating system and architecture for the devices on which you’re going to install the custom package.<p>
|
||||
You must create individual packages for each supported operating system.<p>
|
||||
**Note**<br>To keep your settings across several operating system packages, you can specify the same destination folder. Then, after running the wizard, you can reuse the resulting .ins file. Any additional changes to the .ins file are saved. For more info about using .ins files, see [Using Internet Settings (.INS) files with IEAK 11](using-internet-settings-ins-files.md). For more info about adding in your .ins file, see [Use the File Locations page in the IEAK 11 Wizard](file-locations-ieak11-wizard.md).
|
||||
|
||||
2. Click **Next** to go to the [Language Selection](language-selection-ieak11-wizard.md) page or **Back** to go to the [File Locations](file-locations-ieak11-wizard.md) page.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to use the Platform Selection page in the IEAK 11 Customization Wizard to pick the specs for your employee devices that will get the install package.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: 9cbf5abd-86f7-42b6-9810-0b606bbe8218
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Use the Platform Selection page in the IEAK 11 Wizard (Internet Explorer Administration Kit 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Use the Platform Selection page in the IEAK 11 Wizard
|
||||
The **Platform Selection** page of the Internet Explorer Customization Wizard 11 lets you pick the operating system and architecture (32-bit or 64-bit) for the devices on which you’re going to install the custom installation package.
|
||||
|
||||
**To use the Platform Selection page**
|
||||
|
||||
1. Pick the operating system and architecture for the devices on which you’re going to install the custom package.<p>
|
||||
You must create individual packages for each supported operating system.<p>
|
||||
**Note**<br>To keep your settings across several operating system packages, you can specify the same destination folder. Then, after running the wizard, you can reuse the resulting .ins file. Any additional changes to the .ins file are saved. For more info about using .ins files, see [Using Internet Settings (.INS) files with IEAK 11](using-internet-settings-ins-files.md). For more info about adding in your .ins file, see [Use the File Locations page in the IEAK 11 Wizard](file-locations-ieak11-wizard.md).
|
||||
|
||||
2. Click **Next** to go to the [Language Selection](language-selection-ieak11-wizard.md) page or **Back** to go to the [File Locations](file-locations-ieak11-wizard.md) page.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -1,39 +1,39 @@
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to use the Programs page in the IEAK 11 Customization Wizard to pick the default programs to use for Internet services.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: f715668f-a50d-4db0-b578-e6526fbfa1fc
|
||||
ms.reviewer:
|
||||
audience: itpro
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Use the Programs page in the IEAK 11 Wizard (Internet Explorer Administration Kit 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Use the Programs page in the IEAK 11 Wizard
|
||||
The **Programs** page of the Internet Explorer Customization Wizard 11 lets you pick the default programs to use for Internet services, like email, contact lists, and newsgroups, by importing settings from your computer.
|
||||
|
||||
**Important**<br>The customizations you make on this page only apply to Internet Explorer for the desktop.
|
||||
|
||||
**To use the Programs page**
|
||||
|
||||
1. Determine whether you want to customize your connection settings. You can pick:
|
||||
|
||||
- **Do not customize Program Settings.** Pick this option if you don’t want to set program associations for your employee’s devices.<p>-OR-<p>
|
||||
|
||||
- **Import the current Program Settings.** Pick this option to import the program associations from your device and use them as the preset for your employee’s program settings.<p>**Note**<br>If you want to change any of your settings, you can click **Modify Settings** to open the **Internet Properties** box, click **Set associations**, and make your changes.
|
||||
|
||||
2. Click **Next** to go to the [Additional Settings](additional-settings-ieak11-wizard.md) page or **Back** to go to the [Add a Root Certificate](add-root-certificate-ieak11-wizard.md) page.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
ms.localizationpriority: medium
|
||||
ms.mktglfcycl: deploy
|
||||
description: How to use the Programs page in the IEAK 11 Customization Wizard to pick the default programs to use for Internet services.
|
||||
author: lomayor
|
||||
ms.prod: ie11
|
||||
ms.assetid: f715668f-a50d-4db0-b578-e6526fbfa1fc
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
ms.author: lomayor
|
||||
title: Use the Programs page in the IEAK 11 Wizard (Internet Explorer Administration Kit 11 for IT Pros)
|
||||
ms.sitesec: library
|
||||
ms.date: 07/27/2017
|
||||
---
|
||||
|
||||
|
||||
# Use the Programs page in the IEAK 11 Wizard
|
||||
The **Programs** page of the Internet Explorer Customization Wizard 11 lets you pick the default programs to use for Internet services, like email, contact lists, and newsgroups, by importing settings from your computer.
|
||||
|
||||
**Important**<br>The customizations you make on this page only apply to Internet Explorer for the desktop.
|
||||
|
||||
**To use the Programs page**
|
||||
|
||||
1. Determine whether you want to customize your connection settings. You can pick:
|
||||
|
||||
- **Do not customize Program Settings.** Pick this option if you don’t want to set program associations for your employee’s devices.<p>-OR-<p>
|
||||
|
||||
- **Import the current Program Settings.** Pick this option to import the program associations from your device and use them as the preset for your employee’s program settings.<p>**Note**<br>If you want to change any of your settings, you can click **Modify Settings** to open the **Internet Properties** box, click **Set associations**, and make your changes.
|
||||
|
||||
2. Click **Next** to go to the [Additional Settings](additional-settings-ieak11-wizard.md) page or **Back** to go to the [Add a Root Certificate](add-root-certificate-ieak11-wizard.md) page.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -1,36 +1,45 @@
|
||||
# [Microsoft HoloLens](index.md)
|
||||
# [What's new in HoloLens](hololens-whats-new.md)
|
||||
# [Set up HoloLens](hololens-setup.md)
|
||||
# [HoloLens overview](index.md)
|
||||
# [Hololens status](hololens-status.md)
|
||||
|
||||
# Deploy HoloLens in a commercial environment
|
||||
# Get started with HoloLens (gen 1)
|
||||
## [Start your HoloLens (1st gen) for the first time](hololens-start.md)
|
||||
## [Install localized version of HoloLens](hololens-install-localized.md)
|
||||
|
||||
# Get started with HoloLens in commercial environments
|
||||
## [Overview and deployment planning](hololens-requirements.md)
|
||||
## [Unlock Windows Holographic for Business features](hololens-upgrade-enterprise.md)
|
||||
## [Configure HoloLens using a provisioning package](hololens-provisioning.md)
|
||||
## [Enroll HoloLens in MDM](hololens-enroll-mdm.md)
|
||||
## [Set up ring based updates for HoloLens](hololens-updates.md)
|
||||
## [Manage custom enterprise apps](hololens-install-apps.md)
|
||||
## [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md)
|
||||
|
||||
# Device Management
|
||||
## [Unlock Windows Holographic for Business features](hololens-upgrade-enterprise.md)
|
||||
## [Install localized version of HoloLens](hololens-install-localized.md)
|
||||
## [Manage updates to HoloLens](hololens-updates.md)
|
||||
## [Restore HoloLens 2 using Advanced Recovery Companion](hololens-recovery.md)
|
||||
## [Use the HoloLens Clicker](hololens-clicker.md)
|
||||
## [Restart, reset, or recover the HoloLens](hololens-restart-recover.md)
|
||||
## [Restart or recover the HoloLens clicker](hololens-clicker-restart-recover.md)
|
||||
# Navigating Windows Holographic
|
||||
## [Windows Mixed Reality home](holographic-home.md)
|
||||
## [Voice and Cortana](hololens-cortana.md)
|
||||
## [Find and save files](hololens-find-and-save-files.md)
|
||||
## [Create, share, and view photos and video](holographic-photos-and-video.md)
|
||||
|
||||
# Accessories and connectivity
|
||||
## [Connect to Bluetooth and USB-C devices](hololens-connect-devices.md)
|
||||
## [Restart or recover the HoloLens (1st gen) clicker](hololens-clicker-restart-recover.md)
|
||||
## [Connect to a network](hololens-network.md)
|
||||
## [Use HoloLens offline](hololens-offline.md)
|
||||
|
||||
# Application Management
|
||||
## [Install apps on HoloLens](hololens-install-apps.md)
|
||||
## [Share HoloLens with multiple people](hololens-multiple-users.md)
|
||||
## [Cortana on HoloLens](hololens-cortana.md)
|
||||
## [Get apps for HoloLens](hololens-get-apps.md)
|
||||
## [Use apps on HoloLens](hololens-use-apps.md)
|
||||
## [Use HoloLens offline](hololens-offline.md)
|
||||
## [Spaces on HoloLens](hololens-spaces-on-hololens.md)
|
||||
## [How HoloLens stores data for spaces](hololens-spaces.md)
|
||||
|
||||
# Recovery and troubleshooting
|
||||
## [Restore HoloLens 2 using Advanced Recovery Companion](hololens-recovery.md)
|
||||
## [Restart, reset, or recover the HoloLens](hololens-restart-recover.md)
|
||||
|
||||
# User/Access Management
|
||||
## [Set up single application access](hololens-kiosk.md)
|
||||
## [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md)
|
||||
## [How HoloLens stores data for spaces](hololens-spaces.md)
|
||||
## [Find and save files](hololens-find-and-save-files.md)
|
||||
|
||||
# [Insider preview for Microsoft HoloLens](hololens-insider.md)
|
||||
# [Change history for Microsoft HoloLens documentation](change-history-hololens.md)
|
||||
|
||||
|
||||
@ -50,11 +50,6 @@ New or changed topic | Description
|
||||
--- | ---
|
||||
Insider preview for Microsoft HoloLens | New (topic retired on release of Windows 10, version 1809)
|
||||
|
||||
## June 2018
|
||||
|
||||
New or changed topic | Description
|
||||
--- | ---
|
||||
[HoloLens in the enterprise: requirements and FAQ](hololens-requirements.md#pin) | Added instructions for creating a sign-in PIN.
|
||||
|
||||
## May 2018
|
||||
|
||||
@ -86,12 +81,6 @@ New or changed topic | Description
|
||||
--- | ---
|
||||
[Enable Bitlocker device encryption for HoloLens](hololens-encryption.md) | New
|
||||
|
||||
## May 2017
|
||||
|
||||
| New or changed topic | Description |
|
||||
| --- | --- |
|
||||
| [Microsoft HoloLens in the enterprise: requirements](hololens-requirements.md) | Changed title to **Microsoft HoloLens in the enterprise: requirements and FAQ**, added questions and answers in new [FAQ section](hololens-requirements.md#faq-for-hololens) |
|
||||
|
||||
## January 2017
|
||||
|
||||
| New or changed topic | Description |
|
||||
|
||||
90
devices/hololens/holographic-home.md
Normal file
90
devices/hololens/holographic-home.md
Normal file
@ -0,0 +1,90 @@
|
||||
---
|
||||
title: Navigate the Windows Mixed Reality home
|
||||
description: Navigate the Windows Mixed Reality home in Windows Holographic.
|
||||
ms.assetid: 742bc126-7996-4f3a-abb2-cf345dff730c
|
||||
ms.date: 08/07/2019
|
||||
keywords: hololens
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: scooley
|
||||
ms.author: scooley
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
---
|
||||
|
||||
# Navigate the Windows Mixed Reality home
|
||||
|
||||
## [Navigating MR Home](https://docs.microsoft.com/en-us/windows/mixed-reality/navigating-the-windows-mixed-reality-home)
|
||||
|
||||
## Use the Start menu
|
||||
|
||||
The **Start** menu on HoloLens is where you'll open apps and get to the HoloLens camera.
|
||||
|
||||
Wherever you are in HoloLens, you can always open the **Start** menu by using the [bloom gesture](https://support.microsoft.com/help/12644/hololens-use-gestures) on HoloLens (1st gen) or tapping your wrist on HoloLens 2. Usually, you'll use it once to get to **Start**, but sometimes you might need to use it twice.
|
||||
|
||||
> [!TIP]
|
||||
> When the **Start** menu is open, use the start gesture to hide it again.
|
||||
|
||||
At the top of the **Start** menu, you'll see status indicators for Wi-Fi, battery, and volume, plus a clock. The tiles are your pinned apps. To talk to Cortana, select her tile, or just say "Hey Cortana" from anywhere on HoloLens. At the bottom you'll find the photo and video icons, which open the camera app.
|
||||
|
||||
To see the rest of your apps, select **All apps**. To get back to **Start** from the **All apps** list, select **Pinned apps**.
|
||||
|
||||
## Use apps on HoloLens
|
||||
|
||||
Apps on HoloLens use either 2D view or holographic view. Apps with 2D view look like windows, and apps with holographic view surround you and become the only app you see.
|
||||
|
||||
### Open apps
|
||||
|
||||
You'll find your apps either pinned to **Start** or in the **All apps** list. To get to the **All apps** list, use the bloom gesture to go to **Start**, then select **All apps**.
|
||||
|
||||
On **Start** or in the **All apps** list, select an app. It will open in a good position for viewing.
|
||||
|
||||
>[!NOTE]
|
||||
>- Up to three 2D app windows can be active at a time. You can open more, but only three will remain active.
|
||||
>- Each open app can have one active window at a time, except Microsoft Edge, which can have up to three.
|
||||
>- If you're having problems with apps, make sure there's enough light in your space, and walk around so HoloLens has a current scan. If you keep having trouble, see [HoloLens and holograms: FAQ](https://support.microsoft.com/help/13456/hololens-and-holograms-faq) for more info.
|
||||
|
||||
## Move, resize, and rotate apps
|
||||
|
||||
Moving and resizing apps on HoloLens works a bit differently than it does on a PC. Instead of dragging the app, you'll use your gaze, along with a [gesture](https://support.microsoft.com/help/12644/hololens-use-gestures) or the [clicker](hololens-clicker.md). You can also rotate an app window in 3D space.
|
||||
|
||||
> [!TIP]
|
||||
> Rearrange apps using your voice—gaze at an app and say "Face me," "Bigger," or "Smaller." Or have Cortana move an app for you: say "Hey Cortana, move <*app name*> here."
|
||||
|
||||
### Move an app
|
||||
|
||||
Gaze at the app, and then do one of the following.
|
||||
|
||||
- Tap and hold to select the app. Move your hand to position the app, and raise your finger to place it.
|
||||
|
||||
- Select **Adjust**, tap and hold, and move your hand to position the app. Raise your finger to place it, then select **Done**.
|
||||
- Select **Adjust**, click and hold the clicker, and move your hand to position the app. Release the clicker, then select **Done**.
|
||||
|
||||
> [!TIP]
|
||||
> If you drop apps when you move them, make sure to keep your hand in the gesture frame by following it with your gaze.
|
||||
|
||||
### Resize an app
|
||||
|
||||
Gaze at the app, and then do one of the following.
|
||||
|
||||
- Gaze at a corner or edge of an app window, and tap and hold. Move your hand to change the app's size, and raise your finger when you're done.
|
||||
|
||||
- Select **Adjust**. Gaze at one of the blue squares at the corners of the app, tap and hold, then move your hand to resize the app. Raise your finger to release it, then select **Done**.
|
||||
- Select **Adjust**. Gaze at one of the blue squares at the corners of the app, click and hold the clicker, then move your hand to resize the app. Release the clicker, then select **Done**.
|
||||
|
||||
> [!TIP]
|
||||
> In Adjust mode, you can move or resize any hologram.
|
||||
|
||||
### Rotate an app
|
||||
|
||||
Gaze at the app, and tap and hold with both hands to select it. Rotate the app by keeping one hand steady and moving your other hand around it. When you're done, raise both index fingers.
|
||||
|
||||
## Close apps
|
||||
|
||||
To close an app that uses 2D view, gaze at it, then select **Close**.
|
||||
|
||||
To close an app that uses holographic view, use the bloom gesture to leave holographic view, then select **Close**.
|
||||
|
||||
## Pin apps
|
||||
|
||||
Keep your favorite apps handy by pinning them to **Start**. In the **All apps** list, gaze at an app to highlight it. Tap and hold until the menu appears, then select **Pin**. To unpin an app, gaze at the app on **Start**, then tap and hold and select **Unpin**.
|
||||
42
devices/hololens/holographic-photos-and-video.md
Normal file
42
devices/hololens/holographic-photos-and-video.md
Normal file
@ -0,0 +1,42 @@
|
||||
---
|
||||
title: Create, share, and view photos and video
|
||||
description: Create, share, and view photos and video
|
||||
ms.assetid: 1b636ec3-6186-4fbb-81b2-71155aef0593
|
||||
keywords: hololens
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: Teresa-Motiv
|
||||
ms.author: v-tea
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 8/12/19
|
||||
ms.reviewer:
|
||||
manager: jarrettr
|
||||
appliesto:
|
||||
- Hololens (1st gen)
|
||||
---
|
||||
|
||||
# Create, share, and view photos and video
|
||||
|
||||
Use your HoloLens to take photos and videos that capture the holograms you've placed in your world.
|
||||
|
||||
To sync your photos and videos to OneDrive, open the OneDrive app and select **Settings** > **Camera upload**, and then turn on **Camera upload**.
|
||||
|
||||
## Take a photo
|
||||
|
||||
Use the [bloom](https://support.microsoft.com/help/12644/hololens-use-gestures) gesture to go to **Start**, then select **Photo**. Use gaze to position the photo frame, then air tap to take the picture. The picture will be saved to your collection in the Photos app.</p>
|
||||
|
||||
Want to snap a quick pic? Press the volume up and volume down buttons at the same time. [Where are the buttons?](https://support.microsoft.com/help/12649/hololens-whats-in-the-box)
|
||||
|
||||
## Take a video
|
||||
|
||||
Use the bloom gesture to go to **Start**, then select **Video**. Use gaze to position the video frame, then air tap to start recording. To stop recording, use bloom once. The video will be saved to your collection in the Photos app.
|
||||
|
||||
To start recording more quickly, press and hold the volume up and volume down buttons simultaneously until a 3-second countdown begins. To stop recording, tap both buttons.
|
||||
|
||||
> [!TIP]
|
||||
> You can always have Cortana take a photo or a video for you. Just say "Hey Cortana, take a photo" or "Hey Cortana, take a video." [What else can I say to Cortana?](hololens-cortana.md)
|
||||
|
||||
[Take + share photos and video with Mixed reality capture](https://docs.microsoft.com/en-us/windows/mixed-reality/mixed-reality-capture)
|
||||
|
||||
[Find and view your photos](https://docs.microsoft.com/en-us/windows/mixed-reality/see-your-photos)
|
||||
@ -16,6 +16,8 @@ ms.localizationpriority: medium
|
||||
|
||||
# Restart or recover the HoloLens clicker
|
||||
|
||||
[Clicker recovery](https://support.microsoft.com/en-us/help/15555)
|
||||
|
||||
Here are some things to try if the HoloLens clicker is unresponsive or isn’t working well.
|
||||
|
||||
## Restart the clicker
|
||||
|
||||
46
devices/hololens/hololens-connect-devices.md
Normal file
46
devices/hololens/hololens-connect-devices.md
Normal file
@ -0,0 +1,46 @@
|
||||
---
|
||||
title: Connect to Bluetooth and USB-C devices
|
||||
description: This guide walks through connecting to Bluetooth and USB-C devices and accessories.
|
||||
ms.assetid: 01af0848-3b36-4c13-b797-f38ad3977e30
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: Teresa-Motiv
|
||||
ms.author: v-tea
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 8/12/19
|
||||
manager: jarrettr
|
||||
appliesto:
|
||||
- HoloLens (1st gen)
|
||||
- HoloLens 2
|
||||
---
|
||||
|
||||
# Connect devices and accessories
|
||||
|
||||
## Pair Bluetooth devices
|
||||
|
||||
Pair a Bluetooth mouse and keyboard with HoloLens, then use them to interact with holograms and to type anywhere you'd use the holographic keyboard. Pair the HoloLens [clicker](hololens-clicker.md) for a different way to interact with HoloLens.
|
||||
|
||||
> [!NOTE]
|
||||
> Other types of Bluetooth devices, such as speakers, headsets, smartphones, and game pads, may appear as available in HoloLens settings, but aren't supported. [Learn more](http://go.microsoft.com/fwlink/p/?LinkId=746660).
|
||||
|
||||
### Pair a Bluetooth keyboard or mouse
|
||||
|
||||
1. Turn on your keyboard or mouse and make it discoverable. The way you make it discoverable depends on the device. Check the device or visit the manufacturer's website to learn how.
|
||||
|
||||
1. Go to **Start**, then select **Settings**.
|
||||
1. Select **Devices** and make sure Bluetooth is on. When you see the device name, select **Pair** and follow the instructions.
|
||||
|
||||
### Pair the clicker
|
||||
|
||||
1. Use the bloom gesture to go to **Start**, then select **Settings**.
|
||||
|
||||
1. Select **Devices** and make sure Bluetooth is on.
|
||||
1. Use the tip of a pen to press and hold the clicker's pairing button until the status light blinks white. Make sure to hold the button down until the light starts blinking. [Where's the pairing button?](hololens-clicker.md)
|
||||
1. On the pairing screen, select **Clicker** > **Pair**.
|
||||
|
||||
## Connect USB-C devices
|
||||
|
||||
## Connect to Miracast
|
||||
|
||||
> Applies to HoloLens 2 only.
|
||||
@ -2,26 +2,63 @@
|
||||
title: Cortana on HoloLens
|
||||
description: Cortana can help you do all kinds of things on your HoloLens
|
||||
ms.assetid: fd96fb0e-6759-4dbe-be1f-58bedad66fed
|
||||
ms.reviewer: jarrettrenshaw
|
||||
ms.date: 07/01/2019
|
||||
manager: v-miegge
|
||||
ms.date: 08/14/2019
|
||||
keywords: hololens
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: v-miegge
|
||||
ms.author: v-miegge
|
||||
ms.topic: article
|
||||
manager: jarrettr
|
||||
ms.localizationpriority: medium
|
||||
---
|
||||
|
||||
# Cortana on HoloLens
|
||||
# Use your voice with HoloLens
|
||||
|
||||
You can use your voice to do many of the same things you do with gestures on HoloLens, like taking a quick photo or opening an app.
|
||||
|
||||
## Voice commands
|
||||
|
||||
Get around HoloLens faster with these basic commands. If you turn Cortana off, "Hey Cortana" voice commands won't be available, but you'll still be able to use the following built-in voice commands.
|
||||
|
||||
**Select**. Use this instead of air tap. Gaze at a hologram, then say "Select."
|
||||
|
||||
**Go to start**. Say "Go to Start" anytime to bring up the **Start** menu. Or when you're in an immersive app, say "Go to Start" to get to the quick actions menu.
|
||||
|
||||
**Move this**. Instead of air tapping and dragging an app, say "Move this" and use gaze to move it.
|
||||
|
||||
**Face me**. Gaze at a hologram, and then say "Face me" to turn it your way.
|
||||
|
||||
**Bigger/Smaller**. Gaze at a hologram, and then say "Bigger" or "Smaller" to resize it.
|
||||
|
||||
Many buttons and other elements on HoloLens also respond to your voice—for example, **Adjust** and **Close** on the app bar. To find out if a button is voice-enabled, rest your gaze on it for a moment. If it is, you'll see a voice tip.
|
||||
|
||||
## Dictation mode
|
||||
|
||||
Tired of typing? Switch to dictation mode any time the holographic keyboard is active. Select the microphone icon to get started, or say "Start dictating." To stop dictating, select **Done** or say "Stop dictating." To delete what you just dictated, say "Delete that."
|
||||
|
||||
> [!NOTE]
|
||||
> You need an Internet connection to use dictation mode.
|
||||
|
||||
HoloLens dictation uses explicit punctuation, meaning that you say the name of the punctuation you want to use. For instance, you might say "Hey **comma** what are you up to **question mark**."
|
||||
|
||||
Here are the punctuation keywords you can use:
|
||||
|
||||
- Period, comma, question mark, exclamation point/exclamation mark
|
||||
- New line/new paragraph
|
||||
- Semicolon, colon
|
||||
- Open quote(s), close quote(s)
|
||||
- Hashtag, smiley/smiley face, frowny, winky
|
||||
- Dollar, percent
|
||||
|
||||
Sometimes it's helpful to spell out things like email addresses. For instance, to dictate example@outlook.com, you'd say "E X A M P L E at outlook dot com."
