deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 14:27:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'refs/remotes/origin/master' into atp-gaps

Browse Source
This commit is contained in:
Joey Caparas 2017-05-18 13:17:46 -07:00
commit 7a8e2d302d
15 changed files with 140 additions and 85 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
education/windows/school-get-minecraft.md
View File

@ -15,12 +15,12 @@ author: trudyha
- Windows 10 - Windows 10
When you sign up for a [Minecraft: Education Edition](http://education.minecraft.net) trial, or purchase a [Minecraft: Education Edition](http://education.minecraft.net) subscription. Minecraft will be added to the inventory in your Windows Store for Business, a private version of Windows Store associated with your Azure Active Directory (Azure AD) tenant. Your Store for Business is only displayed to members of your organization. When you sign up for a [Minecraft: Education Edition](http://education.minecraft.net) trial, or purchase a [Minecraft: Education Edition](http://education.minecraft.net) subscription. Minecraft will be added to the inventory in your Microsoft Store for Education which is associated with your Azure Active Directory (Azure AD) tenant. Your Microsoft Store for Education is only displayed to members of your organization.
>[!Note] >[!Note]
>If you don't have an Azure AD or Office 365 tenant, you can set up a free Office 365 Education subscription when you request Minecraft: Education Edition. For more information see [Office 365 Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans). >If you don't have an Azure AD or Office 365 tenant, you can set up a free Office 365 Education subscription when you request Minecraft: Education Edition. For more information see [Office 365 Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans).
## Add Minecraft to your Windows Store for Business ## Add Minecraft to your Windows Store for Education
You can start with the Minecraft: Education Edition trial to get individual copies of the app. For more information, see [Minecraft: Education Edition - direct purchase](#individual-copies). You can start with the Minecraft: Education Edition trial to get individual copies of the app. For more information, see [Minecraft: Education Edition - direct purchase](#individual-copies).
@ -36,40 +36,36 @@ If you’ve been approved and are part of the Enrollment for Education Solutions
<!-- ![Enter school email address](images/enter-email.png) --> <!-- ![Enter school email address](images/enter-email.png) -->
3. Select **Get the app**. This will take you to the Windows Store for Business to download the app. You will also receive an email with instructions and a link to the Store. 3. Select **Get the app**. This will take you to the Microsoft Store for Education to download the app. You will also receive an email with instructions and a link to the Store.
<!-- ![You can get the app now](images/get-the-app.png) --> <!-- ![You can get the app now](images/get-the-app.png) -->
4. Sign in to Windows Store for Business with your email address. 4. Sign in to Microsoft Store for Education with your email address.
5. Read and accept the Windows Store for Business Service Agreement, and then select **Next**. 5. Read and accept the Microsoft Store for Education Service Agreement, and then select **Next**.
6. **Minecraft: Education Edition** opens in the Windows Store for Business. Select **Get the app**. This places **Minecraft: Education Edition** in your Store inventory. 6. **Minecraft: Education Edition** opens in the Microsoft Store for Education. Select **Get the app**. This places **Minecraft: Education Edition** in your Store inventory.
<!-- ![Get Minecraft app in Store](images/minecraft-get-the-app.png) --> <!-- ![Get Minecraft app in Store](images/minecraft-get-the-app.png) -->
Now that the app is in your Store for Business inventory, you can choose how to distribute Minecraft. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft). Now that the app is in your Microsoft Store for Education inventory, you can choose how to distribute Minecraft. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft).
If you need additional licenses for **Minecraft: Education Edition**, see [Purchase additional licenses](https://technet.microsoft.com/edu/windows/education-scenarios-store-for-business#purchase-additional-licenses). If you need additional licenses for **Minecraft: Education Edition**, see [Purchase additional licenses](https://technet.microsoft.com/edu/windows/education-scenarios-store-for-business#purchase-additional-licenses).
