diff --git a/devices/surface-hub/TOC.md b/devices/surface-hub/TOC.md index a9cde81f15..742423081c 100644 --- a/devices/surface-hub/TOC.md +++ b/devices/surface-hub/TOC.md @@ -8,6 +8,7 @@ ##### [On-premises deployment (single forest)](on-premises-deployment-surface-hub-device-accounts.md) ##### [On-premises deployment (multiple forests)](on-premises-deployment-surface-hub-multi-forest.md) ##### [Hybrid deployment](hybrid-deployment-surface-hub-device-accounts.md) +##### [Online or hybrid deployment using Skype Hybrid Voice environment](skype-hybrid-voice.md) ##### [Create a device account using UI](create-a-device-account-using-office-365.md) ##### [Microsoft Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) ##### [Applying ActiveSync policies to device accounts](apply-activesync-policies-for-surface-hub-device-accounts.md) diff --git a/devices/surface-hub/change-history-surface-hub.md b/devices/surface-hub/change-history-surface-hub.md index 74ee57c2f5..fa4ab118de 100644 --- a/devices/surface-hub/change-history-surface-hub.md +++ b/devices/surface-hub/change-history-surface-hub.md @@ -14,6 +14,12 @@ localizationpriority: medium This topic lists new and updated topics in the [Surface Hub Admin Guide]( surface-hub-administrators-guide.md). +## May 2017 + +| New or changed topic | Description | +| --- | --- | +| [Online or hybrid deployment using Skype Hybrid Voice environment](skype-hybrid-voice.md) | New | + ## February 2017 | New or changed topic | Description | diff --git a/devices/surface-hub/create-and-test-a-device-account-surface-hub.md b/devices/surface-hub/create-and-test-a-device-account-surface-hub.md index b06c909230..3223d5d81b 100644 --- a/devices/surface-hub/create-and-test-a-device-account-surface-hub.md +++ b/devices/surface-hub/create-and-test-a-device-account-surface-hub.md @@ -49,6 +49,7 @@ For detailed steps using PowerShell to provision a device account, choose an opt | [On-premises deployment (single-forest)](on-premises-deployment-surface-hub-device-accounts.md) | Your organization has servers that it controls and uses to host Active Directory, Exchange, and Skype for Business (or Lync) in a single-forest environment. | | [On-premises deployment (multiple forests)](on-premises-deployment-surface-hub-multi-forest.md) | Your organization has servers that it controls and uses to host Active Directory, Exchange, and Skype for Business (or Lync) in a multi-forest environment. | | [Hybrid deployment](hybrid-deployment-surface-hub-device-accounts.md) | Your organization has a mix of services, with some hosted on-premises and some hosted online through Office 365. | +| [Online or hybrid deployment using Skype Hybrid Voice environment](skype-hybrid-voice.md) | Your organization has Skype for Business home pools and Exchange servers in the cloud, and uses an on-premises pool of Skype for Business 2015 or Cloud Connector edition connected via Public Switched Telephone Network (PSTN). | If you prefer to use a graphical user interface (UI), some steps can be done using UI instead of PowerShell. diff --git a/devices/surface-hub/images/adjust-room-audio.png b/devices/surface-hub/images/adjust-room-audio.png new file mode 100644 index 0000000000..3d0eef5ed7 Binary files /dev/null and b/devices/surface-hub/images/adjust-room-audio.png differ diff --git a/devices/surface-hub/images/new-user-hybrid-voice.png b/devices/surface-hub/images/new-user-hybrid-voice.png new file mode 100644 index 0000000000..e291f9ebca Binary files /dev/null and b/devices/surface-hub/images/new-user-hybrid-voice.png differ diff --git a/devices/surface-hub/images/new-user-password-hybrid-voice.png b/devices/surface-hub/images/new-user-password-hybrid-voice.png new file mode 100644 index 0000000000..1ae4d5560b Binary files /dev/null and b/devices/surface-hub/images/new-user-password-hybrid-voice.png differ diff --git a/devices/surface-hub/images/product-license-hybrid-voice.png b/devices/surface-hub/images/product-license-hybrid-voice.png new file mode 100644 index 0000000000..3d16aeb467 Binary files /dev/null and b/devices/surface-hub/images/product-license-hybrid-voice.png differ diff --git a/devices/surface-hub/images/select-room-hybrid-voice.png b/devices/surface-hub/images/select-room-hybrid-voice.png new file mode 100644 index 0000000000..961f8355e8 Binary files /dev/null and b/devices/surface-hub/images/select-room-hybrid-voice.png differ diff --git a/devices/surface-hub/skype-hybrid-voice.md b/devices/surface-hub/skype-hybrid-voice.md new file mode 100644 index 0000000000..fbd3d455a1 --- /dev/null +++ b/devices/surface-hub/skype-hybrid-voice.md @@ -0,0 +1,105 @@ +--- +title: Online or hybrid deployment using Skype Hybrid Voice environment (Surface Hub) +description: This topic explains how to enable Skype for Business Cloud PBX with on premises PSTN connectivity via Cloud Connector Edition or Skype for Business 2015 pool. +keywords: hybrid deployment, Skype Hybrid Voice +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: surfacehub +author: jdeckerMS +localizationpriority: medium +--- + +# Online or hybrid deployment using Skype Hybrid Voice environment (Surface Hub) + +This topic explains how to enable Skype for Business Cloud PBX with on-premises Public Switched Telephone Network (PSTN) connectivity via Cloud Connector Edition or Skype for Business 2015 pool. In this option. your Skype for Business home pools and Exchange servers are in the cloud, and are connected by PSTN via an on-premises pool running Skype for Business 2015 or Cloud Connector edition. [Learn more about different Cloud PBX options](https://technet.microsoft.com/library/mt612869.aspx). + +If you deployed Skype for Business Cloud PBX with one of the hybrid voice options, follow the steps below to enable the room account for Surface Hub. It is important to create a regular user account first, assign all hybrid voice options and phone numbers, and then convert the account to a room account. If you do not follow this order, you will not be able to assign a hybrid phone number. + +>[!WARNING] +>If you create an account before configuration of Hybrid voice (you run Enable-CSMeetingRoom command), you will not be able to configure required hybrid voice parameters. In order to configure hybrid voice parameters for a previously configured account or to reconfigure a phone number, delete the E5 or E3 + Cloud PBX add-on license, and then follow the steps below, starting at step 3. + +1. Create a new user account for Surface Hub. This example uses **surfacehub2@adatum.com**. The account can be created in local Active Directory and synchronized to the cloud, or created directly in the cloud. + + ![new object user](images/new-user-hybrid-voice.png) + +2. Select **Password Never Expires**. This is important for a Surface Hub device. + + ![Password never expires](images/new-user-password-hybrid-voice.png) + +3. In Office 365, add **E5** license or **E3 and Cloud PBX** add-on to the user account created for the room. This is required for Hybrid Voice to work. + + ![Add product license](images/product-license-hybrid-voice.png) + +4. Wait approximately 15 minutes until the user account for the room appears in Skype for Business Online. + +5. After the user account for room is created in Skype for Business Online, enable it for Hybrid Voice in Skype for Business Remote PowerShell by running the following cmdlet: + + ``` + Set-csuser surfacehub2@adatum.com EnterpriseVoiceEnabled $true -HostedVoiceMail $true -onpremlineuri tel:+15005000102 + ``` + +6. Validate Hybrid Voice call flow by placing test calls from the Surface Hub. + +7. Start a remote PowerShell session on a PC and connect to Exchange by running the following cmdlets. + + ``` + Set-ExecutionPolicy Unrestricted + $cred=Get-Credential -Message "Please use your Office 365 admin credentials" + $sess= New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/ps1-liveid/ -Credential $cred -Authentication Basic -AllowRedirection + Import-PSSession $sess + ``` + +8. After establishing a session, modify the user account for the room to enable it