diff --git a/education/windows/edu-take-a-test-kiosk-mode.md b/education/windows/edu-take-a-test-kiosk-mode.md index 79b60c3c9e..ba510327cf 100644 --- a/education/windows/edu-take-a-test-kiosk-mode.md +++ b/education/windows/edu-take-a-test-kiosk-mode.md @@ -171,7 +171,7 @@ $cimObject.HideFastUserSwitching = 1 Set-CimInstance -CimInstance $cimObject ``` -#### [:::image type="icon" source="images/icons/windows-os.svg"::: **Settings app**](#tab/win) +#### [:::image type="icon" source="images/icons/settings.svg"::: **Settings app**](#tab/settings) To create a local account, and configure Take a Test in kiosk mode using the Settings app: @@ -189,7 +189,7 @@ To create a local account, and configure Take a Test in kiosk mode using the Set 1. Under **Test taking settings** select the options you want to enable during the test - To enable printing, select **Require printing** - > [!NOTE] + > [!NOTE] > Make sure a printer is pre-configured on the Take a Test account if you're enabling this option. - To enable teachers to monitor screens, select **Allow screen monitoring** @@ -198,7 +198,7 @@ To create a local account, and configure Take a Test in kiosk mode using the Set 1. To take the test, a student must sign in using the test-taking account selected in step 4 :::image type="content" source="./images/takeatest/login-screen-take-a-test-single-pc.png" alt-text="Windows 11 SE login screen with the take a test account." border="true"::: - > [!NOTE] + > [!NOTE] > To sign-in with a local account on a device that is joined to Microsoft Entra ID or Active Directory, you must prefix the username with either `\` or `.\`. --- diff --git a/education/windows/images/icons/powershell.svg b/education/windows/images/icons/powershell.svg index ab2d5152ca..b23a99c61d 100644 --- a/education/windows/images/icons/powershell.svg +++ b/education/windows/images/icons/powershell.svg @@ -1,20 +1,9 @@ - - - - - - - - - - MsPortalFx.base.images-10 - - - - - - - - - - \ No newline at end of file + + + + + + + + + diff --git a/education/windows/images/icons/settings.svg b/education/windows/images/icons/settings.svg new file mode 100644 index 0000000000..9ec19d16aa --- /dev/null +++ b/education/windows/images/icons/settings.svg @@ -0,0 +1,19 @@ + + + + + + + + + + + + + + + + + + + diff --git a/images/group-policy.svg b/images/group-policy.svg deleted file mode 100644 index 95957a5914..0000000000 --- a/images/group-policy.svg +++ /dev/null @@ -1,9 +0,0 @@ - - - - - - - - - diff --git a/images/intune.svg b/images/intune.svg deleted file mode 100644 index 6e0d938aed..0000000000 --- a/images/intune.svg +++ /dev/null @@ -1,24 +0,0 @@ - - - - - - - - - - - - - - - - Icon-intune-329 - - - - - - - - \ No newline at end of file diff --git a/images/windows-os.svg b/images/windows-os.svg deleted file mode 100644 index da64baf975..0000000000 --- a/images/windows-os.svg +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/windows/configuration/includes/insider-note.md b/includes/insider/insider-note.md similarity index 100% rename from windows/configuration/includes/insider-note.md rename to includes/insider/insider-note.md diff --git a/windows/configuration/includes/insider.png b/includes/insider/insider.png similarity index 100% rename from windows/configuration/includes/insider.png rename to includes/insider/insider.png diff --git a/windows/configuration/docfx.json b/windows/configuration/docfx.json index 3dbfae73d8..b47df98114 100644 --- a/windows/configuration/docfx.json +++ b/windows/configuration/docfx.json @@ -102,7 +102,9 @@ "✅ Windows 11", "✅ Windows 10" ], - "ue-v//**/*.md": "✅ Windows 10", + "ue-v//**/*.md": [ + "✅ Windows 10" + ], "wcd//**/*.md": "" } }, diff --git a/windows/configuration/images/account-management-details.png b/windows/configuration/images/account-management-details.png deleted file mode 100644 index e4307d8f7b..0000000000 Binary files a/windows/configuration/images/account-management-details.png and /dev/null differ diff --git a/windows/configuration/images/add-applications-details.png b/windows/configuration/images/add-applications-details.png deleted file mode 100644 index 2efd3483ae..0000000000 Binary files a/windows/configuration/images/add-applications-details.png and /dev/null differ diff --git a/windows/configuration/images/add-certificates-details.png b/windows/configuration/images/add-certificates-details.png deleted file mode 100644 index 78cd783282..0000000000 Binary files a/windows/configuration/images/add-certificates-details.png and /dev/null differ diff --git a/windows/configuration/images/admx-category.png b/windows/configuration/images/admx-category.png deleted file mode 100644 index 465dd53fe3..0000000000 Binary files a/windows/configuration/images/admx-category.png and /dev/null differ diff --git a/windows/configuration/images/admx-policy.png b/windows/configuration/images/admx-policy.png deleted file mode 100644 index c3c7b9a088..0000000000 Binary files a/windows/configuration/images/admx-policy.png and /dev/null differ diff --git a/windows/configuration/images/apn-add-details.png b/windows/configuration/images/apn-add-details.png deleted file mode 100644 index caee3d6429..0000000000 Binary files a/windows/configuration/images/apn-add-details.png and /dev/null differ diff --git a/windows/configuration/images/apn-add.png b/windows/configuration/images/apn-add.png deleted file mode 100644 index 0e25e5c0e9..0000000000 Binary files a/windows/configuration/images/apn-add.png and /dev/null differ diff --git a/windows/configuration/images/customization-start-edge.png b/windows/configuration/images/customization-start-edge.png deleted file mode 100644 index 333833d8c0..0000000000 Binary files a/windows/configuration/images/customization-start-edge.png and /dev/null differ diff --git a/windows/configuration/images/customization-start.png b/windows/configuration/images/customization-start.png deleted file mode 100644 index 4942338181..0000000000 Binary files a/windows/configuration/images/customization-start.png and /dev/null differ diff --git a/windows/configuration/images/icd-create-options-1703.png