mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
many small updates from Marc; two new screenshots in FAQ
This commit is contained in:
parent
5f03ef9f3c
commit
8463f8f32b
BIN
windows/deployment/update/images/outdated_incomplete.png
Normal file
BIN
windows/deployment/update/images/outdated_incomplete.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 60 KiB |
BIN
windows/deployment/update/images/outdated_outdated.png
Normal file
BIN
windows/deployment/update/images/outdated_outdated.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 60 KiB |
@ -8,7 +8,7 @@ ms.sitesec: library
|
|||||||
ms.pagetype: deploy
|
ms.pagetype: deploy
|
||||||
author: jaimeo
|
author: jaimeo
|
||||||
ms.author: jaimeo
|
ms.author: jaimeo
|
||||||
ms.date: 03/14/2018
|
ms.date: 03/16/2018
|
||||||
---
|
---
|
||||||
|
|
||||||
# Frequently asked questions and troubleshooting Windows Analytics
|
# Frequently asked questions and troubleshooting Windows Analytics
|
||||||
@ -21,7 +21,7 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win
|
|||||||
|
|
||||||
[Devices not showing up](#devices-not-showing-up)
|
[Devices not showing up](#devices-not-showing-up)
|
||||||
|
|
||||||
[Device Health data not appearing](#device-health-data-not-appearing)
|
[Device Health crash data not appearing](#device-health-crash-data-not-appearing)
|
||||||
|
|
||||||
[Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates)
|
[Upgrade Readiness reports outdated updates](#upgrade-readiness-reports-outdated-updates)
|
||||||
|
|
||||||
@ -38,21 +38,21 @@ In Log Analytics, go to **Settings > Connected sources > Windows telemetry** and
|
|||||||
|
|
||||||
Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog.
|
Even though devices can take 2-3 days after enrollment to show up due to latency in the system, you can now verify the status of your devices with a few hours of running the deployment script as described in [You can now check on the status of your computers within hours of running the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/05/12/wheres-my-data/) on the Windows Analytics blog.
|
||||||
|
|
||||||
If devices are not showing up as expected, find a representative device and follow these steps to rerun the latest Upgrade Readiness deployment script on it to troubleshoot issues:
|
If devices are not showing up as expected, find a representative device and follow these steps to run the latest pilot version of the Upgrade Readiness deployment script on it to troubleshoot issues:
|
||||||
|
|
||||||
1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included.
|
1. Download and extract the [Upgrade Readiness Deployment Script](https://www.microsoft.com/download/details.aspx?id=53327). Ensure that the **Pilot/Diagnostics** folder is included.
|
||||||
2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md).
|
2. Edit the script as described in [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md).
|
||||||
3. Check that `isVerboseLogging` is set to `$true`.
|
3. Check that `isVerboseLogging` is set to `$true`.
|
||||||
4. Run the script again. Log files will be saved to the directory specified in the script.
|
4. Run the script again. Log files will be saved to the directory specified in the script.
|
||||||
5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully. The filename with a GUID has clear text that can be read to uncover common issues.
|
5. Check the output of the script in the command window and/or log **UA_dateTime_machineName.txt** to ensure that all steps were completed successfully.
|
||||||
6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information.
|
6. If you are still seeing errors you can't diagnose, then consider open a support case with Microsoft Support through your regular channel and provide this information.
|
||||||
|
|
||||||
If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally (you might not need verbose logging in this case, unless you plan to collect the log files).
|
If you want to check a large number of devices, you should run the latest script at scale from your management tool of choice (for example, System Center Configuration Manager) and check the results centrally.
|
||||||
|
|
||||||
|
|
||||||
If you think the issue might be related a network proxy, check the endpoint connectivity(#endpoint-connectivity). Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog.
|
If you think the issue might be related to a network proxy, check "Enable data sharing" section of the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog.
|
||||||
|
|
||||||
### Device Health data not appearing
|
### Device Health crash data not appearing
|
||||||
|
|
||||||
#### Is WER disabled?
|
#### Is WER disabled?
|
||||||
If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health.
|
If Windows Error Reporting (WER) is disabled or redirected on your Windows devices, then reliability information cannot be shown in Device Health.