as a **RoomMailboxAccount** by running the following cmdlets. This allows the account to authenticate with Surface Hub. + + ``` + Set-Mailbox surfacehub2@adatum.com -Type Room + Set-Mailbox surfacehub2@adatum.com -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String -AsPlainText -Force) + ``` + +9. After setting up the mailbox, you will need to either create a new Exchange ActiveSync policy, or use a compatible existing policy. + + Surface Hubs are only compatible with device accounts that have an ActiveSync policy where the **PasswordEnabled** property is set to **False**. If this isn’t set properly, then Exchange services on the Surface Hub (mail, calendar, and joining meetings), will not be enabled. + + If you haven’t created a compatible policy yet, use the following cmdlet (this one creates a policy called "Surface Hubs"). After it’s created, you can apply the same policy to other device accounts. + + ``` + $easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false + ``` + + After you have a compatible policy, then you will need to apply the policy to the device account. However, policies can only be applied to user accounts and not resource mailboxes. Run the following cmdlets to convert the mailbox into a user type, apply the policy, and then convert it back into a mailbox (you may need to re-enable the account and set the password again). + + ``` + Set-Mailbox surfacehub2@adatum.com -Type Regular + Set-CASMailbox surfacehub2@adatum.com -ActiveSyncMailboxPolicy $easPolicy.id + Set-Mailbox surfacehub2@adatum.com -Type Room + $credNewAccount = Get-Credential -Message "Please provide the Surface Hub username and password" + Set-Mailbox surfacehub2@adatum.com -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true + ``` + +10. Various Exchange properties must be set on the device account to improve the meeting experience. You can see which properties can be set in [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md). The following cmdlets provide an example of setting Exchange properties. + + ``` + Set-CalendarProcessing surfacehub2@adatum.com -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false + Set-CalendarProcessing surfacehub2@adatum.com -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!" + ``` + +11. Enable the mailbox as a meeting device in Skype for Business Online. Run the following cmdlet which enables the acount as a meeting device. + + ``` + Get-CsTenant | select registrarpool + Enable-CsMeetingRoom surfacehub2@adatum.com -RegistrarPool 'sippoolbl20a04.infra.lync.com' -SipAddressType UserPrincipalName + ``` + + As a result of running this cmdlet, users will be asked if they are in a meeting room, as shown in the following image. **Yes** will mute the microphone and speaker. + + ![](images/adjust-room-audio.png) + + + +At this moment the room account is fully configured, including Hybrid Voice. If you use Skype on-premises, you can configure additional attributes, like description, location, etc., on-premises. If you create a room in Skype Online, these parameters can be set online. + +In the following image, you can see how the device appears to users. + + +![](images/select-room-hybrid-voice.png) \ No newline at end of file diff --git a/devices/surface/TOC.md b/devices/surface/TOC.md index 2fc832d764..192f88b5e0 100644 --- a/devices/surface/TOC.md +++ b/devices/surface/TOC.md @@ -16,7 +16,7 @@ ### [Surface Dock Updater](surface-dock-updater.md) ### [Wake On LAN for Surface devices](wake-on-lan-for-surface-devices.md) ## [Considerations for Surface and System Center Configuration Manager](considerations-for-surface-and-system-center-configuration-manager.md) -## [Deploy Surface app with Windows Store for Business](deploy-surface-app-with-windows-store-for-business.md) +## [Deploy Surface app with Microsoft Store for Business](deploy-surface-app-with-windows-store-for-business.md) ## [Enable PEAP, EAP-FAST, and Cisco LEAP on Surface devices](enable-peap-eap-fast-and-cisco-leap-on-surface-devices.md) ## [Manage Surface UEFI settings](manage-surface-uefi-settings.md) ### [Advanced UEFI security features for Surface Pro 3](advanced-uefi-security-features-for-surface-pro-3.md) diff --git a/devices/surface/deploy-surface-app-with-windows-store-for-business.md b/devices/surface/deploy-surface-app-with-windows-store-for-business.md index 1ad577cc48..1e6ca989c9 100644 --- a/devices/surface/deploy-surface-app-with-windows-store-for-business.md +++ b/devices/surface/deploy-surface-app-with-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Deploy Surface app with Windows Store for Business (Surface) -description: Find out how to add and download Surface app with Windows Store for Business, as well as install Surface app with PowerShell and MDT. +title: Deploy Surface app with Microsoft Store for Business or Microsoft Store for Education (Surface) +description: Find out how to add and download Surface app with Windows Store for Business or Microsoft Store for Education, as well as install Surface app with PowerShell and MDT. keywords: surface app, app, deployment, customize ms.prod: w10 ms.mktglfcycl: deploy @@ -9,7 +9,7 @@ ms.sitesec: library author: miladCA --- -#Deploy Surface app with Windows Store for Business +#Deploy Surface app with Microsoft Store for Business and Education **Applies to** * Surface Pro 4 @@ -35,21 +35,21 @@ If your organization is preparing images that will be deployed to your Surface d ##Surface app overview -The Surface app is available as a free download from the [Windows Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Windows Store, but if your organization uses Windows Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Windows Store for Business, see [Windows Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. +The Surface app is available as a free download from the [Windows Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Windows Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter. -##Add Surface app to a Windows Store for Business account +##Add Surface app to a Microsoft Store for Business account -Before users can install or deploy an app from a company’s Windows Store for Business account, the desired app(s) must first be made available and licensed to the users of a business. +Before users can install or deploy an app from a company’s Microsoft Store for Business account, the desired app(s) must first be made available and licensed to the users of a business. -1. If you have not already done so, create a [Windows Store for Business account](https://www.microsoft.com/business-store). +1. If you have not already done so, create a [Microsoft Store for Business account](https://www.microsoft.com/business-store). 2. Log on to the portal. -3. Enable offline licensing: click **Settings->Account Information**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Windows Store for Business app licensing models, see [Apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).

+3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).

![Show offline licenses apps checkbox](images/deploysurfapp-figure1-enablingapps.png "Show offline licenses apps checkbox")