### <a href="" id="volume-license"></a>Minecraft: Education Edition - volume licensing ### <a href="" id="volume-license"></a>Minecraft: Education Edition - volume licensing
Qualified education institutions can purchase Minecraft: Education Edition licenses through their Microsoft channel partner. Schools need to be part of the Enrollment for Education Solutions (EES) volume licensing program. Educational institutions should work with their channel partner to determine which Minecraft: Education Edition licensing offer is best for their institution. The process looks like this: Qualified education institutions can purchase Minecraft: Education Edition licenses through their Microsoft channel partner. Schools need to be part of the Enrollment for Education Solutions (EES) volume licensing program. Educational institutions should work with their channel partner to determine which Minecraft: Education Edition licensing offer is best for their institution. The process looks like this:
- Your channel partner will submit and process your volume license order, your licenses will be shown on [Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx), and the licenses will be available in your [Windows Store for Business](https://www.microsoft.com/business-store) inventory. - Your channel partner will submit and process your volume license order, your licenses will be shown on [Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx), and the licenses will be available in your [Microsoft Store for Education](https://www.microsoft.com/business-store) inventory.
- You’ll receive an email with a link to Windows Store for Business. - You’ll receive an email with a link to Microsoft Store for Education.
- Sign in to [Windows Store for Business](https://www.microsoft.com/business-store) to distribute and manage the Minecraft: Education Edition licenses. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft) - Sign in to [Windows Store for Education](https://educationstore.microsoft.com) to distribute and manage the Minecraft: Education Edition licenses. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft)
## Minecraft: Education Edition payment options ## Minecraft: Education Edition payment options
You can pay for Minecraft: Education Edition with a debit or credit card, or with an invoice. You can pay for Minecraft: Education Edition with a debit or credit card, or with an invoice.
### Debit or credit cards ### Debit or credit cards
During the purchase, click **Get started! Add a way to pay.** Provide the info needed for your debit or credit card. During the purchase, click **Get started! Add a way to pay.** Provide the info needed for your debit or credit card.
### Invoices ### Invoices
Invoices are now a supported payment method for Minecraft: Education Edition. There are a few requirements: Invoices are now a supported payment method for Minecraft: Education Edition. There are a few requirements:
- Admins only (not supported for Teachers) - Admins only (not supported for Teachers)
- $500 invoice minimum for your initial purchase - $500 invoice minimum for your initial purchase
@ -87,12 +83,13 @@ Invoices are now a supported payment method for Minecraft: Education Edition. Th
### Find your invoice ### Find your invoice
After you've finished the purchase, you can find your invoice by checking **Minecraft: Education Edition** in your **Inventory**. After you've finished the purchase, you can find your invoice by checking **Minecraft: Education Edition** in your **Apps & software**.
> **Note**: After you complete a purchase, it can take up to twenty-four hours for the app to appear in **Inventory**. > [!NOTE]
> After you complete a purchase, it can take up to twenty-four hours for the app to appear in **Apps & software**.
**To view your invoice** **To view your invoice**
1. In Windows Store for Business, click **Manage** and then click **Inventory**. 1. In Microsoft Store for Education, click **Manage** and then click **Apps & software**.
2. Click **Minecraft: Education Edition** in the list of apps. 2. Click **Minecraft: Education Edition** in the list of apps.
3. On **Minecraft: Education Edition**, click **View Bills**. 3. On **Minecraft: Education Edition**, click **View Bills**.
@ -104,10 +101,8 @@ After you've finished the purchase, you can find your invoice by checking **Mine
The **Payment Instructions** section on the first page of the invoice has information on invoice amount, due date, and how to pay with electronic funds transfer, or with a check. The **Payment Instructions** section on the first page of the invoice has information on invoice amount, due date, and how to pay with electronic funds transfer, or with a check.
## Distribute Minecraft ## Distribute Minecraft
After Minecraft: Education Edition is added to your Microsoft Store for Education inventory, you have three options:
After Minecraft: Education Edition is added to your Windows Store for Business inventory, you have three options:
- You can install the app on your PC. - You can install the app on your PC.
- You can assign the app to others. - You can assign the app to others.
@ -131,10 +126,10 @@ For Minecraft: Education Edition, you can use auto assign subscription to contro
**How to turn off automatic subscription assignment** **How to turn off automatic subscription assignment**
>[!Note] > [!Note]