|
||||
|
||||
## Do more with Cortana
|
||||
|
||||
Cortana can help you do all kinds of things on your HoloLens, from searching the web to shutting down your device. To get her attention, select Cortana on Start or say "Hey Cortana" anytime.
|
||||
|
||||
|
||||
|
||||
## What do I say to Cortana
|
||||
|
||||
Here are some things you can try saying (remember to say "Hey Cortana" first):
|
||||
|
||||
- What can I say?
|
||||
@ -44,7 +81,8 @@ Here are some things you can try saying (remember to say "Hey Cortana" first):
|
||||
- Tell me a joke.
|
||||
|
||||
>[!NOTE]
|
||||
>- Some Cortana features you're used to from Windows on your PC or phone (for example, reminders and notifications) aren't supported in Microsoft HoloLens Development Edition. Cortana on HoloLens is English only, and the Cortana experience may vary among regions.
|
||||
>- Cortana is on the first time you use HoloLens. You can turn her off in Cortana's settings. In the All apps list, select Cortana > Settings. Then turn off Cortana can give you suggestions, ideas, reminders, alerts, and more.
|
||||
>
|
||||
>- Some Cortana features you're used to from Windows on your PC or phone (for example, reminders and notifications) aren't supported in Microsoft HoloLens Development Edition. Cortana on HoloLens is English-only, and the Cortana experience may vary among regions.
|
||||
>- Cortana is on the first time you use HoloLens. You can turn her off in Cortana's settings. In the **All apps** list, select **Cortana > Settings**. Then turn off Cortana can give you suggestions, ideas, reminders, alerts, and more.
|
||||
>- If Cortana isn't responding to "Hey Cortana," go to Cortana's settings and check to make sure she's on.
|
||||
>- If you turn Cortana off, "Hey Cortana" voice commands won't be available, but you'll still be able to use other commands (like "Select" and "Place").
|
||||
>- If you turn Cortana off, "Hey Cortana" voice commands won't be available, but you'll still be able to use other commands (such as "Select" and "Place").
|
||||
|
||||
@ -102,6 +102,6 @@ Provisioning packages are files created by the Windows Configuration Designer to
|
||||
|
||||
Encryption is silent on HoloLens. To verify the device encryption status:
|
||||
|
||||
- On HoloLens, go to **Settings** > **System** > **About**. **BitLocker** is **enabled** if the device is encrypted.
|
||||
- On HoloLens, go to **Settings** > **System** > **About**. **BitLocker** is **enabled** if the device is encrypted.
|
||||
|
||||
|
||||
|
||||
@ -16,6 +16,9 @@ ms.localizationpriority: medium
|
||||
|
||||
# Find and save files on HoloLens
|
||||
|
||||
Add content from [Find and save files](https://docs.microsoft.com/en-us/windows/mixed-reality/saving-and-finding-your-files)
|
||||
|
||||
|
||||
Files you create on HoloLens, including Office documents, photos, and videos, are saved to your HoloLens. To view and manage them, you can use the File Explorer app on HoloLens or File Explorer on your PC. To sync photos and other files to the cloud, use the OneDrive app on HoloLens.
|
||||
|
||||
## View files on HoloLens
|
||||
|
||||
@ -1,16 +1,15 @@
|
||||
---
|
||||
title: Install apps on HoloLens (HoloLens)
|
||||
title: Install apps on HoloLens
|
||||
description: The recommended way to install apps on HoloLens is to use Microsoft Store for Business.
|
||||
ms.prod: hololens
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: dansimp
|
||||
ms.author: dansimp
|
||||
author: scooley
|
||||
ms.author: scooley
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 10/23/2018
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
---
|
||||
|
||||
# Install apps on HoloLens
|
||||
@ -72,9 +71,9 @@ Using Intune, you can also [monitor your app deployment](https://docs.microsoft.
|
||||
>[!IMPORTANT]
|
||||
>When you set up HoloLens to use the Device Portal, you must enable **Developer Mode** on the device. **Developer Mode** on a device that has been upgraded to Windows Holographic for Business enables side-loading of apps, which risks the installation of apps that have not been certified by the Microsoft Store. Administrators can block the ability to enable **Developer Mode** using the **ApplicationManagement/AllowDeveloper Unlock** setting in the [Policy CSP](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx). [Learn more about Developer Mode.](https://msdn.microsoft.com/windows/uwp/get-started/enable-your-device-for-development#developer-mode)
|
||||
|
||||
1. [Set up the HoloLens to use the Windows Device Portal](https://developer.microsoft.com/windows/mixed-reality/using_the_windows_device_portal#setting_up_hololens_to_use_windows_device_portal). The Device Portal is a web server on your HoloLens that you can connect to from a web browser on your PC.
|
||||
1. [Set up the HoloLens to use the Windows Device Portal](https://developer.microsoft.com/windows/mixed-reality/using_the_windows_device_portal#setting_up_hololens_to_use_windows_device_portal). The Device Portal is a web server on your HoloLens that you can connect to from a web browser on your PC.
|
||||
|
||||
2. On a PC, connect to the HoloLens using [Wi-Fi](https://developer.microsoft.com/windows/mixed-reality/Using_the_Windows_Device_Portal.html#connecting_over_wi-fi) or [USB](https://developer.microsoft.com/windows/mixed-reality/Using_the_Windows_Device_Portal.html#connecting_over_usb).
|
||||
2. On a PC, connect to the HoloLens using [Wi-Fi](https://docs.microsoft.com/windows/mixed-reality/connecting-to-wi-fi-on-hololens) or USB.
|
||||
|
||||
3. [Create a user name and password](https://developer.microsoft.com/windows/mixed-reality/Using_the_Windows_Device_Portal.html#creating_a_username_and_password) if this is the first time you connect to the Windows Device Portal, or enter the user name and password that you previously set up.
|
||||
|
||||
@ -84,13 +83,7 @@ Using Intune, you can also [monitor your app deployment](https://docs.microsoft.
|
||||
4. In the Windows Device Portal, click **Apps**.
|
||||
|
||||
|
||||
|
||||
|
||||
5. In **Install app**, select an **app package** from a folder on your computer or network. If the app package requires additional software, such as dependency frameworks, select **I want to specify framework packages**.
|
||||
|
||||
6. In **Deploy**, click **Go** to deploy the app package and added dependencies to the connected HoloLens.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
40
devices/hololens/hololens-network.md
Normal file
40
devices/hololens/hololens-network.md
Normal file
@ -0,0 +1,40 @@
|
||||
---
|
||||
title: Connect to a network
|
||||
description: Connect to a wi-fi or ethernet network with HoloLens.
|
||||
ms.assetid: 0895606e-96c0-491e-8b1c-52e56b00365d
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: Teresa-Motiv
|
||||
ms.author: v-tea
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 8/12/19
|
||||
manager: jarrettr
|
||||
ms.reviewer:
|
||||
appliesto:
|
||||
- Hololens
|
||||
- HoloLens (1st gen)
|
||||
- HoloLens 2
|
||||
---
|
||||
|
||||
# Connect to a network
|
||||
|
||||
You'll need to be connected to a network to do most things on your HoloLens. [What can I do offline](hololens-offline.md)?
|
||||
|
||||
## Connecting for the first time
|
||||
|
||||
The first time you use your HoloLens, you'll be guided through connecting to a Wi-Fi network. If you have trouble connecting to Wi-Fi during setup, make sure your network is either open, password protected, or a captive portal network and doesn't require using certificates to connect. After setup, you can connect to other types of Wi-Fi networks.
|
||||
|
||||
## Connecting to Wi-Fi after setup
|
||||
|
||||
1. Go to **Start**, then select **Settings**.
|
||||
|
||||
1. _HoloLens (1st gen) only_ - Use your gaze to position the Settings app, then air tap to place it, or say "Place."
|
||||
|
||||
1. Select **Network & Internet** > **Wi-Fi**. If you don't see your network, scroll down the list.
|
||||
|
||||
1. Select a network > **Connect**.
|
||||
|
||||
1. Type the network password if asked for one, then select **Next**.
|
||||
|
||||
Also see [Connect to Wifi](https://docs.microsoft.com/en-us/windows/mixed-reality/connecting-to-wi-fi-on-hololens)
|
||||
@ -16,6 +16,9 @@ ms.localizationpriority: medium
|
||||
|
||||
# Use HoloLens offline
|
||||
|
||||
[Use offline](https://support.microsoft.com/en-us/help/12645)
|
||||
|
||||
|
||||
To set up HoloLens, you'll need to connect to a Wi-Fi network—the setup tutorial will show you how.
|
||||
|
||||
## HoloLens limitations
|
||||
|
||||
@ -1,88 +1,147 @@
|
||||
---
|
||||
title: HoloLens in the enterprise requirements and FAQ (HoloLens)
|
||||
description: Requirements and FAQ for general use, Wi-Fi, and device management for HoloLens in the enterprise.
|
||||
title: Set up HoloLens in a commercial environment
|
||||
description: Learn more about deploying and managing HoloLens in enterprise environments.
|
||||
ms.prod: hololens
|
||||
ms.sitesec: library
|
||||
author: dansimp
|
||||
ms.author: dansimp
|
||||
ms.assetid: 88bf50aa-0bac-4142-afa4-20b37c013001
|
||||
author: scooley
|
||||
ms.author: scooley
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 06/04/2018
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
ms.date: 07/15/2019
|
||||
---
|
||||
|
||||
# Microsoft HoloLens in the enterprise: requirements and FAQ
|
||||
# Deploy HoloLens in a commercial environment
|
||||
|
||||
When you develop for HoloLens, there are [system requirements and tools](https://developer.microsoft.com/windows/mixed-reality/install_the_tools) that you need. In an enterprise environment, there are also a few requirements to use and manage HoloLens which are listed below.
|
||||
TODO - [Commercial features](https://docs.microsoft.com/en-us/windows/mixed-reality/commercial-features)
|
||||
|
||||
## Requirements
|
||||
Deploy and configure HoloLens at scale in a commercial setting.
|
||||
|
||||
### General use
|
||||
- Microsoft account or Azure Active Directory (Azure AD) account
|
||||
- Wi-Fi network to set up HoloLens
|
||||
This article includes:
|
||||
|
||||
>[!NOTE]
|
||||
>After you set up HoloLens, you can use it offline [with some limitations](https://support.microsoft.com/help/12645/hololens-use-hololens-offline).
|
||||
- infrastructure requirements and recommendations for HoloLens management
|
||||
- tools for provisioning HoloLens
|
||||
- instructions for remote device management
|
||||
- options for application deployment
|
||||
|
||||
This guide assumes basic familiarity with HoloLens. Follow the [get started guide](./hololens-setup.md) to set up HoloLens for the first time.
|
||||
|
||||
## Infrastructure for managing HoloLens
|
||||
|
||||
HoloLens are, at their core, a Windows mobile device integrated with Azure. They work best in commercial environments with wireless network availability (wi-fi) and access to Microsoft services.
|
||||
|
||||
Critical cloud services include:
|
||||
|
||||
- Azure active directory (AAD)
|
||||
- Windows Update (WU)
|
||||
|
||||
Commercial customers will need enterprise mobility management (EMM) or mobile device management (MDM) infrastructure in order to manage HoloLens devices at scale. This guide uses [Microsoft Intune](https://www.microsoft.com/en-us/enterprise-mobility-security/microsoft-intune) as an example though any provider with full support for Microsoft Policy can support HoloLens. Ask your mobile device management provider if they support HoloLens 2.
|
||||
|
||||
HoloLens does support a limited set of cloud disconnected experiences.
|
||||
|
||||
## Initial set up at scale
|
||||
|
||||
The HoloLens out of box experience is great for setting up one or two devices or for experiencing HoloLens for the first time. If you're provisioning many HoloLens devices, however, picking your language and settings manually for each device gets tedious and limits scale.
|
||||
|
||||
This section:
|
||||
|
||||
1. introduces Windows provisioning using provisioning packages
|
||||
1. walks through applying a provisioning package during first setup
|
||||
|
||||
### Create and apply a provisioning package
|
||||
|
||||
The best way to configure many new HoloLens devices is with Windows provisioning. Using Windows provisioning, you can specify desired configuration and settings required to enroll the devices into management and then apply that configuration to target devices in minutes.
|
||||
|
||||
A [provisioning package](https://docs.microsoft.com/windows/configuration/provisioning-packages/provisioning-packages) (.ppkg) is a collection of configuration settings. With Windows 10, you can create provisioning packages that let you quickly and efficiently configure a device.
|
||||
|
||||
### Upgrade to Windows Holographic for Business
|
||||
|
||||
- HoloLens Enterprise license XML file
|
||||
|
||||
Some of the HoloLens configurations that you can apply in a provisioning package:
|
||||
|
||||
- Apply certificates to the device
|
||||
- Set up a Wi-Fi connection
|
||||
- Pre-configure out of box questions like language and locale.
|
||||
- (HoloLens 2) bulk enroll in mobile device management
|
||||
- (HoloLens v1) Apply key to enable Windows Holographic for Business
|
||||
|
||||
Follow [this guide](https://docs.microsoft.com/hololens/hololens-provisioning) to create and apply a provisioning package to HoloLens.
|
||||
|
||||
### Set up user identity and enroll in device management
|
||||
|
||||
The last step setting up HoloLens for management at scale is to enroll devices with mobile device management infrastructure. There are several ways to enroll:
|
||||
|
||||
1. Bulk enrollment with a security token in a provisioning package.
|
||||
Pros: this is the most automated approach
|
||||
Cons: takes initial server-side setup
|
||||
1. Auto-enroll on user sign in
|
||||
Pros: easiest approach
|
||||
Cons: users will need to complete set up after the provisioning package has been applied
|
||||
1. _not recommended_ - Manually enroll post-setup
|
||||
Pros: possible to enroll after set up
|
||||
Cons: most manual approach and devices aren't centrally manageable until they're manually enrolled.
|
||||
|
||||
Learn more about MDM enrollment [here](hololens-enroll-mdm.md).
|
||||
|
||||
## Ongoing device management
|
||||
|
||||
Ongoing device management will depend on your mobile device management infrastructure. Most have the same general functionality but the user interface may vary widely.
|
||||
|
||||
This article outlines [policies and capabilities HoloLens supports](https://docs.microsoft.com/windows/client-management/mdm/configuration-service-provider-reference#hololens).
|
||||
|
||||
[This article](https://docs.microsoft.com/intune/windows-holographic-for-business) talks about Intune's management tools for HoloLens.
|
||||
|
||||
### Push compliance policy via Intune
|
||||
|
||||
[Compliance policies](https://docs.microsoft.com/intune/device-compliance-get-started) are rules and settings that devices must meet to be compliant in your corporate infrastructure. Use these policies with Conditional Access to block access to company resources for devices that are not-compliant.
|
||||
|
||||
For example, you can create a policy that requires Bitlocker be enabled.
|
||||
|
||||
[Create compliance policies with Intune](https://docs.microsoft.com/intune/compliance-policy-create-windows).
|
||||
|
||||
### Manage updates
|
||||
|
||||
Intune includes a feature called update rings for Windows 10 devices, including HoloLens 2 and HoloLens v1 (with Holographic for Business). Update rings include a group of settings that determine how and when updates are installed.
|
||||
|
||||
For example, you can create a maintenance window to install updates, or choose to restart after updates are installed. You can also choose to pause updates indefinitely until you're ready to update.
|
||||
|
||||
Read more about [configuring update rings with Intune](https://docs.microsoft.com/en-us/intune/windows-update-for-business-configure).
|
||||
|
||||
## Application management
|
||||
|
||||
Manage holoLens applications through:
|
||||
|
||||
1. Microsoft Store
|
||||
The Microsoft Store is the best way to distribute and consume application on HoloLens. There is a great set of core HoloLens applications already available in the store or you can [publish your own](https://docs.microsoft.com/en-us/windows/uwp/publish/).
|
||||
All applications in the store are available publicly to everyone, if that isn't acceptable, checkout the Microsoft Store for Business.
|
||||
|
||||
1. [Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/)
|
||||
Microsoft Store for Business and Education is a custom store for your corporate environment. It lets you use the Microsoft Store built into Windows 10 and HoloLens to find, acquire, distribute, and manage apps for your organization. It lets you deploy apps that are specific to your commercial environment but not to the world.
|
||||
|
||||
1. Application deployment and management via Intune or another mobile device management solution
|
||||
Most mobile device management solutions, including Intune, provide a way to deploy line of business applications directly to a set of enrolled devices. See this article for [Intune app install](https://docs.microsoft.com/intune/apps-deploy).
|
||||
|
||||
1. _not recommended_ Device Portal
|
||||
Applications can also be installed on HoloLens directly using the Windows Device Portal. This isn't recommended since Developer Mode has to be enabled to use device portal.
|
||||
|
||||
Read more about [installing apps on HoloLens](https://docs.microsoft.com/hololens/hololens-install-apps).
|
||||
|
||||
## Get support
|
||||
|
||||
Get support through the Microsoft support site.
|
||||
|
||||
[File a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection?sapid=e9391227-fa6d-927b-0fff-f96288631b8f).
|
||||
|
||||
## Technical Reference
|
||||
|
||||
### Wireless network EAP support
|
||||
|
||||
### Supported wireless network EAP methods
|
||||
- PEAP-MS-CHAPv2
|
||||
- PEAP-TLS
|
||||
- TLS
|
||||
- TLS
|
||||
- TTLS-CHAP
|
||||
- TTLS-CHAPv2
|
||||
- TTLS-MS-CHAPv2
|
||||
- TTLS-PAP
|
||||
- TTLS-TLS
|
||||
|
||||
### Device management
|
||||
- Users have Azure AD accounts with [Intune license assigned](https://docs.microsoft.com/intune/get-started/start-with-a-paid-subscription-to-microsoft-intune-step-4)
|
||||
- Wi-Fi network
|
||||
- Intune or a 3rd party mobile device management (MDM) provider that uses Microsoft MDM APIs
|
||||
|
||||
### Upgrade to Windows Holographic for Business
|
||||
- HoloLens Enterprise license XML file
|
||||
|
||||
|
||||
## FAQ for HoloLens
|
||||
|
||||
<span id="pin"/>
|
||||
#### Is Windows Hello for Business supported on HoloLens?
|
||||
|
||||
Windows Hello for Business (using a PIN to sign in) is supported for HoloLens. To allow Windows Hello for Business PIN sign-in on HoloLens:
|
||||
|
||||
1. The HoloLens device must be [managed by MDM](hololens-enroll-mdm.md).
|
||||
2. You must enable Windows Hello for Business for the device. ([See instructions for Microsoft Intune.](https://docs.microsoft.com/intune/windows-hello))
|
||||
3. On HoloLens, the user can then set up a PIN from **Settings** > **Sign-in Options** > **Add PIN**.
|
||||
|
||||
>[!NOTE]
|
||||
>Users who sign in with a Microsoft account can also set up a PIN in **Settings** > **Sign-in Options** > **Add PIN**. This PIN is associated with [Windows Hello](https://support.microsoft.com/help/17215/windows-10-what-is-hello), rather than [Windows Hello for Business](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-overview).
|
||||
|
||||
#### Does the type of account change the sign-in behavior?
|
||||
|
||||
Yes, the behavior for the type of account impacts the sign-in behavior. If you apply policies for sign-in, the policy is always respected. If no policy for sign-in is applied, these are the default behaviors for each account type.
|
||||
|
||||
- Microsoft account: signs in automatically
|
||||
- Local account: always asks for password, not configurable in **Settings**
|
||||
- Azure AD: asks for password by default; configurable by **Settings** to no longer ask for password.
|
||||
|
||||
>[!NOTE]
|
||||
>Inactivity timers are currently not supported, which means that the **AllowIdleReturnWithoutPassword** policy is respected only when the device goes into StandBy.
|
||||
|
||||
|
||||
#### How do I remove a HoloLens device from the Intune dashboard?
|
||||
|
||||
You cannot [unenroll](https://docs.microsoft.com/intune-user-help/unenroll-your-device-from-intune-windows) HoloLens from Intune remotely. If the administrator unenrolls the device using MDM, the device will age out of the Intune dashboard.
|
||||
|
||||
|
||||
## Related resources
|
||||
|
||||
[Getting started with Azure Active Directory Premium](https://azure.microsoft.com/documentation/articles/active-directory-get-started-premium/)
|
||||
|
||||
[Get started with Intune](https://docs.microsoft.com/intune/understand-explore/get-started-with-a-30-day-trial-of-microsoft-intune)
|
||||
|
||||
[Enroll devices for management in Intune](https://docs.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune#supported-device-platforms)
|
||||
|
||||
[Azure AD editions](https://azure.microsoft.com/documentation/articles/active-directory-editions/)
|
||||
|
||||
|
||||
57
devices/hololens/hololens-start.md
Normal file
57
devices/hololens/hololens-start.md
Normal file
@ -0,0 +1,57 @@
|
||||
---
|
||||
title: HoloLens (1st gen) first start
|
||||
description: Go through the first start experience for HoloLens (1st gen).
|
||||
ms.assetid: 0136188e-1305-43be-906e-151d70292e87
|
||||
ms.prod: hololens
|
||||
author: Teresa-Motiv
|
||||
ms.author: v-tea
|
||||
ms.topic: article
|
||||
ms.date: 8/12/19
|
||||
manager: jarrettr
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
---
|
||||
|
||||
# Set up HoloLens for the first time
|
||||
|
||||
The first time you turn on your HoloLens, you'll be guided through calibrating your device, setting up your device, and signing in. This section walks through the HoloLens (1st gen) first start experience.
|
||||
|
||||
In the next section, you'll learn how to work with HoloLens and interact with holograms. Skip ahead to [Get started with HoloLens (1st gen)](holographic-home.md)
|
||||
|
||||
## Before you start
|
||||
|
||||
Before you get started, make sure you have the following available:
|
||||
|
||||
**A Wi-Fi connection**. You'll need to connect your HoloLens to a Wi-Fi network to set it up. The first time you connect, you'll need an open or password-protected network that doesn't require navigating to a website or using certificates to connect. After setup, you can [use your device offline](hololens-offline.md).
|
||||
|
||||
**A Microsoft account**. You'll also need to sign in to HoloLens with a Microsoft account (or with your work account, if your organization owns the device). If you don't have a Microsoft account, go to [account.microsoft.com](http://account.microsoft.com) and set one up for free.
|
||||
|
||||
**A safe, well-lit space with no tripping hazards**. [Health and safety info](http://go.microsoft.com/fwlink/p/?LinkId=746661).
|
||||
|
||||
**The optional comfort accessories** that came with your HoloLens, to help you get the most comfortable fit. [More on fit and comfort](https://support.microsoft.com/help/12632/hololens-fit-your-hololens).
|
||||
|
||||
> [!NOTE]
|
||||
> [Cortana](hololens-cortana.md) is already on and ready to guide you the first time you use your HoloLens (though she won't be able to respond to your questions until after you set up your device). You can turn Cortana off at any time in Cortana's settings.
|
||||
|
||||
## Set up your HoloLens
|
||||
|
||||
Set up your HoloLens and your user account.
|
||||
|
||||
1. The first time you use your HoloLens, you'll be guided through connecting to a Wi-Fi network. If you have trouble connecting to Wi-Fi during setup, make sure your network is either open, password protected, or a captive portal network and doesn't require using certificates to connect. After setup, you can connect to other types of Wi-Fi networks.
|
||||
1. Sign in to your user account. You'll choose between **My work or school owns it** and **I own it**.
|
||||
- When you choose **My work or school owns it**, you sign in by using an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
|
||||
1. Enter your organizational account information.
|
||||
1. Accept the privacy statement.
|
||||
1. Sign in by using your Azure AD credentials. This may redirect to your organization's sign-in page.
|
||||
1. Continue with device setup.
|
||||
- When you choose **I own it**, you sign in by using a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
|
||||
1. Enter your Microsoft account information.
|
||||
1. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process.
|
||||
1. The device sets your time zone based on information obtained from the Wi-Fi network.
|
||||
1. Follow the first-start guides to learn how to interact with holograms, control the HoloLens with your voice, and access the start menu.