b/windows/configuration/images/icd-create-options-1703.png deleted file mode 100644 index 007e740683..0000000000 Binary files a/windows/configuration/images/icd-create-options-1703.png and /dev/null differ diff --git a/windows/configuration/images/icd-desktop-1703.png b/windows/configuration/images/icd-desktop-1703.png deleted file mode 100644 index 7c060af4d0..0000000000 Binary files a/windows/configuration/images/icd-desktop-1703.png and /dev/null differ diff --git a/windows/configuration/images/icd-runtime.png b/windows/configuration/images/icd-runtime.png deleted file mode 100644 index d63544e206..0000000000 Binary files a/windows/configuration/images/icd-runtime.png and /dev/null differ diff --git a/windows/configuration/images/icd-setting-help.png b/windows/configuration/images/icd-setting-help.png deleted file mode 100644 index 3f6e5fefa5..0000000000 Binary files a/windows/configuration/images/icd-setting-help.png and /dev/null differ diff --git a/windows/configuration/images/icd-step1.png b/windows/configuration/images/icd-step1.png deleted file mode 100644 index d2ad656d35..0000000000 Binary files a/windows/configuration/images/icd-step1.png and /dev/null differ diff --git a/windows/configuration/images/icd-step2.png b/windows/configuration/images/icd-step2.png deleted file mode 100644 index 54e70d9193..0000000000 Binary files a/windows/configuration/images/icd-step2.png and /dev/null differ diff --git a/windows/configuration/images/icd-step3.png b/windows/configuration/images/icd-step3.png deleted file mode 100644 index ecac26f3d6..0000000000 Binary files a/windows/configuration/images/icd-step3.png and /dev/null differ diff --git a/windows/configuration/images/icd-step4.png b/windows/configuration/images/icd-step4.png deleted file mode 100644 index 8fcfa2863b..0000000000 Binary files a/windows/configuration/images/icd-step4.png and /dev/null differ diff --git a/windows/configuration/images/icd-step5.png b/windows/configuration/images/icd-step5.png deleted file mode 100644 index 9e96edd812..0000000000 Binary files a/windows/configuration/images/icd-step5.png and /dev/null differ diff --git a/windows/configuration/images/icd-switch.png b/windows/configuration/images/icd-switch.png deleted file mode 100644 index e46e48a648..0000000000 Binary files a/windows/configuration/images/icd-switch.png and /dev/null differ diff --git a/images/information.svg b/windows/configuration/images/icons/information.svg similarity index 100% rename from images/information.svg rename to windows/configuration/images/icons/information.svg diff --git a/windows/configuration/images/icons/powershell.svg b/windows/configuration/images/icons/powershell.svg index ab2d5152ca..b23a99c61d 100644 --- a/windows/configuration/images/icons/powershell.svg +++ b/windows/configuration/images/icons/powershell.svg @@ -1,20 +1,9 @@ - - - - - - - - - - MsPortalFx.base.images-10 - - - - - - - - - - \ No newline at end of file + + + + + + + + + diff --git a/windows/configuration/images/icons/settings.svg b/windows/configuration/images/icons/settings.svg new file mode 100644 index 0000000000..9ec19d16aa --- /dev/null +++ b/windows/configuration/images/icons/settings.svg @@ -0,0 +1,19 @@ + + + + + + + + + + + + + + + + + + + diff --git a/windows/configuration/images/kiosk-account-details.png b/windows/configuration/images/kiosk-account-details.png deleted file mode 100644 index 53c31880ea..0000000000 Binary files a/windows/configuration/images/kiosk-account-details.png and /dev/null differ diff --git a/windows/configuration/images/kiosk-common-details.png b/windows/configuration/images/kiosk-common-details.png deleted file mode 100644 index 5eda9b293e..0000000000 Binary files a/windows/configuration/images/kiosk-common-details.png and /dev/null differ diff --git a/windows/configuration/images/kiosk-desktop.png b/windows/configuration/images/kiosk-desktop.png deleted file mode 100644 index cf74c646c7..0000000000 Binary files a/windows/configuration/images/kiosk-desktop.png and /dev/null differ diff --git a/windows/configuration/images/kiosk-fullscreen.png b/windows/configuration/images/kiosk-fullscreen.png deleted file mode 100644 index 37ccd4f8a4..0000000000 Binary files a/windows/configuration/images/kiosk-fullscreen.png and /dev/null differ diff --git a/windows/configuration/images/kiosk-settings.png b/windows/configuration/images/kiosk-settings.png deleted file mode 100644 index 51a4338371..0000000000 Binary files a/windows/configuration/images/kiosk-settings.png and /dev/null differ diff --git a/windows/configuration/images/set-up-device-details-desktop.png b/windows/configuration/images/set-up-device-details-desktop.png deleted file mode 100644 index 97c8a1b704..0000000000 Binary files a/windows/configuration/images/set-up-device-details-desktop.png and /dev/null differ diff --git a/windows/configuration/images/set-up-device-details.png b/windows/configuration/images/set-up-device-details.png deleted file mode 100644 index 031dac6fe6..0000000000 Binary files a/windows/configuration/images/set-up-device-details.png and /dev/null differ diff --git a/windows/configuration/images/set-up-network-details-desktop.png b/windows/configuration/images/set-up-network-details-desktop.png deleted file mode 100644 index 83911ccbd0..0000000000 Binary files a/windows/configuration/images/set-up-network-details-desktop.png and /dev/null differ diff --git a/windows/configuration/images/set-up-network-details.png b/windows/configuration/images/set-up-network-details.png deleted file mode 100644 index 778b8497c4..0000000000 Binary files a/windows/configuration/images/set-up-network-details.png and /dev/null differ diff --git a/windows/configuration/images/user.png b/windows/configuration/images/user.png deleted file mode 100644 index d1386d4a0d..0000000000 Binary files a/windows/configuration/images/user.png and /dev/null differ diff --git a/windows/configuration/images/wcd-app-commands.png b/windows/configuration/images/wcd-app-commands.png deleted file mode 100644 index e52908960f..0000000000 Binary files a/windows/configuration/images/wcd-app-commands.png and /dev/null differ diff --git a/windows/configuration/images/wcd-app-name.png b/windows/configuration/images/wcd-app-name.png deleted file mode 100644 index 23ff06eada..0000000000 Binary files a/windows/configuration/images/wcd-app-name.png and /dev/null differ diff --git a/windows/configuration/index.yml b/windows/configuration/index.yml index 334a6aeec9..cf169d04cb 100644 --- a/windows/configuration/index.yml +++ b/windows/configuration/index.yml @@ -1,52 +1,55 @@ ### YamlMime:Landing -title: Configure Windows client # < 60 chars -summary: Find out how to apply custom configurations to Windows client devices. # < 160 chars +title: Configure Windows client +summary: Learn how to apply custom configurations to Windows client devices. metadata: - title: Configure Windows client # Required; page title displayed in search results. Include the brand. < 60 chars. - description: Find out how to apply custom configurations to Windows client devices. # Required; article description that is displayed in search results. < 160 chars. - ms.topic: landing-page # Required + title: Configure Windows client + description: Learn how to apply custom configurations to Windows client devices. + ms.topic: landing-page ms.collection: - tier1 - author: aczechowski - ms.author: aaroncz + author: paolomatarazzo + ms.author: paoloma manager: aaroncz - ms.date: 12/20/2023 + ms.date: 02/06/2024 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new landingContent: -# Cards and links should be based on top customer tasks or top subjects -# Start card title with a verb - # Card (optional) + - title: Customize the appearance linkLists: - linkListType: how-to-guide links: - - text: Customize the Windows 11 Start menu layout - url: customize-start-menu-layout-windows-11.md - - text: Customize the Windows 11 taskbar - url: customize-taskbar-windows-11.md + - text: Customize the Windows Start menu layout + url: start/customize-start-menu-layout-windows-11.md + - text: Customize the Windows taskbar + url: taskbar/customize-taskbar-windows-11.md - text: Configure Windows Spotlight on the lock screen - url: windows-spotlight.md + url: lock-screen/windows-spotlight.md - text: Accessibility information for IT pros - url: windows-accessibility-for-itpros.md + url: accessibility/index.md - # Card (optional) - title: Configure a Windows kiosk linkLists: - linkListType: how-to-guide links: - text: Configure kiosks and digital signs - url: kiosk-methods.md + url: kiosk/kiosk-methods.md - text: Set up a single-app kiosk - url: kiosk-single-app.md + url: kiosk/kiosk-single-app.md - text: Set up a multi-app kiosk for Windows 11 - url: lock-down-windows-11-to-specific-apps.md + url: kiosk/lock-down-windows-11-to-specific-apps.md + - text: Manage multi-user and guest devices + url: shared-devices-concepts.md + + - title: Configure shared devices + linkLists: + - linkListType: how-to-guide + links: - text: Manage multi-user and guest devices url: shared-devices-concepts.md - # Card (optional) - title: Use provisioning packages linkLists: - linkListType: how-to-guide @@ -60,7 +63,6 @@ landingContent: - text: Apply a provisioning package url: provisioning-packages/provisioning-apply-package.md - # Card (optional) - title: Use Windows Configuration Designer (WCD) linkLists: - linkListType: reference @@ -73,24 +75,3 @@ landingContent: url: wcd/wcd-provisioningcommands.md - text: Accounts url: wcd/wcd-accounts.md - - # Card (optional) - - title: Configure Cortana in Windows client - linkLists: - - linkListType: overview - links: - - text: Configure Cortana in Windows 10 - url: cortana-at-work/cortana-at-work-overview.md - - text: Custom voice commands in Cortana - - url: cortana-at-work/cortana-at-work-voice-commands.md - - # Card (optional) - - title: User Experience Virtualization (UE-V) for Windows client - linkLists: - - linkListType: overview - links: - - text: UE-V for Windows 10 overview - url: ue-v/uev-for-windows.md - - text: Get Started with UE-V - url: ue-v/uev-getting-started.md \ No newline at end of file diff --git a/windows/configuration/shared-pc/images/intune.svg b/windows/configuration/shared-pc/images/intune.svg deleted file mode 100644 index 6e0d938aed..0000000000 --- a/windows/configuration/shared-pc/images/intune.svg +++ /dev/null @@ -1,24 +0,0 @@ - - - - - - - - - - - - - - - - Icon-intune-329 - - - - - - - - \ No newline at end of file diff --git a/windows/configuration/shared-pc/images/powershell.svg b/windows/configuration/shared-pc/images/powershell.svg deleted file mode 100644 index ab2d5152ca..0000000000 --- a/windows/configuration/shared-pc/images/powershell.svg +++ /dev/null @@ -1,20 +0,0 @@ - - - - - - - - - - MsPortalFx.base.images-10 - - - - - - - - - - \ No newline at end of file diff --git a/windows/configuration/shared-pc/images/provisioning-package.svg b/windows/configuration/shared-pc/images/provisioning-package.svg deleted file mode 100644 index dbbad7d780..0000000000 --- a/windows/configuration/shared-pc/images/provisioning-package.svg +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/windows/configuration/shared-pc/set-up-shared-or-guest-pc.md b/windows/configuration/shared-pc/set-up-shared-or-guest-pc.md index 10db6ae8f9..7513c63f7b 100644 --- a/windows/configuration/shared-pc/set-up-shared-or-guest-pc.md +++ b/windows/configuration/shared-pc/set-up-shared-or-guest-pc.md @@ -1,11 +1,11 @@ --- -title: Set up a shared or guest Windows device +title: Configure a shared or guest Windows device description: Description of how to configured Shared PC mode, which is a Windows feature that optimizes devices for shared use scenarios. ms.date: 11/08/2023 ms.topic: how-to --- -# Set up a shared or guest Windows device +# Configure a shared or guest Windows device **Shared PC** offers options to facilitate the management and optimization of shared devices. The customizations offered by Shared PC are listed in the following table. @@ -25,7 +25,9 @@ Shared PC can be configured using the following methods: Follow the instructions below to configure your devices, selecting the option that best suits your needs. -#### [:::image