*Figure 1. Enable apps for offline use* -4. Add Surface app to your Windows Store for Business account by following this procedure: +4. Add Surface app to your Micrososft Store for Business account by following this procedure: * Click the **Shop** menu. * In the search box, type **Surface app**, and then click the search icon. * After the Surface app is presented in the search results, click the app’s icon. @@ -60,17 +60,17 @@ Before users can install or deploy an app from a company’s Windows Store for B *Figure 2. Select the Offline licensing mode and add the app to your inventory* * Click **Offline** to select the Offline licensing mode. - * Click **Get the app** to add the app to your Windows Store for Business inventory. As shown in Figure 3, you’ll see a dialog box that prompts you to acknowledge that offline apps can be deployed using a management tool or downloaded from the company’s inventory page in their private store. + * Click **Get the app** to add the app to your Microsoft Store for Business inventory. As shown in Figure 3, you’ll see a dialog box that prompts you to acknowledge that offline apps can be deployed using a management tool or downloaded from the company’s inventory page in their private store. ![Offline-licensed app acknowledgement window](images/deploysurfapp-fig3-acknowledge.png "Offline-licensed app acknowledgement window") *Figure 3. Offline-licensed app acknowledgement* * Click **OK**. -##Download Surface app from a Windows Store for Business account +##Download Surface app from a Microsoft Store for Business account After you add an app to the Windows Store for Business account in Offline mode, you can download and add the app as an AppxBundle to a deployment share. -1. Log on to the Windows Store for Business account at https://businessstore.microsoft.com. -2. Click the **Manage->Inventory** menu. A list of all apps in your company’s private store is displayed, including the Surface app you added in the [Add Surface app to a Windows Store for Business account](#add-surface-app-to-a-windows-store-for-business-account) section of this article. +1. Log on to the Microsoft Store for Business account at https://businessstore.microsoft.com. +2. Click **Manage->Apps & software**. A list of all of your company’s apps is displayed, including the Surface app you added in the [Add Surface app to a Windows Store for Business account](#add-surface-app-to-a-windows-store-for-business-account) section of this article. 3. Under **Actions**, click the ellipsis (**…**), and then click **Download for offline use** for the Surface app. 4. Select the desired **Platform** and **Architecture** options from the available selections for the selected app, as shown in Figure 4. @@ -91,7 +91,7 @@ Figure 5 shows the required frameworks for the Surface app. *Figure 5. Required frameworks for the Surface app* >[!NOTE] ->The version numbers of the Surface app and required frameworks will change as the apps are updated. Check for the latest version of Surface app and each framework in Windows Store for Business. Always use the Surface app and recommended framework versions as provided by Windows Store for Business. Using outdated frameworks or the incorrect versions may result in errors or application crashes. +>The version numbers of the Surface app and required frameworks will change as the apps are updated. Check for the latest version of Surface app and each framework in Microsoft Store for Business. Always use the Surface app and recommended framework versions as provided by Microsoft Store for Business. Using outdated frameworks or the incorrect versions may result in errors or application crashes. To download the required frameworks for the Surface app, follow these steps: 1. Click the **Download** button under **Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe**. This downloads the Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe.Appx file to your specified folder. diff --git a/devices/surface/images/manage-surface-uefi-fig10.png b/devices/surface/images/manage-surface-uefi-fig10.png new file mode 100644 index 0000000000..7d36f66808 Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig10.png differ diff --git a/devices/surface/images/manage-surface-uefi-fig11.png b/devices/surface/images/manage-surface-uefi-fig11.png new file mode 100644 index 0000000000..daccc0efbb Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig11.png differ diff --git a/devices/surface/images/manage-surface-uefi-fig12.png b/devices/surface/images/manage-surface-uefi-fig12.png new file mode 100644 index 0000000000..34d2dc5342 Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig12.png differ diff --git a/devices/surface/images/manage-surface-uefi-fig13.png b/devices/surface/images/manage-surface-uefi-fig13.png new file mode 100644 index 0000000000..b7a58d16c2 Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig13.png differ diff --git a/devices/surface/images/manage-surface-uefi-fig14.png b/devices/surface/images/manage-surface-uefi-fig14.png new file mode 100644 index 0000000000..8845608fbd Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig14.png differ diff --git a/devices/surface/images/manage-surface-uefi-fig9.png b/devices/surface/images/manage-surface-uefi-fig9.png new file mode 100644 index 0000000000..2269fe6c17 Binary files /dev/null and b/devices/surface/images/manage-surface-uefi-fig9.png differ diff --git a/devices/surface/index.md b/devices/surface/index.md index 7a352fb536..3ef2840357 100644 --- a/devices/surface/index.md +++ b/devices/surface/index.md @@ -24,7 +24,7 @@ For more information on planning for, deploying, and managing Surface devices in | [Deploy Surface devices](deploy.md) | Get deployment guidance for your Surface devices including information about MDT, OOBE customization, Ethernet adaptors, and Surface Deployment Accelerator. | | [Surface firmware and driver updates](update.md) | Find out how to download and manage the latest firmware and driver updates for your Surface device. | | [Considerations for Surface and System Center Configuration Manager](considerations-for-surface-and-system-center-configuration-manager.md) | Get guidance on how to deploy and manage Surface devices with System Center Configuration Manager. | -| [Deploy Surface app with Windows Store for Business](deploy-surface-app-with-windows-store-for-business.md) | Find out how to add and download Surface app with Windows Store for Business, as well as install Surface app with PowerShell and MDT. | +| [Deploy Surface app with Microsoft Store for Business](deploy-surface-app-with-windows-store-for-business.md) | Find out how to add and download Surface app with Windows Store for Business, as well as install Surface app with PowerShell and MDT. | | [Enable PEAP, EAP-FAST, and Cisco LEAP on Surface devices](enable-peap-eap-fast-and-cisco-leap-on-surface-devices.md) | Find out how to enable support for PEAP, EAP-FAST, or Cisco LEAP protocols on your Surface device. | | [Manage Surface UEFI settings](manage-surface-uefi-settings.md) | Use Surface UEFI settings to enable or disable devices, configure security settings, and adjust Surface device boot settings. | | [Surface Enterprise Management Mode](surface-enterprise-management-mode.md) | See how this feature of Surface devices with Surface UEFI allows you to secure and manage firmware settings within your organization. | diff --git a/devices/surface/manage-surface-dock-firmware-updates.md b/devices/surface/manage-surface-dock-firmware-updates.md index 70a884e151..a07e2d8789 100644 --- a/devices/surface/manage-surface-dock-firmware-updates.md +++ b/devices/surface/manage-surface-dock-firmware-updates.md @@ -87,7 +87,7 @@ For more information about how to deploy MSI packages see [Create and deploy an >[!NOTE] >When drivers are installed through Windows Update or the MSI package, registry keys are added that indicate the version of firmware installed on the Surface Dock and contained within the Surface Dock driver. These registry keys can be found in: -> **HLKM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\SurfaceDockFwUpdate\\Parameters** +> **HKLM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\SurfaceDockFwUpdate\\Parameters** Firmware status is displayed for both the main chipset (displayed as **Component10**) and the DisplayPort chipset (displayed as **Component20**). For each chipset there are four keys, where *xx* is **10** or **20** corresponding to each chipset: diff --git a/devices/surface/manage-surface-uefi-settings.md b/devices/surface/manage-surface-uefi-settings.md index bbf546f125..388cb338d9 100644 --- a/devices/surface/manage-surface-uefi-settings.md +++ b/devices/surface/manage-surface-uefi-settings.md @@ -139,6 +139,36 @@ Use the **Restart Now** button on the **Exit** page to exit UEFI settings, as sh *Figure 8. Click Restart Now to exit Surface UEFI and restart the device* +## Surface UEFI boot screens + +When you update Surface device firmware, by using either Windows