|
||||
|
||||
Congratulations! Setup is complete and you can begin using HoloLens.
|
||||
|
||||
## Next steps
|
||||
|
||||
- [Get started with HoloLens (1st gen)](holographic-home.md)
|
||||
36
devices/hololens/hololens-status.md
Normal file
36
devices/hololens/hololens-status.md
Normal file
@ -0,0 +1,36 @@
|
||||
---
|
||||
title: HoloLens status
|
||||
description: Shows the status of HoloLens online services.
|
||||
author: todmccoy
|
||||
ms.author: v-todmc
|
||||
ms.reviewer: luoreill
|
||||
manager: jarrettr
|
||||
audience: Admin
|
||||
ms.topic: article
|
||||
ms.prod: hololens
|
||||
localization_priority: Medium
|
||||
ms.sitesec: library
|
||||
---
|
||||
|
||||
# HoloLens status
|
||||
|
||||
✔️ **All services are active**
|
||||
|
||||
**Key** ✔️ Good, ⓘ Information, ⚠ Warning, ❌ Critical
|
||||
|
||||
Area|HoloLens (1st gen)|HoloLens 2
|
||||
----|:----:|:----:
|
||||
[Azure services](https://status.azure.com/en-us/status)|✔️|✔️
|
||||
[Store app](https://www.microsoft.com/en-us/store/collections/hlgettingstarted/hololens)|✔️|✔️
|
||||
[Apps](https://www.microsoft.com/en-us/hololens/apps)|✔️|✔️
|
||||
[MDM](https://docs.microsoft.com/en-us/hololens/hololens-enroll-mdm)|✔️|✔️
|
||||
|
||||
## Notes and related topics
|
||||
|
||||
[Frequently asked questions about using Skype for HoloLens](https://support.skype.com/en/faq/FA34641/frequently-asked-questions-about-using-skype-for-hololens)
|
||||
|
||||
For more details about the status of the myriad Azure Services that can connect to HoloLens, see [Azure status](https://azure.microsoft.com/en-us/status/).
|
||||
|
||||
For more details about current known issues, see [HoloLens known issues](https://docs.microsoft.com/en-us/windows/mixed-reality/hololens-known-issues).
|
||||
|
||||
Follow HoloLens on [Twitter](https://twitter.com/HoloLens) and subscribe on [Reddit](https://www.reddit.com/r/HoloLens/).
|
||||
@ -22,9 +22,9 @@ manager: dansimp
|
||||
For a complete list of Update policies, see [Policies supported by Windows Holographic for Business](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#a-href-idhololenspoliciesapolicies-supported-by-windows-holographic-for-business).
|
||||
|
||||
To configure how and when updates are applied, use the following policies:
|
||||
- [Update/AllowAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowautoupdate)
|
||||
- [Update/ScheduledInstallDay](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-scheduledinstalltime)
|
||||
- [Update/AllowAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowautoupdate)
|
||||
- [Update/ScheduledInstallDay](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-scheduledinstallday)
|
||||
- [Update/ScheduledInstallTime](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-scheduledinstalltime)
|
||||
|
||||
To turn off the automatic check for updates, set the following policy to value **5** – Turn off Automatic Updates:
|
||||
- [Update/AllowAutoUpdate](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowautoupdate)
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: General Data Privacy Regulation and Surface Hub
|
||||
description: Informs users who are subject to EU data protection laws of their options regarding how to delete or restrict diagnostic data produced by Surface Hub.
|
||||
ms.assetid: 087713CF-631D-477B-9CC6-EFF939DE0186
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: GDPR
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: What to do if the Connect app in Surface Hub exits unexpectedly
|
||||
description: Describes how to resolve an issue where the Connect app in Surface Hub exits to the Welcome screen after cycling through inputs.
|
||||
ms.assetid: 9576f4e4-d936-4235-8a03-d8a6fe9e8fec
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: surface, hub, connect, input, displayport
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: Known issues and additional information about Microsoft Surface Hub
|
||||
description: Outlines known issues with Microsoft Surface Hub.
|
||||
ms.assetid: aee90a0c-fb05-466e-a2b1-92de89d0f2b7
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: surface, hub, issues
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: Surface Hub may install updates and restart outside maintenance hours
|
||||
description: troubleshooting information for Surface Hub regarding automatic updates
|
||||
ms.assetid: 6C09A9F8-F9CF-4491-BBFB-67A1A1DED0AA
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: surface hub, maintenance window, update
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -97,4 +97,4 @@ If you insert a USB thumb drive with a provisioning package into one of the USB
|
||||
|
||||
 <br>
|
||||
|
||||
4. Follow the instructions to complete first time Setup.
|
||||
4. Follow the instructions to complete first time Setup.
|
||||
|
||||
@ -3,12 +3,12 @@ title: Configure Surface Hub Start menu
|
||||
description: Use MDM to customize the Start menu on Surface Hub.
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
author: levinec
|
||||
ms.author: ellevin
|
||||
author: robmazz
|
||||
ms.author: robmazz
|
||||
ms.topic: article
|
||||
ms.date: 01/17/2018
|
||||
ms.date: 08/15/2018
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
manager: laurawi
|
||||
ms.localizationpriority: medium
|
||||
---
|
||||
|
||||
@ -107,7 +107,7 @@ There are a few key differences between Start menu customization for Surface Hub
|
||||
<span id="edge" />
|
||||
## Example: Start layout that includes a Microsoft Edge link
|
||||
|
||||
This example shows a link to a website and a link to a .pdf file.
|
||||
This example shows a link to a website and a link to a .pdf file. The secondary tile for Microsoft Edge uses a 150 x 150 pixel icon.
|
||||
|
||||
```xml
|
||||
<LayoutModificationTemplate Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
|
||||
@ -165,10 +165,10 @@ This example shows a link to a website and a link to a .pdf file.
|
||||
TileID="6153963000"
|
||||
DisplayName="cstrtqbiology.pdf"
|
||||
Arguments="-contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x45b7376e -pinnedTimeHigh 0x01d2356c -securityFlags 0x00000000 -tileType 0x00000000 -url 0x0000003a https://www.ada.gov/regs2010/2010ADAStandards/Guidance_2010ADAStandards.pdf"
|
||||
Square150x150LogoUri="ms-appx:///"
|
||||
Square150x150LogoUri="ms-appx:///Assets/MicrosoftEdgeSquare150x150.png"
|
||||
Wide310x150LogoUri="ms-appx:///"
|
||||
ShowNameOnSquare150x150Logo="true"
|
||||
ShowNameOnWide310x150Logo="true"
|
||||
ShowNameOnSquare150x150Logo="true"
|
||||
ShowNameOnWide310x150Logo="false"
|
||||
BackgroundColor="#ff4e4248"
|
||||
Size="4x2"
|
||||
Row="4"
|
||||
@ -181,8 +181,6 @@ This example shows a link to a website and a link to a .pdf file.
|
||||
```
|
||||
|
||||
>[!NOTE]
|
||||
>Microsoft Edge tile logos won't appear on secondary tiles because they aren't stored in Surface Hub.
|
||||
>
|
||||
>The default value for `ForegroundText` is light; you don't need to include `ForegroundText` in your XML unless you're changing the value to dark.
|
||||
|
||||
## More information
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: Surface Hub update history
|
||||
description: Surface Hub update history
|
||||
ms.assetid: d66a9392-2b14-4cb2-95c3-92db0ae2de34
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords:
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
@ -26,6 +24,18 @@ Please refer to the “[Surface Hub Important Information](https://support.micro
|
||||
|
||||
## Windows 10 Team Creators Update 1703
|
||||
|
||||
<details>
|
||||
<summary>June 18, 2019—update for Team edition based on KB4503289* (OS Build 15063.1897)</summary>
|
||||
|
||||
This update to the Surface Hub includes quality improvements and security fixes. Key updates to Surface Hub, not already outlined in [Windows 10 Update History](https://support.microsoft.com/help/4018124/windows-10-update-history), include:
|
||||
|
||||
* Addresses an issue with log collection for Microsoft Surface Hub 2S.
|
||||
* Addresses an issue preventing a user from signing in to a Microsoft Surface Hub device with an Azure Active Directory account. This issue occurs because a previous session did not end successfully.
|
||||
|
||||
Please refer to the [Surface Hub Admin guide](https://docs.microsoft.com/surface-hub/) for enabling/disabling device features and services.
|
||||
*[KB4503289](https://support.microsoft.com/help/4503289)
|
||||
</details>
|
||||
|
||||
<details>
|
||||
<summary>May 28, 2019—update for Team edition based on KB4499162* (OS Build 15063.1835)</summary>
|
||||
|
||||
@ -484,4 +494,4 @@ This update to the Surface Hub includes quality improvements and security fixes.
|
||||
* [Windows 10 November update: FAQ](http://windows.microsoft.com/windows-10/windows-update-faq)
|
||||
* [Microsoft Surface update history](http://go.microsoft.com/fwlink/p/?LinkId=724327)
|
||||
* [Microsoft Lumia update history](http://go.microsoft.com/fwlink/p/?LinkId=785968)
|
||||
* [Get Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=616447)
|
||||
* [Get Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=616447)
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: Surface Hub Miracast channels 149-165 not supported in Europe, Japan, Israel
|
||||
description: Surface Hub Miracast channels 149-165 not supported in Europe, Japan, Israel
|
||||
ms.assetid: 8af3a832-0537-403b-823b-12eaa7a1af1f
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords:
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: How to use cloud recovery for BitLocker on a Surface Hub
|
||||
description: How to use cloud recovery for BitLocker on a Surface Hub
|
||||
ms.assetid: c0bde23a-49de-40f3-a675-701e3576d44d
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: Accessibility settings, Settings app, Ease of Access
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -2,8 +2,6 @@
|
||||
title: Using the Surface Hub Hardware Diagnostic Tool to test a device account
|
||||
description: Using the Surface Hub Hardware Diagnostic Tool to test a device account
|
||||
ms.assetid: a87b7d41-d0a7-4acc-bfa6-b9070f99bc9c
|
||||
ms.reviewer:
|
||||
manager:
|
||||
keywords: Accessibility settings, Settings app, Ease of Access
|
||||
ms.prod: surface-hub
|
||||
ms.sitesec: library
|
||||
|
||||
@ -34,7 +34,7 @@ To get Whiteboard to Whiteboard collaboration up and running, you’ll need to m
|
||||
- Currently not utilizing Office 365 Germany or Office 365 operated by 21Vianet
|
||||
- Surface Hub needs to be updated to Windows 10, version 1607 or newer
|
||||
- Port 443 needs to be open since Whiteboard makes standard https requests
|
||||
- Whiteboard.ms, wbd.ms, \*.onenote.com, and your company's SharePoint tenant domain URLs need to be whitelisted for proxies
|
||||
- Whiteboard.ms, whiteboard.microsoft.com, wbd.ms, \*.onenote.com, and your company's SharePoint tenant domain URLs need to be whitelisted for proxies
|
||||
|
||||
|
||||
>[!NOTE]
|
||||
@ -68,4 +68,5 @@ After you’re done, you can export a copy of the Whiteboard collaboration for y
|
||||
## Related topics
|
||||
|
||||
- [Windows 10 Creators Update for Surface Hub](https://www.microsoft.com/surface/support/surface-hub/windows-10-creators-update-surface-hub)
|
||||
- [Support documentation for Microsoft Whiteboard](https://support.office.com/en-us/article/Whiteboard-Help-0c0f2aa0-b1bb-491c-b814-fd22de4d7c01)
|
||||
|
||||
- [Support documentation for Microsoft Whiteboard](https://support.office.com/article/Whiteboard-Help-0c0f2aa0-b1bb-491c-b814-fd22de4d7c01)
|
||||
|
||||
@ -30,15 +30,16 @@
|
||||
### [Surface System SKU reference](surface-system-sku-reference.md)
|
||||
|
||||
## Manage
|
||||
### [Optimizing wireless connectivity for Surface devices](surface-wireless-connect.md)
|
||||
### [Best practice power settings for Surface devices](maintain-optimal-power-settings-on-Surface-devices.md)
|
||||
### [Battery Limit setting](battery-limit.md)
|
||||
### [Surface Brightness Control](microsoft-surface-brightness-control.md)
|
||||
### [Surface Asset Tag](assettag.md)
|
||||
### [Surface firmware and driver updates](update.md)
|
||||
### [Download the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md)
|
||||
### [Deploy the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md)
|
||||
### [Manage Surface driver and firmware updates](manage-surface-pro-3-firmware-updates.md)
|
||||
### [Surface Dock Updater](surface-dock-updater.md)
|
||||
### [Use System Center Configuration Manager to manage devices with SEMM](use-system-center-configuration-manager-to-manage-devices-with-semm.md)
|
||||
|
||||
|
||||
## Secure
|
||||
### [Manage Surface UEFI settings](manage-surface-uefi-settings.md)
|
||||
@ -46,12 +47,13 @@
|
||||
### [Surface Enterprise Management Mode](surface-enterprise-management-mode.md)
|
||||
### [Enroll and configure Surface devices with SEMM](enroll-and-configure-surface-devices-with-semm.md)
|
||||
### [Unenroll Surface devices from SEMM](unenroll-surface-devices-from-semm.md)
|
||||
### [Use System Center Configuration Manager to manage devices with SEMM](use-system-center-configuration-manager-to-manage-devices-with-semm.md)
|
||||
|
||||
## Support
|
||||
## Troubleshoot
|
||||
### [Fix common Surface problems using the Surface Diagnostic Toolkit for Business](surface-diagnostic-toolkit-for-business-intro.md)
|
||||
### [Deploy Surface Diagnostic Toolkit for Business](surface-diagnostic-toolkit-business.md)
|
||||
### [Use Surface Diagnostic Toolkit for Business in desktop mode](surface-diagnostic-toolkit-desktop-mode.md)
|
||||
### [Run Surface Diagnostic Toolkit for Business using commands](surface-diagnostic-toolkit-command-line.md)
|
||||
#### [Deploy Surface Diagnostic Toolkit for Business](surface-diagnostic-toolkit-business.md)
|
||||
#### [Use Surface Diagnostic Toolkit for Business in desktop mode](surface-diagnostic-toolkit-desktop-mode.md)
|
||||
#### [Run Surface Diagnostic Toolkit for Business using commands](surface-diagnostic-toolkit-command-line.md)
|
||||
### [Surface Data Eraser](microsoft-surface-data-eraser.md)
|
||||
### [Top support solutions for Surface devices](support-solutions-surface.md)
|
||||
### [Change history for Surface documentation](change-history-for-surface.md)
|
||||
|
||||
@ -20,9 +20,9 @@ for Surface devices. It works on Surface Pro 3 and all newer Surface devices.
|
||||
|
||||
## System requirements
|
||||
|
||||
- Surface Pro 3 or later
|
||||
- Surface Pro 3 or later
|
||||
|
||||
- UEFI firmware version 3.9.150.0 or later
|
||||
- UEFI firmware version 3.9.150.0 or later
|
||||
|
||||
## Using Surface Asset Tag
|
||||
|
||||
|
||||
@ -15,6 +15,14 @@ ms.topic: article
|
||||
|
||||
This topic lists new and updated topics in the Surface documentation library.
|
||||
|
||||
## August 2019
|
||||
|
||||
| **New or changed topic** | **Description** |
|
||||
| ------------------------ | --------------- |
|
||||
| [Optimizing wireless connectivity for Surface devices](surface-wireless-connect.md) | New document highlights key wireless connectivity considerations for Surface devices in mobile scenarios. |
|
||||
| [Deploy the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md) | Updated to reflect minor changes in the file naming convention for Surface MSI files. |
|
||||
|
||||
|
||||
## July 2019
|
||||
|
||||
| **New or changed topic** | **Description** |
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Download the latest firmware and drivers for Surface devices (Surface)
|
||||
title: Deploy the latest firmware and drivers for Surface devices (Surface)
|
||||
description: This article provides a list of the available downloads for Surface devices and links to download the drivers and firmware for your device.
|
||||
ms.assetid: 7662BF68-8BF7-43F7-81F5-3580A770294A
|
||||
ms.reviewer:
|
||||
@ -11,27 +11,43 @@ ms.mktglfcycl: deploy
|
||||
ms.pagetype: surface, devices
|
||||
ms.sitesec: library
|
||||
author: dansimp
|
||||
ms.date: 11/15/2018
|
||||
ms.date: 08/13/2018
|
||||
ms.author: dansimp
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Deploying the latest firmware and drivers for Surface devices
|
||||
# Deploy the latest firmware and drivers for Surface devices
|
||||
Although Surface devices are typically automatically updated with the latest device drivers and firmware via Windows Update, sometimes it's necessary to download and install updates manually, such as during a Windows deployment.
|
||||
|
||||
## Downloading MSI files
|
||||
## Download MSI files
|
||||
To download MSI files, refer to the following Microsoft Support page:
|
||||
|
||||
- [Download drivers and firmware for Surface](https://support.microsoft.com/help/4023482/surface-download-drivers-and-firmware-for-surface)<br>
|
||||
Installation files for administrative tools, drivers for accessories, and updates for Windows are also available for some devices.
|
||||
|
||||
## Deploying MSI files
|
||||
Driver and firmware updates for Surface devices containing all required cumulative updates are packaged in separate MSI files for specific versions of Windows 10.
|
||||
In the name of each of these files you will find a Windows build number, this number indicates the minimum supported build required to install the drivers and firmware contained within. Refer to [Windows 10 release information](https://docs.microsoft.com/windows/windows-10/release-information) for a list of the build numbers for each version. For example, to install the drivers contained in SurfacePro6_Win10_16299_1900307_0.msi file you must have Windows 10 Fall Creators Update version 1709, or newer installed on your Surface Pro 6.
|
||||
Driver and firmware updates for Surface devices consisting of all required cumulative updates are packaged in separate MSI files for specific versions of Windows 10.
|
||||
|
||||
The MSI file names contain useful information including the minimum supported Windows build number required to install the drivers and firmware. For example, to install the drivers contained in SurfaceBook_Win10_17763_19.080.2031.0.msi requires Windows 10 Fall Creators Update version 1709 or later installed on your Surface Book.
|
||||
|
||||
To view build numbers for each version, refer to [Windows 10 release information](https://docs.microsoft.com/windows/windows-10/release-information).
|
||||
|
||||
### Surface MSI naming convention
|
||||
Each .MSI file is named in accordance with a formula that begins with the product and Windows release information, followed by the Windows build number and version number, and ending with the revision of version number. SurfacePro6_Win10_16299_1900307_0.msi is classified as follows:
|
||||
Beginning in August 2019, MSI files use the following naming formula:
|
||||
|
||||
- Product > Windows release > Windows build number > Version number > Revision of version number (typically zero).
|
||||
|
||||
**Example:**
|
||||
SurfacePro6_Win10_18362_19.073.44195_0.msi :
|
||||
|
||||
| Product | Windows release | Build | Version | Revision of version |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| SurfacePro6 | Win10 | 18362 | 19.073.44195 | 0 |
|
||||
| | | | Indicates key date and sequence information. | Indicates release history of the update. |
|
||||
| | | | **19:** Signifies the year (2019).<br>**073**: Signifies the month (July) and week of the release (3). <br>**44195**: Signifies the minute of the month that the MSI file was created. |**0:** Signifies it's the first release of version 1907344195 and has not been re-released for any reason. |
|
||||
|
||||
### Legacy Surface MSI naming convention
|
||||
Legacy MSI files prior to August 2019 followed the same overall naming formula but used a different method to derive the version number.
|
||||
|
||||
**Example:**
|
||||
SurfacePro6_Win10_16299_1900307_0.msi :
|
||||
@ -39,8 +55,8 @@ SurfacePro6_Win10_16299_1900307_0.msi :
|
||||
| Product | Windows release | Build | Version | Revision of version |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| SurfacePro6 | Win10 | 16299 | 1900307 | 0 |
|
||||
| | | | Indicates key date and sequence information | Indicates release history of the MSI file |
|
||||
| | | | **19:** Signifies the year (2019)<br>**003**: Signifies that it’s the third release of 2019<br>**07**: Signifies the product version number. (Surface Pro 6 is officially the seventh version of Surface Pro.) | **0:** Signifies it's the first release of version 1900307 and has not been re-released for any reason. |
|
||||
| | | | Indicates key date and sequence information. | Indicates release history of the MSI file. |
|
||||
| | | | **19:** Signifies the year (2019)<br>**003**: Signifies that it’s the third release of 2019.<br>**07**: Signifies the product version number. (Surface Pro 6 is officially the seventh version of Surface Pro.) | **0:** Signifies it's the first release of version 1900307 and has not been re-released for any reason. |
|
||||
|
||||
Look to the **version** number to determine the latest files that contain the most recent security updates. For example, you might need to install the newest file from the following list:
|
||||
|
||||
@ -60,9 +76,9 @@ There are no downloadable firmware or driver updates available for Surface devic
|
||||
|
||||
For more information about deploying Surface drivers and firmware, refer to:
|
||||
|
||||
- [Manage Surface driver and firmware updates](https://docs.microsoft.com/surface/manage-surface-pro-3-firmware-updates).
|
||||
- [Manage Surface driver and firmware updates](https://docs.microsoft.com/surface/manage-surface-pro-3-firmware-updates)
|
||||
|
||||
- [Microsoft Surface support for business](https://www.microsoft.com/surface/support/business).
|
||||
- [Microsoft Surface support for business](https://www.microsoft.com/surface/support/business)
|
||||
|
||||
|
||||
|
||||
|
||||
BIN
devices/surface/images/wifi-band.png
Normal file
BIN
devices/surface/images/wifi-band.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 72 KiB |
BIN
devices/surface/images/wifi-roaming.png
Normal file
BIN
devices/surface/images/wifi-roaming.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 86 KiB |
@ -59,14 +59,14 @@ instant on/instant off functionality typical of smartphones. S0ix, also
|
||||
known as Deepest Runtime Idle Platform State (DRIPS), is the default
|
||||
power mode for Surface devices. Modern standby has two modes:
|
||||
|
||||
- **Connected standby.** The default mode for up-to-the minute
|
||||
delivery of emails, messaging, and cloud-synced data, connected
|
||||
standby keeps Wi-Fi on and maintains network connectivity.
|
||||
- **Connected standby.** The default mode for up-to-the minute
|
||||
delivery of emails, messaging, and cloud-synced data, connected
|
||||
standby keeps Wi-Fi on and maintains network connectivity.
|
||||
|
||||
- **Disconnected standby.** An optional mode for extended battery
|
||||
life, disconnected standby delivers the same instant-on experience
|
||||
and saves power by turning off Wi-Fi, Bluetooth, and related network
|
||||
connectivity.
|
||||
- **Disconnected standby.** An optional mode for extended battery
|
||||
life, disconnected standby delivers the same instant-on experience
|
||||
and saves power by turning off Wi-Fi, Bluetooth, and related network
|
||||
connectivity.
|
||||
|
||||
To learn more about modern standby, refer to the [Microsoft Hardware Dev
|
||||
Center](https://docs.microsoft.com/windows-hardware/design/device-experiences/modern-standby-wake-sources).
|
||||
@ -76,13 +76,13 @@ Center](https://docs.microsoft.com/windows-hardware/design/device-experiences/mo
|
||||
Surface integrates the following features designed to help users
|
||||
optimize the power management experience:
|
||||
|
||||
- [Singular power plan](#singular-power-plan)
|
||||
- [Singular power plan](#singular-power-plan)
|
||||
|
||||
- [Simplified power settings user
|
||||
interface](#simplified-power-settings-user-interface)
|
||||
- [Simplified power settings user
|
||||
interface](#simplified-power-settings-user-interface)
|
||||
|
||||
- [Windows performance power
|
||||
slider](#windows-performance-power-slider)
|
||||
- [Windows performance power
|
||||
slider](#windows-performance-power-slider)
|
||||
|
||||
### Singular power plan
|
||||
|
||||
@ -171,4 +171,4 @@ To learn more, see:
|
||||
|
||||
- [Battery
|
||||
saver](https://docs.microsoft.com/windows-hardware/design/component-guidelines/battery-saver)
|
||||
- [Deploying the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md)
|
||||
- [Deploying the latest firmware and drivers for Surface devices](deploy-the-latest-firmware-and-drivers-for-surface-devices.md)
|
||||
|
||||
@ -25,16 +25,16 @@ designed to help reduce thermal load and lower the overall carbon
|
||||
footprint for deployed Surface devices. The tool automatically dims the screen when not in use and
|
||||
includes the following configuration options:
|
||||
|
||||
- Period of inactivity before dimming the display.