|
||||||
@ -78,10 +78,6 @@ To test access as a given user, you can run this Windows PowerShell cmdlet *whil
|
|||||||
```powershell
|
```powershell
|
||||||
|
|
||||||
$endPoints = @(
|
$endPoints = @(
|
||||||
'v10.vortex-win.data.microsoft.com'
|
|
||||||
'vortex-win.data.microsoft.com'
|
|
||||||
'settings-win.data.microsoft.com'
|
|
||||||
'adl.windows.com'
|
|
||||||
'watson.telemetry.microsoft.com'
|
'watson.telemetry.microsoft.com'
|
||||||
'oca.telemetry.microsoft.com'
|
'oca.telemetry.microsoft.com'
|
||||||
'v10.events.data.microsoft.com'
|
'v10.events.data.microsoft.com'
|
||||||
@ -99,10 +95,6 @@ To test access in the machine context (requires administrative rights), run the
|
|||||||
|
|
||||||
[scriptblock]$accessTest = {
|
[scriptblock]$accessTest = {
|
||||||
$endPoints = @(
|
$endPoints = @(
|
||||||
'v10.vortex-win.data.microsoft.com'
|
|
||||||
'vortex-win.data.microsoft.com'
|
|
||||||
'settings-win.data.microsoft.com'
|
|
||||||
'adl.windows.com'
|
|
||||||
'watson.telemetry.microsoft.com'
|
'watson.telemetry.microsoft.com'
|
||||||
'oca.telemetry.microsoft.com'
|
'oca.telemetry.microsoft.com'
|
||||||
'v10.events.data.microsoft.com'
|
'v10.events.data.microsoft.com'
|
||||||
@ -126,19 +118,29 @@ Get-Content $outputFileFullPath
|
|||||||
|
|
||||||
As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints.
|
As in the other example, if this is successful, `TcpTestSucceeded` should return `True` for each of the endpoints.
|
||||||
|
|
||||||
### Upgrade Readiness reports outdated updates
|
### Upgrade Readiness shows many "Computers with outdated KB"
|
||||||
Currently, updates are not automatically updated by Microsoft Update, so new versions need to be downloaded from the Microsoft Update catalog and distributed via your management tool of choice. Note that the compatibility update retains the same KB number when it is updated, so even if the update is installed on your devices, *they might not be running the latest version*.
|
If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile:
|
||||||
|
|
||||||
|
[](images/outdated_outdated.png)
|
||||||
|
|
||||||
|
On Windows 7 SP1 and Windows 8.1 devices, you must deploy the compatibility update as described in [Enrolling devices in Windows Analytics](windows-analytics-get-started.md).
|
||||||
|
|
||||||
|
Note that the compatibility update retains the same KB number when a new version is released, so even if the update is installed on your devices, *they might not be running the latest version*. The compatibility update is now a critical update, so you can check that the latest version is installed from your management tool.
|
||||||
|
|
||||||
|
|
||||||
### Upgrade Readiness reports incomplete inventory
|
### Upgrade Readiness shows many "Computers with incomplete data"
|
||||||
Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity.
|
If you see a large number of devices reported as shown in this screenshot of the Upgrade Readiness tile:
|
||||||
|
|
||||||
|
[](images/outdated_incomplete.png)
|
||||||
|
|
||||||
|
Download the latest deployment script and run it on an affected device to check for issues. See the [Upgrade Readiness deployment script](../upgrade/upgrade-readiness-deployment-script.md) topic for information about obtaining and running the script, and for a description of the error codes that can be displayed. Remember to wait up to 48-72 hours to see the results.
|
||||||
|
See ["Understanding connectivity scenarios and the deployment script"](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog for a summary of setting the ClientProxy for the script, which will enable the script properly check for diagnostic data endpoint connectivity.
|
||||||
|
|
||||||
|
|
||||||
If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale.
|
If this becomes a recurring issue, schedule a full inventory scan monthly, as per the device enrollment guidelines for deployment at scale.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Upgrade Readiness doesn't show app inventory data on some devices
|
### Upgrade Readiness doesn't show app inventory data on some devices
|
||||||
Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded).
|
Upgrade Readiness only collects app inventory on devices that are not yet upgraded to the target operating system version specified in the Upgrade Readiness Overview blade. This is because Upgrade Readiness targets upgrade planning (for devices not yet upgraded).