type="icon" source="images/intune.svg"::: **Intune**](#tab/intune) +#### [:::image type="icon" source="../images/icons/intune.svg"::: **Intune**](#tab/intune) + + To configure devices using Microsoft Intune, [create a **Settings catalog** policy][MEM-2], and use the settings listed under the category **`Shared PC`**: @@ -35,7 +37,7 @@ Assign the policy to a security group that contains as members the devices or us Alternatively, you can configure devices using a [custom policy][MEM-1] with the [SharedPC CSP][WIN-3]. -#### [:::image type="icon" source="images/provisioning-package.svg"::: **PPKG**](#tab/ppkg) +#### [:::image type="icon" source="../images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg) To configure devices using a provisioning package, [create a provisioning package][WIN-1] using WCD, and use the settings listed under the category **`SharedPC`**: @@ -45,7 +47,7 @@ For a list and description of CSP settings exposed in Windows Configuration Desi Follow the steps in [Apply a provisioning package][WIN-2] to apply the package that you created. -#### [:::image type="icon" source="images/powershell.svg"::: **PowerShell**](#tab/powershell) +#### [:::image type="icon" source="../images/icons/powershell.svg"::: **PowerShell**](#tab/powershell) To configure devices using a PowerShell script, you can use the [MDM Bridge WMI Provider][WIN-6]. @@ -114,6 +116,7 @@ For more information, see [Using PowerShell scripting with the WMI Bridge Provid ## Troubleshooting Shared PC To troubleshoot Shared PC, you can use the following tools: + - Check the log `C:\Windows\SharedPCSetup.log` - Check the registry keys under `HKLM\Software\Microsoft\Windows\CurrentVersion\SharedPC` - `AccountManagement` key contains settings on how profiles are managed @@ -125,7 +128,7 @@ To troubleshoot Shared PC, you can use the following tools: - For a list of settings exposed by the SharedPC configuration service provider, see [SharedPC CSP][WIN-3]. - For a list of settings exposed by Windows Configuration Designer, see [SharedPC CSP][WIN-4]. ------------ + [WIN-1]: /windows/configuration/provisioning-packages/provisioning-create-package [WIN-2]: /windows/configuration/provisioning-packages/provisioning-apply-package diff --git a/windows/configuration/shared-pc/shared-devices-concepts.md b/windows/configuration/shared-pc/shared-devices-concepts.md index 1a5a943367..fdb4b3ed52 100644 --- a/windows/configuration/shared-pc/shared-devices-concepts.md +++ b/windows/configuration/shared-pc/shared-devices-concepts.md @@ -1,60 +1,60 @@ --- title: Manage multi-user and guest Windows devices description: options to optimize Windows devices used in shared scenarios, such touchdown spaces in an enterprise, temporary customer use in retail or shared devices in a school. -ms.date: 11/08/2023 +ms.date: 02/06/2024 ms.topic: concept-article ---- +--- -# Manage multi-user and guest Windows devices with Shared PC +# Manage multi-user and guest Windows devices with Shared PC Windows allows multiple users to sign in and use the same device, which is useful in scenarios like touchdown spaces in an enterprise, temporary customer use in retail or shared devices in a school. -As more users access the same device, more resources on the devices are used. This can lead to performance issues and a degraded user experience. +As more users access the same device, more resources on the devices are used. This can lead to performance issues and a degraded user experience. -To optimize multi-user and guest devices, Windows provides options through a feature called *Shared PC*. These settings are designed to improve the experience for all users on the device, and to reduce the administrative overhead caused by the maintenance of multiple user profiles. +To optimize multi-user and guest devices, Windows provides options through a feature called *Shared PC*. These settings are designed to improve the experience for all users on the device, and to reduce the administrative overhead caused by the maintenance of multiple user profiles. -This article describes the different options available in Shared PC. +This article describes the different options available in Shared PC. -## Shared PC mode +## Shared PC mode -A Windows device enabled for *Shared PC mode* is designed to be maintenance-free with high reliability. Devices configured in Shared PC mode have different settings designed to improve the experience for all users accessing a shared device. +A Windows device enabled for *Shared PC mode* is designed to be maintenance-free with high reliability. Devices configured in Shared PC mode have different settings designed to improve the experience for all users accessing a shared device. -## Account management +## Account management -When *Account management* is configured, user profiles are automatically deleted to free up disk space and resources. Account management is performed both at sign-out time and during system maintenance time periods. Shared PC mode can be configured to delete accounts immediately at sign-out, based on disk space thresholds, or based on inactivity thresholds. +When *Account management* is configured, user profiles are automatically deleted to free up disk space and resources. Account management is performed both at sign-out time and during system maintenance time periods. Shared PC mode can be configured to delete accounts immediately at sign-out, based on disk space thresholds, or based on inactivity thresholds. > [!IMPORTANT] -> Shared PC is designed to take advantage of maintenance time periods, which run while the device is not in use. Therefore, devices should be put to **sleep** instead of shut down, so that they can wake up to perform maintenance tasks. +> Shared PC is designed to take advantage of maintenance time periods, which run while the device is not in use. Therefore, devices should be put to **sleep** instead of shut down, so that they can wake up to perform maintenance tasks. > [!TIP] -> While Shared PC does not configure the Windows Update client, it is recommended to configure Windows Update to automatically install updates and reboot during maintenance hours. This