|
||||
- Period of inactivity before dimming the display.
|
||||
|
||||
- Brightness level when dimmed.
|
||||
- Brightness level when dimmed.
|
||||
|
||||
- Maximum brightness level when in use.
|
||||
- Maximum brightness level when in use.
|
||||
|
||||
**To run Surface Brightness Control:**
|
||||
|
||||
- Install surfacebrightnesscontrol.msi on the target device and Surface Brightness Control
|
||||
will begin working immediately.
|
||||
- Install surfacebrightnesscontrol.msi on the target device and Surface Brightness Control
|
||||
will begin working immediately.
|
||||
|
||||
## Configuring Surface Brightness Control
|
||||
|
||||
|
||||
@ -61,8 +61,8 @@ The following steps show you how to create a deployment share for Windows 10 tha
|
||||
>[!NOTE]
|
||||
>As of SDA version 1.96.0405, SDA will install only the components of the Windows ADK that are required for deployment, as follows:
|
||||
> * Deployment tools
|
||||
> * User State Migration Tool (USMT)
|
||||
> * Windows Preinstallation Environment (WinPE)
|
||||
> * User State Migration Tool (USMT)
|
||||
> * Windows Preinstallation Environment (WinPE)
|
||||
|
||||
> [!NOTE]
|
||||
> As of SDA version 1.96.0405, SDA will install and use MDT 2013 Update 2. Earlier versions of SDA are compatible only with MDT 2013 Update 1.
|
||||
@ -75,11 +75,11 @@ The following steps show you how to create a deployment share for Windows 10 tha
|
||||
|
||||
- **Local Path** – Specify or browse to a location on the local storage device where you would like to store the deployment share files for the Windows 10 SDA deployment share. For example, **E:\\SDAWin10\\** is the location specified in Figure 3.
|
||||
|
||||
- **Share Name** – Specify a name for the file share that will be used to access the deployment share on this server from the network. For example, **SDAWin10** is the deployment share name shown in Figure 3. The local path folder is automatically shared by the SDA scripts under this name to the group **Everyone** with a permission level of **Full Control**.
|
||||
- **Share Name** – Specify a name for the file share that will be used to access the deployment share on this server from the network. For example, **SDAWin10** is the deployment share name shown in Figure 3. The local path folder is automatically shared by the SDA scripts under this name to the group **Everyone** with a permission level of **Full Control**.
|
||||
|
||||
- **Windows 10 Deployment Services**
|
||||
|
||||
- Select the **Import boot media into the local Windows Deployment Service** check box if you would like to boot your Surface devices from the network to perform the Windows deployment. Windows Deployment Services must be installed and configured to respond to PXE boot requests. See [Windows Deployment Services Getting Started Guide for Windows Server 2012](https://technet.microsoft.com/library/jj648426.aspx) for more information about how to configure Windows Deployment Services for PXE boot.
|
||||
- Select the **Import boot media into the local Windows Deployment Service** check box if you would like to boot your Surface devices from the network to perform the Windows deployment. Windows Deployment Services must be installed and configured to respond to PXE boot requests. See [Windows Deployment Services Getting Started Guide for Windows Server 2012](https://technet.microsoft.com/library/jj648426.aspx) for more information about how to configure Windows Deployment Services for PXE boot.
|
||||
|
||||
- **Windows 10 Source Files**
|
||||
|
||||
@ -100,25 +100,25 @@ The following steps show you how to create a deployment share for Windows 10 tha
|
||||
|
||||
7. On the **Summary** page confirm your selections and click **Finish** to begin the creation of your deployment share. The process can take several minutes as files are downloaded, the tools are installed, and the deployment share is created. While the SDA scripts are creating your deployment share, an **Installation Progress** window will be displayed, as shown in Figure 5. A typical SDA process includes:
|
||||
|
||||
- Download of Windows ADK
|
||||
- Download of Windows ADK
|
||||
|
||||
- Installation of Windows ADK
|
||||
- Installation of Windows ADK
|
||||
|
||||
- Download of MDT
|
||||
- Download of MDT
|
||||
|
||||
- Installation of MDT
|
||||
- Installation of MDT
|
||||
|
||||
- Download of Surface apps and drivers
|
||||
- Download of Surface apps and drivers
|
||||
|
||||
- Creation of the deployment share
|
||||
- Creation of the deployment share
|
||||
|
||||
- Import of Windows installation files into the deployment share
|
||||
- Import of Windows installation files into the deployment share
|
||||
|
||||
- Import of the apps and drivers into the deployment share
|
||||
- Import of the apps and drivers into the deployment share
|
||||
|
||||
- Creation of rules and task sequences for Windows deployment
|
||||
- Creation of rules and task sequences for Windows deployment
|
||||
|
||||
|
||||
|
||||
|
||||
*Figure 5. The Installation Progress window*
|
||||
|
||||
|
||||
@ -25,7 +25,7 @@ These are the top Microsoft Support solutions for common issues experienced when
|
||||
|
||||
## Screen cracked or scratched issues
|
||||
|
||||
- [Cracked screen and physical damage](https://www.microsoft.com/surface/support/warranty-service-and-recovery/surface-is-damaged)
|
||||
- [Contact Microsoft Support](https://support.microsoft.com/en-us/supportforbusiness/productselection)
|
||||
|
||||
|
||||
## Device cover or keyboard issues
|
||||
|
||||
@ -29,10 +29,9 @@ Before you run the diagnostic tool, make sure you have the latest Windows update
|
||||
**To run the Surface Diagnostic Toolkit for Business:**
|
||||
|
||||
1. Download the [Surface Diagnostic Toolkit for Business](https://aka.ms/SDT4B).
|
||||
2. Select Run and follow the on-screen instructions.
|
||||
|
||||
The diagnosis and repair time averages 15 minutes but could take an hour or longer, depending on internet connection speed and the number of updates or repairs required. For more detailed information on Surface Diagnostic Toolkit for Business, refer to [Deploy Surface Diagnostic Toolkit for Business](https://docs.microsoft.com/surface/surface-diagnostic-toolkit-business).
|
||||
2. Select Run and follow the on-screen instructions. For full details, refer to [Deploy Surface Diagnostic Toolkit for Business](https://docs.microsoft.com/surface/surface-diagnostic-toolkit-business).
|
||||
|
||||
The diagnosis and repair time averages 15 minutes but could take an hour or longer, depending on internet connection speed and the number of updates or repairs required.
|
||||
# If you still need help
|
||||
|
||||
If the Surface Diagnostic Toolkit for Business didn’t fix the problem, you can also:
|
||||
|
||||
84
devices/surface/surface-wireless-connect.md
Normal file
84
devices/surface/surface-wireless-connect.md
Normal file
@ -0,0 +1,84 @@
|
||||
---
|
||||
title: Optimizing wireless connectivity for Surface devices
|
||||
description: This topic provides guidance around recommended wireless connectivity settings for network admins and users.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: dansimp
|
||||
ms.localizationpriority: medium
|
||||
ms.author: dansimp
|
||||
ms.topic: article
|
||||
ms.date: 08/15/2019
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
---
|
||||
# Optimizing wireless connectivity for Surface devices
|
||||
|
||||
## Introduction
|
||||
|
||||
To stay connected with all-day battery life, Surface devices implement wireless connectivity settings that balance performance and power conservation. Outside of the most demanding mobility scenarios, users can maintain sufficient wireless connectivity without modifying default network adapter or related settings.
|
||||
|
||||
In congested network environments, organizations can implement purpose-built wireless protocols across multiple network access points to facilitate roaming. This page highlights key wireless connectivity considerations in mobile scenarios utilizing Surface Pro 3 and later, Surface Book, Surface Laptop, and Surface Go.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
This document assumes you have successfully deployed a wireless network that supports 802.11n (Wi-Fi 4) or later in accordance with best practice recommendations from leading equipment vendors.
|
||||
|
||||
## Configuring access points for optimal roaming capabilities
|
||||
|
||||
If you’re managing a wireless network that’s typically accessed by many different types of client devices, it’s recommended to enable specific protocols on access points (APs) in your WLAN, as described in [Fast Roaming with 802.11k, 802.11v, and 802.11r](https://docs.microsoft.com/en-us/windows-hardware/drivers/network/fast-roaming-with-802-11k--802-11v--and-802-11r). Surface devices can take advantage of the following wireless protocols:
|
||||
|
||||
- **802.11r.** “**Fast BSS Transition”** accelerates connecting to new wireless access points by reducing the number of frames required before your device can access another AP as you move around with your device.
|
||||
- **802.11k.** **“Neighbor Reports”** provides devices with information on current conditions at neighboring access points. It can help your Surface device choose the best AP using criteria other than signal strength such as AP utilization.
|
||||
|
||||
Surface Go devices can also use 802.11v “BSS Transition Management Frames,” which functions much like 802.11k in providing information on nearby candidate APs.
|
||||
|
||||
## Managing user settings
|
||||
|
||||
You can achieve optimal roaming capabilities through a well-designed network that supports 802.11r and 802.11k across all access points. Ensuring that your network is properly configured to provide users with the best wireless experience is the recommended approach versus attempting to manage user settings on individual devices. Moreover, in many corporate environments Surface device users won’t be able to access advanced network adapter settings without explicit permissions or local admin rights. In other lightly managed networks, users can benefit by knowing how specific settings can impact their ability to remain connected.
|
||||
|
||||
### Recommended user settings and best practices
|
||||
|
||||
In certain situations, modifying advanced network adapter settings built into Surface devices may facilitate a more reliable connection. Keep in mind however that an inability to connect to wireless resources is more often due to an access point issue, networking design flaw, or environmental site issue.
|
||||
|
||||
> [!NOTE]
|
||||
> How you hold your Surface Pro or Surface Go can also affect signal strength. If you’re experiencing a loss of bandwidth, check that you’re not holding the top of the display, where the Wi-Fi radio receiver is located. Although holding the top of the display does not block wireless signals, it can trigger the device driver to initiate changes that reduce connectivity.
|
||||
|
||||
### Keep default Auto setting for dual bandwidth capability
|
||||
On most Surface devices, you can configure client network adapter settings to only connect to wireless APs over 5 gigahertz (GHz), only connect over 2.4 GHz, or let the operating system choose the best option (default Auto setting).
|
||||
|
||||
**To access network adapter settings go to:**
|
||||
|
||||
- **Start** > **Control panel** > **Network and Sharing Center** > **your Wi-Fi adapter** > **Properties** > **Configure** > **Advanced**.
|
||||
|
||||
 <br>
|
||||
|
||||
Keep in mind that 2.4 GHz has some advantages over 5 GHz: It extends further and more easily penetrates through walls or other solid objects. Unless you have a clear use case that warrants connecting to 5 GHz, it’s recommended to leave the Band setting in the default state to avoid possible adverse consequences. For example:
|
||||
|
||||
|
||||
- Many hotspots found in hotels, coffee shops, and airports still only use 2.4 GHz, effectively blocking access to devices if Band is set to 5 GHz Only.
|
||||
- Since Miracast wireless display connections require the initial handshake to be completed over 2.4 GHz channels, devices won’t be able to connect at 5 GHz Only.
|
||||
|
||||
> [!NOTE]
|
||||
> By default Surface devices will prefer connecting to 5 GHz if available. However, to preserve power in a low battery state, Surface will first look for a 2.4 GHz connection.
|
||||
|
||||
You can also toggle the band setting as needed to suit your environment. For example, users living in high density apartment buildings with multiple Wi-Fi hotspots — amid the presence of consumer devices all broadcasting via 2.4 GHz — will likely benefit by setting their Surface device to connect on 5 GHz only and then revert to Auto when needed.
|
||||
|
||||
### Roaming aggressiveness settings on Surface Go
|
||||
|
||||
Front-line workers using Surface Go may wish to select a signal strength threshold that prompts the device to search for a new access point when signal strength drops (roaming aggressiveness). By default, Surface devices attempt to roam to a new access point if the signal strength drops below **Medium** (50 percent signal strength). Note that whenever you increase roaming aggressiveness, you accelerate battery power consumption.
|
||||
|
||||
Leave the roaming aggressiveness setting in the default state unless you’re encountering connectivity issues in specific mobile scenarios such as conducting environmental site inspections while also maintaining voice and video connectivity during a conference meeting. If you don’t notice any improvement revert to the default **Medium** state.
|
||||
|
||||
**To enable roaming aggressiveness on Surface Go:**
|
||||
|
||||
1. Go to **Start > Control Panel** > **Network and Internet** > **Network and Sharing Center.**
|
||||
2. Under **Connections** select **Wi-Fi** and then select **Properties.**
|
||||
3. Select **Client for Microsoft Networks** and then select **Configure**
|
||||
4. Select **Advanced** > **Roaming Aggressiveness** and choose ****your preferred value from the drop-down menu.
|
||||
|
||||
 <br>
|
||||
|
||||
## Conclusion
|
||||
|
||||
Surface devices are designed with default settings for optimal wireless connectivity balanced alongside the need to preserve battery life. The most effective way of enabling reliable connectivity for Surface devices is through a well-designed network that supports 802.11r and 802.11k. Users can adjust network adapter settings or roaming aggressiveness but should only do so in response to specific environmental factors and revert to default state if there’s no noticeable improvement.
|
||||
@ -14,7 +14,7 @@ ms.reviewer:
|
||||
manager: dansimp
|
||||
---
|
||||
|
||||
# Upgrade Surface devices to Windows 10 with Microsoft Deployment Toolkit
|
||||
# Upgrade Surface devices to Windows 10 with Microsoft Deployment Toolkit
|
||||
|
||||
#### Applies to
|
||||
* Surface Pro 3
|
||||
|
||||
@ -103,39 +103,45 @@ The sample scripts include examples of how to set Surface UEFI settings and how
|
||||
|
||||
### Specify certificate and package names
|
||||
|
||||
The first region of the script that you need to modify is the portion that specifies and loads the SEMM certificate, and also indicates the names for the SEMM configuration package and SEMM reset package. The certificate and package names are specified on lines 56 through 67 in the ConfigureSEMM.ps1 script:
|
||||
The first region of the script that you need to modify is the portion that specifies and loads the SEMM certificate, and also indicates SurfaceUEFIManager version, the names for the SEMM configuration package and SEMM reset package. The certificate name and SurfaceUEFIManager version are specified on lines 56 through 73 in the ConfigureSEMM.ps1 script:
|
||||
|
||||
```
|
||||
56 $WorkingDirPath = split-path -parent $MyInvocation.MyCommand.Definition
|
||||
57 $packageRoot = "$WorkingDirPath\Config"
|
||||
58
|
||||
59 if (-not (Test-Path $packageRoot)) { New-Item -ItemType Directory -Force -Path $packageRoot }
|
||||
60 Copy-Item "$WorkingDirPath\FabrikamOwnerSigner.pfx" $packageRoot
|
||||
61
|
||||
62 $privateOwnerKey = Join-Path -Path $packageRoot -ChildPath "FabrikamOwnerSigner.pfx"
|
||||
63 $ownerPackageName = Join-Path -Path $packageRoot -ChildPath "FabrikamSignerProvisioningPackage.pkg"
|
||||
64 $resetPackageName = Join-Path -Path $packageRoot -ChildPath "FabrikamUniversalResetPackage.pkg"
|
||||
65
|
||||
66 # If your PFX file requires a password then it can be set here, otherwise use a blank string.
|
||||
67 $password = "1234"
|
||||
58 $certName = "FabrikamSEMMSample.pfx"
|
||||
59 $DllVersion = "2.26.136.0"
|
||||
60
|
||||
61 $certNameOnly = [System.IO.Path]::GetFileNameWithoutExtension($certName)
|
||||
62 $ProvisioningPackage = $certNameOnly + "ProvisioningPackage.pkg"
|
||||
63 $ResetPackage = $certNameOnly + "ResetPackage.pkg"
|
||||
64
|
||||
65 if (-not (Test-Path $packageRoot)) { New-Item -ItemType Directory -Force -Path $packageRoot }
|
||||
66 Copy-Item "$WorkingDirPath\$certName" $packageRoot
|
||||
67
|
||||
68 $privateOwnerKey = Join-Path -Path $packageRoot -ChildPath $certName
|
||||
69 $ownerPackageName = Join-Path -Path $packageRoot -ChildPath $ProvisioningPackage
|
||||
70 $resetPackageName = Join-Path -Path $packageRoot -ChildPath $ResetPackage
|
||||
71
|
||||
72 # If your PFX file requires a password then it can be set here, otherwise use a blank string.
|
||||
73 $password = "1234"
|
||||
```
|
||||
|
||||
Replace the **FabrikamOwnerSigner.pfx** value for the **$privateOwnerKey** variable with the name of your SEMM Certificate file on both lines 60 and 62. The script will create a working directory (named Config) in the folder where your scripts are located, and will then copy the certificate file to this working directory.
|
||||
Replace the **FabrikamSEMMSample.pfx** value for the **$certName** variable with the name of your SEMM Certificate file on line 58. The script will create a working directory (named Config) in the folder where your scripts are located, and will then copy the certificate file to this working directory.
|
||||
|
||||
Replace the **FabrikamSignerProvisioningPackage.pkg** and **FabrikamUniversalResetPackage.pkg** values on lines 63 and 64 to define the **$ownerPackageName** and **$resetPackageName** variables with your desired names for the SEMM configuration and reset packages. These packages will also be created in the Config directory and hold the configuration for Surface UEFI settings and permissions generated by the script.
|
||||
Owner package and reset package will also be created in the Config directory and hold the configuration for Surface UEFI settings and permissions generated by the script.
|
||||
|
||||
On line 67, replace the value of the **$password** variable, from 1234, to the password for your certificate file. If a password is not required, delete the **1234** text.
|
||||
On line 73, replace the value of the **$password** variable, from 1234, to the password for your certificate file. If a password is not required, delete the **1234** text.
|
||||
|
||||
>[!Note]
|
||||
>The last two characters of the certificate thumbprint are required to enroll a device in SEMM. This script will display these digits to the user, which allows the user or technician to record these digits before the system reboots to enroll the device in SEMM. The script uses the following code, found on lines 144-149, to accomplish this:
|
||||
>The last two characters of the certificate thumbprint are required to enroll a device in SEMM. This script will display these digits to the user, which allows the user or technician to record these digits before the system reboots to enroll the device in SEMM. The script uses the following code, found on lines 150-155, to accomplish this:
|
||||
|
||||
```
|
||||
144 # Device owners will need the last two characters of the thumbprint to accept SEMM ownership.
|
||||
145 # For convenience we get the thumbprint here and present to the user.
|
||||
146 $pw = ConvertTo-SecureString $password -AsPlainText -Force
|
||||
147 $certPrint = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
|
||||
148 $certPrint.Import($privateOwnerKey, $pw, [System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]::DefaultKeySet)
|
||||
149 Write-Host "Thumbprint =" $certPrint.Thumbprint
|
||||
150 # Device owners will need the last two characters of the thumbprint to accept SEMM ownership.
|
||||
151 # For convenience we get the thumbprint here and present to the user.
|
||||
152 $pw = ConvertTo-SecureString $password -AsPlainText -Force
|
||||
153 $certPrint = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
|
||||
154 $certPrint.Import($privateOwnerKey, $pw, [System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]::DefaultKeySet)
|
||||
155 Write-Host "Thumbprint =" $certPrint.Thumbprint
|
||||
```
|
||||
|
||||
Administrators with access to the certificate file (.pfx) can read the thumbprint at any time by opening the .pfx file in CertMgr. To view the thumbprint with CertMgr, follow this process:
|
||||
@ -153,46 +159,47 @@ Administrators with access to the certificate file (.pfx) can read the thumbprin
|
||||
|
||||
### Configure permissions
|
||||
|
||||
The first region of the script where you will specify the configuration for Surface UEFI is the **Configure Permissions** region. This region begins at line 202 in the sample script with the comment **# Configure Permissions** and continues to line 238. The following code fragment first sets permissions to all Surface UEFI settings so that they may be modified by SEMM only, then adds explicit permissions to allow the local user to modify the Surface UEFI password, TPM, and front and rear cameras:
|
||||
The first region of the script where you will specify the configuration for Surface UEFI is the **Configure Permissions** region. This region begins at line 210 in the sample script with the comment **# Configure Permissions** and continues to line 247. The following code fragment first sets permissions to all Surface UEFI settings so that they may be modified by SEMM only, then adds explicit permissions to allow the local user to modify the Surface UEFI password, TPM, and front and rear cameras:
|
||||
|
||||
```
|
||||
202 # Configure Permissions
|
||||
203 foreach ($uefiV2 IN $surfaceDevices.Values) {
|
||||
204 # Here we define which "identities" will be allowed to modify which settings
|
||||
205 # PermissionSignerOwner = The primary SEMM enterprise owner identity
|
||||
206 # PermissionLocal = The user when booting to the UEFI pre-boot GUI
|
||||
207 # PermissionSignerUser, PermissionSignerUser1, PermissionSignerUser2 =
|
||||
208 # Additional user identities created so that the signer owner
|
||||
209 # can delegate permission control for some settings.
|
||||
210 $ownerOnly = [Microsoft.Surface.IUefiSetting]::PermissionSignerOwner
|
||||
211 $ownerAndLocalUser = ([Microsoft.Surface.IUefiSetting]::PermissionSignerOwner -bor [Microsoft.Surface.IUefiSetting]::PermissionLocal)
|
||||
212
|
||||
213 # Make all permissions owner only by default
|
||||
214 foreach ($setting IN $uefiV2.Settings.Values) {
|
||||
215 $setting.ConfiguredPermissionFlags = $ownerOnly
|
||||
216 }
|
||||
217 # Allow the local user to change their own password
|
||||
218 $uefiV2.SettingsById[501].ConfiguredPermissionFlags = $ownerAndLocalUser
|
||||
219
|
||||
220 # Allow the local user to change the state of the TPM
|
||||
221 $uefiV2.Settings["Trusted Platform Module (TPM)"].ConfiguredPermissionFlags = $ownerAndLocalUser
|
||||
222
|
||||
223 # Allow the local user to change the state of the Front and Rear cameras
|
||||
224 $uefiV2.SettingsById[302].ConfiguredPermissionFlags = $ownerAndLocalUser
|
||||
225 $uefiV2.SettingsById[304].ConfiguredPermissionFlags = $ownerAndLocalUser
|
||||
226
|
||||
227
|
||||
228 # Create a unique package name based on family and LSV.
|
||||
229 # We will choose a name that can be parsed by later scripts.
|
||||
230 $packageName = $uefiV2.SurfaceUefiFamily + "^Permissions^" + $lsv + ".pkg"
|
||||
231 $fullPackageName = Join-Path -Path $packageRoot -ChildPath $packageName
|
||||
232
|
||||
233 # Build and sign the Permission package then save it to a file.
|
||||
234 $permissionPackageStream = $uefiV2.BuildAndSignPermissionPackage($privateOwnerKey, $password, "", $null, $lsv)
|
||||
235 $permissionPackage = New-Object System.IO.Filestream($fullPackageName, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
|
||||
236 $permissionPackageStream.CopyTo($permissionPackage)
|
||||
237 $permissionPackage.Close()
|
||||
238 }
|
||||
210 # Configure Permissions
|
||||
211 foreach ($uefiV2 IN $surfaceDevices.Values) {
|
||||
212 if ($uefiV2.SurfaceUefiFamily -eq $Device.Model) {
|
||||
213 Write-Host "Configuring permissions"
|
||||
214 Write-Host $Device.Model
|
||||
215 Write-Host "======================="
|
||||
216
|
||||
217 # Here we define which "identities" will be allowed to modify which settings
|
||||
218 # PermissionSignerOwner = The primary SEMM enterprise owner identity
|
||||
219 # PermissionLocal = The user when booting to the UEFI pre-boot GUI
|
||||
220 # PermissionSignerUser, PermissionSignerUser1, PermissionSignerUser2 =
|
||||
221 # Additional user identities created so that the signer owner
|
||||
222 # can delegate permission control for some settings.