>The version of the Minecraft: Education Edition page in the Store for Business will be different depending on which Store for Business flight you are using. > The version of the Minecraft: Education Edition page in the Microsoft Store will be different depending on which Microsoft Store for Education flight you are using.
1. Sign in to Microsoft Store for Business 1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com)
2. Click Manage. 2. Click Manage.
You'll see Minecraft: Education Edition product page. You'll see Minecraft: Education Edition product page.
@ -150,7 +145,7 @@ For Minecraft: Education Edition, you can use auto assign subscription to contro
### Install for me ### Install for me
You can install the app on your PC. This gives you a chance to test the app and know how you might help others in your organization use the app. You can install the app on your PC. This gives you a chance to test the app and know how you might help others in your organization use the app.
1. Sign in to Microsoft Store for Business. 1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then click **Install**. 2. Click **Manage**, and then click **Install**.
![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png) ![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png)
@ -162,7 +157,7 @@ Enter email addresses for your students, and each student will get an email with
**To assign to others** **To assign to others**
1. Sign in to Windows Store for Business. 1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**. 2. Click **Manage**.
![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png) ![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png)
@ -234,7 +229,7 @@ You'll download a .zip file, extract the files, and then use one of the files to
<!--- ## Manage Minecraft: Education Edition --> <!--- ## Manage Minecraft: Education Edition -->
<!--- ### Access to Windows Store for Business <!--- ### Access to Microsoft Store for Business
By default, when a teacher with a work or school account acquires Minecraft: Education Edition, they are automatically signed up for Window Store for Business, and the **Basic Purchaser** role is assigned to them. **Basic Purchaser** role allows teachers to acquire Minecraft: Education Edition and to distribute it to students. By default, when a teacher with a work or school account acquires Minecraft: Education Edition, they are automatically signed up for Window Store for Business, and the **Basic Purchaser** role is assigned to them. **Basic Purchaser** role allows teachers to acquire Minecraft: Education Edition and to distribute it to students.
However, tenant admins can control whether or not teachers automatically sign up for Windows Store for Business, and get the **Basic Purchaser** role. You can configure this with the **Allow educators in my organization to sign up for the Windows Store for Business.** You'll find this on the **Permissions** page. However, tenant admins can control whether or not teachers automatically sign up for Windows Store for Business, and get the **Basic Purchaser** role. You can configure this with the **Allow educators in my organization to sign up for the Windows Store for Business.** You'll find this on the **Permissions** page.
@ -298,15 +293,12 @@ You can purchase more licenses by working with your channel partner. Licenses ar
If you’ve purchased a volume license, be sure to let other basic purchasers in your organization know about the volume license. That should help prevent unnecessary purchases of individual copies. --> If you’ve purchased a volume license, be sure to let other basic purchasers in your organization know about the volume license. That should help prevent unnecessary purchases of individual copies. -->
## Learn more ## Learn more
[Working with Windows Store for Business – education scenarios](education-scenarios-store-for-business.md) </br> [Working with Microsoft Store for Education – education scenarios](education-scenarios-store-for-business.md) </br>
Learn about overall Windows Store for Business management: manage settings, shop for apps, distribute apps, manage inventory, and manage order history. Learn about overall Microsoft Store for Education management: manage settings, shop for apps, distribute apps, manage inventory, and manage order history.
[Roles and permissions in Microsoft Store for Business and Education](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business)
[Roles and permissions in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business) [Troubleshoot Microsoft Store for Business and Education](https://technet.microsoft.com/itpro/windows/manage/troubleshoot-windows-store-for-business)
[Troubleshoot Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/troubleshoot-windows-store-for-business)
## Related topics ## Related topics
[Get Minecraft: Education Edition](get-minecraft-for-education.md) [Get Minecraft: Education Edition](get-minecraft-for-education.md)
[For teachers get Minecraft: Education Edition](teacher-get-minecraft.md) [For teachers get Minecraft: Education Edition](teacher-get-minecraft.md)

