From 4d3c1a743e0bdb2e5effe4b844b1f07b5cde492b Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Thu, 29 Feb 2024 16:14:16 -0500 Subject: [PATCH 01/15] Add text from images --- windows/deployment/deploy-enterprise-licenses.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 89c0bbdd27..918b825435 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -499,7 +499,17 @@ Use the following guides to verify each one of these requirements: Setting this Conditional Access policy ensures that Subscription Activation continues to work seamlessly. - Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. + Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: + + `Your account requires authentication + + Please sign in to your work or school account to verify your information.` + + Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: + + `Please sign in to your work or school account to verify your information.` + + The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. - If a device isn't able to connect to Windows Update, it can lose activation status or be blocked from upgrading to Windows Enterprise. Make sure that Windows Update isn't blocked on the device: From 5991b96e432ef462aca13057da671b039e3bc5e0 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Thu, 29 Feb 2024 16:31:26 -0500 Subject: [PATCH 02/15] Add text from images 2 --- windows/deployment/deploy-enterprise-licenses.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 918b825435..6dbdf7e64f 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -501,13 +501,13 @@ Use the following guides to verify each one of these requirements: Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: - `Your account requires authentication + **Your account requires authentication - Please sign in to your work or school account to verify your information.` + Please sign in to your work or school account to verify your information.** Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: - `Please sign in to your work or school account to verify your information.` + **Please sign in to your work or school account to verify your information.** The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. From 5a8d29d2b23d301d08c7ce96ee7054fa7f4c72bf Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 12:15:44 -0500 Subject: [PATCH 03/15] Add text from images 3 --- windows/deployment/deploy-enterprise-licenses.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 6dbdf7e64f..b6fc69c90a 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -501,13 +501,13 @@ Use the following guides to verify each one of these requirements: Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: - **Your account requires authentication - - Please sign in to your work or school account to verify your information.** + > **Your account requires authentication** + > + > **Please sign in to your work or school account to verify your information.** Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: - **Please sign in to your work or school account to verify your information.** + > **Please sign in to your work or school account to verify your information.** The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. From 839d4382f38b814265072adeaf4d4c89fd5a01e7 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Fri, 1 Mar 2024 12:56:27 -0800 Subject: [PATCH 04/15] Updates to Copilot supplemental terms Branding + "Intellectual property" section --- windows/privacy/copilot-supplemental-terms.md | 36 ++++++++++--------- 1 file changed, 20 insertions(+), 16 deletions(-) diff --git a/windows/privacy/copilot-supplemental-terms.md b/windows/privacy/copilot-supplemental-terms.md index 69ce081127..06da54ed5c 100644 --- a/windows/privacy/copilot-supplemental-terms.md +++ b/windows/privacy/copilot-supplemental-terms.md @@ -7,7 +7,7 @@ ms.localizationpriority: medium author: DHB-MSFT ms.author: danbrown manager: laurawi -ms.date: 09/20/2023 +ms.date: 03/01/2024 ms.topic: conceptual hideEdit: true layout: ContentPage @@ -17,7 +17,7 @@ feedback_system: None # COPILOT IN WINDOWS (PREVIEW) SUPPLEMENTAL TERMS -Copilot in Windows is your AI companion that brings productivity to your fingertips. Leveraging Bing Chat or Bing Chat Enterprise, Copilot in Windows accelerates your tasks, reduces friction, saves you time and provides you with personalized answers, inspiration and task assistance. Your use of Copilot in Windows is subject to these supplemental terms of use (“Terms”). By using Copilot in Windows you agree to be bound by these Terms. +Copilot in Windows is your AI companion that brings productivity to your fingertips. Leveraging Microsoft Copilot (previously named Bing Chat) or Microsoft Copilot with commercial data protection (previously named Bing Chat Enterprise), Copilot in Windows accelerates your tasks, reduces friction, saves you time and provides you with personalized answers, inspiration, and task assistance. Your use of Copilot in Windows is subject to these supplemental terms of use (“Terms”). By using Copilot in Windows, you agree to be bound by these Terms. 