Update or manual installation, the updates are not applied immediately to the device, but instead during the next reboot cycle. You can find out more about the Surface firmware update process in [Manage Surface driver and firmware updates](https://docs.microsoft.com/surface/manage-surface-pro-3-firmware-updates). The progress of the firmware update is displayed on a screen with progress bars of differing colors to indicate the firmware for each component. Each component’s progress bar is shown in Figures 9 through 13. + +![Surface UEFI firmware update with blue progress bar](images/manage-surface-uefi-fig9.png "Surface UEFI firmware update with blue progress bar") + +*Figure 9. The Surface UEFI firmware update displays a blue progress bar* + +![System Embedded Controller firmware with green progress bar](images/manage-surface-uefi-fig10.png "System Embedded Controller firmware with green progress bar") + +*Figure 10. The System Embedded Controller firmware update displays a green progress bar* + +![SAM Controller firmware update with orange progress bar](images/manage-surface-uefi-fig11.png "SAM Controller firmware update with orange progress bar") + +*Figure 11. The SAM Controller firmware update displays an orange progress bar* + +![Intel Management Engine firmware with red progress bar](images/manage-surface-uefi-fig12.png "Intel Management Engine firmware with red progress bar") + +*Figure 12. The Intel Management Engine firmware update displays a red progress bar* + +![Surface touch firmware with gray progress bar](images/manage-surface-uefi-fig13.png "Surface touch firmware with gray progress bar") + +*Figure 13. The Surface touch firmware update displays a gray progress bar* +>[!NOTE] +>An additional warning message that indicates Secure Boot is disabled is displayed, as shown in Figure 14. + +![Surface boot screen that indicates Secure Boot has been disabled](images/manage-surface-uefi-fig14.png "Surface boot screen that indicates Secure Boot has been disabled") + +*Figure 14. Surface boot screen that indicates Secure Boot has been disabled in Surface UEFI settings* + ## Related topics [Advanced UEFI security features for Surface Pro 3](advanced-uefi-security-features-for-surface-pro-3.md) \ No newline at end of file diff --git a/devices/surface/surface-dock-updater.md b/devices/surface/surface-dock-updater.md index ae5f54addb..6c009e69fb 100644 --- a/devices/surface/surface-dock-updater.md +++ b/devices/surface/surface-dock-updater.md @@ -112,6 +112,7 @@ Microsoft periodically updates Surface Dock Updater. To learn more about the app >Each update to Surface Dock firmware is included in a new version of Surface Dock Updater. To update a Surface Dock to the latest firmware, you must use the latest version of Surface Dock Updater. ### Version 1.0.8.0 +*Release date: April 26, 2016* This version of Surface Dock Updater adds support for the following: @@ -119,6 +120,7 @@ This version of Surface Dock Updater adds support for the following: * Update for Surface Dock DisplayPort firmware ### Version 2.0.22.0 +*Release date: October 21, 2016* This version of Surface Dock Updater adds support for the following: @@ -126,10 +128,12 @@ This version of Surface Dock Updater adds support for the following: * Improved reliability of Ethernet, audio, and USB ports ### Version 2.1.6.0 +*Release date: April 7, 2017* This version of Surface Dock Updater adds support for the following: -* Updated firmware for Surface Dock DisplayPort +* Update for Surface Dock DisplayPort firmware +* Requires Windows 10 ## Related topics diff --git a/education/get-started/get-started-microsoft-education-system-public.md b/education/get-started/get-started-microsoft-education-system-public.md deleted file mode 100644 index c75079c57e..0000000000 --- a/education/get-started/get-started-microsoft-education-system-public.md +++ /dev/null @@ -1,812 +0,0 @@ ---- -title: Deploy and manage a full cloud IT solution using the Microsoft Education System -description: Learn how to use the new Microsoft Education System to set up a cloud infrastructure for your school, acquire devices and apps, and configure and deploy policies to your devices. -keywords: education, Microsoft Education System, MSES, full cloud IT solution, school, deploy, setup, manage, Windows, Intune for Education, Office 365, Store -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: edu -author: CelesteDG ---- - -![Learn how to deploy and manage a cloud solution with MSES!](images/mses_getstarted_banner.png) - -# Get started: Deploy and manage a full cloud IT solution using the Microsoft Education System - -**Applies to:** - -- Office 365 Education, Microsoft Classroom, School Data Sync, Intune for Education, Store for Business, Set up School PCs, Windows 10 - -Hello, IT administrators! In [Get started: Deploy and manage a full cloud IT solution for your school](cloud-mode-school-pc-setup.md), we showed you how to use the existing Microsoft cloud services and tools to implement a full cloud IT solution. In this walkthrough, we'll show you how much easier and quicker it is to do the same tasks using the new Microsoft Education System. - -## What is the Microsoft Education System? -**Microsoft Education System (MSES)** consists of these new and existing services and tools from Microsoft: -- **Intune for Education** for simple set up, control, and management of the resources for your school including apps, devices, and settings -- **Office 365 Education** provides online apps for work from anywhere and desktop apps for advanced functionality, built for working together and available across devices, and it's free for schools, teachers, and students - - **Microsoft Classroom** allows teachers to create classes, assignments, class calendars, conversations, and more, and **School Data Sync (SDS)** to manage your school data - - **OneNote Class Notebook** to organize course content, create and deliver interactive lessons to some or all students, collaborate and provide private feedback to individual students, and connect with major LMS and SIS partners for assignment workflow -- **Learning Tools** are moving beyond the OneNote desktop app and is now available in Office Lens, OneNote Online, Word Online, and Word desktop -- **Whiteboard** to create interactive lessons on the big screen, share and collaborate real-time by connecting to Class Notebook and Classroom -- **Windows 10 Creators Update** which brings 3D for everyone and other new and updated Windows features -- **Minecraft: Education Edition** which provides an open and immersive environment to promote creativity, collaboration, and problem-solving - -With the new Microsoft Education System, schools can: -- **Use affordable devices and simple setup** - Boost creativity and get started instantly with Windows 10 devices that support Windows Ink. Set up devices in minutes and stay in control with the new Intune for Education. -- **Collaborate in a modern classroom** - Help students become career-ready with Office apps like Word, Excel, PowerPoint, and OneNote. Increase comprehension and outcomes with the most advanced teaching apps like integrated Learning Tools. -- **Go beyond the browser with inspiring apps for classroom learning** - Inspire with Minecraft: Education Edition and innovative apps from the Store. - -Go to the Microsoft Education site to learn more about Microsoft Education System. See How to buy to learn about pricing and purchasing options for schools, students, and teachers as well as academic pricing and offers for qualified K-12 and higher education institutions. - -## What we're doing -In this walkthrough, we'll show you the basics on how to: -- Acquire an Office 365 education domain -- Import school student, teacher, and class data through School Data Sync (SDS) -- Manage app and settings deployment with Intune for Education -- Acquire additional apps in Store for Business -- Use the Set up School PCs app to quickly set up and provision your Windows education devices -- Log in and use the device - -This diagram shows a high-level view