|
||||
223 $ownerOnly = [Microsoft.Surface.IUefiSetting]::PermissionSignerOwner
|
||||
224 $ownerAndLocalUser = ([Microsoft.Surface.IUefiSetting]::PermissionSignerOwner -bor [Microsoft.Surface.IUefiSetting]::PermissionLocal)
|
||||
225
|
||||
226 # Make all permissions owner only by default
|
||||
227 foreach ($setting IN $uefiV2.Settings.Values) {
|
||||
228 $setting.ConfiguredPermissionFlags = $ownerOnly
|
||||
229 }
|
||||
230
|
||||
231 # Allow the local user to change their own password
|
||||
232 $uefiV2.SettingsById[501].ConfiguredPermissionFlags = $ownerAndLocalUser
|
||||
233
|
||||
234 Write-Host ""
|
||||
235
|
||||
236 # Create a unique package name based on family and LSV.
|
||||
237 # We will choose a name that can be parsed by later scripts.
|
||||
238 $packageName = $uefiV2.SurfaceUefiFamily + "^Permissions^" + $lsv + ".pkg"
|
||||
239 $fullPackageName = Join-Path -Path $packageRoot -ChildPath $packageName
|
||||
240
|
||||
241 # Build and sign the Permission package then save it to a file.
|
||||
242 $permissionPackageStream = $uefiV2.BuildAndSignPermissionPackage($privateOwnerKey, $password, "", $null, $lsv)
|
||||
243 $permissionPackage = New-Object System.IO.Filestream($fullPackageName, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
|
||||
244 $permissionPackageStream.CopyTo($permissionPackage)
|
||||
245 $permissionPackage.Close()
|
||||
246 }
|
||||
247 }
|
||||
```
|
||||
|
||||
Each **$uefiV2** variable identifies a Surface UEFI setting by setting name or ID, and then configures the permissions to one of the following values:
|
||||
@ -204,69 +211,169 @@ You can find information about the available settings names and IDs for Surface
|
||||
|
||||
### Configure settings
|
||||
|
||||
The second region of the script where you will specify the configuration for Surface UEFI is the **Configure Settings** region of the ConfigureSEMM.ps1 script, which configures whether each setting is enabled or disabled. The sample script includes instructions to set all settings to their default values. The script then provides explicit instructions to disable IPv6 for PXE Boot and to leave the Surface UEFI Administrator password unchanged. You can find this region beginning with the **# Configure Settings** comment at line 282 through line 312 in the sample script. The region appears as follows:
|
||||
The second region of the script where you will specify the configuration for Surface UEFI is the **Configure Settings** region of the ConfigureSEMM.ps1 script, which configures whether each setting is enabled or disabled. The sample script includes instructions to set all settings to their default values. The script then provides explicit instructions to disable IPv6 for PXE Boot and to leave the Surface UEFI Administrator password unchanged. You can find this region beginning with the **# Configure Settings** comment at line 291 through line 335 in the sample script. The region appears as follows:
|
||||
|
||||
```
|
||||
282 # Configure Settings
|
||||
283 foreach ($uefiV2 IN $surfaceDevices.Values) {
|
||||
284 # In this demo, we will start by setting every setting to the default factory setting.
|
||||
285 # You may want to start by doing this in your scripts
|
||||
286 # so that every setting gets set to a known state.
|
||||
287 foreach ($setting IN $uefiV2.Settings.Values) {
|
||||
288 $setting.ConfiguredValue = $setting.DefaultValue
|
||||
289 }
|
||||
290
|
||||
291 # If you want to set something to a different value from the default,
|
||||
292 # here are examples of how to accomplish this.
|
||||
293 $uefiV2.Settings["IPv6 for PXE Boot"].ConfiguredValue = "Disabled"
|
||||
294
|
||||
295 # If you want to leave the setting unmodified, set it to $null
|
||||
296 # PowerShell has issues setting things to $null so ClearConfiguredValue()
|
||||
297 # is supplied to do this explicitly.
|
||||
298 # Here is an example of leaving the UEFI administrator password as-is,
|
||||
299 # even after we initially set it to factory default above.
|
||||
300 $uefiV2.SettingsById[501].ClearConfiguredValue()
|
||||
301
|
||||
302 # Create a unique package name based on family and LSV.
|
||||
303 # We will choose a name that can be parsed by later scripts.
|
||||
304 $packageName = $uefiV2.SurfaceUefiFamily + "^Settings^" + $lsv + ".pkg"
|
||||
305 $fullPackageName = Join-Path -Path $packageRoot -ChildPath $packageName
|
||||
306
|
||||
307 # Build and sign the Settings package then save it to a file.
|
||||
308 $settingsPackageStream = $uefiV2.BuildAndSignSecuredSettingsPackage($privateOwnerKey, $password, "", $null, $lsv)
|
||||
309 $settingsPackage = New-Object System.IO.Filestream($fullPackageName, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
|
||||
310 $settingsPackageStream.CopyTo($settingsPackage)
|
||||
311 $settingsPackage.Close()
|
||||
312 }
|
||||
291 # Configure Settings
|
||||
292 foreach ($uefiV2 IN $surfaceDevices.Values) {
|
||||
293 if ($uefiV2.SurfaceUefiFamily -eq $Device.Model) {
|
||||
294 Write-Host "Configuring settings"
|
||||
295 Write-Host $Device.Model
|
||||
296 Write-Host "===================="
|
||||
297
|
||||
298 # In this demo, we will start by setting every setting to the default factory setting.
|
||||
299 # You may want to start by doing this in your scripts
|
||||
300 # so that every setting gets set to a known state.
|
||||
301 foreach ($setting IN $uefiV2.Settings.Values) {
|
||||
302 $setting.ConfiguredValue = $setting.DefaultValue
|
||||
303 }
|
||||
304
|
||||
305 $EnabledValue = "Enabled"
|
||||
306 $DisabledValue = "Disabled"
|
||||
307
|
||||
308 # If you want to set something to a different value from the default,
|
||||
309 # here are examples of how to accomplish this.
|
||||
310 # This disables IPv6 PXE boot by name:
|
||||
311 $uefiV2.Settings["IPv6 for PXE Boot"].ConfiguredValue = $DisabledValue
|
||||
312
|
||||
313 # This disables IPv6 PXE Boot by ID:
|
||||
314 $uefiV2.SettingsById[400].ConfiguredValue = $DisabledValue
|
||||
315
|
||||
316 Write-Host ""
|
||||
317
|
||||
318 # If you want to leave the setting unmodified, set it to $null
|
||||
319 # PowerShell has issues setting things to $null so ClearConfiguredValue()
|
||||
320 # is supplied to do this explicitly.
|
||||
321 # Here is an example of leaving the UEFI administrator password as-is,
|
||||
322 # even after we initially set it to factory default above.
|
||||
323 $uefiV2.SettingsById[501].ClearConfiguredValue()
|
||||
324
|
||||
325 # Create a unique package name based on family and LSV.
|
||||
326 # We will choose a name that can be parsed by later scripts.
|
||||
327 $packageName = $uefiV2.SurfaceUefiFamily + "^Settings^" + $lsv + ".pkg"
|
||||
328 $fullPackageName = Join-Path -Path $packageRoot -ChildPath $packageName
|
||||
329
|
||||
330 # Build and sign the Settings package then save it to a file.
|
||||
331 $settingsPackageStream = $uefiV2.BuildAndSignSecuredSettingsPackage($privateOwnerKey, $password, "", $null, $lsv)
|
||||
332 $settingsPackage = New-Object System.IO.Filestream($fullPackageName, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
|
||||
333 $settingsPackageStream.CopyTo($settingsPackage)
|
||||
334 $settingsPackage.Close()
|
||||
335 }
|
||||
```
|
||||
|
||||
Like the permissions set in the **Configure Permissions** section of the script, the configuration of each Surface UEFI setting is performed by defining the **$uefiV2** variable. For each line defining the **$uefiV2** variable, a Surface UEFI setting is identified by setting name or ID and the configured value is set to **Enabled** or **Disabled**.
|
||||
|
||||
If you do not want to alter the configuration of a Surface UEFI setting, for example to ensure that the Surface UEFI administrator password is not cleared by the action of resetting all Surface UEFI settings to their default, you can use **ClearConfiguredValue()** to enforce that this setting will not be altered. In the sample script, this is used on line 300 to prevent the clearing of the Surface UEFI Administrator password, identified in the sample script by its setting ID, **501**.
|
||||
If you do not want to alter the configuration of a Surface UEFI setting, for example to ensure that the Surface UEFI administrator password is not cleared by the action of resetting all Surface UEFI settings to their default, you can use **ClearConfiguredValue()** to enforce that this setting will not be altered. In the sample script, this is used on line 323 to prevent the clearing of the Surface UEFI Administrator password, identified in the sample script by its setting ID, **501**.
|
||||
|
||||
You can find information about the available settings names and IDs for Surface UEFI in the [Settings Names and IDs](#settings-names-and-ids) section later in this article.
|
||||
|
||||
### Settings registry key
|
||||
|
||||
To identify enrolled systems for Configuration Manager, the ConfigureSEMM.ps1 script writes a registry key that can be used to identify enrolled systems as having been installed with the SEMM configuration script. This key can be found at the following location:
|
||||
To identify enrolled systems for Configuration Manager, the ConfigureSEMM.ps1 script writes registry keys that can be used to identify enrolled systems as having been installed with the SEMM configuration script. These keys can be found at the following location:
|
||||
|
||||
`HKLM\SOFTWARE\Microsoft\Surface\SEMM\Enabled_Version1000`
|
||||
`HKLM\SOFTWARE\Microsoft\Surface\SEMM`
|
||||
|
||||
The following code fragment, found on lines 352-363, is used to write this registry key:
|
||||
The following code fragment, found on lines 380-477, is used to write these registry keys:
|
||||
|
||||
```
|
||||
352 $SurfaceRegKey = "HKLM:\SOFTWARE\Microsoft\Surface\SEMM"
|
||||
353 New-RegKey $SurfaceRegKey
|
||||
354 $SurfaceRegValue = Get-ItemProperty $SurfaceRegKey Enabled_Version1000 -ErrorAction SilentlyContinue
|
||||
355
|
||||
356 If ($SurfaceRegValue -eq $null)
|
||||
357 {
|
||||
358 New-ItemProperty -Path $SurfaceRegKey -Name Enabled_Version1000 -PropertyType String -Value 1 | Out-Null
|
||||
359 }
|
||||
360 Else
|
||||
361 {
|
||||
362 Set-ItemProperty -Path $SurfaceRegKey -Name Enabled_Version1000 -Value 1
|
||||
363 }
|
||||
380 # For SCCM or other management solutions that wish to know what version is applied, tattoo the LSV and current DateTime (in UTC) to the registry:
|
||||
381 $UTCDate = (Get-Date).ToUniversalTime().ToString()
|
||||
382 $certIssuer = $certPrint.Issuer
|
||||
383 $certSubject = $certPrint.Subject
|
||||
384
|
||||
385 $SurfaceRegKey = "HKLM:\SOFTWARE\Microsoft\Surface\SEMM"
|
||||
386 New-RegKey $SurfaceRegKey
|
||||
387 $LSVRegValue = Get-ItemProperty $SurfaceRegKey LSV -ErrorAction SilentlyContinue
|
||||
388 $DateTimeRegValue = Get-ItemProperty $SurfaceRegKey LastConfiguredUTC -ErrorAction SilentlyContinue
|
||||
389 $OwnershipSessionIdRegValue = Get-ItemProperty $SurfaceRegKey OwnershipSessionId -ErrorAction SilentlyContinue
|
||||
390 $PermissionSessionIdRegValue = Get-ItemProperty $SurfaceRegKey PermissionSessionId -ErrorAction SilentlyContinue
|
||||
391 $SettingsSessionIdRegValue = Get-ItemProperty $SurfaceRegKey SettingsSessionId -ErrorAction SilentlyContinue
|
||||
392 $IsResetRegValue = Get-ItemProperty $SurfaceRegKey IsReset -ErrorAction SilentlyContinue
|
||||
393 $certUsedRegValue = Get-ItemProperty $SurfaceRegKey CertName -ErrorAction SilentlyContinue
|
||||
394 $certIssuerRegValue = Get-ItemProperty $SurfaceRegKey CertIssuer -ErrorAction SilentlyContinue
|
||||
395 $certSubjectRegValue = Get-ItemProperty $SurfaceRegKey CertSubject -ErrorAction SilentlyContinue
|
||||
396
|
||||
397
|
||||
398 If ($LSVRegValue -eq $null)
|
||||
399 {
|
||||
400 New-ItemProperty -Path $SurfaceRegKey -Name LSV -PropertyType DWORD -Value $lsv | Out-Null
|
||||
401 }
|
||||
402 Else
|
||||
403 {
|
||||
404 Set-ItemProperty -Path $SurfaceRegKey -Name LSV -Value $lsv
|
||||
405 }
|
||||
406
|
||||
407 If ($DateTimeRegValue -eq $null)
|
||||
408 {
|
||||
409 New-ItemProperty -Path $SurfaceRegKey -Name LastConfiguredUTC -PropertyType String -Value $UTCDate | Out-Null
|
||||
410 }
|
||||
411 Else
|
||||
412 {
|
||||
413 Set-ItemProperty -Path $SurfaceRegKey -Name LastConfiguredUTC -Value $UTCDate
|
||||
414 }
|
||||
415
|
||||
416 If ($OwnershipSessionIdRegValue -eq $null)
|
||||
417 {
|
||||
418 New-ItemProperty -Path $SurfaceRegKey -Name OwnershipSessionId -PropertyType String -Value $ownerSessionIdValue | Out-Null
|
||||
419 }
|
||||
420 Else
|
||||
421 {
|
||||
422 Set-ItemProperty -Path $SurfaceRegKey -Name OwnershipSessionId -Value $ownerSessionIdValue
|
||||
423 }
|
||||
424
|
||||
425 If ($PermissionSessionIdRegValue -eq $null)
|
||||
426 {
|
||||
427 New-ItemProperty -Path $SurfaceRegKey -Name PermissionSessionId -PropertyType String -Value $permissionSessionIdValue | Out-Null
|
||||
428 }
|
||||
429 Else
|
||||
430 {
|
||||
431 Set-ItemProperty -Path $SurfaceRegKey -Name PermissionSessionId -Value $permissionSessionIdValue
|
||||
432 }
|
||||
433
|
||||
434 If ($SettingsSessionIdRegValue -eq $null)
|
||||
435 {
|
||||
436 New-ItemProperty -Path $SurfaceRegKey -Name SettingsSessionId -PropertyType String -Value $settingsSessionIdValue | Out-Null
|
||||
437 }
|
||||
438 Else
|
||||
439 {
|
||||
440 Set-ItemProperty -Path $SurfaceRegKey -Name SettingsSessionId -Value $settingsSessionIdValue
|
||||
441 }
|
||||
442
|
||||
443 If ($IsResetRegValue -eq $null)
|
||||
444 {
|
||||
445 New-ItemProperty -Path $SurfaceRegKey -Name IsReset -PropertyType DWORD -Value 0 | Out-Null
|
||||
446 }
|
||||
447 Else
|
||||
448 {
|
||||
449 Set-ItemProperty -Path $SurfaceRegKey -Name IsReset -Value 0
|
||||
450 }
|
||||
451
|
||||
452 If ($certUsedRegValue -eq $null)
|
||||
453 {
|
||||
454 New-ItemProperty -Path $SurfaceRegKey -Name CertName -PropertyType String -Value $certName | Out-Null
|
||||
455 }
|
||||
456 Else
|
||||
457 {
|
||||
458 Set-ItemProperty -Path $SurfaceRegKey -Name CertName -Value $certName
|
||||
459 }
|
||||
460
|
||||
461 If ($certIssuerRegValue -eq $null)
|
||||
462 {
|
||||
463 New-ItemProperty -Path $SurfaceRegKey -Name CertIssuer -PropertyType String -Value $certIssuer | Out-Null
|
||||
464 }
|
||||
465 Else
|
||||
466 {
|
||||
467 Set-ItemProperty -Path $SurfaceRegKey -Name CertIssuer -Value $certIssuer
|
||||
468 }
|
||||
469
|
||||
470 If ($certSubjectRegValue -eq $null)
|
||||
471 {
|
||||
472 New-ItemProperty -Path $SurfaceRegKey -Name CertSubject -PropertyType String -Value $certSubject | Out-Null
|
||||
473 }
|
||||
474 Else
|
||||
475 {
|
||||
476 Set-ItemProperty -Path $SurfaceRegKey -Name CertSubject -Value $certSubject
|
||||
477 }
|
||||
```
|
||||
|
||||
### Settings names and IDs
|
||||
|
||||
@ -28,6 +28,7 @@
|
||||
"audience": "windows-education",
|
||||
"ms.topic": "article",
|
||||
"ms.technology": "windows",
|
||||
"manager": "laurawi",
|
||||
"audience": "ITPro",
|
||||
"breadcrumb_path": "/education/breadcrumb/toc.json",
|
||||
"ms.date": "05/09/2017",
|
||||
|
||||
@ -5,7 +5,7 @@ keywords: education, Microsoft Education, full cloud IT solution, school, deploy
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.topic: hero-article
|
||||
ms.topic: article
|
||||
ms.localizationpriority: medium
|
||||
ms.pagetype: edu
|
||||
author: levinec
|
||||
|
||||
@ -26,6 +26,8 @@ We recommend using the latest build of Windows 10, version 1703 on your educatio
|
||||
To set up new Windows 10 devices and enroll them to your education tenant, choose from one of these options and follow the link to watch the video or follow the step-by-step guide:
|
||||
- **Option 1: [Use the Set up School PCs app](https://docs.microsoft.com/education/windows/use-set-up-school-pcs-app)** - You can use the app to create a setup file that you can use to quickly set up one or more Windows 10 devices.
|
||||
- **Option 2: [Go through Windows OOBE and join the device to Azure AD](set-up-windows-education-devices.md)** - You can go through a typical Windows 10 device setup or first-run experience to configure your device.
|
||||
- **Option 3: [Bulk enrollment for Windows devices](https://docs.microsoft.com/en-us/intune/windows-bulk-enroll)**
|
||||
- **Option 4: [Enroll Windows devices in Intune by using Windows Autopilot](https://docs.microsoft.com/en-us/intune/enrollment-autopilot)**
|
||||
|
||||
> [!div class="step-by-step"]
|
||||
> [<< Use Intune for Education to manage groups, apps, and settings](use-intune-for-education.md)
|
||||
|
||||
@ -21,7 +21,7 @@ manager: dansimp
|
||||
> [<< Configure Microsoft Store for Education](configure-microsoft-store-for-education.md)
|
||||
> [Set up Windows 10 education devices >>](set-up-windows-10-education-devices.md)
|
||||
|
||||
Intune for Education is a streamlined device management solution for educational institutions that can be used to quickly set up and manage Windows 10 devices for your school. It provides a new streamlined UI with the enterprise readiness and resiliency of the Intune service. You can learn more about Intune for Education by reading the <a href="https://docs.microsoft.com/intune-education" target="_blank">Intune for Education documentation</a>.
|
||||
Intune for Education is a streamlined device management solution for educational institutions that can be used to quickly set up and manage Windows 10 and iOS devices for your school. It provides a new streamlined UI with the enterprise readiness and resiliency of the Intune service. You can learn more about Intune for Education by reading the <a href="https://docs.microsoft.com/intune-education" target="_blank">Intune for Education documentation</a>.
|
||||
|
||||
## Example - Set up Intune for Education, buy apps from the Store, and install the apps
|
||||
In this walkthrough, we'll go through a sample scenario and walk you through the steps to:
|
||||
@ -221,4 +221,4 @@ You're now done assigning apps to all users in your tenant. It's time to set up
|
||||
|
||||
|
||||
## Related topic
|
||||
[Get started: Deploy and manage a full cloud IT solution with Microsoft Education](get-started-with-microsoft-education.md)
|
||||
[Set up iOS device management](https://docs.microsoft.com/en-us/intune-education/setup-ios-device-management)
|
||||
|
||||
@ -56,7 +56,7 @@ ms.prod: w10
|
||||
</div>
|
||||
<div class="cardText">
|
||||
<h3>Deployment Guidance</h3>
|
||||
<p>Dive right into the step-by-step process for the easiest deployment path to M365 EDU. We walk you through setting up cloud infrastructure, configuring and managing devices, and migrating on-premise servers for Sharepoint and Exchange to the cloud.</p>
|
||||
<p>Learn the easiest path to deploy Microsoft 365 Education through our step-by-step process. We walk you through cloud deployment, device management,apps set up and configuration, and how to find deployment assistance.</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@ -42,7 +42,7 @@ S mode is an enhanced security mode of Windows 10 – streamlined for security a
|
||||
|Credential Guard | | | | X |
|
||||
|Device Guard | | | | X |
|
||||
|
||||
### Windows 10 in S mode is safe, secure, and fast.
|
||||
### Windows 10 in S mode is safe, secure, and fast.
|
||||
However, in some limited scenarios, you might need to switch to Windows 10 Education. You can switch devices running Windows 10, version 1709 or later. Use the following information to switch to Windows 10 Pro through the Microsoft Store.
|
||||
|
||||
## How to switch
|
||||
|
||||
@ -9,7 +9,7 @@ ms.pagetype: edu
|
||||
ms.localizationpriority: medium
|
||||
author: mjcaparas
|
||||
ms.author: macapara
|
||||
ms.date: 06/03/2019
|
||||
ms.date: 08/15/2019
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
---
|
||||
@ -17,6 +17,15 @@ manager: dansimp
|
||||
# What's new in Set up School PCs
|
||||
Learn what’s new with the Set up School PCs app each week. Find out about new app features and functionality, and see updated screenshots. You'll also find information about past releases.
|
||||
|
||||
|
||||
## Week of June 24, 2019
|
||||
|
||||
### Resumed support for Windows 10, version 1903 and later
|
||||
The previously mentioned provisioning problem was resolved, so the Set up School PCs app once again supports Windows 10, version 1903 and later. The Windows 10 settings that were removed are now back in the app.
|
||||
|
||||
### Device rename made optional for Azure AD joined devices
|
||||
When you set up your Azure AD join devices in the Set up School PCs app, you no longer need to rename your devices. Set up School PCs will let you keep existing device names.
|
||||
|
||||
## Week of May 23, 2019
|
||||
|
||||
### Suspended support for Windows 10, version 1903 and later
|
||||
|
||||
@ -20,9 +20,9 @@ manager: dansimp
|
||||
- Windows 10
|
||||
|
||||
You have two tools to choose from to set up PCs for your classroom:
|
||||
* Set up School PCs
|
||||
* Windows Configuration Designer
|
||||
|
||||
* Set up School PCs
|
||||
* Windows Configuration Designer
|
||||
|
||||
Choose the tool that is appropriate for how your students will sign in (Active Directory, Azure Active Directory, or no account).
|
||||
|
||||
You can use the following diagram to compare the tools.
|
||||
|
||||
@ -240,5 +240,6 @@
|
||||
###### [AGPM Server Connection Settings](agpm-server-connection-settings.md)
|
||||
###### [Feature Visibility Settings](feature-visibility-settings.md)
|
||||
##### [Other Enhancements to the GPMC](other-enhancements-to-the-gpmc.md)
|
||||
## [Troubleshooting AGPM Upgrades](troubleshooting-agpm40-upgrades.md)
|
||||
## [Resources for AGPM](resources-for-agpm.md)
|
||||
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Advanced Group Policy Management
|
||||
description: Advanced Group Policy Management
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 493ca3c3-c3d6-4bb1-9430-dc1e43c86bb0
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: manage
|
||||
|
||||
@ -272,15 +272,17 @@ As an AGPM Administrator (Full Control), you designate the e-mail addresses of A
|
||||
|
||||
**To configure e-mail notification for AGPM**
|
||||
|
||||
1. In the details pane, click the **Domain Delegation** tab.
|
||||
1. In **Group Policy Management Editor** , navigate to the **Change Control** folder
|
||||
|
||||
2. In the **From e-mail address** field, type the e-mail alias for AGPM from which notifications should be sent.
|
||||
2. In the details pane, click the **Domain Delegation** tab.
|
||||
|
||||
3. In the **To e-mail address** field, type the e-mail address for the user account to which you intend to assign the Approver role.