1. Preview @@ -27,44 +27,48 @@ Copilot in Windows is your AI companion that brings productivity to your fingert 2. Eligibility and Use Requirements. - a. You must be signed into Windows with your Microsoft account to access Copilot in Windows. + a. If you're signed into Windows with your work or school account, your organization may have given you the ability to use Copilot in Windows. If you have access to Copilot in Windows but your organization hasn't enabled Microsoft Copilot with commercial data protection, your use will be limited to Microsoft Copilot’s current turn limit. - b. If you're signed into Windows with your work or school account, your organization may have given you the ability to use Copilot in Windows. If you have access to Copilot in Windows but your organization hasn't enabled Bing Chat Enterprise, your use will be limited to Bing Chat’s current turn limit. + b. Along with these Terms, your use of Copilot in Windows is also governed by the Microsoft Services Agreement, which is incorporated by reference. You agree that Copilot in Windows constitutes a Service, as defined in the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement). If there's any conflict between these Terms and the Microsoft Services Agreement, the conflicting provision in these Terms will control. - c. Along with these Terms, your use of Copilot in Windows is also governed by the Microsoft Services Agreement, which is incorporated by reference. You agree that Copilot in Windows constitutes a Service, as defined in the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement). If there's any conflict between these Terms and the Microsoft Services Agreement, the conflicting provision in these Terms will control. +3. Microsoft Copilot -3. Bing Chat + a. Your Copilot in Windows experiences powered by Microsoft Copilot are subject to [Microsoft Copilot’s terms of use](https://www.bing.com/new/termsofuse). - a. Your Copilot in Windows experiences powered by Bing Chat are subject to [Bing Chat’s terms of use](https://www.bing.com/new/termsofuse). + b. If your organization is allowing you to use Microsoft Copilot with commercial data protection, your Copilot in Windows experiences may be powered by Microsoft Copilot with commercial data protection and subject to [Microsoft Copilot with commercial data protection’s terms of use](/bing-chat-enterprise/terms-of-use). - b. If your organization is allowing you to use Bing Chat Enterprise, your Copilot in Windows experiences will be powered by Bing Chat Enterprise and will be subject to [Bing Chat Enterprise’s terms of use](/bing-chat-enterprise/terms-of-use). + c. If your organization is allowing you to use Microsoft Copilot for Microsoft 365, your Copilot in Windows experiences may be powered by Microsoft Copilot for Microsoft 365 and subject to [Microsoft's Product Terms](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all). 4. Using Copilot in Windows - a. Copilot in Windows may allow you to submit text inputs and converse with an online computer-powered chatbot and in certain circumstances generate text content or image content. Your use of Copilot in Windows must comply with the Code of Conduct section of the Microsoft Services Agreement and the Bing Chat Code of Conduct or Bing Chat Enterprise Content Policy. + a. Copilot in Windows may allow you to submit text inputs and converse with an online computer-powered chatbot and in certain circumstances generate text content or image content. Your use of Copilot in Windows must comply with the Code of Conduct section of the Microsoft Services Agreement and the Microsoft Copilot Code of Conduct or Microsoft Copilot with commercial data protection Content Policy. b. Copilot in Windows may allow you to change some of your Windows settings based on the text you submit into Copilot in Windows. Additionally, when you copy text in other apps while Copilot in Windows is open, it may automatically prompt you with suggestions to send the copied text to the chat and offer further suggestions of what you can do with that text. - c. You can consent to letting Copilot in Windows access your Microsoft Edge webpage content. This allows Copilot in Windows to provide relevant responses by accessing content from your active foreground Edge tab. This can be adjusted anytime in Copilot in Windows settings. + c. You can consent to letting Copilot in Windows access your Microsoft Edge webpage content. This allows Copilot in Windows to provide relevant responses by accessing content from your visible Microsoft Edge windows. This can be adjusted anytime in Copilot in Windows settings. 5. Data a. All data processed by Copilot in Windows, including voice input data, will be processed according to the Microsoft Privacy Statement. -6. Ownership of Content +6. Intellectual Property - a. Microsoft doesn't claim ownership of any content you provide, post, input, or submit to, or receive from, Copilot in Windows, Bing Chat, or Bing Chat Enterprise (including feedback and suggestions). You'll need to make your own determination regarding the intellectual property rights you have in output content and its commercial usability, taking into account, among other things, your usage scenario(s) and the laws of the relevant jurisdiction. You warrant and represent that you or your organization owns or otherwise controls all of the rights to your content as described in these Terms including, without limitation, all the rights necessary for you to provide, post, upload, input or submit the content.  + a. You’re responsible for respecting, and shouldn’t break, digital rights management (DRM) or any other copyright protections. -7. Third-party claims +7. Ownership of Content + + a. Microsoft doesn't claim ownership of any content you provide, post, input, or submit to, or receive from, Copilot in Windows, Microsoft Copilot, or Microsoft Copilot with commercial data protection (including feedback and suggestions). You'll need to make your own determination regarding the intellectual property rights you have in output content and its commercial usability, taking into account, among other things, your usage scenario(s) and the laws of the relevant jurisdiction. You warrant and represent that you or your organization owns or otherwise controls all of the rights to your content as described in these Terms including, without limitation, all the rights necessary for you to provide, post, upload, input, or submit the content.  + +8. Third-party claims a. You're responsible for responding to any third-party claims regarding your use of Copilot in Windows in compliance with applicable laws (including, but not limited to, copyright infringement or other claims relating to output content that was output during your use of Copilot in Windows). -8. Reverse engineering +9. Reverse engineering a. You may not use Copilot in Windows to discover any underlying components of the models, algorithms, or systems, such as exfiltrating the weights of models. -9. Extracting data +10. Extracting data a. You may not use web scraping, web harvesting, or web data extraction methods to extract data from Copilot in Windows or from any output content. -10. **IF YOU LIVE IN (OR YOUR PRINCIPAL PLACE OF BUSINESS IS IN) THE UNITED STATES, PLEASE READ THE BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER IN SECTION 15 OF THE MICROSOFT SERVICES AGREEMENT. IT AFFECTS HOW DISPUTES RELATING TO THIS AGREEMENT ARE RESOLVED.** \ No newline at end of file +11. **IF YOU LIVE IN (OR YOUR PRINCIPAL PLACE OF BUSINESS IS IN) THE UNITED STATES, PLEASE READ THE BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER IN SECTION 15 OF THE MICROSOFT SERVICES AGREEMENT. IT AFFECTS HOW DISPUTES RELATING TO THIS AGREEMENT ARE RESOLVED.** \ No newline at end of file From 86e34e6dbc8c5f73498f60aff2b3e14973ec6eef Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 16:27:01 -0500 Subject: [PATCH 05/15] Add text from images 4 --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index b6fc69c90a..5c4f30522b 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -486,7 +486,7 @@ Use the following guides to verify each one of these requirements: ## Known issues -- When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: +- When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**:\ - [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). - [Windows Store for Business, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). From daf7b674c6745cf332c445d40082cf8bc554de6e Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 16:57:52 -0500 Subject: [PATCH 06/15] Add text from images 5 --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 5c4f30522b..00d9115f01 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -486,7 +486,7 @@ Use the following guides to verify each one of these requirements: ## Known issues -- When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**:\ +- When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: \ - [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). - [Windows Store for Business, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). From f7996cee09f2a730b00b8d0db6883e27ec0975d5 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Fri, 1 Mar 2024 14:10:25 -0800 Subject: [PATCH 07/15] Fix broken link --- windows/privacy/copilot-supplemental-terms.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/copilot-supplemental-terms.md b/windows/privacy/copilot-supplemental-terms.md index 06da54ed5c..510f3d4485 100644 --- a/windows/privacy/copilot-supplemental-terms.md +++ b/windows/privacy/copilot-supplemental-terms.md @@ -35,7 +35,7 @@ Copilot in Windows is your AI companion that brings productivity to your fingert a. Your Copilot in Windows experiences powered by Microsoft Copilot are subject to [Microsoft Copilot’s terms of use](https://www.bing.com/new/termsofuse). - b. If your organization is allowing you to use Microsoft Copilot with commercial data protection, your Copilot in Windows experiences may be powered by Microsoft Copilot with commercial data protection and subject to [Microsoft Copilot with commercial data protection’s terms of use](/bing-chat-enterprise/terms-of-use). + b. If