|
||||||
|
|
||||||
@ -156,7 +158,7 @@ Finally, Upgrade Readiness only collects IE site discovery data on devices that
|
|||||||
### What are the requirements and costs for Windows Analytics solutions?
|
### What are the requirements and costs for Windows Analytics solutions?
|
||||||
| Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements |
|
| Windows Analytics solution| Windows license requirements | Windows version requirements | Diagnostic data requirements |
|
||||||
|----------------------|-----------------------------------|------------------------------|------------------------------|
|
|----------------------|-----------------------------------|------------------------------|------------------------------|
|
||||||
| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery |
|
| Upgrade Readiness | No additional requirements | Windows 7 with Service Pack 1, Windows 8.1, Windows 10 | Basic level in most cases; Enhanced level to support Windows 10 app usage data and IE site discovery |
|
||||||
| Update Compliance | No additional requirements | Windows 10 | Basic level |
|
| Update Compliance | No additional requirements | Windows 10 | Basic level |
|
||||||
| Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance<br>- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)<br>- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)<br>- Windows VDA E3 or E5 per-device or per-user subscription<br>- Windows Server 2016 or later | Windows 10 | Enhanced level |
|
| Device Health | No additional requirements | - Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance<br>- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)<br>- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)<br>- Windows VDA E3 or E5 per-device or per-user subscription<br>- Windows Server 2016 or later | Windows 10 | Enhanced level |
|
||||||
|
|
||||||
@ -176,23 +178,23 @@ Windows Analytics is fully committed to privacy, centering on these tenets:
|
|||||||
|
|
||||||
See these topics for additional background information about related privacy issues:
|
See these topics for additional background information about related privacy issues:
|
||||||
|
|
||||||
|
- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization)
|
||||||
- [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file)
|
- [Windows 7, Windows 8, and Windows 8.1 Appraiser Telemetry Events, and Fields](https://go.microsoft.com/fwlink/?LinkID=822965) (link downloads a PDF file)
|
||||||
- [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703)
|
- [Windows 10, version 1703 basic level Windows diagnostic events and fields](https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields-1703)
|
||||||
- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields)
|
- [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields)
|
||||||
- [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windowsconfiguration/configure-windows-diagnostic-data-in-your-organization)
|
|
||||||
- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview)
|
- [Diagnostic Data Viewer Overview](https://docs.microsoft.com/windows/configuration/diagnostic-data-viewer-overview)
|
||||||
- [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31)
|
- [Licensing Terms and Documentation](https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31)
|
||||||
- [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters)
|
- [Learn about security and privacy at Microsoft datacenters](http://www.microsoft.com/datacenters)
|
||||||
- [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/)
|
- [Confidence in the trusted cloud](https://azure.microsoft.com/en-us/support/trust-center/)
|
||||||
|
|
||||||
### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service?
|
### Can Windows Analytics be used without a direct client connection to the Microsoft Data Management Service?
|
||||||
No
|
No, the entire service is powered by Windows diagnostic data, which requires that devices have this direct connectivity.
|
||||||
|
|
||||||
### Can I choose the data center location?
|
### Can I choose the data center location?
|
||||||
Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US).
|
Yes for Azure Log Analytics, but no for the Microsoft Data Management Service (which is hosted in the US).
|
||||||
|
|
||||||
### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade?
|
### Why do SCCM and Upgrade Readiness show different counts of devices that are ready to upgrade?
|
||||||
system Center Configuration Manager (SCCM) considers a device ready to upgrade if no installed app is marked “not ready”, while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready” (or are in the ignore/low installation count category).
|
System Center Configuration Manager (SCCM) considers a device ready to upgrade if *no installed app* has an upgrade decision of “not ready” (that is, they are all "ready" or "in progress"), while Upgrade Readiness considers a device ready to upgrade only if *all* installed apps are marked “ready”.
|
||||||
|
|
||||||
Currently, you can choose the criteria you wish to use:
|
Currently, you can choose the criteria you wish to use:
|
||||||
- To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector).
|
- To use the SCCM criteria, create the collection of devices ready to upgrade within the SCCM console (using the analytics connector).