25
education/windows/teacher-get-minecraft.md
View File

@ -17,7 +17,7 @@ author: trudyha
Learn how teachers can get and distribute Minecraft: Education Edition. Learn how teachers can get and distribute Minecraft: Education Edition.
## Add Minecraft to your Windows Store for Business ## Add Minecraft to your Microsoft Store for Education
1. Go to [http://education.minecraft.net/](http://education.minecraft.net/) and select **GET STARTED**. 1. Go to [http://education.minecraft.net/](http://education.minecraft.net/) and select **GET STARTED**.
@ -27,15 +27,15 @@ Learn how teachers can get and distribute Minecraft: Education Edition.
<!-- ![Enter school email address](images/enter-email.png) --> <!-- ![Enter school email address](images/enter-email.png) -->
3. Select **Get the app**. This will take you to the Windows Store for Business to download the app. You will also receive an email with instructions and a link to the Store. 3. Select **Get the app**. This will take you to Microsoft Store for Ecucation to download the app. You will also receive an email with instructions and a link to the Store.
<!-- ![You can get the app now](images/get-the-app.png) --> <!-- ![You can get the app now](images/get-the-app.png) -->
4. Sign in to Windows Store for Business with your email address. 4. Sign in to Microsoft Store for Education with your email address.
5. Read and accept the Windows Store for Business Service Agreement, and then select **Next**. 5. Read and accept the Microsoft Store for Business and Education Service Agreement, and then select **Next**.
6. **Minecraft: Education Edition** opens in the Windows Store for Business. Select **Get the app**. This places **Minecraft: Education Edition** in your Windows Store for Business inventory. 6. **Minecraft: Education Edition** opens in the Microsoft Store for Education. Select **Get the app**. This places **Minecraft: Education Edition** in your Microsoft Store inventory.
![Get Minecraft app in Store](images/minecraft-get-the-app.png) ![Get Minecraft app in Store](images/minecraft-get-the-app.png)
@ -43,7 +43,7 @@ If you need additional licenses for **Minecraft: Education Edition**, see [Purch
## Distribute Minecraft ## Distribute Minecraft
After Minecraft: Education Edition is added to your Windows Store for Business inventory, you have three options: After Minecraft: Education Edition is added to your Microsoft Store for Education inventory, you have three options:
- You can install the app on your PC. - You can install the app on your PC.
- You can assign the app to others. - You can assign the app to others.
@ -54,7 +54,7 @@ After Minecraft: Education Edition is added to your Windows Store for Business i
### Install for me ### Install for me
You can install the app on your PC. This gives you a chance to work with the app before using it with your students. You can install the app on your PC. This gives you a chance to work with the app before using it with your students.
1. Sign in to Windows Store for Business. 1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**, and then click **Install**. 2. Click **Manage**, and then click **Install**.
![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png) ![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png)
@ -65,7 +65,7 @@ You can install the app on your PC. This gives you a chance to work with the app
Enter email addresses for your students, and each student will get an email with a link to install the app. This option is best for older, more tech-savvy students who will always use the same PC at school. Enter email addresses for your students, and each student will get an email with a link to install the app. This option is best for older, more tech-savvy students who will always use the same PC at school.
**To assign to others** **To assign to others**
1. Sign in to Windows Store for Business. 1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**. 2. Click **Manage**.
![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png) ![Minecraft Education Edition product page](images/mc-install-for-me-teacher.png)
@ -95,7 +95,7 @@ Students will receive an email with a link that will install the app on their PC
![Windows Store app showing access to My Library](images/minecraft-private-store.png) ![Windows Store app showing access to My Library](images/minecraft-private-store.png)
When students click **My Libarary** they'll find apps assigned to them. When students click **My Library** they'll find apps assigned to them.
![My Library for example student](images/minecraft-my-library.png) ![My Library for example student](images/minecraft-my-library.png)
@ -131,7 +131,6 @@ You'll download a .zip file, extract the files, and then use one of the files to
![Windows Store app showing access to My Library](images/mc-dnld-others-teacher.png) ![Windows Store app showing access to My Library](images/mc-dnld-others-teacher.png)
2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**. 2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**.
3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC. 3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC.
4. **Install app**. Use the USB drive to copy the Minecraft folder to each Windows 10 PC where you want to install Minecraft: Education Edition. Open Minecraft: Education Edition folder, right-click **InstallMinecraftEducationEdition.bat** and click **Run as administrator**. 4. **Install app**. Use the USB drive to copy the Minecraft folder to each Windows 10 PC where you want to install Minecraft: Education Edition. Open Minecraft: Education Edition folder, right-click **InstallMinecraftEducationEdition.bat** and click **Run as administrator**.
@ -155,11 +154,9 @@ If you are still having trouble installing the app, you can get more help on our
## Related topics ## Related topics
[Working with Windows Store for Business – education scenarios](education-scenarios-store-for-business.md) </br> [Working with Microsoft Store for Education](education-scenarios-store-for-business.md) </br>
Learn about overall Windows Store for Business management: manage settings, shop for apps, distribute apps, manage inventory, and manage order history. Learn about overall Microsoft Store for Business management: manage settings, shop for apps, distribute apps, manage inventory, and manage order history.
[Get Minecraft: Education Edition](get-minecraft-for-education.md) [Get Minecraft: Education Edition](get-minecraft-for-education.md)
[For IT admins: get Minecraft: Education Edition](school-get-minecraft.md) [For IT admins: get Minecraft: Education Edition](school-get-minecraft.md)