your organization is allowing you to use Microsoft Copilot with commercial data protection, your Copilot in Windows experiences may be powered by Microsoft Copilot with commercial data protection and subject to [Microsoft Copilot with commercial data protection’s terms of use](/copilot/terms-of-use). c. If your organization is allowing you to use Microsoft Copilot for Microsoft 365, your Copilot in Windows experiences may be powered by Microsoft Copilot for Microsoft 365 and subject to [Microsoft's Product Terms](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all). From 1a2b55542161899fd06c3a5031a96bc991a19270 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:37:21 -0500 Subject: [PATCH 08/15] Add text from images 6 --- .../deployment/deploy-enterprise-licenses.md | 107 +++++++++--------- 1 file changed, 56 insertions(+), 51 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 00d9115f01..d2a79ae210 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -484,68 +484,73 @@ Use the following guides to verify each one of these requirements: For more information, see [Assigning licenses to users](#assign-licenses-to-users). -## Known issues +## Recommended practices -- When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: \ +### Adding Conditional Access policy - - [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). - - [Windows Store for Business, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). +When a device has been offline for an extended period of time, the Subscription Activation might not reactivate automatically on the device. To resolve this issue, use Conditional Access policies to control access by excluding one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: - Although the app ID is the same in both instances, the name of the cloud app depends on the tenant. +- [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). - For more information about configuring exclusions in Conditional Access policies, see [Application exclusions](/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa#application-exclusions). +- [Windows Store for Business, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). - +Although the app ID is the same in both instances, the name of the cloud app depends on the tenant. - Setting this Conditional Access policy ensures that Subscription Activation continues to work seamlessly. +For more information about configuring exclusions in Conditional Access policies, see [Application exclusions](/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa#application-exclusions). - Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: + - > **Your account requires authentication** +Setting this Conditional Access policy ensures that Subscription Activation continues to work seamlessly. + +Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: + +> **Your account requires authentication** +> +> **Please sign in to your work or school account to verify your information.** + +Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: + +> **Please sign in to your work or school account to verify your information.** + +The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. + +### Make sure Windows Update isn't blocked + +If a device isn't able to connect to Windows Update, it can lose activation status or be blocked from upgrading to Windows Enterprise. Make sure that Windows Update isn't blocked on the device: + +- Using `gpedit.msc` or group policy editor in the domain, make sure that the following group policy setting is set to **Disabled** or **Not Configured**: + + ::: zone pivot="windows-11" + + > **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Manage updates offered from Windows Server Update Service** > **Do not connect to any Windows Update Internet locations** + + ::: zone-end + + ::: zone pivot="windows-10" + + > **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Do not connect to any Windows Update Internet locations** + + ::: zone-end + + If this policy is set to **Enabled**, it must be changed to **Disabled** or **Not Configured**. + +- In the following registry key of the registry: + + > `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate` + + check if the value `DoNotConnectToWindowsUpdateInternetLocations` exists. If the value does exist, verify that it has a REG_DWORD value of `0`. If the value is instead set to `1`, it must be changed to `0`. The value can be changed by running the following command from an elevated command prompt: + + ```cmd + reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DoNotConnectToWindowsUpdateInternetLocations /t REG_DWORD /d 1 /f + ``` + + > [!NOTE] > - > **Please sign in to your work or school account to verify your information.** + > Make sure to first check the group policy of **Do not connect to any Windows Update Internet locations**. If the policy is **Enabled**, then this registry key will eventually be reset back to `1` even after it's manually set to `0` via `reg.exe`. Setting the policy of **Do not connect to any Windows Update Internet locations** to **Disabled** or **Not Configured** will make sure the registry value remains as `0`. - Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: +### Delay in the activation of Enterprise license of Windows - > **Please sign in to your work or school account to verify your information.