|
||||||
|
@ -22,11 +22,8 @@ If you have not already done so, consult the topics for any of the three Windows
|
|||||||
If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps:
|
If you've already done that, you're ready to enroll your devices in Windows Analytics by following these steps:
|
||||||
|
|
||||||
|
|
||||||
## Deploy your Commercial ID to your Windows 10 devices and enable data sharing
|
|
||||||
|
|
||||||
In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. You can use either Group Policy or Mobile Device Management (MDM) to deploy your Commercial ID.
|
## Copy your Commercial ID key
|
||||||
|
|
||||||
### Copy your Commercial ID key
|
|
||||||
|
|
||||||
Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers.
|
Microsoft uses a unique commercial ID to map information from user computers to your OMS workspace. This should be generated for you automatically. Copy your commercial ID key in OMS and then deploy it to user computers.
|
||||||
|
|
||||||
@ -36,34 +33,20 @@ Microsoft uses a unique commercial ID to map information from user computers to
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. Copy your Commercial ID (which should already be populated).
|
2. Copy your Commercial ID (which should already be populated). Save this Commercial ID because you will need it later for use in the deployment scripts and policies.
|
||||||
|
|
||||||
>**Important**<br> Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again.
|
>**Important**<br> Regenerate a Commercial ID key only if your original ID key can no longer be used. Regenerating a commercial ID key resets the data in your workspace for all solutions that use the ID. Additionally, you’ll need to deploy the new commercial ID key to user computers again.
|
||||||
|
|
||||||
### Deploy your Commercial ID to your Windows 10 devices and set the diagnostic data level
|
|
||||||
|
|
||||||
There are two primary methods for widespread deployment of your Commercial ID: Group Policy and Mobile Device Management (MDM).
|
## Enable data sharing
|
||||||
|
|
||||||
- Using Group Policy<BR><BR>
|
|
||||||
Deploying your Commercial ID using Group Policy can be accomplished by configuring domain Group Policy Objects with the Group Policy Management Editor, or by configuring local Group Policy using the Local Group Policy Editor.
|
|
||||||
1. In the console tree, navigate to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Data Collection and Preview Builds**
|
|
||||||
2. Double-click **Configure the Commercial ID**
|
|
||||||
3. In the **Options** box, under **Commercial Id**, type the Commercial ID GUID, and then click **OK**.<P>
|
|
||||||
|
|
||||||
- Using Microsoft Mobile Device Management (MDM)<BR><BR>
|
|
||||||
Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under **Provider/ProviderID/CommercialID**. You can find more information on deployment using MDM at the [DMClient Configuration Service Provider topic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/dmclient-csp).
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### Enable data sharing
|
|
||||||
|
|
||||||
To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this.
|
To enable data sharing, configure your proxy sever to whitelist the following endpoints. You might need to get approval from your security group to do this.
|
||||||
|
|
||||||
| **Endpoint** | **Function** |
|
| **Endpoint** | **Function** |
|
||||||
|---------------------------------------------------------|-----------|
|
|---------------------------------------------------------|-----------|
|
||||||
| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10 computers. User computers send data to Microsoft through this endpoint. (This endpoint is used by Windows 10, version 1709 or earlier.)
|
| `https://v10.events.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1803|
|
||||||
|
| `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for Windows 10, version 1709 or earlier |
|
||||||
| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 |
|
| `https://vortex-win.data.microsoft.com` | Connected User Experience and Telemetry component endpoint for operating systems older than Windows 10 |
|
||||||
| `https://v10.events.data.microsoft.com` | New diagnostic data endpoint for Windows 10, version 1803|
|
|
||||||
| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft.
|
| `https://settings-win.data.microsoft.com` | Enables the compatibility update to send data to Microsoft.
|
||||||
| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. |
|
| `http://adl.windows.com` | Allows the compatibility update to receive the latest compatibility data from Microsoft. |
|
||||||
| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. |
|
| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER); required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. |
|
||||||
@ -72,7 +55,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### Configuring endpoint access with proxy servers
|
### Configuring endpoint access with proxy servers
|
||||||
If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication:
|
If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication:
|
||||||
|
|
||||||
- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10.
|
- **Best option:** Configure your proxy servers to **not** require proxy authentication for any traffic to the diagnostic data endpoints. This is the most comprehensive solution and it works for all versions of Windows 10.
|
||||||
@ -80,8 +63,6 @@ If your organization uses proxy server authentication for outbound traffic, use
|
|||||||
- **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints.