will help ensure the device is always up to date without interrupting users when the device is in use. +> While Shared PC does not configure the Windows Update client, it is recommended to configure Windows Update to automatically install updates and reboot during maintenance hours. This will help ensure the device is always up to date without interrupting users when the device is in use. -### Account models +### Account models -Shared PC offers the possibility to enable a **Guest** option on the sign-in screen. The Guest option doesn't require any user credentials or authentication, and creates a new local account each time it's used with access to the desktop. A **Guest button** is shown on the sign-in screen that a user can select. +Shared PC offers the possibility to enable a **Guest** option on the sign-in screen. The Guest option doesn't require any user credentials or authentication, and creates a new local account each time it's used with access to the desktop. A **Guest button** is shown on the sign-in screen that a user can select. -:::image type="content" source="./images/sharedpc-guest-win11.png" alt-text="Windows 11 sign-in screen with Guest option enabled." border="True"::: +:::image type="content" source="./images/sharedpc-guest-win11.png" alt-text="Windows 11 sign-in screen with Guest option enabled." border="True"::: -Shared PC also offers a **Kiosk** mode, which automatically executes a specific application when the kiosk account signs-in. This is useful in scenarios where the device is accessed for a specific purpose, such as test taking in a school. +Shared PC also offers a **Kiosk** mode, which automatically executes a specific application when the kiosk account signs-in. This is useful in scenarios where the device is accessed for a specific purpose, such as test taking in a school. -:::image type="content" source="./images/sharedpc-kiosk-win11se.png" alt-text="Windows 11 sign-in screen with Guest and Kiosk options enabled." border="True"::: +:::image type="content" source="./images/sharedpc-kiosk-win11se.png" alt-text="Windows 11 sign-in screen with Guest and Kiosk options enabled." border="True"::: -## Advanced customizations +## Advanced customizations -Shared PC offers advanced customizations for shared devices, such as specific settings for education devices, low end devices, and more. +Shared PC offers advanced customizations for shared devices, such as specific settings for education devices, low end devices, and more. -Shared devices require special considerations regarding power settings. Shared PC makes it easy to configure power settings for shared devices. The power settings are configured in the local group policy object (LGPO). +Shared devices require special considerations regarding power settings. Shared PC makes it easy to configure power settings for shared devices. The power settings are configured in the local group policy object (LGPO). > [!NOTE] -> For devices without Advanced Configuration and Power Interface (ACPI) wake alarms, Shared PC will override real-time clock (RTC) wake alarms to be allowed to wake the PC from sleep (by default, RTC wake alarms are off). This ensures that the widest variety of hardware will take advantage of maintenance periods. +> For devices without Advanced Configuration and Power Interface (ACPI) wake alarms, Shared PC will override real-time clock (RTC) wake alarms to be allowed to wake the PC from sleep (by default, RTC wake alarms are off). This ensures that the widest variety of hardware will take advantage of maintenance periods. -## Additional information +## Additional information - To learn how to configure Shared PC, see [Set up a shared or guest Windows device](set-up-shared-or-guest-pc.md). - For a list of settings configured by the different options offered by Shared PC, see the [Shared PC technical reference](shared-pc-technical.md). - For a list of settings exposed by the SharedPC configuration service provider, see [SharedPC CSP][WIN-1]. -- For a list of settings exposed by Windows Configuration Designer, see [SharedPC CSP][WIN-2]. +- For a list of settings exposed by Windows Configuration Designer, see [SharedPC CSP][WIN-2]. - + [WIN-1]: /windows/client-management/mdm/sharedpc-csp [WIN-2]: /windows/configuration/wcd/wcd-sharedpc \ No newline at end of file diff --git a/windows/configuration/shared-pc/shared-pc-technical.md b/windows/configuration/shared-pc/shared-pc-technical.md index 623303a671..62edc9d451 100644 --- a/windows/configuration/shared-pc/shared-pc-technical.md +++ b/windows/configuration/shared-pc/shared-pc-technical.md @@ -1,22 +1,22 @@ --- title: Shared PC technical reference description: List of policies and settings applied by the Shared PC options. -ms.date: 11/08/2023 +ms.date: 02/06/2024 ms.topic: reference ---- +--- -# Shared PC technical reference +# Shared PC technical reference -This article details the settings configured by the different options of Shared PC. +This article details the settings configured by the different options of Shared PC. > [!IMPORTANT] -> The behavior of some options have changed over time. This article describes the current settings applied by Shared PC. +> The behavior of some options have changed over time. This article describes the current settings applied by Shared PC. -## EnableSharedPCMode and EnableSharedPCModeWithOneDriveSync +## EnableSharedPCMode and EnableSharedPCModeWithOneDriveSync -EnableSharedPCMode and EnableSharedPCModeWithOneDriveSync are the two policies that enable **Shared PC mode**. The only difference between the two is that EnableSharedPCModeWithOneDriveSync enables OneDrive synchronization, while EnableSharedPCMode disables it. +EnableSharedPCMode and EnableSharedPCModeWithOneDriveSync are the two policies that enable **Shared PC mode**. The only difference between the two is that EnableSharedPCModeWithOneDriveSync enables OneDrive synchronization, while EnableSharedPCMode disables it. -When enabling Shared PC mode, the following settings in the local GPO are configured: +When enabling Shared PC mode, the following settings in the local GPO are configured: | Policy setting | Status | |--|--| @@ -42,28 +42,28 @@ When enabling Shared PC mode, the following settings in the local GPO are config | Windows Components/OneDrive/Prevent the usage of OneDrive for file storage |**Enabled** if using EnableSharedPCMode

