diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index 4d7de0a870..e91e9f7bda 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -19,6 +19,7 @@ ### [Settings and quick actions that can be locked down in Windows 10 Mobile](mobile-devices/settings-that-can-be-locked-down.md) ### [Product IDs in Windows 10 Mobile](mobile-devices/product-ids-in-windows-10-mobile.md) ### [Start layout XML for mobile editions of Windows 10 (reference)](mobile-devices/start-layout-xml-mobile.md) +## [Configure cellular settings for tablets and PCs](provisioning-apn.md) ## [Configure Start, taskbar, and lock screen](start-taskbar-lockscreen.md) ### [Configure Windows Spotlight on the lock screen](windows-spotlight.md) ### [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](manage-tips-and-suggestions.md) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 07cebcf161..4236b5e7da 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -18,7 +18,8 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md) | New or changed topic | Description | | --- | --- | -| [ Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Added MDM policies for privacy settings. | +| [Configure cellular settings for tablets and PCs](provisioning-apn.md) | New | +| [ Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) | Added MDM policies for privacy settings | ## April 2017 diff --git a/windows/configuration/images/apn-add-details.PNG b/windows/configuration/images/apn-add-details.PNG new file mode 100644 index 0000000000..caee3d6429 Binary files /dev/null and b/windows/configuration/images/apn-add-details.PNG differ diff --git a/windows/configuration/images/apn-add.PNG b/windows/configuration/images/apn-add.PNG new file mode 100644 index 0000000000..0e25e5c0e9 Binary files /dev/null and b/windows/configuration/images/apn-add.PNG differ diff --git a/windows/configuration/index.md b/windows/configuration/index.md index c7b9711f5a..28bf0e8e33 100644 --- a/windows/configuration/index.md +++ b/windows/configuration/index.md @@ -25,6 +25,7 @@ Enterprises often need to apply custom configurations to devices for their users | [Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md) | Wi-Fi Sense automatically connects you to Wi-Fi, so you can get online quickly in more places. It can connect you to open Wi-Fi hotspots it knows about through crowdsourcing, or to Wi-Fi networks your contacts have shared with you by using Wi-Fi Sense. The initial settings for Wi-Fi Sense are determined by the options you chose when you first set up your PC with Windows 10. | | [Configure kiosk and shared devices running Windows 10 desktop editions](kiosk-shared-pc.md) | These topics help you configure Windows 10 devices to be shared by multiple users or to run as a kiosk device that runs a single app. | | [Configure Windows 10 Mobile devices](mobile-devices/configure-mobile.md) | These topics help you configure the features and apps and Start screen for a device running Windows 10 Mobile, as well as how to configure a kiosk device that runs a single app. | +| [Configure cellular settings for tablets and PCs](provisioning-apn.md) | Enterprises can provision cellular settings for tablets and PC with built-in cellular modems or plug-in USB modem dongles. | | [Configure Start, taskbar, and lock screen](start-taskbar-lockscreen.md) | A standard, customized Start layout can be useful on devices that are common to multiple users and devices that are locked down for specialized purposes. Configuring the taskbar allows the organization to pin useful apps for their employees and to remove apps that are pinned by default. | | [Cortana integration in your business or enterprise](cortana-at-work/cortana-at-work-overview.md) | The world’s first personal digital assistant helps users get things done, even at work. Cortana includes powerful configuration options specifically to optimize for unique small to medium-sized business and enterprise environments. | | [Configure access to Microsoft Store](stop-employees-from-using-the-windows-store.md) | IT Pros can configure access to Microsoft Store for client computers in their organization. For some organizations, business policies require blocking access to Microsoft Store. | diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index b5b9ec5163..03a95580ef 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -287,7 +287,7 @@ You can prevent Windows from setting the time automatically. -or- -- Disable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Enable Windows NTP Server** > **Windows Time Service** > **Enable Windows NTP Client** +- Disable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Enable Windows NTP Server** > **Windows Time Service** > **Configure Windows NTP Client** -or - @@ -511,6 +511,7 @@ Find the Microsoft Edge Group Policy objects under **Computer Configuration** &g | Configure Windows Defender SmartScreen Filter (Windows 10, version 1703)
Configure SmartScreen Filter (Windows Server 2016) | Choose whether Windows Defender SmartScreen is turned on or off.
Default: Enabled | | Allow web content on New Tab page | Choose whether a new tab page appears.
Default: Enabled | | Configure Start pages | Choose the Start page for domain-joined devices.
Set this to **about:blank** | +| Prevent the First Run webpage from opening pages | Choose whether employees see the First Run webpage.