|
||||
3. In the **From e-mail address** field, type the e-mail alias for AGPM from which notifications should be sent.
|
||||
|
||||
4. In the **SMTP server** field, type a valid SMTP mail server.
|
||||
4. In the **To e-mail address** field, type the e-mail address for the user account to which you intend to assign the Approver role.
|
||||
|
||||
5. In the **User name** and **Password** fields, type the credentials of a user who has access to the SMTP service. Click **Apply**.
|
||||
5. In the **SMTP server** field, type a valid SMTP mail server.
|
||||
|
||||
6. In the **User name** and **Password** fields, type the credentials of a user who has access to the SMTP service. Click **Apply**.
|
||||
|
||||
### <a href="" id="bkmk-config5"></a>Step 5: Delegate access
|
||||
|
||||
|
||||
41
mdop/agpm/troubleshooting-agpm40-upgrades.md
Normal file
41
mdop/agpm/troubleshooting-agpm40-upgrades.md
Normal file
@ -0,0 +1,41 @@
|
||||
---
|
||||
title: Troubleshooting AGPM Upgrades
|
||||
description: Troubleshooting AGPM Upgrades
|
||||
author: jedodson
|
||||
ms.assetid: 1abbf0c1-fd32-46a8-a3ba-c005f066523d
|
||||
ms.reviewer:
|
||||
manager: dansimp
|
||||
ms.author: jedodson
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.prod: w10
|
||||
ms.date: 06/16/2016
|
||||
---
|
||||
|
||||
|
||||
# Troubleshooting AGPM Upgrades
|
||||
|
||||
This section lists common issues that you may encounter when you upgrade your Advanced Group Policy Management (AGPM) server to a newer version (e.g. AGPM 4.0 to AGPM 4.3). To diagnose issues not listed here, it may be helpful to view the [Troubleshooting AGPM](troubleshooting-agpm-agpm40.md) or for an AGPM Administrator (Full Control) to use logging and tracing. For more information, see [Configure Logging and Tracing](configure-logging-and-tracing-agpm40.md).
|
||||
|
||||
## What problems are you having?
|
||||
|
||||
- [Failed to generate a HTML GPO difference report (Error code 80004003)](#bkmk-error-80004003)
|
||||
|
||||
### <a href="" id="bkmk-error-80004003"></a>Failed to generate a HTML GPO difference report (Error code 80004003)
|
||||
|
||||
- **Cause**: You have installed the AGPM upgrade package with an incorrect account.
|
||||
|
||||
- **Solution**: You will need to be an AGPM administrator in order to fix this issue.
|
||||
|
||||
- Ensure you know the username & password of your **AGPM service account**.
|
||||
|
||||
- Log onto your AGPM server interactively as your AGPM service account.
|
||||
|
||||
- This is critically important, as the install will fail if you use a different account.
|
||||
|
||||
- Shutdown the AGPM service.
|
||||
|
||||
- Install the required hotfix.
|
||||
|
||||
- Connect to AGPM using an AGPM client to test that your difference reports are now functioning.
|
||||
@ -73,11 +73,11 @@ When this has been completed, install the App-V 4.5 SP2 Clients by using Setup.m
|
||||
|
||||
When installing Microsoft Application Error Reporting, use the following command if you are installing or upgrading to the App-V 4.5 SP2 Desktop Client:
|
||||
|
||||
** msiexec /i dw20shared.msi APPGUID={C6FC75B9-7D86-4C44-8BDB-EAFE1F0E200D} allusers=1 reboot=suppress REINSTALL=all REINSTALLMODE=vomus**
|
||||
**msiexec /i dw20shared.msi APPGUID={C6FC75B9-7D86-4C44-8BDB-EAFE1F0E200D} allusers=1 reboot=suppress REINSTALL=all REINSTALLMODE=vomus**
|
||||
|
||||
Alternatively, if you are installing or upgrading to the App-V 4.5 SP2 Client for Remote Desktop Services (formerly Terminal Services), use the following command:
|
||||
|
||||
** msiexec /i dw20shared.msi APPGUID={ECF80BBA-CA07-4A74-9ED6-E064F38AF1F5} allusers=1 reboot=suppress REINSTALL=all REINSTALLMODE=vomus**
|
||||
**msiexec /i dw20shared.msi APPGUID={ECF80BBA-CA07-4A74-9ED6-E064F38AF1F5} allusers=1 reboot=suppress REINSTALL=all REINSTALLMODE=vomus**
|
||||
|
||||
**Note**
|
||||
- The APPGUID parameter references the product code of the App-V Clients that you install or upgrade. The product code is unique for each Setup.msi. You can use the Orca Database Editor or a similar tool to examine Windows Installer files and determine the product code. This step is required for all installations or upgrades to App-V 4.5 SP2.
|
||||
|
||||
@ -19,7 +19,7 @@ ms.date: 06/16/2016
|
||||
|
||||
If you plan to use a server-based deployment scenario for your Microsoft Application Virtualization environment, it is important to understand the differences between the *Application Virtualization Management Server* and the *Application Virtualization Streaming Server*. This topic describes those differences and also provides information about package delivery methods, transmission protocols, and external components that you will need to consider as you proceed with your deployment.
|
||||
|
||||
## Application Virtualization Management Server
|
||||
## Application Virtualization Management Server
|
||||
|
||||
|
||||
The Application Virtualization Management Server performs both the publishing function and the streaming function. The server publishes application icons, shortcuts, and file type associations to the App-V clients for authorized users. When user requests for applications are received the server streams that data on-demand to authorized users using RTSP or RTSPS protocols. In most configurations using this server, one or more Management Servers share a common data store for configuration and package information.
|
||||
@ -28,7 +28,7 @@ The Application Virtualization Management Servers use Active Directory groups to
|
||||
|
||||
Because the Application Virtualization Management Servers stream applications to end-users on demand, these servers are ideally suited for system configurations that have reliable, high-bandwidth LANs.
|
||||
|
||||
## Application Virtualization Streaming Server
|
||||
## Application Virtualization Streaming Server
|
||||
|
||||
|
||||
The Application Virtualization Streaming Server delivers the same streaming and package upgrade capabilities provided by the Management Server, but without its Active Directory or SQL Server requirements. However, the Streaming Server does not have a publishing service, nor does it have licensing or metering capabilities. The publishing service of a separate App-V Management Server is used in conjunction with the App-V Streaming Server. The App-V Streaming Server addresses the needs of businesses that want to use Application Virtualization in multiple locations with the streaming capabilities of the classic server configuration but might not have the infrastructure to support App-V Management Servers in every location.
|
||||
|
||||
@ -156,7 +156,7 @@ Instead of changing the AppFS key FILENAME value every time that a new cache fil
|
||||
|
||||
3. On the VDI Master VM Image, open a Command Prompt window by using the **Run as administrator** option and grant remote link permissions so that the VM can access the symbolic link on the VDI Host operating system. By default, remote link permissions are disabled.
|
||||
|
||||
** fsutil behavior set SymlinkEvaluation R2R:1**
|
||||
**fsutil behavior set SymlinkEvaluation R2R:1**
|
||||
|
||||
**Note**
|
||||
On the storage server, appropriate link permissions must be enabled. Depending on the location of link and the Sftfs.fsd file, the permissions are **L2L:1** or **L2R:1** or **R2L:1** or **R2R:1**.
|
||||
|
||||
@ -167,7 +167,7 @@ Instead of modifying the AppFS key FILENAME value every time that a new cache fi
|
||||
|
||||
3. On the VDI Master VM Image, open a Command Prompt window by using the **Run as administrator** option and grant remote link permissions so that the VM can access the symbolic link on the VDI Host operating system. By default, remote link permissions are disabled.
|
||||
|
||||
** fsutil behavior set SymlinkEvaluation R2R:1**
|
||||
**fsutil behavior set SymlinkEvaluation R2R:1**
|
||||
|
||||
**Note**
|
||||
On the storage server, appropriate link permissions must be enabled. Depending on the location of link and the Sftfs.fsd file, the permissions are **L2L:1** or **L2R:1** or **R2L:1** or **R2R:1**.
|
||||
|
||||
@ -13,52 +13,42 @@ ms.prod: w10
|
||||
ms.date: 08/30/2016
|
||||
---
|
||||
|
||||
|
||||
# How to Manually Install the Application Virtualization Client
|
||||
|
||||
|
||||
There are two types of Application Virtualization Client components: the Application Virtualization Desktop Client, which is designed for installation on desktop computers, and the Application Virtualization Client for Remote Desktop Services (formerly Terminal Services), which you can install on Remote Desktop Session Host (RD Session Host) servers . Although the two client installer programs are different, you can use the following procedure to manually install either the Application Virtualization Desktop Client on a single desktop computer or the Application Virtualization Client for Remote Desktop Services on a single RD Session Host server. In a production environment, you most likely will install the Application Virtualization Desktop Client on multiple desktop computers with an automated scripted installation process. For information about how to install multiple clients by using a scripted installation process, see [How to Install the Client by Using the Command Line](how-to-install-the-client-by-using-the-command-line-new.md).
|
||||
|
||||
**Note**
|
||||
1. If you are installing the Application Virtualization Client for Remote Desktop Services software on a RD Session Host server, advise users who have an open RDP or ICA client session with the RD Session Host server that they must save their work and close their sessions. In a Remote Desktop session, you can install the client the client manually. For more information about upgrading the client, see [How to Upgrade the Application Virtualization Client](how-to-upgrade-the-application-virtualization-client.md).
|
||||
|
||||
2. If you have any configuration on the user’s computer that depends on the client install path, note that the Application Virtualization (App-V) 4.5 client uses a different install folder than previous versions. By default, a new install of the Application Virtualization (App-V) 4.5 client will install to the \\Program Files\\Microsoft Application Virtualization Client folder. If an earlier version of the client is already installed, installing the App-V client will perform an upgrade into the existing installation folder.
|
||||
|
||||
1. If you are installing the Application Virtualization Client for Remote Desktop Services software on a RD Session Host server, advise users who have an open RDP or ICA client session with the RD Session Host server that they must save their work and close their sessions. In a Remote Desktop session, you can install the client the client manually. For more information about upgrading the client, see [How to Upgrade the Application Virtualization Client](how-to-upgrade-the-application-virtualization-client.md).
|
||||
|
||||
2. If you have any configuration on the user’s computer that depends on the client install path, note that the Application Virtualization (App-V) 4.5 client uses a different install folder than previous versions. By default, a new install of the Application Virtualization (App-V) 4.5 client will install to the \\Program Files\\Microsoft Application Virtualization Client folder. If an earlier version of the client is already installed, installing the App-V client will perform an upgrade into the existing installation folder.
|
||||
|
||||
**Note**
|
||||
For App-V version 4.6 and later, when the App-V client is installed, SFTLDR.DLL is installed in the Windows\\system32 directory. If the App-V client is installed on a 64-bit system, SFTLDR\_WOW64.DLL is installed in the Windows\\SysWOW64 directory.
|
||||
|
||||
|
||||
|
||||
**To manually install Application Virtualization Desktop Client**
|
||||
|
||||
1. After you have obtained the correct installer archive file and saved it to your computer, make sure you are logged on with an account having administrator rights on the computer and double-click the file to expand the archive.
|
||||
1. After you have obtained the correct installer archive file and saved it to your computer, make sure you are logged on with an account having administrator rights on the computer and double-click the file to expand the archive.
|
||||
|
||||
2. Choose the folder in which to save the files, and then open the folder after the files have been copied to it.
|
||||
2. Choose the folder in which to save the files, and then open the folder after the files have been copied to it.
|
||||
|
||||
3. Review the Release Notes if appropriate.
|
||||
3. Review the Release Notes if appropriate.
|
||||
|
||||
4. Browse to find the setup.exe file, and double-click setup.exe to start the installation.
|
||||
4. Browse to find the setup.exe file, and double-click setup.exe to start the installation.
|
||||
|
||||
5. The wizard checks the system to ensure that all prerequisite software is installed, and if any of the following are missing, the wizard will automatically prompt you to install them:
|
||||
5. The wizard checks the system to ensure that all prerequisite software is installed, and if any of the following are missing, the wizard will automatically prompt you to install them:
|
||||
|
||||
- Microsoft Visual C++ 2005 SP1 Redistributable Package (x86)
|
||||
- Microsoft Visual C++ 2005 SP1 Redistributable Package (x86)
|
||||
|
||||
- Microsoft Core XML Services (MSXML) 6.0 SP1 (x86)
|
||||
- Microsoft Core XML Services (MSXML) 6.0 SP1 (x86)
|
||||
|
||||
- Microsoft Application Error Reporting
|
||||
- Microsoft Application Error Reporting
|
||||
|
||||
**Note**
|
||||
For App-V version 4.6 and later, the wizard will also install Microsoft Visual C++ 2008 SP1 Redistributable Package (x86).
|
||||
|
||||
For more information about installing Microsoft Visual C++ 2008 SP1 Redistributable Package (x86), see <https://go.microsoft.com/fwlink/?LinkId=150700> (https://go.microsoft.com/fwlink/?LinkId=150700).
|
||||
For more information about installing Microsoft Visual C++ 2008 SP1 Redistributable Package (x86), see [https://go.microsoft.com/fwlink/?LinkId=150700](https://go.microsoft.com/fwlink/?LinkId=150700).
|
||||
|
||||
|
||||
|
||||
~~~
|
||||
If prompted, click **Install**. Installation progress is displayed, and the status changes from **Pending** to **Installing**. Installation status changes to **Succeeded** as each step is completed successfully.
|
||||
~~~
|
||||
If prompted, click **Install**. Installation progress is displayed, and the status changes from **Pending** to **Installing**. Installation status changes to **Succeeded** as each step is completed successfully.
|
||||
|
||||
6. When the **Microsoft Application Virtualization Desktop Client – InstallShield Wizard** is displayed, click **Next**.
|
||||
|
||||
@ -76,88 +66,66 @@ If prompted, click **Install**. Installation progress is displayed, and the stat
|
||||
|
||||
12. On the **Application Virtualization Data Location** screen, click **Next** to accept the default data locations or complete the following actions to change where the data is stored:
|
||||
|
||||
1. Click **Change**, and then browse to or, in the **Global Data Location** field, enter the destination folder for the global data location, and click **OK**. The Global Data Directory is where the Application Virtualization Desktop Client caches data shared by all users on the computer, like OSD files and SFT file data.
|
||||
1. Click **Change**, and then browse to or, in the **Global Data Location** field, enter the destination folder for the global data location, and click **OK**. The Global Data Directory is where the Application Virtualization Desktop Client caches data shared by all users on the computer, like OSD files and SFT file data.
|
||||
|
||||
2. If you want to change the drive letter to be used, select the preferred drive letter from the drop-down list.
|
||||
2. If you want to change the drive letter to be used, select the preferred drive letter from the drop-down list.
|
||||
|
||||
3. Enter a new path to store the user-specific data in the **User-specific Data Location** field if you want to change the data location. The User Data Directory is where the Application Virtualization Desktop Client stores user-specific information, like personal settings for virtualized applications.
|
||||
3. Enter a new path to store the user-specific data in the **User-specific Data Location** field if you want to change the data location. The User Data Directory is where the Application Virtualization Desktop Client stores user-specific information, like personal settings for virtualized applications.
|
||||
|
||||
**Note**
|
||||
This path must be different for every user, so it should include a user-specific environment variable or a mapped drive or something else that will resolve to a unique path for each user.
|
||||
|
||||
|
||||
|
||||
4. When you have finished making the changes, click **Next**.
|
||||
4. When you have finished making the changes, click **Next**.
|
||||
|
||||
13. On the **Cache Size Settings** screen, you can accept or change the default cache size. Click one of the following radio buttons to choose how to manage the cache space:
|
||||
|
||||
1. **Use maximum cache size**. Enter a numeric value from 100–1,048,576 (1 TB) in the **Maximum size (MB)** field to specify the maximum size of the cache.
|
||||
1. **Use maximum cache size**. Enter a numeric value from 100–1,048,576 (1 TB) in the **Maximum size (MB)** field to specify the maximum size of the cache.
|
||||
|
||||
2. **Use free disk space threshold**. Enter a numeric value to specify the amount of free disk space, in MB, that the Application Virtualization Client must leave available on the disk. This allows the cache to grow until the amount of free disk space reaches this limit. The value shown in **Free disk space remaining** indicates how much disk space is currently unused.
|
||||
2. **Use free disk space threshold**. Enter a numeric value to specify the amount of free disk space, in MB, that the Application Virtualization Client must leave available on the disk. This allows the cache to grow until the amount of free disk space reaches this limit. The value shown in **Free disk space remaining** indicates how much disk space is currently unused.
|
||||
|
||||
**Important**
|
||||
To ensure that the cache has sufficient space allocated for all packages that might be deployed, use the **Use free disk space threshold** setting when you configure the client so that the cache can grow as needed. Alternatively, determine in advance how much disk space will be needed for the App-V cache, and at installation time, set the cache size accordingly. For more information about the cache space management feature, in the Microsoft Application Virtualization (App-V) Operations Guide, see **How to Use the Cache Space Management Feature**.
|
||||
**Important**
|
||||
To ensure that the cache has sufficient space allocated for all packages that might be deployed, use the **Use free disk space threshold** setting when you configure the client so that the cache can grow as needed. Alternatively, determine in advance how much disk space will be needed for the App-V cache, and at installation time, set the cache size accordingly. For more information about the cache space management feature, in the Microsoft Application Virtualization (App-V) Operations Guide, see **How to Use the Cache Space Management Feature**.
|
||||
|
||||
|
||||
|
||||
~~~
|
||||
Click **Next** to continue.
|
||||
~~~
|
||||
Click **Next** to continue.
|
||||
|
||||
14. In the following sections of the **Runtime Package Policy Configuration** screen, you can change the parameters that affect how the Application Virtualization client behaves during runtime:
|
||||
|
||||
1. **Application Source Root**. Specifies the location of SFT files. If used, overrides the protocol, server, and port portions of the CODEBASE HREF URL in the OSD file.
|
||||
1. **Application Source Root**. Specifies the location of SFT files. If used, overrides the protocol, server, and port portions of the CODEBASE HREF URL in the OSD file.
|
||||
|
||||
2. **Application Authorization**. When **Require User authorization even when cached** is checked, users are required to connect to a server and validate their credentials at least once before they are allowed to start each virtual application.
|
||||
2. **Application Authorization**. When **Require User authorization even when cached** is checked, users are required to connect to a server and validate their credentials at least once before they are allowed to start each virtual application.
|
||||
|
||||
3. **Allow streaming from file**. Indicates whether streaming from file will be enabled, regardless of how the **Application Source Root** field is used. If not checked, streaming from files is disabled. This must be checked if **Application Source Root** contains a UNC path in the form \\\\server\\share.
|
||||
3. **Allow streaming from file**. Indicates whether streaming from file will be enabled, regardless of how the **Application Source Root** field is used. If not checked, streaming from files is disabled. This must be checked if **Application Source Root** contains a UNC path in the form \\\\server\\share.
|
||||
|
||||
4. **Automatically Load Application**. Controls when and how automatic background loading of applications occurs.
|
||||
4. **Automatically Load Application**. Controls when and how automatic background loading of applications occurs.
|
||||
|
||||
**Note**
|
||||
When you install the App-V client to use with a read-only cache, for example, with a VDI server implementation, set **What applications to Auto Load** to **Do not automatically load applications** to prevent the client from trying to update applications in the read-only cache.
|
||||
|
||||
|
||||
|
||||
~~~
|
||||
Click **Next** to continue.
|
||||
~~~
|
||||
Click **Next** to continue.
|
||||
|
||||
15. On the **Publishing Server** screen, select the **Set up a Publishing Server now** check box if you want to define a publishing server, or click **Next** if you want to complete this later. To define a publishing server, specify the following information:
|
||||
|
||||
1. **Display Name**—Enter the name you want to display for the server.
|
||||
1. **Display Name**—Enter the name you want to display for the server.
|
||||
|
||||
2. **Type**—Select the server type from the drop-down list of server types.
|
||||
2. **Type**—Select the server type from the drop-down list of server types.
|
||||
|
||||
3. **Host Name** and **Port**—Enter the host name and the port in the corresponding fields. When you select a server type in the drop-down list, the port field will automatically fill with the standard port numbers. To change a port number, click the server type in the list and change the port number according to your needs.
|
||||
3. **Host Name** and **Port**—Enter the host name and the port in the corresponding fields. When you select a server type in the drop-down list, the port field will automatically fill with the standard port numbers. To change a port number, click the server type in the list and change the port number according to your needs.
|
||||
|
||||
4. **Path**—If you have selected either **Standard HTTP Server** or **Enhanced Security HTTP Server**, you must enter the complete path to the XML file containing publishing data in this field. If you select either **Application Virtualization Server** or **Enhanced Security Application Virtualization Server**, this field is not active.
|
||||
4. **Path**—If you have selected either **Standard HTTP Server** or **Enhanced Security HTTP Server**, you must enter the complete path to the XML file containing publishing data in this field. If you select either **Application Virtualization Server** or **Enhanced Security Application Virtualization Server**, this field is not active.
|
||||
|
||||
5. **Automatically contact this server to update settings when a user logs in**—Select this check box if you want this server to be queried automatically when users log in to their account on the Application Virtualization Client.
|
||||
5. **Automatically contact this server to update settings when a user logs in**—Select this check box if you want this server to be queried automatically when users log in to their account on the Application Virtualization Client.
|
||||
|
||||
6. When finished with the configuration steps, click **Next**.
|
||||
6. When finished with the configuration steps, click **Next**.
|
||||
|
||||
16. On the **Ready to Install the Program** screen, click **Install**. A screen is displayed that shows the progress of the installation.
|
||||
|
||||
17. On the **Install Wizard Completed** screen, click **Finish**.
|
||||
|
||||
**Note**
|
||||
If the installation fails for any reason, you might need to restart the computer before trying the install again.
|
||||
|
||||
|
||||
**Note**
|
||||
If the installation fails for any reason, you might need to restart the computer before trying the install again.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
||||
[How to Install the Client by Using the Command Line](how-to-install-the-client-by-using-the-command-line-new.md)
|
||||
|
||||
[Stand-Alone Delivery Scenario Overview](stand-alone-delivery-scenario-overview.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -79,13 +79,13 @@ Click **Next**.
|
||||
|
||||
10. On the **Customize** page, if you are finished installing and configuring the virtual application, select **Stop now** and skip to step 14 of this procedure. If you want to customize any of the items in the following list, select **Customize**.
|
||||
|
||||
- Edit the file type associations associated with an application.
|
||||
- Edit the file type associations associated with an application.
|
||||
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
11. On the **Edit Shortcuts** page, you can optionally configure the file type associations (FTA) that will be associated with the various applications in the package. To create a new FTA, in the left pane, select and expand the application that you want to customize, and then click **Add**. In the **Add File Type Association** dialog box, provide the necessary information for the new FTA. Under the application, select **Shortcuts** to review the shortcut information associated with an application. In the **Location** pane, you can review the icon file information. To edit an existing FTA, click **Edit**. To remove an FTA, select the FTA, and then click **Remove**. Click **Next**.
|
||||
|
||||
|
||||
@ -69,13 +69,13 @@ Click **Next**.
|
||||
|
||||
11. On the **Customize** page, if you are finished installing and configuring the virtual application, select **Stop now** and skip to step 15 of this procedure. If you want to customize any of the items in the following list, select **Customize**.
|
||||
|
||||
- Edit the file type associations and the icons associated with an application.
|
||||
- Edit the file type associations and the icons associated with an application.
|
||||
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
12. On the **Edit Shortcuts** page, you can optionally configure the file type associations (FTA) and shortcut locations that will be associated with the various applications in the package. To create a new FTA, in the left pane, select and expand the application you want to customize, and then click **Add**. In the **Add File Type Association** dialog box, provide the necessary information for the new FTA. To review the shortcut information associated with an application, under the application, select **Shortcuts**, and in the **Location** pane, you can edit the icon file information. To edit an existing FTA, click **Edit**. To remove an FTA, select the FTA, and then click **Remove**. Click **Next**.