2
store-for-business/manage-users-and-groups-windows-store-for-business.md
View File

@ -21,7 +21,7 @@ localizationpriority: high
Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.
## Why Azure AD accounts? ## Why Azure AD accounts?
For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Store for Business. For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Microsoft Store for Business.
Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes: Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:

12
store-for-business/troubleshoot-windows-store-for-business.md
View File

@ -48,13 +48,9 @@ The private store for your organization is a page in the Windows Store app that
## Still having trouble? ## Still having trouble?
If you are still having trouble using WSfB or installing the app, you can get more help on our [Support page](https://go.microsoft.com/fwlink/?LinkID=799386). If you are still having trouble using Microsoft Store or installing an app, Admins can sign in and look for topics on our **Support** page.
 
 
**To view Support page** 
1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com)
2. Click **Manage**, and then click **Support**.

6
store-for-business/update-windows-store-for-business-account-settings.md
View File

@ -35,7 +35,7 @@ We need an email address in case we need to contact you about your Microsoft Sto
2. Click **Manage**, click **Payments & billing**, and then click **Edit**. 2. Click **Manage**, click **Payments & billing**, and then click **Edit**.
## Organization tax information ## Organization tax information
Taxes for Windows Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent: Taxes for Microsoft Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent:
- Austria - Austria
- Belgium - Belgium
- Croatia - Croatia
@ -99,7 +99,7 @@ For example:<br>
($1.29 X .095) X 100 = $12.25 ($1.29 X .095) X 100 = $12.25
## Payment options ## Payment options
You can purchase apps from the Windows Store for Business using your credit card. You can enter your credit card information on Account Information, or when you purchase an app. We currently accept these credit cards: You can purchase apps from the Microsoft Store for Business using your credit card. You can enter your credit card information on Account Information, or when you purchase an app. We currently accept these credit cards:
1. VISA 1. VISA
2. MasterCard 2. MasterCard
3. Discover 3. Discover
@ -136,7 +136,7 @@ Once you click **Next**, the information you provided will be validated with a
Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on the Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model). Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on the Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).
Admins can decide whether or not offline licenses are shown for apps in Windows Store for Business. Admins can decide whether or not offline licenses are shown for apps in Microsoft Store.
**To set offline license visibility** **To set offline license visibility**

2
windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md
View File

@ -25,7 +25,7 @@ If you want to minimize connections from Windows to Microsoft services, or confi
You can configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft network endpoints as described in this article to help prevent Windows from sending any data to Microsoft. There are many reasons why these communications are enabled by default, such as updating malware definitions and maintain current certificate revocation lists, which is why we strongly recommend against this. This data helps us deliver a secure, reliable, and more delightful personalized experience. You can configure telemetry at the Security level, turn off Windows Defender telemetry and MSRT reporting, and turn off all other connections to Microsoft network endpoints as described in this article to help prevent Windows from sending any data to Microsoft. There are many reasons why these communications are enabled by default, such as updating malware definitions and maintain current certificate revocation lists, which is why we strongly recommend against this. This data helps us deliver a secure, reliable, and more delightful personalized experience.
To help make it easier to deploy settings to restrict connections from Windows 10 to Microsoft, you can apply the [Windows Restricted Traffic Limited Functionality Baseline](https://go.microsoft.com/fwlink/?linkid=828887). This baseline was created in the same way as the [Windows security baselines](/windows/device-security/windows-security-baselines) that are often used to efficiently configure Windows to a known secure state. Running the Windows Restricted Traffic Limited Functionality Baseline on devices in your organization will allow you to quickly configure all of the settings covered in this document. However, some of the settings reduce the functionality and security configuration of your device and are therefore not recommended. Make sure should you've chosen the right settings configuration for your environment before applying. You should not extract this package to the the windows\\system32 folder because it will not apply correctly. Applying this baseline is equivalent to applying the Windows 10 steps covered in this article. To help make it easier to deploy settings to restrict connections from Windows 10 to Microsoft, you can apply the [Windows Restricted Traffic Limited Functionality Baseline](https://go.microsoft.com/fwlink/?linkid=828887). This baseline was created in the same way as the [Windows security baselines](/windows/device-security/windows-security-baselines) that are often used to efficiently configure Windows to a known secure state. Running the Windows Restricted Traffic Limited Functionality Baseline on devices in your organization will allow you to quickly configure all of the settings covered in this document. However, some of the settings reduce the functionality and security configuration of your device and are therefore not recommended. Make sure should you've chosen the right settings configuration for your environment before applying. You should not extract this package to the windows\\system32 folder because it will not apply correctly. Applying this baseline is equivalent to applying the Windows 10 steps covered in this article.
We are always striving to improve our documentation and welcome your feedback. You can provide feedback by contacting telmhelp@microsoft.com. We are always striving to improve our documentation and welcome your feedback. You can provide feedback by contacting telmhelp@microsoft.com.