|
- **Device proxy authentication:** Another option--the most complex--is as follows: First, configure a system level proxy server on the devices. Then, configure these devices to use machine-account-based outbound proxy authentication. Finally, configure proxy servers to allow the machine accounts access to the diagnostic data endpoints.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Deploy the compatibility update and related updates
|
## Deploy the compatibility update and related updates
|
||||||
|
|
||||||
The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager.
|
The compatibility update scans your devices and enables application usage tracking. If you don’t already have these updates installed, you can download the applicable version from the Microsoft Update Catalog or deploy it using Windows Server Update Services (WSUS) or your software distribution solution, such as System Center Configuration Manager.
|
||||||
@ -132,7 +113,7 @@ When you have completed a pilot deployment, you are ready to automate data colle
|
|||||||
To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes:
|
To ensure that user computers are receiving the most up-to-date data from Microsoft, we recommend that you establish the following data sharing and analysis processes:
|
||||||
|
|
||||||
- Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing.
|
- Enable automatic updates for the compatibility update and related updates. These updates include the latest application and driver issue information as we discover it during testing.
|
||||||
- Schedule the Upgrade Readiness deployment script to automatically run monthly so that you don’t have to manually initiate an inventory scan each time the compatibility updates are refreshed. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below.
|
- Schedule the Upgrade Readiness deployment script to automatically run monthly. Scheduling the script ensures that full inventory is sent monthly even if devices were not connected or had low battery power at the time the system normally sends inventory. Make sure to run the production version of the script, which is lighter weight and non-interactive. The script also has a number of built-in error checks, so you can monitor the results. If you can't run the deployment script at scale, another option is to configure things centrally via Group Policy or Mobile Device Management (MDM). Although we recommend using the deployment script, both options are discussed in the sections below.
|
||||||
|
|
||||||
When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on.
|
When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the changes is created when the update package is installed. For Windows 10 devices, this task is already included in the operating system. A full scan averages about 2 MB, but the scans for changes are very small. The scheduled task is named "Windows Compatibility Appraiser" and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Changes are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on.
|
||||||
|
|
||||||
@ -141,19 +122,24 @@ When you run the deployment script, it initiates a full scan. The daily schedule
|
|||||||
Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension).
|
Use a software distribution system such as System Center Configuration Manager to distribute the Upgrade Readiness deployment script at scale. For more information, see [New version of the Upgrade Analytics Deployment Script available](https://blogs.technet.microsoft.com/upgradeanalytics/2016/09/20/new-version-of-the-upgrade-analytics-deployment-script-available/) on the Upgrade Readiness blog. For information on how to deploy PowerShell scripts by using Windows Intune, see [Manage PowerShell scripts in Intune for Windows 10 devices](https://docs.microsoft.com/intune/intune-management-extension).
|
||||||
|
|
||||||
### Distributing policies at scale
|
### Distributing policies at scale
|
||||||
There are a number of policies that can be centrally managed to control Windows Analytics device configuration. These policies are under Microsoft\Windows\DataCollection:
|
There are a number of policies that can be centrally managed to control Windows Analytics device configuration. All of these policies have *preference* registry key equivalents that can be set by using the deployment script. Policy settings override preference settings if both are set.
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>You can only set the diagnostic data level to Enhanced by using policy. For example, this is necessary for using Device Health.
|
||||||
|
|
||||||
|
These policies are under Microsoft\Windows\DataCollection:
|
||||||
|
|
||||||
| Policy | Value |
|
| Policy | Value |
|
||||||
|-----------------------|------------------|
|
|-----------------------|------------------|
|
||||||
| CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. |
|
| CommercialId | In order for your devices to show up in Windows Analytics, they must be configured with your organization’s Commercial ID. |
|
||||||
| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). |
|
| AllowTelemetry (in Windows 10) | 1 (Basic), 2 (Enhanced) or 3 (Full) diagnostic data. Windows Analytics will work with basic diagnostic data, but more features are available when you use the Enhanced level (for example, Device Health requires Enhanced diagnostic data and Upgrade Readiness only collects app usage and site discovery data on Windows 10 devices with Enhanced diagnostic data). For more information, see [Configure Windows diagnostic data in your organization](https://docs.microsoft.com/windows/configuration/configure-windows-diagnostic-data-in-your-organization). |
|
||||||
| LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).|
|
| LimitEnhancedDiagnosticDataWindowsAnalytics (in Windows 10) | Only applies when AllowTelemetry=2. Limits the Enhanced diagnostic data events sent to Microsoft to just those needed by Windows Analytics. For more information, see [Windows 10, version 1709 enhanced diagnostic data events and fields used by Windows Analytics](https://docs.microsoft.com/windows/configuration/enhanced-diagnostic-data-windows-analytics-events-and-fields).|
|
||||||
| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8 |
|
| CommercialDataOptIn (in Windows 7 and Windows 8) | 1 is required for Upgrade Readiness, which is the only solution that runs on Windows 7 or Windows 8. |
|
||||||
|
|
||||||
|
|
||||||
You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation.