of what we cover in this walkthrough. The numbers correspond to the sections in the walkthrough and roughly correspond to the flow of the overall process, but note that not all sections are shown in the diagram. - -![Deploy and manage a full cloud IT solution using MSES](images/mses_getstarted_workflow_e2e.png) - -## Prerequisites -Here's a few a tasks you need to complete before you start the walkthrough: -- [Download and install the latest Windows 10 Creators Update image](#download-and-install-the-latest-windows-10-creators-update-image). - - This process takes a while so we recommend that you start this task before setting up your cloud infrastructure. - - -## 1. Set up your cloud infrastructure -In the following sections, we'll walk you through the process of setting up a basic cloud infrastructure for your school. - -### 1.1 Set up your Office 365 Education tenant -Schools can use Office 365 to save time and be more productive. Built with powerful tools and accessible from any device, setting it up is the first step in getting your school to the cloud. - -**To set up Office 365** -1. Create an account and a user ID and password to use to sign into your account. - - **Figure 1** - Office 365 account creation - - ![Create an Office 365 account](images/o365_createaccount.png) - -2. Save your sign-in info so you can use it to sign into https://portal.office.com (the sign-in page). Click **You're ready to go...** -3. In the **Verify eligibility for Microsoft Office 365 Education** screen: - 1. In the **welcome** screen, click **Next**. - 2. In the **type a domain name** screen, click **I'll verify later** and then click **Yes** on the confirmation window that pops up. -4. Once the confirmation window goes away, you should see the Office 365 admin center. - - **Figure 2** - Office 365 admin center - - ![Office 365 admin center](images/o365_admincenter_welcome.png) - -5. **Optional**. On the **Welcome to the new Office 365 admin center** pop-up window, click **Next** to get a brief tour of the admin center. - -As part of setting up a basic cloud infrastructure, you don't need to complete the rest of the Office 365 Education setup so we will skip the rest of setup for now and start importing school data. You can pick up where you left off with Office 365 Education setup once you've completed the rest of the steps in the walkthrough. See [4.2 Complete Office 365 Education setup](#42-complete-office-365-education-setup) for info. - -### 1.2 Turn on Classroom and use SDS to import SIS data -Teachers and students can use Microsoft Classroom to manage all classses and assignment workflows. Teachers can use it to create a class notebook for everyone in the class, use it to create assignments for multiple classes at the same time, and more. See the Microsoft Classroom site to learn more. - -School Data Sync (SDS) helps you import Student Information System (SIS) data into Office 365. It helps automate the process for importing and integrating SIS data that you can use with Office 365 and apps like Classroom and OneNote Class Notebooks. To learn more about School Data Sync (SDS) and the deployment methods available to you, see Overview of School Data Sync and Classroom. We recommend using comma separated value (CSV) files with SDS to synchronize SIS users with Office 365. However, SDS supports many other deployment options such as PowerSchool Sync, Clever Sync, and OneRoster CSV files. See the *For IT admins* section in [Get more info](#get-more-info) to learn more about these other deployment options. - -In this section of the walkthrough, we created a new education tenant and we need to add new users. To simplify this process, we will use sample SDS files to prepopulate our tenant with school data. We also need to turn on Microsoft Classroom to enable users to access the app. - -**Download sample school data** - -1. Go to the O365-EDU-Tools GitHub site. -2. Click the green **Clone or download** button to download the SDS sample files. - - **Figure 3** - Download the SDS sample files from GitHub - - ![Download the SDS sample files from GitHub](images/sds_github_downloadsampledata.png) - -3. In the **Clone with HTTPS** pop-up window, choose **Download ZIP** and note the location where you're saving the folder. -4. Go to the folder where you saved the .zip and unzip the files. -5. Open the **O365-EDU-Tools-master** folder and then open the **CSV Samples** subfolder. Confirm that you can see the following sample CSV files. - - **Figure 4** - Sample CSV files - - ![Use the sample CSV files](images/sds_sample_csvfiles.png) - - > [!NOTE] - > - The sample CSV files uses sample accounts and passwords. If you are using the sample files for testing, remember the accounts and their corresponding passwords. You may be asked to change the password during your first sign in. - > - If you are modifying the sample CSV files to use in your organization, change the accounts and passwords to match the user accounts and passwords in your organization. - > - If you are using CSV files from your existing production environment, see the detailed instructions in step 5 in the next section. - - To learn more about the CSV files that are required and the info you need to include in each file, see CSV files for School Data Sync. If you run into any issues, see School Data Sync errors and troubleshooting. - -**Turn on Classroom and use SDS to import data** - -1. Go to the Microsoft School Data Sync site. -2. Click **Sign in**. You will see the **Settings** option for **Manage School Data Sync and Classroom**. - - **Figure 5** - Settings for managing SDS and Classroom - - ![Settings for managing SDS and Classroom](images/sds_sds_and_classroom_off.png) - -3. Turn on **School Data Sync**. You will get a notification that it is turned on. Click **OK**. - - New menu options will appear on the left of the SDS portal. - - **Figure 6** - New menu options appear after SDS is turned on - - ![New menu options appear after SDS is turned on](images/sds_sds_on_newmenu_items.png) - -4. Turn on **Microsoft Classroom**. You will get a notification that Classroom is turned on. -5. Click **+ Add Profile** from the sync dashboard or from the menu on the left to start syncing school data. - - This opens up the new profile setup wizard within the main page. - - **Figure 7** - New SDS profile setup wizard - - ![New SDS profile setup wizard](images/sds_updated_addnewprofile.png) - -6. For the new profile, in the **Before you begin...** screen: - 1. Enter a name for your profile, such as *ContosoAcademySDSProfile*. - 2. Select a sync method for your profile. For this walkthrough, select **CSV Files**. - - Note that for any sync method that you choose, you can click the **View steps** link to get more information about the steps you need to take depending on the sync method of your choosing. - - 3. Click **Start**. - - **Figure 8** - Add a name and sync method for the new profile - - ![Add a name and sync method for the new profile](images/sds_updated_newprofile_name_syncmethod.png) - - -7. In the **Sync options** screen: - 1. Select the domain for the schools/sections. If you have more than one domain, make sure you select the domain that corresponds to the profile you're creating. - 2. In the **Select school and section properties** section, select the properties you want to sync. If you select additional properties, make sure you have these properties and values added in the CSV files. For the walkthrough, we're not changing the default values. These are: - - **School properties:** SIS ID, Name - - **Section properties:** SIS ID, School SIS ID, Section Name - 3. In the **Select new or existing users** section, select either **New Users** or **Existing Users** based on the scenaro that applies to you. - - Choose **New Users** if this is a brand new tenant and this is the first time that you're adding users. - - Choose the **New Users** option if you are using an unaltered version of the sample CSV files from [Download sample school data](#downloadcsvsamples) or if you created your own CSV files with