**Disabled** is using EnableSharedPCModeWithOneDriveSync | | Windows Components/Windows Hello for Business/Use biometrics | Disabled | | Windows Components/Windows Hello for Business/Use Windows Hello for Business | Disabled | -| Windows Components/Windows Logon Options/Sign-in and lock last interactive user automatically after a restart | Disabled | +| Windows Components/Windows Logon Options/Sign-in and lock last interactive user automatically after a restart | Disabled | -| Extra registry setting | Status | -|-------------------------------------------------------------------------------------------------------------------|----------| +| Extra registry setting | Status | +|--|--| | Software\Policies\Microsoft\PassportForWork\Remote\Enabled (Phone sign-in/Use phone sign-in) | 0 | -| Software\Policies\Microsoft\Windows\PreviewBuilds\AllowBuildPreview () | 0 | +| Software\Policies\Microsoft\Windows\PreviewBuilds\AllowBuildPreview () | 0 | -## SetEDUPolicy +## SetEDUPolicy -By enabling SetEDUPolicy, the following settings in the local GPO are configured: +By enabling SetEDUPolicy, the following settings in the local GPO are configured: | Policy setting | Status | |--|--| | System/User Profiles/Turn off the advertising ID | Enabled | | Windows Components/Cloud Content/Do not show Windows tips | Enabled | -| Windows Components/Cloud Content/Turn off Microsoft consumer experiences | Enabled | +| Windows Components/Cloud Content/Turn off Microsoft consumer experiences | Enabled | -## SetPowerPolicies +## SetPowerPolicies -By enabling SetPowerPolicies, the following settings in the local GPO are configured: +By enabling SetPowerPolicies, the following settings in the local GPO are configured: -| Policy setting | Status| +| Policy setting | Status | |--|--| | System/Power Management/Button Settings/Select the lid switch action (on battery) | Enabled > Sleep | | System/Power Management/Button Settings/Select the lid switch action (plugged in) | Enabled > Sleep | @@ -77,42 +77,41 @@ By enabling SetPowerPolicies, the following settings in the local GPO are config | System/Power Management/Sleep Settings/Specify the system hibernate timeout (on battery) | 0 (Hibernation disabled) | | System/Power Management/Sleep Settings/Specify the system hibernate timeout (plugged in) | 0 (Hibernation disabled) | | System/Power Management/Sleep Settings/Turn off hybrid sleep (on battery) | Enabled | -| System/Power Management/Sleep Settings/Turn off hybrid sleep (plugged in) | Enabled | +| System/Power Management/Sleep Settings/Turn off hybrid sleep (plugged in) | Enabled | -## MaintenanceStartTime +## MaintenanceStartTime -By enabling MaintenanceStartTime, the following settings in the local GPO are configured: +By enabling MaintenanceStartTime, the following settings in the local GPO are configured: -| Policy setting | Status| -|--------------------------------------------------------------------------------------|--------------------------------| +| Policy setting | Status | +|--|--| | Windows Components/Maintenance Scheduler/Automatic Maintenance Activation Boundary | 2000-01-01T00:00:00 (midnight) | -| Windows Components/Maintenance Scheduler/Automatic Maintenance Random Delay | Enabled PT2H (2 hours) | -| Windows Components/Maintenance Scheduler/Automatic Maintenance WakeUp Policy | Enabled | +| Windows Components/Maintenance Scheduler/Automatic Maintenance Random Delay | Enabled PT2H (2 hours) | +| Windows Components/Maintenance Scheduler/Automatic Maintenance WakeUp Policy | Enabled | -## SignInOnResume +## SignInOnResume -By enabling SignInOnResume, the following settings in the local GPO are configured: +By enabling SignInOnResume, the following settings in the local GPO are configured: -| Policy setting | Status| +| Policy setting | Status | |--|--| | System/Logon/Allow users to select when a password is required when resuming from connected standby | Disabled | | System/Power Management/Sleep Settings/Require a password when a computer wakes (on battery) | Enabled | -| System/Power Management/Sleep Settings/Require a password when a computer wakes (plugged in) | Enabled | +| System/Power Management/Sleep Settings/Require a password when a computer wakes (plugged in) | Enabled | -## EnableAccountManager +## EnableAccountManager -By enabling Enableaccountmanager, the following schedule task is turned on: `\Microsoft\Windows\SharedPC\Account Cleanup`. +By enabling Enableaccountmanager, the following schedule task is turned on: `\Microsoft\Windows\SharedPC\Account Cleanup`. -## Shared PC APIs and app behavior +## Shared PC APIs and app behavior -Applications can take advantage of Shared PC mode with the following three APIs: +Applications can take advantage of Shared PC mode with the following three APIs: -- [**IsEnabled**][API-1] - This API informs applications when the device is configured for shared use scenarios. For example, an app might only download content on demand on a device in shared PC mode, or might skip first run experiences. -- [**ShouldAvoidLocalStorage**][API-2] - This API informs applications when the PC has been configured to not allow the user to save to the local storage of the PC. Instead, only cloud save locations should be offered by the app or saved automatically by the app. +- [**IsEnabled**][API-1] - This API informs applications when the device is configured for shared use scenarios. For example, an app might only download content on demand on a device in shared PC mode, or might skip first run experiences +- [**ShouldAvoidLocalStorage**][API-2] - This API informs applications when the PC has been configured to not allow the user to save to the local storage of the PC. Instead, only cloud save locations should be offered by the app or saved automatically by the app +- [**IsEducationEnvironment**][API-3] - This API informs applications when the