** - - The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. - -- If a device isn't able to connect to Windows Update, it can lose activation status or be blocked from upgrading to Windows Enterprise. Make sure that Windows Update isn't blocked on the device: - - - Using `gpedit.msc` or group policy editor in the domain, make sure that the following group policy setting is set to **Disabled** or **Not Configured**: - - ::: zone pivot="windows-11" - - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Manage updates offered from Windows Server Update Service** > **Do not connect to any Windows Update Internet locations** - - ::: zone-end - - ::: zone pivot="windows-10" - - **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Do not connect to any Windows Update Internet locations** - - ::: zone-end - - If this policy is set to **Enabled**, it must be changed to **Disabled** or **Not Configured**. - - - In the following registry key: - - `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate` - - check if the value `DoNotConnectToWindowsUpdateInternetLocations` exists. If the value does exist, verify that it has a REG_DWORD value of `0`. If the value is instead set to `1`, it must be changed to `0`. The value can be changed by running the following command from an elevated command prompt: - - ```cmd - reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DoNotConnectToWindowsUpdateInternetLocations /t REG_DWORD /d 1 /f - ``` - - > [!NOTE] - > - > Make sure to first check the group policy of **Do not connect to any Windows Update Internet locations**. If the policy is **Enabled**, then this registry key will eventually be reset back to `1` even after it's manually set to `0` via `reg.exe`. Setting the policy of **Do not connect to any Windows Update Internet locations** to **Disabled** or **Not Configured** will make sure the registry value remains as `0`. - -- Delay in the activation of Enterprise license of Windows. - - There might be a delay in the activation of the Enterprise license in Windows. This delay is by design. Windows uses a built-in cache when determining upgrade eligibility. This behavior includes processing responses that indicate that the device isn't eligible for an upgrade. It can take up to four days after a qualifying purchase before the upgrade eligibility is enabled and the cache expires. +There might be a delay in the activation of the Enterprise license in Windows. This delay is by design. Windows uses a built-in cache when determining upgrade eligibility. This behavior includes processing responses that indicate that the device isn't eligible for an upgrade. It can take up to four days after a qualifying purchase before the upgrade eligibility is enabled and the cache expires. ## Virtual Desktop Access (VDA) From 0630f86f757dc3fa9e6ad02dead42a3504ee1323 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:42:25 -0500 Subject: [PATCH 09/15] Add text from images 7 --- windows/deployment/deploy-enterprise-licenses.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index d2a79ae210..98ce3a3916 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -522,13 +522,13 @@ If a device isn't able to connect to Windows Update, it can lose activation stat ::: zone pivot="windows-11" - > **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Manage updates offered from Windows Server Update Service** > **Do not connect to any Windows Update Internet locations** + **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Manage updates offered from Windows Server Update Service** > **Do not connect to any Windows Update Internet locations** ::: zone-end ::: zone pivot="windows-10" - > **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Do not connect to any Windows Update Internet locations** + **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Update** > **Do not connect to any Windows Update Internet locations** ::: zone-end @@ -536,7 +536,7 @@ If a device isn't able to connect to Windows Update, it can lose activation stat - In the following registry key of the registry: - > `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate` + `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate` check if the value `DoNotConnectToWindowsUpdateInternetLocations` exists. If the value does exist, verify that it has a REG_DWORD value of `0`. If the value is instead set to `1`, it must be changed to `0`. The value can be changed by running the following command from an elevated command prompt: From 76ede2dcf37a180b58e6d11c21a96be47ef37002 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:47:46 -0500 Subject: [PATCH 10/15] Add text from images 8 --- .../deployment/windows-subscription-activation.