BIN
windows/deployment/images/security-update.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 2.5 KiB

9
windows/deployment/index.md
View File

@ -9,6 +9,15 @@ localizationpriority: high
author: greg-lindsay author: greg-lindsay
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Deploy, Upgrade and Update Windows 10 # Deploy, Upgrade and Update Windows 10
Learn about deployment in Windows 10 for IT professionals. This includes deploying the operating system, upgrading to it from previous version and updating Windows 10. Learn about deployment in Windows 10 for IT professionals. This includes deploying the operating system, upgrading to it from previous version and updating Windows 10.

8
windows/deployment/update/index.md
View File

@ -7,6 +7,14 @@ ms.sitesec: library
author: DaniHalfin author: DaniHalfin
localizationpriority: high localizationpriority: high
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="../images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Update Windows 10 in the enterprise # Update Windows 10 in the enterprise

8
windows/deployment/update/waas-manage-updates-configuration-manager.md
View File

@ -7,6 +7,14 @@ ms.sitesec: library
author: DaniHalfin author: DaniHalfin
localizationpriority: high localizationpriority: high
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="../images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Deploy Windows 10 updates using System Center Configuration Manager # Deploy Windows 10 updates using System Center Configuration Manager

8
windows/deployment/update/waas-manage-updates-wsus.md
View File

@ -7,6 +7,14 @@ ms.sitesec: library
author: DaniHalfin author: DaniHalfin
localizationpriority: high localizationpriority: high
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="../images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Deploy Windows 10 updates using Windows Server Update Services (WSUS) # Deploy Windows 10 updates using Windows Server Update Services (WSUS)

8
windows/deployment/update/waas-manage-updates-wufb.md
View File

@ -7,6 +7,14 @@ ms.sitesec: library
author: DaniHalfin author: DaniHalfin
localizationpriority: high localizationpriority: high
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="../images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Deploy updates using Windows Update for Business # Deploy updates using Windows Update for Business

BIN
windows/threat-protection/images/security-update.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 2.5 KiB

9
windows/threat-protection/index.md
View File

@ -8,6 +8,15 @@ ms.pagetype: security
author: brianlic-msft author: brianlic-msft
--- ---
<font size=1>
<table border="0">
<tr>
<td><img src="images/security-update.png" alt="Icon showing a security alert"> </td>
<td>A wide-spread ransomware attack, known as "WannaCrypt," targets Windows systems that do not yet have the latest updates. Given the severity of this threat, immediately update your Windows systems. [Learn more](https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/).</td>
</tr>
</table>
</font>
# Threat Protection # Threat Protection
Learn more about how to help protect against threats in Windows 10 and Windows 10 Mobile. Learn more about how to help protect against threats in Windows 10 and Windows 10 Mobile.