PC is used in an education environment. Apps may want to handle diagnostic data differently or hide advertising functionality -- [**IsEducationEnvironment**][API-3] - This API informs applications when the PC is used in an education environment. Apps may want to handle diagnostic data differently or hide advertising functionality. - ------------ + [API-1]: /uwp/api/windows.system.profile.sharedmodesettings.isenabled [API-2]: /uwp/api/windows.system.profile.sharedmodesettings.shouldavoidlocalstorage diff --git a/windows/deployment/update/includes/wufb-deployment-driver-policy-considerations.md b/windows/deployment/update/includes/wufb-deployment-driver-policy-considerations.md index cc46da849e..c386f7fd42 100644 --- a/windows/deployment/update/includes/wufb-deployment-driver-policy-considerations.md +++ b/windows/deployment/update/includes/wufb-deployment-driver-policy-considerations.md @@ -20,7 +20,7 @@ The following policies exclude drivers from Windows Update for a device: - **Group Policy**: `\Windows Components\Windows Update\Do not include drivers with Windows Updates` set to `enabled` - **CSP**: [ExcludeWUDriversInQualityUpdate](/windows/client-management/mdm/policy-csp-update#excludewudriversinqualityupdate) set to `1` - **Registry**: `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversFromQualityUpdates` set to `1` - - **Intune**: [**Windows Drivers** update setting](/mem/intune/protect/windows-update-settings#update-settings) for the update ring set to `Allow` + - **Intune**: [**Windows Drivers** update setting](/mem/intune/protect/windows-update-settings#update-settings) for the update ring set to `Block` **Behavior with the deployment service**: Devices with driver exclusion polices that are enrolled for **drivers** and added to an audience though the deployment service: - Will display the applicable driver content in the deployment service @@ -42,4 +42,4 @@ The following policies define the source for driver updates as either Windows Up - Will install drivers that are approved from the deployment service > [!NOTE] -> When the scan source for drivers is set to WSUS, the deployment service doesn't get inventory events from devices. This means that the deployment service won't be able to report the applicability of a driver for the device. \ No newline at end of file +> When the scan source for drivers is set to WSUS, the deployment service doesn't get inventory events from devices. This means that the deployment service won't be able to report the applicability of a driver for the device. diff --git a/windows/hub/docfx.json b/windows/hub/docfx.json index ed4832af6d..5f8b9dc5f7 100644 --- a/windows/hub/docfx.json +++ b/windows/hub/docfx.json @@ -42,7 +42,8 @@ "zone_pivot_group_filename": "resources/zone-pivot-groups.json", "breadcrumb_path": "/windows/resources/breadcrumb/toc.json", "uhfHeaderId": "MSDocsHeader-Windows", - "ms.technology": "itpro-fundamentals", + "ms.service": "windows-client", + "ms.subservice": "itpro-fundamentals", "ms.topic": "article", "feedback_system": "Standard", "feedback_product_url": "https://support.microsoft.com/windows/send-feedback-to-microsoft-with-the-feedback-hub-app-f59187f8-8739-22d6-ba93-f66612949332", diff --git a/windows/privacy/docfx.json b/windows/privacy/docfx.json index c7cbe8e448..92b2620ad7 100644 --- a/windows/privacy/docfx.json +++ b/windows/privacy/docfx.json @@ -37,7 +37,8 @@ "adobe-target": true, "breadcrumb_path": "/windows/resources/breadcrumb/toc.json", "uhfHeaderId": "MSDocsHeader-Windows", - "ms.technology": "itpro-privacy", + "ms.service": "windows-client", + "ms.subservice": "itpro-privacy", "ms.topic": "article", "feedback_system": "Standard", "feedback_product_url": "https://support.microsoft.com/windows/send-feedback-to-microsoft-with-the-feedback-hub-app-f59187f8-8739-22d6-ba93-f66612949332", diff --git a/windows/security/images/icons/accessibility.svg b/windows/security/images/icons/accessibility.svg new file mode 100644 index 0000000000..21a6b4f235 --- /dev/null +++ b/windows/security/images/icons/accessibility.svg @@ -0,0 +1,3 @@ + + + \ No newline at end of file diff --git a/windows/security/images/icons/powershell.svg b/windows/security/images/icons/powershell.svg new file mode 100644 index 0000000000..b23a99c61d --- /dev/null +++ b/windows/security/images/icons/powershell.svg @@ -0,0 +1,9 @@ + + + + + + + + + diff --git a/windows/security/images/icons/settings.svg b/windows/security/images/icons/settings.svg new file mode 100644 index 0000000000..9ec19d16aa --- /dev/null +++ b/windows/security/images/icons/settings.svg @@ -0,0 +1,19 @@ + + + + + + + + + + + + + + + + + + + diff --git a/windows/security/includes/insider-note.md b/windows/security/includes/insider-note.md deleted file mode 100644 index a1160f8047..0000000000 --- a/windows/security/includes/insider-note.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -author: paolomatarazzo -ms.author: paoloma -ms.topic: include -ms.date: 01/11/2024 ---- - -:::row::: -:::column span="1"::: -:::image type="content" source="../images/insider.png" alt-text="Logo of Windows Insider." border="false"::: -:::column-end::: -:::column span="3"::: -> [!IMPORTANT] ->This article describes features or settings that are under development and only applicable to [Windows Insider Preview builds](/windows-insider/). The content is subject to change and may have dependencies on other features or services in preview. -:::column-end::: -:::row-end::: diff --git a/windows/whats-new/temporary-enterprise-feature-control.md b/windows/whats-new/temporary-enterprise-feature-control.md index d79c353526..cebfc291a6 100644 --- a/windows/whats-new/temporary-enterprise-feature-control.md +++ b/windows/whats-new/temporary-enterprise-feature-control.md @@ -35,11 +35,11 @@ Features that are behind temporary enterprise control will be enabled when one o - The device installs the annual feature update that enables the new features by default - The device receives a policy that enables features behind temporary enterprise control - - When the policy is enabled, all features on the device behind temporary control are