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/windows/deployment/windows-subscription-activation.md b/windows/deployment/windows-subscription-activation.md index 6056ddf735..8ad5813896 100644 --- a/windows/deployment/windows-subscription-activation.md +++ b/windows/deployment/windows-subscription-activation.md @@ -50,6 +50,7 @@ Organizations that have an enterprise agreement can also benefit from the servic Organizations that use the Subscription Activation feature to enable users to "step-up" from one version of Windows to another and use Conditional Access policies to control access need to exclude one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: - [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). + - [Windows Store for Business, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). Although the app ID is the same in both instances, the name of the cloud app depends on the tenant. @@ -60,7 +61,17 @@ For more information about configuring exclusions in Conditional Access policies When a device has been offline for an extended period of time, the device might not reactivate automatically if this Conditional Access exclusion isn't in place. Setting this Conditional Access exclusion ensures that Subscription Activation continues to work seamlessly. -Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. +Starting with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later, users are prompted for authentication with a toast notification when Subscription Activation needs to reactivate. The toast notification will show the following message: + +> **Your account requires authentication** +> +> **Please sign in to your work or school account to verify your information.** + +Additionally, in the [**Activation**](ms-settings:activation) pane, the following message might appear: + +> **Please sign in to your work or school account to verify your information.** + +The prompt for authentication usually occurs when a device has been offline for an extended period of time. This change eliminates the need for an exclusion in the Conditional Access policy for Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later. A Conditional Access policy can still be used with Windows 11, version 23H2 with [KB5034848](https://support.microsoft.com/help/5034848) or later if the prompt for user authentication via a toast notification isn't desired. ## Subscription activation for Education From c14cdba877310f830b669f07b551434122d12459 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:52:45 -0500 Subject: [PATCH 11/15] Add text from images 10 --- windows/deployment/deploy-enterprise-licenses.md | 2 +- windows/deployment/windows-subscription-activation.md | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 98ce3a3916..ab963f2d6e 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -11,7 +11,7 @@ ms.topic: how-to ms.collection: - highpri - tier2 -ms.date: 02/29/2024 +ms.date: 03/01/2024 zone_pivot_groups: windows-versions-11-10 appliesto: - ✅ Windows 11 diff --git a/windows/deployment/windows-subscription-activation.md b/windows/deployment/windows-subscription-activation.md index 8ad5813896..517504e848 100644 --- a/windows/deployment/windows-subscription-activation.md +++ b/windows/deployment/windows-subscription-activation.md @@ -12,7 +12,7 @@ ms.collection: - tier2 ms.topic: concept-article zone_pivot_groups: windows-versions-11-10 -ms.date: 02/29/2024 +ms.date: 03/01/2024 appliesto: - ✅ Windows 11 - ✅ Windows 10 @@ -47,6 +47,8 @@ Organizations that have an enterprise agreement can also benefit from the servic > > Subscription activation is available for qualifying devices running currently supported versions of Windows. Subscription activation can't be used to upgrade to a newer version of Windows. +### Adding Conditional Access policy + Organizations that use the Subscription Activation feature to enable users to "step-up" from one version of Windows to another and use Conditional Access policies to control access need to exclude one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**: - [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications). From ebac5d93e46efb89f53b99557782fc431d4bc62d Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Fri, 1 Mar 2024 18:30:52 -0500 Subject: [PATCH 12/15] Add text from images 11 --- windows/deployment/deploy-enterprise-licenses.md | 2 +- windows/deployment/windows-subscription-activation.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index ab963f2d6e..eca0dc4c77 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -11,7 +11,7 @@ ms.topic: how-to ms.collection: - highpri - tier2 -ms.date: 03/01/2024 +ms.date: 03/04/2024 zone_pivot_groups: windows-versions-11-10 appliesto: - ✅ Windows 11 diff --git a/windows/deployment/windows-subscription-activation.md b/windows/deployment/windows-subscription-activation.md index 517504e848..539f012a42 100644 --- a/windows/deployment/windows-subscription-activation.md +++ b/windows/deployment/windows-subscription-activation.md @@ -1,6 +1,6 @@ --- title: Windows subscription activation -description: Learn how to step up from Windows Pro to a Windows Enterprise subscription or from Windows Eduction Pro to a Windows Education subscription. +description: Learn how to step up from Windows Pro to a Windows Enterprise subscription or from Windows Eduction Pro to a Windows Education subscription. ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -12,7 +12,7 @@ ms.collection: - tier2 ms.topic: concept-article zone_pivot_groups: windows-versions-11-10 -ms.date: 03/01/2024 +ms.date: 03/04/2024 appliesto: - ✅ Windows 11 - ✅ Windows 10 From bfba9653e192001d82c8fee95af29440ccf9e2fd Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Fri, 1 Mar 2024 16:38:47 -0800 Subject: [PATCH 13/15] Update intro. --- windows/privacy/copilot-supplemental-terms.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/copilot-supplemental-terms.md b/windows/privacy/copilot-supplemental-terms.md index 510f3d4485..9252712de2 100644 --- a/windows/privacy/copilot-supplemental-terms.md +++ b/windows/privacy/copilot-supplemental-terms.md @@ -17,7 +17,7 @@ feedback_system: None # COPILOT IN WINDOWS (PREVIEW) SUPPLEMENTAL TERMS -Copilot in Windows is your AI companion that brings productivity to your fingertips. Leveraging Microsoft Copilot (previously named Bing Chat) or Microsoft Copilot with commercial data protection (previously named Bing Chat Enterprise), Copilot in Windows accelerates your tasks, reduces friction, saves you time and provides you with personalized answers, inspiration, and task assistance. Your use of Copilot in Windows is subject to these supplemental terms of use (“Terms”). By using Copilot in Windows, you agree to be bound by these Terms. +Copilot in Windows is your AI companion that brings productivity to your fingertips by leveraging Microsoft Copilot (previously named Bing Chat), Microsoft Copilot with commercial data protection (previously named Bing Chat Enterprise), or Microsoft Copilot for Microsoft 365. Copilot in Windows accelerates your tasks, reduces friction, saves you time and provides you with personalized answers, inspiration, and task assistance. Your use of Copilot in Windows is subject to these supplemental terms of use (“Terms”). By using Copilot in Windows, you agree to be bound by these Terms. 1. Preview From 369858dbebe5dd41d9e4b6574d0930514059ce32 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 4 Mar 2024 13:53:14 -0800 Subject: [PATCH 14/15] Correct indentation in Markdown to correct numbering and rendered indentation --- .../deployment/deploy-enterprise-licenses.md | 38 +++++++++---------- 1 file changed, 19 insertions(+), 19 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index eca0dc4c77..4fde853386 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -292,15 +292,15 @@ Once the **System > Activation** pane is open: 1. Under **Activation state**, verify that Windows is activated. It should display the message: - `Windows is activated with a digital license` + `Windows is activated with a digital license` 1. Under **Subscription**, verify that the Windows 11 Enterprise subscription is active. It should display the message: - `Windows 11 Enterprise subscription is active` + `Windows 11 Enterprise subscription is active` - > [!NOTE] - > - > If the Windows Enterprise subscription hasn't yet been applied, the **Subscription** pane isn't displayed. + > [!NOTE] + > + > If the Windows Enterprise subscription hasn't yet been applied, the **Subscription** pane isn't displayed. ::: zone-end @@ -340,24 +340,24 @@ A device is healthy when both the subscription and activation are active. If the 1. To get basic licensing information, run the following command at the command prompt: - ```cmd - slmgr /dli - ``` + ```cmd + slmgr /dli + ``` - A window with output similar to the following opens: + A window with output similar to the following opens: - ```console - Name: Windows(R), Professional edition - Description: Windows(R) Operating System, RETAIL channel - Partial Product Key: 3V66T - License Status: Licensed - ``` + ```console + Name: Windows(R), Professional edition + Description: Windows(R) Operating System, RETAIL channel + Partial Product Key: 3V66T + License Status: Licensed + ``` - To instead get detailed licensing information, run the following command: +To instead get detailed licensing information, run the following command: - ```cmd - slmgr /dlv - ``` +```cmd +slmgr /dlv +``` For more information on **Slmgr**, see [Slmgr.vbs options for obtaining volume activation information](/windows-server/get-started/activation-slmgr-vbs-options). From 2bd89fe1c348a7ce89c709eae1b71dca75ef504e Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Mon, 4 Mar 2024 14:10:55 -0800 Subject: [PATCH 15/15] Change ms.date value --- windows/privacy/copilot-supplemental-terms.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/copilot-supplemental-terms.md b/windows/privacy/copilot-supplemental-terms.md index 9252712de2..6ccbc90c48 100644 --- a/windows/privacy/copilot-supplemental-terms.md +++ b/windows/privacy/copilot-supplemental-terms.md @@ -7,7 +7,7 @@ ms.localizationpriority: medium author: DHB-MSFT ms.author: danbrown manager: laurawi -ms.date: 03/01/2024 +ms.date: 03/04/2024 ms.topic: conceptual hideEdit: true layout: ContentPage