|
You can set these values by using Group Policy (in Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds) or by using Mobile Device Management (in Provider/ProviderID/CommercialID). For more information about deployment using MDM, see the [DMClient CSP](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp) topic in MDM documentation.
|
||||||
|
|
||||||
There are corresponding registry values that available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection**; these by the deployment script. If a given setting is configured by both registry settings and policy, the policy values will override. The **IEDataOptIn** setting is an exception--you can only set this in the registry:
|
The corresponding preference registry values are available in **HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection** and can be configured by the deployment script. If a given setting is configured by both preference registry settings and policy, the policy values will override. However, the **IEDataOptIn** setting is different--you can only set this with the preference registry keys:
|
||||||
|
|
||||||
- IEOptInLevel = 0 Internet Explorer data collection is disabled
|
- IEOptInLevel = 0 Internet Explorer data collection is disabled
|
||||||
- IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones
|
- IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones
|
||||||
@ -164,8 +150,4 @@ For more information about Internet Explorer Security Zones, see [About URL Secu
|
|||||||
|
|
||||||
### Distribution at scale without using the deployment script
|
### Distribution at scale without using the deployment script
|
||||||
|
|
||||||
We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. To accelerate this, you can force devices to send the initial data by using the following commands. For more information about how to check for error conditions, refer to the code in the deployment script in this topic. Note: these commands need to be run from a system context (an elevated user context won't work):
|
We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan.
|
||||||
|
|
||||||
- `CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun ent`
|
|
||||||
- (On Windows 10 devices) `windir\system32\devicecensus.exe`
|
|
||||||
- (On devices running systems older then Windows 10) `CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun`
|
|
@ -20,36 +20,7 @@ The site discovery feature in Upgrade Readiness provides an inventory of web sit
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Site discovery data is disabled by default; you can find documentation on what is collected in the [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965). After you turn on this feature, data is collected on all sites visited by Internet Explorer, except during InPrivate sessions. The data collection process is silent, without notification to the employee. You are responsible for ensuring that your use of this feature complies with all applicable local laws and regulatory requirements, including any requirements to provide notice to employees.
|
> Site discovery data is disabled by default; you can find documentation on what is collected in the [Windows 7, Windows 8, and Windows 8.1 appraiser diagnostic data events and fields](https://go.microsoft.com/fwlink/?LinkID=822965). After you turn on this feature, data is collected on all sites visited by Internet Explorer, except during InPrivate sessions. The data collection process is silent, without notification to the employee. You are responsible for ensuring that your use of this feature complies with all applicable local laws and regulatory requirements, including any requirements to provide notice to employees.
|
||||||
|
|
||||||
### Install prerequisite security update for Internet Explorer
|
[In order to use site discovery, a separate opt-in is required; see Enrolling]
|
||||||
|
|
||||||
Ensure the following prerequisites are met before using site discovery:
|
|
||||||
|
|
||||||
1. Install the prerequisite KBs to add Site Discovery support and the latest fixes from the [Microsoft Update Catalog](http://www.catalog.update.microsoft.com/home.aspx). Install the following:
|
|
||||||
- For Windows 7 and Windows 8.1 - March, 2017 (or later) Security Monthly Rollup
|
|
||||||
- For Windows 10 - Cumulative Update for Windows 10 Version 1607 (KB4015217) (or later)
|
|
||||||
2. Enable Internet Explorer data collection, which is disabled by default. The best way to enable it is to modify the [Upgrade Readiness deployment script](upgrade-readiness-deployment-script.md) to allow Internet Explorer data collection before you run it. In addition, to enable Site Discovery on Windows 10 you must set computers to the **Enhanced** diagnostic data level for the Feedback and Diagnostics setting (Privacy > Feedback & Diagnostics settings), and enable **Page Prediction within Internet Explorer 11**.