|
||||
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Application Virtualization 4
|
||||
description: Application Virtualization 4
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 9da557bc-f433-47d3-8af7-68ec4ff9bd3f
|
||||
ms.pagetype: mdop, appcompat, virtualization
|
||||
ms.mktglfcycl: deploy
|
||||
|
||||
@ -76,7 +76,7 @@ This section is divided into two parts: (1) features in all versions of App-V an
|
||||
|
||||
Microsoft Error Reporting provides a service that allows you to report problems you may be having with App-V to Microsoft and to receive information that may help you avoid or solve such problems.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
For information about the information collected, processed, or transmitted by Microsoft Error Reporting, see the Microsoft Error Reporting privacy statement at <https://go.microsoft.com/fwlink/?linkid=50293>.
|
||||
|
||||
@ -84,7 +84,7 @@ For information about the information collected, processed, or transmitted by Mi
|
||||
|
||||
We use the error reporting data to solve customer problems and improve our software and services.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
App-V does not change your Microsoft Error Reporting settings. If you previously turned on error reporting, it will send Microsoft the information about the errors you encountered. When Microsoft needs additional data to analyze the problem, you will be prompted to review the data and choose whether or not to send it. App-V will always respect your Microsoft Error Reporting settings.
|
||||
|
||||
@ -98,7 +98,7 @@ Enterprise customers can use Group Policy to configure how Microsoft Error Repor
|
||||
|
||||
Microsoft Update is a service that provides Windows updates as well as updates for other Microsoft software, including App-V. For details about what information is collected, how it is used and how to change your settings, see the Update Services Privacy Statement at <https://go.microsoft.com/fwlink/?linkid=50142>.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
If Microsoft Update is not enabled, you can opt-in during setup and subsequent checks for updates will follow the machine-wide schedule. You can update this option from the Microsoft Update Control Panel item.
|
||||
|
||||
@ -108,7 +108,7 @@ If Microsoft Update is not enabled, you can opt-in during setup and subsequent c
|
||||
|
||||
The product will collect various configuration items, including UserID, MachineID and SecurityGroup details, to be able to enforce settings on managed nodes. The data is stored in the App-V SQL database and transmitted across the App-V server and client components to enforce the configuration on the managed node.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
User and machine information and configuration content
|
||||
|
||||
@ -116,7 +116,7 @@ User and machine information and configuration content
|
||||
|
||||
The information is used to enforce the application access configuration on the managed nodes within the enterprise. The information does not leave the enterprise.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
By default, the product does not have any data. All data is entered and enabled by the admin and can be viewed in the Management console. The feature cannot be disabled as this is the product functionality. To disable this, App-V will need to be uninstalled.
|
||||
|
||||
@ -130,7 +130,7 @@ None of this information is sent out of the enterprise.
|
||||
|
||||
It captures package history and asset information as part of the package.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
Information about the package and the sequencing environment is collected and stored in the package manifest during sequencing.
|
||||
|
||||
@ -138,7 +138,7 @@ Information about the package and the sequencing environment is collected and st
|
||||
|
||||
The information will be used by the admin to track the updates done to a package during its lifecycle. It will also be used by software deployment systems to track the package deployments within the organization.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
This feature is always enabled and cannot be turned off.
|
||||
|
||||
@ -152,7 +152,7 @@ This administrator information will be stored in the package and can be viewed b
|
||||
|
||||
The product will collect a variety of reporting data points, including the username, to allow reporting on the usage of the product.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
Information about the machine, package and application usage are collected from every machine that reporting is enabled on.
|
||||
|
||||
@ -160,7 +160,7 @@ Information about the machine, package and application usage are collected from
|
||||
|
||||
The information is used to report on application usage within the enterprise. The information does not leave the enterprise.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
By default, the product does not have any data. Data is only collected once the reporting feature is enabled on the App-V Client. To disable the collection of reporting data, the reporting feature must be disabled on all clients.
|
||||
|
||||
@ -178,7 +178,7 @@ This section addresses specific features available in App-V 4.6 SP1 and later.
|
||||
|
||||
The Customer Experience Improvement Program (“CEIP”) collects basic information about your hardware configuration and how you use our software and services in order to identify trends and usage patterns. CEIP also collects the type and number of errors you encounter, software and hardware performance, and the speed of services. We will not collect your name, address, or other contact information.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
For more information about the information collected, processed, or transmitted by CEIP, see the CEIP privacy statement at <https://go.microsoft.com/fwlink/?LinkID=52097>.
|
||||
|
||||
@ -186,7 +186,7 @@ For more information about the information collected, processed, or transmitted
|
||||
|
||||
We use this information to improve the quality, reliability, and performance of Microsoft software and services.
|
||||
|
||||
**Choice/Control: **
|
||||
**Choice/Control:**
|
||||
|
||||
CEIP is optional and the opt-in status can be updated during install or post install from the GUI.
|
||||
|
||||
@ -196,7 +196,7 @@ CEIP is optional and the opt-in status can be updated during install or post ins
|
||||
|
||||
Customers can use Application Package Accelerators to automatically package complex applications without installing the application. The App-V sequencer allows you to create package accelerators for each virtual package. You can then use these package accelerators to automatically re-create the same virtual package in the future. You may also use package accelerators released by Microsoft or other third parties to simplify and automate packaging of complex applications.
|
||||
|
||||
**Information Collected, Processed, or Transmitted: **
|
||||
**Information Collected, Processed, or Transmitted:**
|
||||
|
||||
Application Package Accelerators may contain information such as computer names, user account information, and information about applications included in the Package Accelerator file.
|
||||
|
||||
|
||||
@ -34,7 +34,7 @@ By default, at installation the App-V client is configured with the minimum perm
|
||||
|
||||
By default, the installation of the client registers file type associations (FTAs) for OSD files, which enables users to start applications directly from OSD files instead of the published shortcuts. If a user with local administrator rights receives an OSD file containing malicious code, either in e-mail or downloaded from a Web site, the user can open the OSD file and start the application even if the client has been set to restrict the **Add Application** permission. You can unregister the FTAs for the OSD to reduce this risk. Also, consider blocking this extension in the e-mail system and at the firewall. For more information about configuring Outlook to block extensions, see <https://go.microsoft.com/fwlink/?LinkId=133278>.
|
||||
|
||||
**Security Note: **
|
||||
**Security Note:**
|
||||
|
||||
Starting with App-V version 4.6, the file type association is no longer created for OSD files during a new installation of the client, although the existing settings will be maintained during an upgrade from version 4.2 or 4.5 of the App-V client. If for any reason it is essential to create the file type association, you can create the following registry keys and set their values as shown:
|
||||
|
||||
@ -50,7 +50,7 @@ During installation, you can use the **RequireAuthorizationIfCached** parameter
|
||||
|
||||
Antivirus software running on an App-V Client computer can detect and report an infected file in the virtual environment. However, it cannot disinfect the file. If a virus is detected in the virtual environment, the antivirus software would perform the configured quarantine or repair operation in the cache, not in the actual package. Configure the antivirus software with an exception for the sftfs.fsd file. This file is the cache file that stores packages on the App-V Client.
|
||||
|
||||
**Security Note: **
|
||||
**Security Note:**
|
||||
|
||||
If a virus is detected in an application or package deployed in the production environment, replace the application or package with a virus-free version.
|
||||
|
||||
|
||||
@ -31,7 +31,7 @@ The content directory contains all of the packages that are to be streamed to cl
|
||||
|
||||
Keep the number of users with administrative privileges to a minimum to reduce possible threats to the data in the data store and to avoid publishing malicious applications into the infrastructure.
|
||||
|
||||
## Application Virtualization Security
|
||||
## Application Virtualization Security
|
||||
|
||||
|
||||
App-V uses several methods of communication between the various components of the infrastructure. When you plan your App-V infrastructure, securing the communications between servers can reduce the security risks that might already be present on the existing network.
|
||||
|
||||
@ -21,7 +21,7 @@ Microsoft Application Virtualization 4.5 provides the following enhanced securi
|
||||
|
||||
- Application Virtualization now supports Transport Layer Security (TLS) using X.509 V3 certificates. Provided that a server certificate has been provisioned to the planned Application Virtualization Management or Streaming Server, the installation will default to secure, using the RTSPS protocol over port 322. Using RTSPS ensures that communication between the Application Virtualization Servers and the Application Virtualization Clients is signed and encrypted. If no certificate is assigned to the server during the Application Virtualization Server installation, the communication will be set to RTSP over port 554.
|
||||
|
||||
**Security Note: **
|
||||
**Security Note:**
|
||||
|
||||
To help provide a secure setup of the server, you must make sure that RTSP ports are disabled even if you have all packages configured to use RTSPS.
|
||||
|
||||
|
||||
@ -222,7 +222,7 @@ The XML file that is included in the Office Deployment Tool specifies the produc
|
||||
|
||||
2. With the sample configuration.xml file open and ready for editing, you can specify products, languages, and the path to which you save the Office 2016 applications. The following is a basic example of the configuration.xml file:
|
||||
|
||||
``` syntax
|
||||
```xml
|
||||
<Configuration>
|
||||
<Add SourcePath= ”\\Server\Office2016” OfficeClientEdition="32" >
|
||||
<Product ID="O365ProPlusRetail ">
|
||||
@ -633,7 +633,7 @@ You may want to disable specific applications in your Office App-V package. For
|
||||
|
||||
5. Add the Office 2016 App-V Package with the new Deployment Configuration File.
|
||||
|
||||
``` syntax
|
||||
```xml
|
||||
<Application Id="[{AppVPackageRoot}]\office16\lync.exe" Enabled="true">
|
||||
<VisualElements>
|
||||
<Name>Lync 2016</Name>
|
||||
|
||||
@ -43,9 +43,7 @@ You must configure the package converter to always save the package ingredients
|
||||
Import-Module AppVPkgConverter
|
||||
```
|
||||
|
||||
3.
|
||||
|
||||
The following cmdlets are available:
|
||||
3. The following cmdlets are available:
|
||||
|
||||
- Test-AppvLegacyPackage – This cmdlet is designed to check packages. It will return information about any failures with the package such as missing **.sft** files, an invalid source, **.osd** file errors, or invalid package version. This cmdlet will not parse the **.sft** file or do any in depth validation. For information about options and basic functionality for this cmdlet, using the PowerShell cmdline, type `Test-AppvLegacyPackage -?`.
|
||||
|
||||
|
||||
@ -143,11 +143,11 @@ Click **Next**.
|
||||
|
||||
11. The **Customize** page is displayed. If you are finished installing and configuring the virtual application, select **Stop now** and skip to step 14 of this procedure. To perform either of the following customizations, select **Customize**.
|
||||
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
12. On the **Streaming** page, run each program so that it can be optimized and run more efficiently on target computers. It can take several minutes for all the applications to run. After all applications have run, close each of the applications, and then click **Next**.
|
||||
|
||||
@ -234,11 +234,11 @@ Click **Next**.
|
||||
|
||||
10. The **Customize** page is displayed. If you are finished installing and configuring the virtual application, select **Stop now** and skip to step 12 of this procedure. To perform either of the following customizations, select **Customize**.
|
||||
|
||||
- Optimize how the package will run across a slow or unreliable network.
|
||||
- Optimize how the package will run across a slow or unreliable network.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
11. On the **Streaming** page, run each program so that it can be optimized and run more efficiently on target computers. Streaming improves the experience when the virtual application package is run on target computers on high-latency networks. It can take several minutes for all the applications to run. After all applications have run, close each of the applications. You can also configure the package to be required to be fully downloaded before opening by selecting the **Force applications to be downloaded** check-box. Click **Next**.
|
||||
|
||||
|
||||
@ -128,11 +128,11 @@ Click **Next**.
|
||||
|
||||
11. The **Customize** page is displayed. If you are finished installing and configuring the virtual application, select **Stop now** and skip to step 14 of this procedure. To perform either of the following customizations, select **Customize**.
|
||||
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
- Prepare the virtual package for streaming. Streaming improves the experience when the virtual application package is run on target computers.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
12. On the **Streaming** page, run each program so that it can be optimized and run more efficiently on target computers. It can take several minutes for all the applications to run. After all applications have run, close each of the applications, and then click **Next**.
|
||||
|
||||
@ -210,11 +210,11 @@ On the computer that runs the sequencer, click **All Programs**, and then Click
|
||||
|
||||
10. The **Customize** page is displayed. If you are finished installing and configuring the virtual application, select **Stop now** and skip to step 12 of this procedure. To perform either of the following customizations, select **Customize**.
|
||||
|
||||
- Optimize how the package will run across a slow or unreliable network.
|
||||
- Optimize how the package will run across a slow or unreliable network.
|
||||
|
||||
- Specify the operating systems that can run this package.
|
||||
- Specify the operating systems that can run this package.
|
||||
|
||||
Click **Next**.
|
||||
Click **Next**.
|
||||
|
||||
11. On the **Streaming** page, run each program so that it can be optimized and run more efficiently on target computers. Streaming improves the experience when the virtual application package is run on target computers on high-latency networks. It can take several minutes for all the applications to run. After all applications have run, close each of the applications. You can also configure the package to be required to be fully downloaded before opening by selecting the **Force applications to be downloaded** check-box. Click **Next**.
|
||||
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Application Virtualization 5
|
||||
description: Application Virtualization 5
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: e82eb44b-9ccd-41aa-923b-71400230ad23
|
||||
ms.pagetype: mdop, appcompat, virtualization
|
||||
ms.mktglfcycl: deploy
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Diagnostics and Recovery Toolset 10
|
||||
description: Diagnostics and Recovery Toolset 10
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 64403eca-ff05-4327-ac33-bdcc96e706c8
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: support
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Diagnostics and Recovery Toolset 7 Administrator's Guide
|
||||
description: Diagnostics and Recovery Toolset 7 Administrator's Guide
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: bf89eccd-fc03-48ff-9019-a8640e11dd99
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: support
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Diagnostics and Recovery Toolset 8 Administrator's Guide
|
||||
description: Diagnostics and Recovery Toolset 8 Administrator's Guide
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 33685dd7-844f-4864-b504-3ef384ef01de
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: support
|
||||
|
||||
@ -27,6 +27,9 @@
|
||||
"ms.technology": "windows",
|
||||
"audience": "ITPro",
|
||||
"manager": "dansimp",
|
||||
"ms.prod": "w10",
|
||||
"ms.author": "dansimp",
|
||||
"author": "dansimp",
|
||||
"ms.sitesec": "library",
|
||||
"ms.topic": "article",
|
||||
"ms.date": "04/05/2017",
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: MDOP Information Experience
|
||||
description: MDOP Information Experience
|
||||
ms.assetid: 12b8ab56-3267-450d-bb22-1c7e44cb8e52
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Microsoft BitLocker Administration and Monitoring 1 Administrator's Guide
|
||||
description: Microsoft BitLocker Administration and Monitoring 1 Administrator's Guide
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 4086e721-db24-4439-bdcd-ac5ef901811f
|
||||
ms.pagetype: mdop, security
|
||||
ms.mktglfcycl: manage
|
||||
@ -10,46 +10,36 @@ ms.prod: w10
|
||||
ms.date: 04/19/2017
|
||||
---
|
||||
|
||||
|
||||
# Microsoft BitLocker Administration and Monitoring 1 Administrator's Guide
|
||||
|
||||
|
||||
Microsoft BitLocker Administration and Monitoring (MBAM) provides a simplified administrative interface that you can use to manage BitLocker drive encryption. With MBAM, you can select BitLocker encryption policy options that are appropriate to your enterprise and then use them to monitor client compliance with those policies. You can also report on the encryption status of an individual computer and on the entire enterprise. In addition, you can access recovery key information when users forget their PIN or password, or when their BIOS or boot record changes.
|
||||
|
||||
<a href="" id="getting-started-with-mbam-1-0"></a>[Getting Started with MBAM 1.0](getting-started-with-mbam-10.md)
|
||||
|
||||
[About MBAM 1.0](about-mbam-10.md)**|**[Evaluating MBAM 1.0](evaluating-mbam-10.md)**|**[High Level Architecture for MBAM 1.0](high-level-architecture-for-mbam-10.md)**|**[Accessibility for MBAM 1.0](accessibility-for-mbam-10.md)**|**[Privacy Statement for MBAM 1.0](privacy-statement-for-mbam-10.md)
|
||||
|
||||
<a href="" id="planning-for-mbam-1-0"></a>[Planning for MBAM 1.0](planning-for-mbam-10.md)
|
||||
|
||||
[Preparing your Environment for MBAM 1.0](preparing-your-environment-for-mbam-10.md)**|**[MBAM 1.0 Deployment Prerequisites](mbam-10-deployment-prerequisites.md)**|**[Planning to Deploy MBAM 1.0](planning-to-deploy-mbam-10.md)**|**[MBAM 1.0 Supported Configurations](mbam-10-supported-configurations.md)**|**[MBAM 1.0 Planning Checklist](mbam-10-planning-checklist.md)
|
||||
|
||||
<a href="" id="deploying-mbam-1-0"></a>[Deploying MBAM 1.0](deploying-mbam-10.md)
|
||||
|
||||
[Deploying the MBAM 1.0 Server Infrastructure](deploying-the-mbam-10-server-infrastructure.md)**|**[Deploying MBAM 1.0 Group Policy Objects](deploying-mbam-10-group-policy-objects.md)**|**[Deploying the MBAM 1.0 Client](deploying-the-mbam-10-client.md)**|**[Deploying the MBAM 1.0 Language Release Update](deploying-the-mbam-10-language-release-update.md)**|**[MBAM 1.0 Deployment Checklist](mbam-10-deployment-checklist.md)
|
||||
|
||||
<a href="" id="operations-for-mbam-1-0"></a>[Operations for MBAM 1.0](operations-for-mbam-10.md)
|
||||
|
||||
[Administering MBAM 1.0 Features](administering-mbam-10-features.md)**|**[Monitoring and Reporting BitLocker Compliance with MBAM 1.0](monitoring-and-reporting-bitlocker-compliance-with-mbam-10.md)**|**[Performing BitLocker Management with MBAM](performing-bitlocker-management-with-mbam.md)**|**[Administering MBAM 1.0 by Using PowerShell](administering-mbam-10-by-using-powershell.md)
|
||||
|
||||
<a href="" id="troubleshooting-mbam-1-0"></a>[Troubleshooting MBAM 1.0](troubleshooting-mbam-10.md)
|
||||
|
||||
### More Information
|
||||
|
||||
<a href="" id="release-notes-for-mbam-1-0"></a>[Release Notes for MBAM 1.0](release-notes-for-mbam-10.md)
|
||||
View updated product information and known issues for MBAM 1.0.
|
||||
|
||||
<a href="" id="mdop-techcenter-page"></a>[MDOP TechCenter Page](https://go.microsoft.com/fwlink/p/?LinkId=225286)
|
||||
Learn about the latest MDOP information and resources.
|
||||
|
||||
<a href="" id="mdop-information-experience"></a>[MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032)
|
||||
Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
- [Getting Started with MBAM 1.0](getting-started-with-mbam-10.md)
|
||||
- [About MBAM 1.0](about-mbam-10.md)
|
||||
- [Release Notes for MBAM 1.0](release-notes-for-mbam-10.md)
|
||||
- [Evaluating MBAM 1.0](evaluating-mbam-10.md)
|
||||
- [High Level Architecture for MBAM 1.0](high-level-architecture-for-mbam-10.md)
|
||||
- [Accessibility for MBAM 1.0](accessibility-for-mbam-10.md)
|
||||
- [Privacy Statement for MBAM 1.0](privacy-statement-for-mbam-10.md)
|
||||
- [Planning for MBAM 1.0](planning-for-mbam-10.md)
|
||||
- [Preparing your Environment for MBAM 1.0](preparing-your-environment-for-mbam-10.md)
|
||||
- [MBAM 1.0 Deployment Prerequisites](mbam-10-deployment-prerequisites.md)
|
||||
- [Planning to Deploy MBAM 1.0](planning-to-deploy-mbam-10.md)
|
||||
- [MBAM 1.0 Supported Configurations](mbam-10-supported-configurations.md)
|
||||
- [MBAM 1.0 Planning Checklist](mbam-10-planning-checklist.md)
|
||||
- [Deploying MBAM 1.0](deploying-mbam-10.md)
|
||||
- [Deploying the MBAM 1.0 Server Infrastructure](deploying-the-mbam-10-server-infrastructure.md)
|
||||
- [Deploying MBAM 1.0 Group Policy Objects](deploying-mbam-10-group-policy-objects.md)
|
||||
- [Deploying the MBAM 1.0 Client](deploying-the-mbam-10-client.md)
|
||||
- [Deploying the MBAM 1.0 Language Release Update](deploying-the-mbam-10-language-release-update.md)
|
||||
- [MBAM 1.0 Deployment Checklist](mbam-10-deployment-checklist.md)
|
||||
- [Operations for MBAM 1.0](operations-for-mbam-10.md)
|
||||
- [Administering MBAM 1.0 Features](administering-mbam-10-features.md)
|
||||
- [Monitoring and Reporting BitLocker Compliance with MBAM 1.0](monitoring-and-reporting-bitlocker-compliance-with-mbam-10.md)
|
||||
- [Performing BitLocker Management with MBAM](performing-bitlocker-management-with-mbam.md)
|
||||
- [Administering MBAM 1.0 by Using PowerShell](administering-mbam-10-by-using-powershell.md)
|
||||
- [Troubleshooting MBAM 1.0](troubleshooting-mbam-10.md)
|
||||
|
||||
## More Information
|
||||
- [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032)
|
||||
Find documentation, videos, and other resources for MDOP technologies.
|
||||
|
||||
@ -19,7 +19,7 @@ ms.date: 06/16/2016
|
||||
|
||||
This topic includes and describes the administrator roles that are available in Microsoft BitLocker Administration and Monitoring (MBAM), as well as the server locations where the local groups are created.
|
||||
|
||||
## MBAM Administrator roles
|
||||
## MBAM Administrator roles
|
||||
|
||||
|
||||
<a href="" id="---------------mbam-system-administrators"></a> **MBAM System Administrators**
|
||||
|
||||
@ -141,7 +141,7 @@ This section describes the Client Management policy definitions for MBAM, found
|
||||
|
||||
|
||||
|
||||
## Fixed Drive policy definitions
|
||||
## Fixed Drive policy definitions
|
||||
|
||||
|
||||
This section describes the Fixed Drive policy definitions for MBAM, which can be found at the following GPO node: **Computer Configuration**\\**Administrative Templates**\\**Windows Components**\\**MDOP MBAM (BitLocker Management)** \\ **Fixed Drive**.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Microsoft BitLocker Administration and Monitoring 2 Administrator's Guide
|
||||
description: Microsoft BitLocker Administration and Monitoring 2 Administrator's Guide
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: fdb43f62-960a-4811-8802-50efdf04b4af
|
||||
ms.pagetype: mdop, security
|
||||
ms.mktglfcycl: manage
|
||||
@ -10,43 +10,47 @@ ms.prod: w10
|
||||
ms.date: 04/19/2017
|
||||
---
|
||||
|
||||
|
||||
# Microsoft BitLocker Administration and Monitoring 2 Administrator's Guide
|
||||
|
||||
|
||||
Microsoft BitLocker Administration and Monitoring (MBAM) 2.0 provides a simplified administrative interface that you can use to manage BitLocker drive encryption. In BitLocker Administration and Monitoring 2.0, you can select BitLocker drive encryption policy options that are appropriate for your enterprise, and then use them to monitor client compliance with those policies. You can also report on the encryption status of an individual computer and on the enterprise as a whole. In addition, you can access recovery key information when users forget their PIN or password or when their BIOS or boot record changes.