turned on when the device next restarts. + - When the policy is enabled, all features on the device behind temporary control are turned on when the device restarts. ### Policy settings for temporary enterprise feature control -You can use a policy to enable features that are behind temporary enterprise feature control. When this policy is enabled, all features that were disabled behind temporary enterprise feature control are turned on when the device next reboots. The following polices apply to Windows 11, version 22H2 with [KB5022845](https://support.microsoft.com/kb/5022845) and later: +You can use a policy to enable features that are behind temporary enterprise feature control. When this policy is enabled, all features that were disabled behind temporary enterprise feature control are turned on when the device reboots. The following policies apply to Windows 11, version 22H2 with [KB5022845](https://support.microsoft.com/kb/5022845) and later: - **Group Policy:** Computer Configuration\Administrative Templates\Windows Components\Windows Update\Manage end user experience\\**Enable features introduced via servicing that are off by default** diff --git a/windows/whats-new/windows-11-plan.md b/windows/whats-new/windows-11-plan.md index 39330b182a..fbb1d4e367 100644 --- a/windows/whats-new/windows-11-plan.md +++ b/windows/whats-new/windows-11-plan.md @@ -11,7 +11,7 @@ ms.collection: - highpri - tier1 ms.subservice: itpro-fundamentals -ms.date: 08/11/2023 +ms.date: 02/06/2024 appliesto: - ✅ Windows 11 --- @@ -46,7 +46,7 @@ The availability of Windows 11 will vary according to a device's hardware and wh ##### Managed devices -Managed devices are devices that are under organization control. Managed devices include those devices managed by Microsoft Intune, Microsoft Configuration Manager, or other endpoint management solutions. +Managed devices are devices that are under organizational control. Managed devices include those devices managed by Microsoft Intune, Microsoft Configuration Manager, or other endpoint management solutions. If you manage devices on behalf of your organization, you'll be able to upgrade eligible devices to Windows 11 using your existing deployment and management tools at no cost when the upgrade reaches general availability. Organizations that use Windows Update for Business will have added benefits, such as: @@ -64,7 +64,7 @@ Windows 11 will be offered to eligible Windows 10 devices beginning later in the The Windows 11 upgrade will be available initially on eligible, unmanaged devices to users who manually seek the upgrade through Windows Update. As with all Windows Update managed devices, the **Windows Update Settings** page will confirm when a device is eligible, and users can upgrade if they choose to. -Just like Windows 10, the machine learning based [intelligent rollout](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/using-machine-learning-to-improve-the-windows-10-update/ba-p/877860) process will be used when rolling out upgrades. Machine learning uses a combination of testing, close partner engagement, feedback, diagnostic data, and real-life insights to manage quality. This process improves the update experience, and ensures that devices first nominated for updates are the devices likely to have a seamless experience. Devices that might have compatibility issues with the upgrade get the benefit of resolving these issues before the upgrade is offered. +Just like Windows 10, the machine learning-based [intelligent rollout](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/using-machine-learning-to-improve-the-windows-10-update/ba-p/877860) process will be used when rolling out upgrades. Machine learning uses a combination of testing, close partner engagement, feedback, diagnostic data, and real-life insights to manage quality. This process improves the update experience and ensures that devices first nominated for updates are the devices likely to have a seamless experience. Devices that might have compatibility issues with the upgrade get the benefit of resolving these issues before the upgrade is offered. ## Windows 11 readiness considerations @@ -91,7 +91,7 @@ Along with user experience and security improvements, Windows 11 introduces enha - Home, Pro, Pro for Workstations, and Pro for Education editions of Windows 11 will receive 24 months of support from the general availability date. - Enterprise and Education editions of Windows 11 will be supported for 36 months from the general availability date. -When Windows 11 reaches general availability, a consolidated Windows 11 update history will be available on support.microsoft.com, similar to what is [available today for Windows 10](https://support.microsoft.com/topic/windows-10-update-history-1b6aac92-bf01-42b5-b158-f80c6d93eb11). Similarly, the [Windows release health](/windows/release-health/) hub will offer quick access to Windows 11 servicing announcements, known issues, and safeguard holds. +When Windows 11 reaches general availability, a consolidated [Windows 11 update history](https://support.microsoft.com/topic/59875222-b990-4bd9-932f-91a5954de434) is available, similar to what is [available today for Windows 10](https://support.microsoft.com/topic/windows-10-update-history-1b6aac92-bf01-42b5-b158-f80c6d93eb11). Similarly, the [Windows release health](/windows/release-health/) hub will offer quick access to Windows 11 servicing announcements, known issues, and safeguard holds. It's important that organizations have adequate time to plan for Windows 11. Microsoft also recognizes that many organizations will have a mix of Windows 11 and Windows 10 devices across their ecosystem. Devices on in-service versions of Windows 10 will continue to receive monthly Windows 10 security updates through 2025, and incremental improvements to Windows 10 to support ongoing Microsoft 365 deployments. For more information, see the [Windows 10 release information](/windows/release-health/release-information) page, which offers information about the Windows 10 General Availability Channel and Long-term Servicing Channel (LTSC) releases.