66
windows/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus.md
View File

@ -1,6 +1,6 @@
--- ---
title: Manage how and where Windows Defender AV receives updates title: Manage how and where Windows Defender AV receives updates
description: Manage how Windows Defender Antivirus receives protection updates. description: Manage the fallback order for how Windows Defender Antivirus receives protection updates.
keywords: updates, security baselines, protection, fallback order, ADL, MMPC, UNC, file path, share, wsus keywords: updates, security baselines, protection, fallback order, ADL, MMPC, UNC, file path, share, wsus
search.product: eADQiWindows 10XVcnh search.product: eADQiWindows 10XVcnh
ms.pagetype: security ms.pagetype: security
@ -12,14 +12,14 @@ localizationpriority: medium
author: iaanw author: iaanw
--- ---
# Manage Windows Defender Antivirus protection and definition updates # Manage the sources for Windows Defender Antivirus protection updates
**Applies to** **Applies to**
- Windows 10 - Windows 10
**Audience** **Audience**
- Network administrators - Enterprise security administrators
**Manageability available with** **Manageability available with**
@ -31,33 +31,50 @@ author: iaanw
<a id="protection-updates"></a> <a id="protection-updates"></a>
<!-- this has been used as anchor in VDI content --> <!-- this has been used as anchor in VDI content -->
Windows Defender AV uses both [cloud-delivered protection](utilize-microsoft-cloud-protection-windows-defender-antivirus.md) (also called the Microsoft Advanced Protection Service or MAPS) and periodically downloaded protection updates to provide protection. These protection updates are also known as "definitions" or "signature updates".
The cloud-delivered protection is “always-on” and requires an active connection to the Internet to function, while the protection updates generally occur once a day (although this can be configured).
There are two components to managing protection updates - where the updates are downloaded from, and when updates are downloaded and applied. There are two components to managing protection updates - where the updates are downloaded from, and when updates are downloaded and applied.
This topic describes the locations This topic describes where you can specify the updates should be downloaded from, also known as the fallback order.
See the [Manage Windows Defender AV updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md) topic for an overview on how updates work, and how to configure other aspects of updates (such as scheduling updates).
<a id="fallback-order"></a> <a id="fallback-order"></a>
## Manage the fallback order for downloading protection updates
There are five locations where you can specify where an endpoint should obtain updates. Typically, you would configure each endpoint to individually download the updates from a primary source and specify fallback sources in case the primary source is unavailable.
There are five locations where you can specify where an endpoint should obtain updates. Typically, you would configure endpoints to individually download the updates from a primary source, followed by the other sources in order of priority based on your network configuration.
Updates will be obtained from the sources in the order you specify. If a source is not available, the next source in the list will be used.
You can use the following sources:
- Microsoft Update
- [Windows Server Update Service (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx) - [Windows Server Update Service (WSUS)](https://technet.microsoft.com/windowsserver/bb332157.aspx)
- Microsoft Update. - System Center Configuration Manager
- The [Microsoft Malware Protection Center definitions page (MMPC)](http://www.microsoft.com/security/portal/definitions/adl.aspx)
- A network file share - A network file share
- Configuration manager - The [Microsoft Malware Protection Center definitions page (MMPC)](http://www.microsoft.com/security/portal/definitions/adl.aspx)
Each location has typical scenarios (in addition to acting as fallback locations) for when you would use that source, as described in the following table:
When updates are published, some logic will be applied to minimize the size of the update. In most cases, only the "delta" (or the differences between the latest update and the update that is currently installed on the endpoint) will be downloaded and applied. However, the size of the delta depends on:
- How old the current update on the endpoint is
- Which source you use
The older the updates on an endpoint, the larger the download. However, you must also consider frequency versus size - a more frequent update schedule may result in more ad hoc network usage, while a less-frequent schedule may result in larger file sizes.
Microsoft Update allows for rapid releases, which means it will download small deltas on a frequent basis. This ensures the best protection, but may increase network bandwidth.
The WSUS, Configuration Manager and MMPC sources will deliver less frequent updates. The size of the updates may be slightly larger than the frequent release from Microsoft Update (as the delta, or differences between the latest version and what is on the endpoint will be larger). This ensures consistent protection without increasing ad hoc network usage (although the amount of data may be the same or increased as the updates will be fewer, but may be slightly larger).
Each source has typical scenarios that depend on how your network is configured, in addition to how often they publish updates, as described in the following table:
Location | Sample scenario Location | Sample scenario
---|--- ---|---
WSUS | You are using WSUS to manage updates for your network WSUS | You are using WSUS to manage updates for your network.