new users. - - - Choose **Existing Users** if you already have a live production tenant, with teachers and students that already have active accounts in Office 365 (cloud only or synced from on-premise Active Directory). - - Using the **Existing Users** option, SDS will not attempt to create new users. Instead, it uses the identity matching options in the next section of the setup wizard to match the students and teachers in your CSV files to the user accounts that already exist in Azure. All additiional details for the students and teachers contained within the CSV files will be written as extension attributes on top of the already existing user objects. You can find more information about these settings on the main SDS deployment page for CSV-based deployments in How to deploy School Data Sync by using CSV files. - - 4. In the **Sync option for Section Group Display Name**, check the box if you want to allow teachers to overwrite the section names. - 5. In the **License Options** section, check the box to **Assign Microsoft Classroom licenses to teachers and students**. - 6. Click **Next**. - - **Figure 9** - Sync options for the new profile - - ![Specify sync options for the new SDS profile](images/sds_updated_newprofile_syncoptions_updated.png) - -8. In the **Teacher mapping** screen: - 1. Select the domain for the teachers. SDS uses this to match teachers from your source data to their existing accounts in Office 365/Azure Active Directory. In the walkthrough, the CSV files are our source data. - 2. In the **Select teacher properties** section, you can add optional teacher properties to sync. For this walkthrough, you don't have to change the default. - 3. In the **Teacher licenses** section, choose the SKU to assign licenses for teachers. For this walkthrough, choose **STANDARDWOFFPACK_FACULTY**. - 4. Click **Next**. - - **Figure 10** - Specify options for teacher mapping - - ![Specify options for teacher mapping](images/sds_updated_newprofile_teachermapping_updated.png) - -9. In the **Student mapping** screen: - 1. Select the domain for the students. SDS uses this to match students from your source data to their existing accounts in Office 365/Azure Active Directory. In the walkthrough, the CSV files are our source data. - 2. In the **Select student properties** section, you can add optional student properties to sync. For this walkthrough, you don't have to change the default. - 3. In the **Student licenses** section, choose the SKU to assign licenses for students. For this walkthrough, choose **STANDARDWOFFPACK_STUDENT**. - 4. Click **Next**. - - **Figure 11** - Specify options for student mapping - - ![Specify options for student mapping](images/sds_updated_newprofile_studentmapping_updated.png) - -10. You will see a page for your profile. The status might indicate that it's still being set up. - - In the profile **Review** page, review the summary and confirm that the values matches with the data you entered. - - **Figure 12** - Review the summary and confirm that it matches with the data you entered. - - ![Review the summary and confirm that it matches with the data you entered](images/sds_updated_newprofile_summary.png) - -11. After the profile name at the top, confirm that the status for your profile now says **Ready to sync**. - - **Figure 13** - New profile is ready to sync - - ![Confirm that the new profile is ready](images/sds_updated_newprofile_status_readytosync.png) - -11. On the profile page, below the profile name and profile status, there are four options: **Upload Files**, **Start Sync**, **Edit**, and **Delete**. Click **Upload Files** and then follow these steps: - 1. In the **Select data files to be uploaded** window, click **Add Files** and navigate to the directory where you saved the six CSV files required for data import. - 2. In the File Explorer window, choose all the files at the same time and then click **Open**. - 3. In the **Select data files to be uploaded** window, confirm that all six CSV files (School.csv, Section.csv, Student.csv, StudentEnrollment.csv, Teacher.csv, and TeacherRoster.csv) are listed and then click **Upload**. - 4. After all the files are successfully uploaded, click **OK**. -12. On the profile page, click **Start Sync** and then follow these steps: - 1. In the **Would you like to start sync for *Profile_Name?*** window, click **Start Sync**. *Profile_Name* should match the name you entered for your profile in the **Before you begin...** screen. - 2. Confirm that sync successfully started for the file and then click **OK**. - - > [!NOTE] - > Sync times, like file download times, can vary widely depending on when you start the sync, how much data you are syncing, the complexity of your data (such as the number of users, schools, and class enrollments), overall system/network load, and other factors. Two people who start a sync at the same time may not have their syncs complete at the same time. - > - > You can refresh the page to confirm that your profile synced successfully. - -That's it for school data. Next, we'll configure Store for Business. - -### 1.3 Configure Store for Business for app distribution -You'll need to configure Store for Business to accept the EULA and associate your Store account with Intune for Education by selecting Intune as the management tool for distributing apps. - -**Associate your Store account with Intune for Education** -1. Sign into Store for Business. -2. Accept the Store for Business Services Agreement. This will take you to the Store portal. - - **Figure 13** - Store for Business - - ![Sign into the Store for Business](images/wsfb_portal.png) - -3. In the Store for Business portal, select **Settings > Management tools** to go to the management tools page. - - **Figure 14** - Select management tools from the Settings dropdown - - ![Select management tools from the dropdown](images/wsfb_settings_management_tools.png) - -4. In the **Management tools** page, find **Microsoft Intune** on the list and click **Activate** to get Intune for Education ready for use with Store for Business. - - **Figure 15** - Intune is activated from the Store portal - - ![Activate Intune as the management tool](images/wsfb_portal_activate_intune.png) - -5. In the **Show offline-licensed apps** window, click **Yes**. This lets the school cache apps and their licenses to deploy within within the school's network. You can find more information about offline licensing in [Apps in the Store for Business](https://technet.microsoft.com/en-us/itpro/windows/manage/apps-in-windows-store-for-business). - -Your Store account is now linked to Intune for Education so let's set that up next. - -## 2. Use Intune for Education to manage groups, apps, and settings -Intune for Education is a streamlined device management solution for educational institutions that can be used to quickly set up and manage Windows 10 devices for your school. It provides a new streamlined UI with the enterprise readiness and resiliency of the Intune service. You can learn more about Intune for Education by reading the **Intune for Education documentation**. - -#### Example - Force a sync, set up Intune for Education, buy apps from the Store, and install the apps -In this walkthrough, we'll go through a sample scenario and walk you through the steps to: -- Force a sync in Intune for Education so that apps will appear in your catalog right away -- Quickly set up Intune for Education -- Use Intune for Education to buy apps from the Store for Business -- Use Intune for Education to install the apps for all users in your tenant - -Note that for verified education tenants, Microsoft automatically provisions your app catalog with these apps so you will see them appear on your Intune catalog even before you've bought any apps: -- Excel Mobile -- Fresh Paint -- Minecraft: Education Edition (trial license) -- OneNote -- PowerPoint Mobile -- Sway -- Word Mobile - - > [!NOTE] - > Apps that you own in Store for Business are automatically available in Intune for Education. Any changes you make to your purchases get reflected