|
|
||||||
|
|
||||||
If you do not plan to use the Upgrade Readiness deployment script to enable Site discovery, you must create the following registry entry.
|
|
||||||
|
|
||||||
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection
|
|
||||||
|
|
||||||
Entry name: IEDataOptIn
|
|
||||||
|
|
||||||
Data type: DWORD
|
|
||||||
|
|
||||||
Values:
|
|
||||||
|
|
||||||
> *IEOptInLevel = 0 Internet Explorer data collection is disabled*
|
|
||||||
>
|
|
||||||
> *IEOptInLevel = 1 Data collection is enabled for sites in the Local intranet + Trusted sites + Machine local zones*
|
|
||||||
>
|
|
||||||
> *IEOptInLevel = 2 Data collection is enabled for sites in the Internet + Restricted sites zones*
|
|
||||||
>
|
|
||||||
> *IEOptInLevel = 3 Data collection is enabled for all sites*
|
|
||||||
|
|
||||||
For more information about Internet Explorer Security Zones, see [About URL Security Zones](https://msdn.microsoft.com/library/ms537183.aspx).
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
### Review most active sites
|
### Review most active sites
|
||||||
|
|
||||||
|
@ -56,25 +56,7 @@ If you are not using OMS:
|
|||||||
|
|
||||||
Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md).
|
Once you've added Update Compliance to Microsoft Operations Management Suite, you can now start enrolling the devices in your organization. For full instructions, see [Enrolling devices in Windows Analytics](https://docs.microsoft.com/windows/deployment/update/windows-analytics-get-started.md).
|
||||||
|
|
||||||
### Connection settings
|
|
||||||
|
|
||||||
The settings that are used to enable client computers to connect to Windows diagnostic data depend on the type of connection scenario you use. These scenarios are discussed in [this blog post](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) and are summarized below.
|
|
||||||
|
|
||||||
| **Connection scenario** | **ClientProxy setting** <BR>in **runconfig.bat** | **Local computer configuration** |
|
|
||||||
|---------------------------------------------------------|-----------|-----------|
|
|
||||||
| Direct connection to the Internet (no proxy) | **ClientProxy=Direct** | No additional configuration necessary |
|
|
||||||
| WinHTTP proxy | **ClientProxy=System** | Specify `netsh winhttp set proxy <server>:<port>` on client computers |
|
|
||||||
| Other proxy | **ClientProxy=User** | Configure the Windows Registry value: <p style="font-size: 12px"> **HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\DisableEnterpriseAuthProxy** </p> to 0 on client computers |
|
|
||||||
|
|
||||||
### Automate data collection
|
|
||||||
|
|
||||||
To ensure that user computers are receiving the most up to date data from Microsoft, we recommend that you establish the following data sharing and analysis processes.
|
|
||||||
|
|
||||||
- Enable automatic updates for the compatibility update and related updates. These updates are updated frequently to include the latest application and driver issue information as we discover it during testing.
|
|
||||||
- Schedule the Upgrade Readiness deployment script to automatically run so that you don’t have to manually initiate an inventory scan each time the compatibility updates are updated.
|
|
||||||
- Schedule monthly user computer scans to view monthly active computer and usage information.
|
|
||||||
|
|
||||||
>When you run the deployment script, it initiates a full scan. The daily scheduled task to capture the deltas is created when the update package is installed. For Windows 10 devices, it's already part of the OS. A full scan averages about 2 MB, but the delta scans are very small. The scheduled task is named **Windows Compatibility Appraiser** and can be found in the Task Scheduler Library under Microsoft > Windows > Application Experience. Deltas are invoked via the nightly scheduled task. It attempts to run around 3:00AM every day. If the system is powered off at that time, the task will run when the system is turned on.
|
|
||||||
|
|
||||||
## Use Upgrade Readiness to manage Windows Upgrades
|
## Use Upgrade Readiness to manage Windows Upgrades
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user