|
||||
|
||||
<a href="" id="getting-started-with-mbam-2-0"></a>[Getting Started with MBAM 2.0](getting-started-with-mbam-20-mbam-2.md)
|
||||
## Outline
|
||||
|
||||
[About MBAM 2.0](about-mbam-20-mbam-2.md)**|**[Release Notes for MBAM 2.0](release-notes-for-mbam-20-mbam-2.md)**|**[About MBAM 2.0 SP1](about-mbam-20-sp1.md)**|**[Release Notes for MBAM 2.0 SP1](release-notes-for-mbam-20-sp1.md)**|**[Evaluating MBAM 2.0](evaluating-mbam-20-mbam-2.md)**|**[High-Level Architecture for MBAM 2.0](high-level-architecture-for-mbam-20-mbam-2.md)**|**[Accessibility for MBAM 2.0](accessibility-for-mbam-20-mbam-2.md)
|
||||
- [Getting Started with MBAM 2.0](getting-started-with-mbam-20-mbam-2.md)
|
||||
- [About MBAM 2.0](about-mbam-20-mbam-2.md)
|
||||
- [Release Notes for MBAM 2.0](release-notes-for-mbam-20-mbam-2.md)
|
||||
- [About MBAM 2.0 SP1](about-mbam-20-sp1.md)
|
||||
- [Release Notes for MBAM 2.0 SP1](release-notes-for-mbam-20-sp1.md)
|
||||
- [Evaluating MBAM 2.0](evaluating-mbam-20-mbam-2.md)
|
||||
- [High-Level Architecture for MBAM 2.0](high-level-architecture-for-mbam-20-mbam-2.md)
|
||||
- [Accessibility for MBAM 2.0](accessibility-for-mbam-20-mbam-2.md)
|
||||
- [Planning for MBAM 2.0](planning-for-mbam-20-mbam-2.md)
|
||||
- [Preparing your Environment for MBAM 2.0](preparing-your-environment-for-mbam-20-mbam-2.md)
|
||||
- [MBAM 2.0 Deployment Prerequisites](mbam-20-deployment-prerequisites-mbam-2.md)
|
||||
- [Planning to Deploy MBAM 2.0](planning-to-deploy-mbam-20-mbam-2.md)
|
||||
- [MBAM 2.0 Supported Configurations](mbam-20-supported-configurations-mbam-2.md)
|
||||
- [MBAM 2.0 Planning Checklist](mbam-20-planning-checklist-mbam-2.md)
|
||||
- [Deploying MBAM 2.0](deploying-mbam-20-mbam-2.md)
|
||||
- [Deploying the MBAM 2.0 Server Infrastructure](deploying-the-mbam-20-server-infrastructure-mbam-2.md)
|
||||
- [Deploying MBAM 2.0 Group Policy Objects](deploying-mbam-20-group-policy-objects-mbam-2.md)
|
||||
- [Deploying the MBAM 2.0 Client](deploying-the-mbam-20-client-mbam-2.md)
|
||||
- [MBAM 2.0 Deployment Checklist](mbam-20-deployment-checklist-mbam-2.md)
|
||||
- [Upgrading from Previous Versions of MBAM](upgrading-from-previous-versions-of-mbam.md)
|
||||
- [Operations for MBAM 2.0](operations-for-mbam-20-mbam-2.md)
|
||||
- [Using MBAM with Configuration Manager](using-mbam-with-configuration-manager.md)
|
||||
- [Administering MBAM 2.0 Features](administering-mbam-20-features-mbam-2.md)
|
||||
- [Monitoring and Reporting BitLocker Compliance with MBAM 2.0](monitoring-and-reporting-bitlocker-compliance-with-mbam-20-mbam-2.md)
|
||||
- [Performing BitLocker Management with MBAM](performing-bitlocker-management-with-mbam-mbam-2.md)
|
||||
- [Maintaining MBAM 2.0](maintaining-mbam-20-mbam-2.md)
|
||||
- [Security and Privacy for MBAM 2.0](security-and-privacy-for-mbam-20-mbam-2.md)
|
||||
- [Administering MBAM 2.0 Using PowerShell](administering-mbam-20-using-powershell-mbam-2.md)
|
||||
- [Troubleshooting MBAM 2.0](troubleshooting-mbam-20-mbam-2.md)
|
||||
|
||||
<a href="" id="planning-for-mbam-2-0"></a>[Planning for MBAM 2.0](planning-for-mbam-20-mbam-2.md)
|
||||
## More Information
|
||||
|
||||
[Preparing your Environment for MBAM 2.0](preparing-your-environment-for-mbam-20-mbam-2.md)**|**[MBAM 2.0 Deployment Prerequisites](mbam-20-deployment-prerequisites-mbam-2.md)**|**[Planning to Deploy MBAM 2.0](planning-to-deploy-mbam-20-mbam-2.md)**|**[MBAM 2.0 Supported Configurations](mbam-20-supported-configurations-mbam-2.md)**|**[MBAM 2.0 Planning Checklist](mbam-20-planning-checklist-mbam-2.md)
|
||||
- [MDOP Information Experience](index.md)
|
||||
|
||||
<a href="" id="deploying-mbam-2-0"></a>[Deploying MBAM 2.0](deploying-mbam-20-mbam-2.md)
|
||||
|
||||
[Deploying the MBAM 2.0 Server Infrastructure](deploying-the-mbam-20-server-infrastructure-mbam-2.md)**|**[Deploying MBAM 2.0 Group Policy Objects](deploying-mbam-20-group-policy-objects-mbam-2.md)**|**[Deploying the MBAM 2.0 Client](deploying-the-mbam-20-client-mbam-2.md)**|**[MBAM 2.0 Deployment Checklist](mbam-20-deployment-checklist-mbam-2.md)**|**[Upgrading from Previous Versions of MBAM](upgrading-from-previous-versions-of-mbam.md)
|
||||
|
||||
<a href="" id="operations-for-mbam-2-0"></a>[Operations for MBAM 2.0](operations-for-mbam-20-mbam-2.md)
|
||||
|
||||
[Using MBAM with Configuration Manager](using-mbam-with-configuration-manager.md)**|**[Administering MBAM 2.0 Features](administering-mbam-20-features-mbam-2.md)**|**[Monitoring and Reporting BitLocker Compliance with MBAM 2.0](monitoring-and-reporting-bitlocker-compliance-with-mbam-20-mbam-2.md)**|**[Performing BitLocker Management with MBAM](performing-bitlocker-management-with-mbam-mbam-2.md)**|**[Maintaining MBAM 2.0](maintaining-mbam-20-mbam-2.md)**|**[Security and Privacy for MBAM 2.0](security-and-privacy-for-mbam-20-mbam-2.md)**|** [Administering MBAM 2.0 Using PowerShell](administering-mbam-20-using-powershell-mbam-2.md)
|
||||
|
||||
<a href="" id="troubleshooting-mbam-2-0"></a>[Troubleshooting MBAM 2.0](troubleshooting-mbam-20-mbam-2.md)
|
||||
|
||||
### More Information
|
||||
|
||||
- [Release Notes for MBAM 2.0](release-notes-for-mbam-20-mbam-2.md)
|
||||
|
||||
View updated product information and known issues for MBAM 2.0.
|
||||
|
||||
- [MDOP TechCenter Page](https://go.microsoft.com/fwlink/p/?LinkId=225286)
|
||||
|
||||
Learn about the latest MDOP information and resources.
|
||||
|
||||
- [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032)
|
||||
|
||||
Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).
|
||||
Find documentation, videos, and other resources for MDOP technologies.
|
||||
|
||||
|
||||
|
||||
|
||||
@ -19,7 +19,7 @@ ms.date: 06/16/2016
|
||||
|
||||
This topic lists and describes the available administrator roles that are available in Microsoft BitLocker Administration and Monitoring (MBAM) as well as the server locations where the local groups are created.
|
||||
|
||||
## MBAM Administrator Roles
|
||||
## MBAM Administrator Roles
|
||||
|
||||
|
||||
<a href="" id="---------------mbam-system-administrators"></a> **MBAM System Administrators**
|
||||
|
||||
@ -142,7 +142,7 @@ This section describes Client Management policy definitions for Microsoft BitLoc
|
||||
|
||||
|
||||
|
||||
## Fixed Drive Policy Definitions
|
||||
## Fixed Drive Policy Definitions
|
||||
|
||||
|
||||
This section describes Fixed Drive policy definitions for Microsoft BitLocker Administration and Monitoring found at the following GPO node: **Computer Configuration**\\**Policies**\\**Administrative Templates**\\**Windows Components**\\**MDOP MBAM (BitLocker Management)**\\**Fixed Drive**.
|
||||
|
||||
@ -19,7 +19,7 @@ author: shortpatti
|
||||
This topic describes the process for applying the hotfixes for Microsoft BitLocker Administration and Monitoring (MBAM) Server 2.5 SP1
|
||||
|
||||
### Before you begin, download the latest hotfix of Microsoft BitLocker Administration and Monitoring (MBAM) Server 2.5 SP1
|
||||
[Desktop Optimization Pack](https://www.microsoft.com/en-us/download/details.aspx?id=57157)
|
||||
[Desktop Optimization Pack](https://www.microsoft.com/en-us/download/details.aspx?id=58345)
|
||||
|
||||
#### Steps to update the MBAM Server for existing MBAM environment
|
||||
1. Remove MBAM server feature (do this by opening the MBAM Server Configuration Tool, then selecting Remove Features).
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Microsoft BitLocker Administration and Monitoring 2.5
|
||||
description: Microsoft BitLocker Administration and Monitoring 2.5
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: fd81d7de-b166-47e8-b6c7-d984830762b6
|
||||
ms.pagetype: mdop, security
|
||||
ms.mktglfcycl: manage
|
||||
@ -10,67 +10,61 @@ ms.prod: w10
|
||||
ms.date: 04/19/2017
|
||||
---
|
||||
|
||||
|
||||
# Microsoft BitLocker Administration and Monitoring 2.5
|
||||
|
||||
|
||||
Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 provides a simplified administrative interface that you can use to manage BitLocker Drive Encryption. You configure MBAM Group Policy Templates that enable you to set BitLocker Drive Encryption policy options that are appropriate for your enterprise, and then use them to monitor client compliance with those policies. You can also report on the encryption status of an individual computer and on the enterprise as a whole. In addition, you can access recovery key information when users forget their PIN or password or when their BIOS or boot record changes. For a more detailed description of MBAM, see [About MBAM 2.5](about-mbam-25.md).
|
||||
|
||||
To get the MBAM software, see [How Do I Get MDOP](https://go.microsoft.com/fwlink/?LinkId=322049) (https://go.microsoft.com/fwlink/?LinkId=322049).
|
||||
To obtain MBAM, see [How Do I Get MDOP](index.md#how-to-get-mdop).
|
||||
|
||||
<a href="" id="getting-started-with-mbam-2-5"></a>[Getting Started with MBAM 2.5](getting-started-with-mbam-25.md)
|
||||
## Outline
|
||||
|
||||
[About MBAM 2.5](about-mbam-25.md)**|**[Release Notes for MBAM 2.5](release-notes-for-mbam-25.md)**|**[About MBAM 2.5 SP1](about-mbam-25-sp1.md)**|**[Release Notes for MBAM 2.5 SP1](release-notes-for-mbam-25-sp1.md)**|**[Evaluating MBAM 2.5 in a Test Environment](evaluating-mbam-25-in-a-test-environment.md)**|**[High-Level Architecture for MBAM 2.5](high-level-architecture-for-mbam-25.md)**|**[Accessibility for MBAM 2.5](accessibility-for-mbam-25.md)
|
||||
- <a href="" id="getting-started-with-mbam-2-5"></a>[Getting Started with MBAM 2.5](getting-started-with-mbam-25.md)
|
||||
- [About MBAM 2.5](about-mbam-25.md)
|
||||
- [Release Notes for MBAM 2.5](release-notes-for-mbam-25.md)
|
||||
- [About MBAM 2.5 SP1](about-mbam-25-sp1.md)
|
||||
- [Release Notes for MBAM 2.5 SP1](release-notes-for-mbam-25-sp1.md)
|
||||
- [Evaluating MBAM 2.5 in a Test Environment](evaluating-mbam-25-in-a-test-environment.md)
|
||||
- [High-Level Architecture for MBAM 2.5](high-level-architecture-for-mbam-25.md)
|
||||
- [Accessibility for MBAM 2.5](accessibility-for-mbam-25.md)
|
||||
- <a href="" id="planning-for-mbam-2-5"></a>[Planning for MBAM 2.5](planning-for-mbam-25.md)
|
||||
- [Preparing your Environment for MBAM 2.5](preparing-your-environment-for-mbam-25.md)
|
||||
- [MBAM 2.5 Deployment Prerequisites](mbam-25-deployment-prerequisites.md)
|
||||
- [Planning for MBAM 2.5 Group Policy Requirements](planning-for-mbam-25-group-policy-requirements.md)
|
||||
- [Planning for MBAM 2.5 Groups and Accounts](planning-for-mbam-25-groups-and-accounts.md)
|
||||
- [Planning How to Secure the MBAM Websites](planning-how-to-secure-the-mbam-websites.md)
|
||||
- [Planning to Deploy MBAM 2.5](planning-to-deploy-mbam-25.md)
|
||||
- [MBAM 2.5 Supported Configurations](mbam-25-supported-configurations.md)
|
||||
- [Planning for MBAM 2.5 High Availability](planning-for-mbam-25-high-availability.md)
|
||||
- [MBAM 2.5 Security Considerations](mbam-25-security-considerations.md)
|
||||
- [MBAM 2.5 Planning Checklist](mbam-25-planning-checklist.md)
|
||||
- <a href="" id="deploying-mbam-2-5"></a>[Deploying MBAM 2.5](deploying-mbam-25.md)
|
||||
- [Deploying the MBAM 2.5 Server Infrastructure](deploying-the-mbam-25-server-infrastructure.md)
|
||||
- [Deploying MBAM 2.5 Group Policy Objects](deploying-mbam-25-group-policy-objects.md)
|
||||
- [Deploying the MBAM 2.5 Client](deploying-the-mbam-25-client.md)
|
||||
- [MBAM 2.5 Deployment Checklist](mbam-25-deployment-checklist.md)
|
||||
- [Upgrading to MBAM 2.5 or MBAM 2.5 SP1 from Previous Versions](upgrading-to-mbam-25-or-mbam-25-sp1-from-previous-versions.md)
|
||||
- [Removing MBAM Server Features or Software](removing-mbam-server-features-or-software.md)
|
||||
- <a href="" id="operations-for-mbam-2-5"></a>[Operations for MBAM 2.5](operations-for-mbam-25.md)
|
||||
- [Administering MBAM 2.5 Features](administering-mbam-25-features.md)
|
||||
- [Monitoring and Reporting BitLocker Compliance with MBAM 2.5](monitoring-and-reporting-bitlocker-compliance-with-mbam-25.md)
|
||||
- [Performing BitLocker Management with MBAM 2.5](performing-bitlocker-management-with-mbam-25.md)
|
||||
- [Maintaining MBAM 2.5](maintaining-mbam-25.md)
|
||||
- [Using Windows PowerShell to Administer MBAM 2.5](using-windows-powershell-to-administer-mbam-25.md)
|
||||
- <a href="" id="troubleshooting-mbam-2-5"></a>[Troubleshooting MBAM 2.5](troubleshooting-mbam-25.md)
|
||||
- <a href="" id="technical-reference-for-mbam-2-5"></a>[Technical Reference for MBAM 2.5](technical-reference-for-mbam-25.md)
|
||||
- [Client Event Logs](client-event-logs.md)
|
||||
- [Server Event Logs](server-event-logs.md)
|
||||
|
||||
<a href="" id="planning-for-mbam-2-5"></a>[Planning for MBAM 2.5](planning-for-mbam-25.md)
|
||||
|
||||
[Preparing your Environment for MBAM 2.5](preparing-your-environment-for-mbam-25.md)**|**[MBAM 2.5 Deployment Prerequisites](mbam-25-deployment-prerequisites.md)**|**[Planning for MBAM 2.5 Group Policy Requirements](planning-for-mbam-25-group-policy-requirements.md)**|**[Planning for MBAM 2.5 Groups and Accounts](planning-for-mbam-25-groups-and-accounts.md)**|**[Planning How to Secure the MBAM Websites](planning-how-to-secure-the-mbam-websites.md)**|**[Planning to Deploy MBAM 2.5](planning-to-deploy-mbam-25.md)**|**[MBAM 2.5 Supported Configurations](mbam-25-supported-configurations.md)**|**[Planning for MBAM 2.5 High Availability](planning-for-mbam-25-high-availability.md)**|**[MBAM 2.5 Security Considerations](mbam-25-security-considerations.md)**|**[MBAM 2.5 Planning Checklist](mbam-25-planning-checklist.md)
|
||||
|
||||
<a href="" id="deploying-mbam-2-5"></a>[Deploying MBAM 2.5](deploying-mbam-25.md)
|
||||
|
||||
[Deploying the MBAM 2.5 Server Infrastructure](deploying-the-mbam-25-server-infrastructure.md)**|**[Deploying MBAM 2.5 Group Policy Objects](deploying-mbam-25-group-policy-objects.md)**|**[Deploying the MBAM 2.5 Client](deploying-the-mbam-25-client.md)**|**[MBAM 2.5 Deployment Checklist](mbam-25-deployment-checklist.md)**|**[Upgrading to MBAM 2.5 or MBAM 2.5 SP1 from Previous Versions](upgrading-to-mbam-25-or-mbam-25-sp1-from-previous-versions.md)**|**[Removing MBAM Server Features or Software](removing-mbam-server-features-or-software.md)
|
||||
|
||||
<a href="" id="operations-for-mbam-2-5"></a>[Operations for MBAM 2.5](operations-for-mbam-25.md)
|
||||
|
||||
[Administering MBAM 2.5 Features](administering-mbam-25-features.md)**|**[Monitoring and Reporting BitLocker Compliance with MBAM 2.5](monitoring-and-reporting-bitlocker-compliance-with-mbam-25.md)**|**[Performing BitLocker Management with MBAM 2.5](performing-bitlocker-management-with-mbam-25.md)**|**[Maintaining MBAM 2.5](maintaining-mbam-25.md)**|**[Using Windows PowerShell to Administer MBAM 2.5](using-windows-powershell-to-administer-mbam-25.md)
|
||||
|
||||
<a href="" id="troubleshooting-mbam-2-5"></a>[Troubleshooting MBAM 2.5](troubleshooting-mbam-25.md)
|
||||
|
||||
<a href="" id="technical-reference-for-mbam-2-5"></a>[Technical Reference for MBAM 2.5](technical-reference-for-mbam-25.md)
|
||||
|
||||
[Client Event Logs](client-event-logs.md)**|**[Server Event Logs](server-event-logs.md)
|
||||
|
||||
### More Information
|
||||
|
||||
- [Release Notes for MBAM 2.5](release-notes-for-mbam-25.md)
|
||||
|
||||
View updated product information and known issues for MBAM 2.5.
|
||||
|
||||
- [MDOP TechCenter Page](https://go.microsoft.com/fwlink/p/?LinkId=225286)
|
||||
|
||||
Learn about the latest MDOP information and resources.
|
||||
|
||||
- [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032)
|
||||
|
||||
Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).
|
||||
|
||||
- [MBAM Deployment Guide](https://www.microsoft.com/download/details.aspx?id=38398)
|
||||
|
||||
Get help in choosing a deployment method for MBAM, including step-by-step instructions for each method.
|
||||
|
||||
- [Apply Hotfixes on MBAM 2.5 SP1 Server](apply-hotfix-for-mbam-25-sp1.md)
|
||||
|
||||
Guide of how to apply MBAM 2.5 SP1 Server hotfixes
|
||||
|
||||
## Got a suggestion for MBAM?
|
||||
- Add or vote on suggestions [here](http://mbam.uservoice.com/forums/268571-microsoft-bitlocker-administration-and-monitoring).
|
||||
- For MBAM issues, use the [MBAM TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopmbam).
|
||||
|
||||
|
||||
|
||||
|
||||
## More Information
|
||||
|
||||
- [MDOP Information Experience](index.md)
|
||||
|
||||
Find documentation, videos, and other resources for MDOP technologies.
|
||||
|
||||
- [MBAM Deployment Guide](https://www.microsoft.com/download/details.aspx?id=38398)
|
||||
|
||||
Get help in choosing a deployment method for MBAM, including step-by-step instructions for each method.
|
||||
|
||||
- [Apply Hotfixes on MBAM 2.5 SP1 Server](apply-hotfix-for-mbam-25-sp1.md)
|
||||
|
||||
Guide of how to apply MBAM 2.5 SP1 Server hotfixes
|
||||
|
||||
@ -90,13 +90,13 @@ If SSRS was not configured to use Secure Socket Layer (SSL), the URL for the rep
|
||||
|
||||
10. Browse to the following web services to verify that they load successfully. A page opens to indicate that the service is running, but the page does not display any metadata.
|
||||
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMAdministrationService/AdministrationService.svc
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMAdministrationService/AdministrationService.svc
|
||||
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMUserSupportService/UserSupportService.svc
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMUserSupportService/UserSupportService.svc
|
||||
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMComplianceStatusService/StatusReportingService.svc
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMComplianceStatusService/StatusReportingService.svc
|
||||
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMRecoveryAndHardwareService/CoreService.svc
|
||||
- http(s)://< *MBAMAdministrationServerName*>:<*port*>/MBAMRecoveryAndHardwareService/CoreService.svc
|
||||
|
||||
## Validating the MBAM Server deployment with the Configuration Manager Integration topology
|
||||
|
||||
|
||||
@ -53,7 +53,7 @@ When applying new settings, the service must be restarted.
|
||||
|
||||
- You can change the IIS authentication scheme to one of the following: BASIC, DIGEST, NTLM, or NEGOTIATE. The default is NEGOTIATE and uses the following entry:
|
||||
|
||||
``` syntax
|
||||
```xml
|
||||
<ImageDistribution>
|
||||
<!-- The authentication used for image download. Basic and digest authentication should be used only under SSL.-->
|
||||
<!-- The line below can be one of the following: -->
|
||||
|
||||
@ -72,17 +72,17 @@ Image pre-staging is useful only for the initial image download. It is not suppo
|
||||
|
||||
**NT AUTHORITY\\Authenticated Users:(OI)(CI)(special access:)**
|
||||
|
||||
** READ\_CONTROL**
|
||||
**READ\_CONTROL**
|
||||
|
||||
** SYNCHRONIZE**
|
||||
**SYNCHRONIZE**
|
||||
|
||||
** FILE\_GENERIC\_READ**
|
||||
**FILE\_GENERIC\_READ**
|
||||
|
||||
** FILE\_READ\_DATA**
|
||||
**FILE\_READ\_DATA**
|
||||
|
||||
** FILE\_READ\_EA**
|
||||
**FILE\_READ\_EA**
|
||||
|
||||
** FILE\_READ\_ATTRIBUTES**
|
||||
**FILE\_READ\_ATTRIBUTES**
|
||||
|
||||
**NT AUTHORITY\\SYSTEM:(OI)(CI)F**
|
||||
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Microsoft Enterprise Desktop Virtualization Planning, Deployment, and Operations Guide
|
||||
description: Microsoft Enterprise Desktop Virtualization Planning, Deployment, and Operations Guide
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 7bc3e120-df77-4f4c-bc8e-7aaa4c2a6525
|
||||
ms.pagetype: mdop, virtualization
|
||||
ms.mktglfcycl: deploy
|
||||
|
||||
@ -32,7 +32,7 @@ You can configure which folders are indexed on the host as part of the Trim Tran
|
||||
|
||||
When applying new settings, the service must be restarted.
|
||||
|
||||
``` syntax
|
||||
```xml
|
||||
<HostIndexingXP type="System.String[]">
|
||||
- <ArrayOfString>
|
||||
<string>%WINDIR%</string>
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Microsoft Enterprise Desktop Virtualization 2.0
|
||||
description: Microsoft Enterprise Desktop Virtualization 2.0
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 84109be0-4613-42e9-85fc-fcda8de6e4c4
|
||||
ms.pagetype: mdop, virtualization
|
||||
ms.mktglfcycl: deploy
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: MDOP Solutions and Scenarios
|
||||
description: MDOP Solutions and Scenarios
|
||||
author: jamiejdt
|
||||
author: dansimp
|
||||
ms.assetid: 1cb18bef-fbae-4e96-a4f1-90cf111c3b5f
|
||||
ms.pagetype: mdop
|
||||
ms.mktglfcycl: deploy
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user