in Intune for Education. - -**Sync recently purchased apps** - -To sync your most recently purchased apps and have it appear in your catalog right away, force a Store sync. - -1. Log in to the Intune for Education console. -2. Select **Tenant Settings** to see the various settings that you can configure for your tenant. - - **Figure 16** - Select tenant settings - - ![Select tenant settings](images/i4e_tenant_settings_force_sync.png) - -3. Click the ***Edit** button to make edits to the tenant settings. - 1. In the **Others** settings group, locate the **Sync with store** setting and then click **On** to turn on sync with Store for Business. - 2. Click **Save** to save your changes. - - **Figure 17** - Update your tenant settings to turn on sync with Store - - ![Update your tenant settings to turn on sync with Store](images/i4e_tenantsettings_edit_syncwithstore_on.png) - -4. In the updated **Tenant Settings** page: - 1. Confirm that **Sync with store** now says **On** next to it. - 2. At the top of the page, click **Sync with Store now** to force a sync. - -**Set up Intune for Education** - -Intune for Education provides an Express Configuration option so you can get going right away. We'll use that option here. - -1. Log into the Intune for Education console. You will see the Intune for Education dashboard once you're logged in. - - **Figure 18** - Intune for Education dashboard - - ![Intune for Education dashboard](images/i4e_dashboard_latest.png) - -2. On the dashboard, click **Launch Express Configuration**, or select the **Express Configuration** option on the menu on the left. -3. In the **Welcome to Intune for Education** screen, click **Get started**. - - **Figure 19** - Choose the group - - ![Click Get Started to configure groups, apps, and settings](images/i4e_express_configuration_welcometoi4e.png) - -4. In the **Choose group** screen, select **All Users**. All apps and settings that we select during express setup will apply to this group. - - You can choose another group during this step, but note that your experience may vary from what we show in the walkthrough. - -5. The **Next** button will appear at the bottom of the screen after you select **All Users**. Click **Next**. - - > [!TIP] - > At the top of the screen, did you notice the **Choose group** button change to a green check mark? This means we are done with that step. If you change your mind or need to make changes, simply click on the button to go back to that step. Try it! - > - > **Figure 20** - Click on the buttons to go back to that step - > - > ![Click on the buttons to back to that step](images/i4e_expressconfiguration_choosebuttontogoback.png) - -6. In the **Choose apps** screen, you will see a selection of Web apps and Windows Store apps. You will also see a list of popular apps from each category. - - - Add or remove apps by clicking on them. A blue checkmark means the app is added and will be installed for all members of the group selected in the **Choose group** step. - - In this walkthrough, it's up to you to select the apps you choose to install. Just remember what they are so that later in the walkthrough you can verify that they were installed correctly on the device. - - > [!TIP] - > Web apps are pushed as links in the Windows Start menu under **All apps**. If you want apps to appear in Edge browser tabs, use the **Homepages** setting for Edge through Express Configuration or Manage Users and Devices. - - **Figure 21** - Choose the apps that you want to install for the group - - ![Choose apps to install for the group](images/i4e_expressconfiguration_chooseapps.png) - -7. When you're done choosing apps, click **Next** at the bottom of the screen. - - If you select Store for Business apps, you will see a notification that Intune for Education is getting these apps. - -8. In the **Choose settings** screen, we will set the settings to apply to the group. Click the reverse caret (downward-facing arrow) to expand the settings group and get more information about each setting in that settings group. - - **Figure 22** - Expand the settings group to get more details - - ![Expand the settings group to get more info](images/i4e_expressconfiguration_choosesettings.png) - -9. For this walkthrough, set the following settings: - - In the **Internet browser settings** group, change the **Do-Not-Track headers** setting to **Block**. - - In the **Device update settings** group, change the **Choose how to install updates** setting to **Auto install and reboot at scheduled time**, and then set the **Auto Install and Reboot Day** to **Friday** and the **Auto Install and Reboot Time** to **4 PM**. - - **Figure 23** - Set some additional settings - - ![Set some additional settings](images/i4e_expressconfiguration_choosesettings_additionalsettings.png) - -10. Click **Next**. In the **Review** screen, you will see a summary of the apps and settings you selected to apply. -11. Click **Save** to end express configuration. -12. You will see the **You're done!** screen which lets you choose one of two options. - - **Figure 24** - All done with Intune for Education express setup - - ![Done with Intune for Education express setup](images/i4e_expresssetup_alldone.png) - -13. Click **All done** or click the **X** on the upper-right corner of the screen to dismiss this screen and go back to the dashboard. - -**Add apps bought from Store for Business** -- **Example 1 - Minecraft: Education Edition** - - By default, education tenants automatically get trial licenses for Minecraft: Education Edition. However, if you would like to purchase Minecraft: Education Edition or want to learn more about volume licensing, see For IT administrators - get Minecraft: Education Edition. - -- **Example 2 - Free educational/reference apps** - - 1. In the Intune for Education console, click **Apps** from the menu on the left. - - **Figure 25** - Click on **Apps** to see the list of apps for your tenant - - ![Click Apps to see the list of apps for your tenant](images/i4e_dashboard_clickapps_latest.png) - - 2. In the **Store apps** section, click **+ New app**. This will take you to the Store for Business portal and you will already be signed in. - - **Figure 26** - Select the option to add a new Store app - - ![Select the option to add a new Store app](images/i4e_apps_storeapps_newappbutton.png) - - 3. In the Store for Business page, check some of the categories for suggested apps or search the Store for a free educational or reference app. Find ones that you haven't already installed during express setup for Intune for Education. - - For example, these apps are free: - - Duolingo - Learn Languages for Free - - Flashcards Pro - - Khan Academy - - My Study Life - - 4. Select the app you want to install. - 5. In the app's Store page, select the license type and then select **Get the app**. - 6. You should see a dialog that confirms your order. Click **Close**. - 7. In the app's Store page, select **Add to private store**. - 8. Repeat steps 3-7 to install another app. - 9. In the Store for Business portal, select **Manage > Inventory** and verify that the apps you purchased appear in your inventory. - - For example, if you bought Duolingo and Khan Academy, they will show up in your inventory along with the apps that Microsoft automatically provisioned for your education tenant. - - **Figure 27** - Apps inventory in Store for Business - - ![Apps inventory in Store for Business](images/wsfb_manage_inventory_annotated.png) - - In the **Private store** column of the **Inventory** page, the status for some apps will indicate that it's "In private store" while others will say "Not in private store". We won't go over this in the walkthrough, but you can learn more about this in [Distribute apps using your private store](https://technet.microsoft.com/en-us/itpro/windows/manage/distribute-apps-from-your-private-store). - - > [!NOTE] - > You'll see in the above screenshot that some apps say that add is in progress. Sync happens automatically, but it may take up to 24 hours for your organization's private store