Default: Enabled | The Windows 10, version 1511 Microsoft Edge Group Policy names are: @@ -1824,7 +1825,7 @@ You can turn off Windows Update by setting the following registry entries: -and- -- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Intenet Communication Management** > **Internet Communication Settings** > **Turn off access to all Windows Update features**. +- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Internet Communication Management** > **Internet Communication Settings** > **Turn off access to all Windows Update features**. -and- diff --git a/windows/configuration/provisioning-apn.md b/windows/configuration/provisioning-apn.md new file mode 100644 index 0000000000..f1aeed6ade --- /dev/null +++ b/windows/configuration/provisioning-apn.md @@ -0,0 +1,79 @@ +--- +title: Configure cellular settings for tablets and PCs (Windows 10) +description: Enterprises can provision cellular settings for tablets and PC with built-in cellular modems or plug-in USB modem dongles. +ms.assetid: 287706E5-063F-4AB5-902C-A0DF6D0730BC +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +author: jdeckerMS +localizationpriority: high +--- + +# Configure cellular settings for tablets and PCs + + +**Applies to** + +- Windows 10 + +>**Looking for consumer information?** See [Cellular settings in Windows 10](https://support.microsoft.com/help/10739/windows-10-cellular-settings) + +Enterprises can configure cellular settings for tablets and PC that have built-in cellular modems or plug-in USB modem dongles and apply the settings in a [provisioning package](provisioning-packages/provisioning-packages.md). After the devices are configured, users are automatically connected using the access point name (APN) defined by the enterprise without needing to manually connect. + +For users who work in different locations, you can configure one APN to connect when the users are at work and a different APN when the users are traveling. + + +## Prerequisites + +- Windows 10, version 1703, desktop editions (Home, Pro, Enterprise, Education) + +- Tablet or PC with built-in cellular modem or plug-in USB modem dongle + +- [Windows Configuration Designer](provisioning-packages/provisioning-install-icd.md) + +- APN (the address that your PC uses to connect to the Internet when using the cellular data connection) + + >[!NOTE] + >You can get the APN from your mobile operator. + +## How to configure cellular settings in a provisioning package + +1. In Windows Configuration Designer, [start a new project](provisioning-packages/provisioning-create-package.md) using the **Advanced provisioning** option. + +2. Enter a name for your project, and then click **Next**. + +3. Select **All Windows desktop editions**, click **Next**, and then click **Finish**. + +4. Go to **Runtime settings > Connections > EnterpriseAPN**. + +5. Enter a name for the connection, and then click **Add**. + + ![Example of APN connection name](images/apn-add.png) + +6. The connection appears in the **Available customizations** pane. Select it to view the settings that you can configure for the connection. + + ![settings for new connection](images/apn-add-details.png) + +7. The following table describes the settings available for the connection. + + | Setting | Description | + | --- | --- | + | AlwaysOn | By default, the Connection Manager will automatically attempt to connect to the APN when a connection is available. You can disable this setting. | + | APNName | Enter the name of the APN. | + | AuthType | You can select **None** (the default), or specify **Auto**, **PAP**, **CHAP**, or **MSCHAPv2** authentication. If you select PAP, CHAP, or MSCHAPv2 authentication, you must also enter a user name and password. | + | ClassId | This is a GUID that defines the APN class to the modem. This is only required when **IsAttachAPN** is **true** and the attach APN is not only used as the Internet APN. | + | Enabled | By default, the connection is enabled. You can change this setting. | + | IccId | This is the Integrated Circuit Card ID (ICCID) associated with the cellular connection profile. | + | IPType | By default, the connection can use IPv4 and IPv6 concurrently. You can change this setting to only IPv4, only IPv6, or IPv6 with IPv4 provided by 46xlat. | + | IsAttachAPN | Specify whether this APN should be requested as part of an LTE Attach. | + | Password | If you select PAP, CHAP, or MSCHAPv2 authentication, enter a password that corresponds to the user name. | + | Roaming | Select the behavior that you want when the device is roaming. The options are:

-Disallowed
-Allowed (default)
-DomesticRoaming
-Use OnlyForDomesticRoaming
-UseOnlyForNonDomesticRoaming
-UseOnlyForRoaming | + | UserName | If you select PAP, CHAP, or MSCHAPv2 authentication, enter a user name. | + +8. After you configure the connection settings, [build the provisioning package](provisioning-packages/provisioning-create-package.md#build-package). + +9. [Apply the package to devices.](provisioning-packages/provisioning-apply-package.md) + + + + diff --git a/windows/configure/images/apn-add-details.PNG b/windows/configure/images/apn-add-details.PNG new file mode 100644 index 0000000000..caee3d6429 Binary files /dev/null and b/windows/configure/images/apn-add-details.PNG differ diff --git a/windows/configure/images/apn-add.PNG b/windows/configure/images/apn-add.PNG new file mode 100644 index 0000000000..0e25e5c0e9 Binary files /dev/null and b/windows/configure/images/apn-add.PNG differ diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index 91ec6739f4..d7207457f6 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -36,7 +36,7 @@ Windows Update for Business is a free service that is available for Windows Pro, Windows Update for Business provides three types of updates to Windows 10 devices: -- **Feature Updates**: previously referred to as *upgrades*, Feature Updates contain not only security and quality revisions, but also significant feature additions and changes; they are released semi-anually. +- **Feature Updates**: previously referred to as *upgrades*, Feature Updates contain not only security and quality revisions, but also significant feature additions and changes; they are released semi-annually. - **Quality Updates**: these are traditional operating system updates, typically released the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as those for Microsoft Office or Visual Studio) as Quality Updates. These non-Windows Updates are known as *Microsoft Updates* and devices can be optionally configured to receive such updates along with their Windows Updates. - **Non-deferrable updates**: Currently, antimalware and antispyware Definition Updates from Windows Update cannot be deferred.