Microsoft Update | You want your endpoints to connect directly to Microsoft Update. This can be useful for endpoints that irregularly connect to your enterprise network. Microsoft Update | You want your endpoints to connect directly to Microsoft Update. This can be useful for endpoints that irregularly connect to your enterprise network, or if you do not use WSUS to manage your updates.
MMPC | You need to download the latest protection updates because of a recent infection or to help provision a strong, base image for [VDI deployment](deployment-vdi-windows-defender-antivirus.md). File share | You have non-Internet-connected devices (such as VMs). You can use your Internet-connected VM host to download the updates to a network share, from which the VMs can obtain the updates. See the [VDI deployment guide](deployment-vdi-windows-defender-antivirus.md) for how file shares can be used in virtual desktop infrastructure (VDI) environments.
File share | You have non-Internet-connected devices (such as VMs). You can use your Internet-connected VM host download the updates to a network share, from which the VMs can obtain the updates. See the [VDI deployment guide](deployment-vdi-windows-defender-antivirus.md) for how file shares can be used in virtual desktop infrastructure (VDI) environments.
Configuration Manager | You are using System Center Configuration Manager to update your endpoints. Configuration Manager | You are using System Center Configuration Manager to update your endpoints.
MMPC | You need to download the latest protection updates because of a recent infection or to help provision a strong, base image for [VDI deployment](deployment-vdi-windows-defender-antivirus.md). This option should generally be used only as a final fallback source, and not the primary source.
You can manage the order in which update sources are used with Group Policy, System Center Configuration Manager, PowerShell cmdlets, and WMI. You can manage the order in which update sources are used with Group Policy, System Center Configuration Manager, PowerShell cmdlets, and WMI.
@ -65,6 +82,9 @@ You can manage the order in which update sources are used with Group Policy, Sys
> If you set WSUS as a download location, you must approve the updates - regardless of what management tool you use to specify the location. You can set up an automatic approval rule with WSUS, which may be useful as updates arrive at least once a day. See [To synchronize endpoint protection updates in standalone WSUS](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-definitions-wsus#to-synchronize-endpoint-protection-definition-updates-in-standalone-wsus) for more details. > If you set WSUS as a download location, you must approve the updates - regardless of what management tool you use to specify the location. You can set up an automatic approval rule with WSUS, which may be useful as updates arrive at least once a day. See [To synchronize endpoint protection updates in standalone WSUS](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-definitions-wsus#to-synchronize-endpoint-protection-definition-updates-in-standalone-wsus) for more details.
The procedures in this article first describe how to set the order, and then how to set up the **File share** option if you have enabled it.
**Use Group Policy to manage the update location:** **Use Group Policy to manage the update location:**
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. 1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
@ -77,7 +97,7 @@ You can manage the order in which update sources are used with Group Policy, Sys
1. Double-click the **Define the order of sources for downloading definition updates** setting and set the option to **Enabled**. 1. Double-click the **Define the order of sources for downloading definition updates** setting and set the option to **Enabled**.
2. Enter the order of sources, separated by a single pipe, for example: `InternalDefinitionUpdateServer|MicrosoftUpdateServer|MMPC`, shown in the following screenshot. 2. Enter the order of sources, separated by a single pipe, for example: `InternalDefinitionUpdateServer|MicrosoftUpdateServer|MMPC`, as shown in the following screenshot.
![Screenshot of group policy setting listing the order of sources](images/defender/wdav-order-update-sources.png) ![Screenshot of group policy setting listing the order of sources](images/defender/wdav-order-update-sources.png)
@ -131,11 +151,11 @@ See the following for more information:
## Related topics ## Related topics
- [Deploy, manage updates, and report on Windows Defender Antivirus](deploy-manage-report-windows-defender-antivirus.md) - [Deploy, manage updates, and report on Windows Defender AV](deploy-manage-report-windows-defender-antivirus.md)
- [Manage Windows Defender Antivirus updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md) - [Manage Windows Defender AV updates and apply baselines](manage-updates-baselines-windows-defender-antivirus.md)
- [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md) - [Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-windows-defender-antivirus.md)
- [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md) - [Manage updates for endpoints that are out of date](manage-outdated-endpoints-windows-defender-antivirus.md)
- [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md) - [Manage event-based forced updates](manage-event-based-updates-windows-defender-antivirus.md)
- [Manage updates for mobile devices and virtual machines (VMs)](manage-updates-mobile-devices-vms-windows-defender-antivirus.md) - [Manage updates for mobile devices and VMs](manage-updates-mobile-devices-vms-windows-defender-antivirus.md)
- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md) - [Windows Defender AV in Windows 10](windows-defender-antivirus-in-windows-10.md)