and 12 hours for Intune for Education to sync all your purchased apps. Let's force a sync to make this process happen faster. - -**Install apps for all users** - -Now that you've bought the apps, use Intune for Education to specify the group to install the apps for. Here, we'll show you how to install the apps you bought for all devices used by all users in your tenant. - -1. In the Intune for Education console, click the **Groups** option from the menu on the left. - - **Figure 28** - Groups page in Intune for Education - - ![Groups page in Intune for Education](images/i4e_groups.png) - -2. In the **Groups** page, select **All Users** to see the list of users. The list should match all the names we imported using SDS. - - > [!TIP] - > If you don't see the names, click the **Users** option in the taskbar at the top of the **All Users** page. - - **Figure 29** - List of all users in the tenant - - ![List of all users in the tenant](images/i4e_groups_allusers_list.png) - -3. In the taskbar at the top, select **Apps** and then click **Edit apps** to see a list of available apps. - - **Figure 30** - Edit apps to assign them to users - - ![Edit apps to assign them to users](images/i4e_groups_allusers_apps_edit.png) - -4. Select the apps you want to deploy to the group. A blue checkmark will appear next to the apps you select. - - **Figure 31** - Select the apps you want to deploy to the group - - ![Select the apps you want to deploy to the group](images/i4e_groups_allusers_apps_appstodeploy.png) - -5. Once you're done, click **Save** at the bottom of the page to deploy the selected apps to the group. -6. You'll be notified that app assignments are being updated. The **All Users** groups page will now include the apps you selected. - - **Figure 32** - Updated list of assigned apps - - ![Updated list of assigned apps](images/i4e_groups_allusers_apps_updatedlist.png) - -You're now done assigning apps to all users in your tenant. It's time to set up your Windows device(s) and check that your cloud infrastructure is correctly set up and your apps are being pushed to your devices from the cloud. - -## 3. Set up your Windows devices - -### 3.1 Set up devices using Set up School PCs or Windows OOBE -We recommend using the latest build of Windows 10 Creators Update (version 1703) on your Windows education devices. If you haven't done so already, [download and install the latest Windows 10 Creators Update image](#download-and-install-the-latest-windows-10-creators-update-image). - -To set up new Windows devices and enroll them to your education tenant, choose from one of these options: -- **Option 1: [Use the Set up School PCs app](#usesetupschoolpcs)** - You can use the app to create a setup file that you can use to set up your Windows 10 devices. -- **Option 2: [Go through Windows OOBE and join the device to Azure AD](#usewindowsoobandjoinaad)** - You can go through a typical Windows device setup or first-run experience to configure your device. - -**Option 1: Set up a device using the Set up School PCs app** - - > [!NOTE] - > The Set up School PCs app is coming soon! Until it's ready, follow the steps in this section to install a setup file (provisioning package) that we created for you. You still have to go through OOBE to join Wi-Fi and Azure AD, but you won't need these steps when the Set up School PCs app is available. - -**Prerequisite:** -- Copy the latest version of the education provisioning package file from the Microsoft Education System TAP Yammer group to a USB key. - -1. Boot up a new or reset Windows 10 device. -2. During Windows setup, at the **Let's start with region** screen, insert the USB key into your Windows device. -3. When the **You can eject your removable device** message appears on the screen, remove the USB key. -4. Complete the rest of the Windows device setup experience. -5. If you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired/Ethernet connection. -6. On the **Let's get you signed in** screen, enter one of the accounts that you set up for your education tenant. -7. Complete the rest of device setup and then reboot the device. - -> [!NOTE] -> **The following section on using the Set up School PCs app is preliminary and subject to change. The steps are based on a preliminary build of the app, which is still in development.** - -1. Launch the Set up School PCs app. - - **Figure 33** - Launch the Set up School PCs app - - ![Launch the Set up School PCs app](images/suspc_start.png) - -2. Click **Start**. -3. In the **Sign in to Office 365 or Azure Active Directory** page, click **Sign in**. If you don't sign in, you will not be able to configure access for guest sign-in, Take a Test, and Office installation. - - If you opt to sign in: - - 1. Choose the account from the list. If you don't see the account, you can add a work or school account to sign in the devices. - 2. Click **Next** once you've specified the account. - 3. If you added an account, you may be asked to provide the user account and password. You will get a notification to allow the app to access your account. This will give Set up School PCs permission to access Store for Business, read hidden memberships, sign you in and read your profile, and more. - 4. Click **Accept**. - - The account will show up as the account that Set up School PCs will use to connect the school PCs to the cloud. - - **Figure 34** - Verify that the account you selected shows up - - ![Verify that the account you selected shows up](images/suspc_account_signin.png) - - 5. Click **Next**. - -4. To allow the student PCs to automatically connect to your school's wireless network, in the **Select the school's wireless network** page: - 1. Select the school's Wi-Fi network from the list of available wireless networks or manually add a wireless network. - 2. Click **Next**. - -5. To assign a name to the student PCs, in the **Assign a name to these PCs** page: - 1. Add a name that Set up School PCs will use as a prefix to identify and easily manage the group of devices, apps, and other settings through your device management client. - - For example, if you add *ComputerLab* as the prefix, the device names will be *ComputerLab_random-string-of-numbers-and-letters*. The random string of numbers and letters ensure that all device names are unique. - - 2. Click **Next**. - -6. If you want to set up the Take a Test app and use it for taking quizzes and high-stakes assessments by some providers like Smarter Balanced, configure the settings in the **Set up Take a Test app** page. - 1. Enter the assessment URL. - 2. Check the options whether to allow keyboard text suggestions to appear, allow teachers to monitor online tests, or allow students to print the test so they can take it offline. You can select more none, or one or more of these options. - - If you set up Take a Test, this adds a **Take a Test** button on the student PC's sign-in screen. Windows will also lock down the student PC so that students can't access anything else while taking the test. - - **Figure 35** - Configure the Take a Test app - - ![Configure the Take a Test app](images/suspc_choosesettings_takeatest.png) - - 3. Click **Next** or **Skip** depending on whether you want to set up Take a Test. - -7. If you want to add Store for Business apps to the student PCs, you can select from the list of recommended apps in the **Add STEM and Makerspace apps to Student PCs** page. - 1. Select the apps that you want to add. You'll see a checkmark on apps that you select. - 2. Click **Next**. - - **Figure 36** - Select Store apps to add to student PCs - - ![Select Store apps to add to student PCs](images/suspc_choosesettings_apps.png) - -8. To specify other settings for the student PC, in the **Configure student PC settings** page: - - Select **Clean student PC** to remove pre-installed apps from the device manufacturer. - - Select **Enable local storage** to let students save files to the **Desktop** and **Documents** folder on the student PC. We don't recommend this option if the device will be part of a shared cart or lab. - - Select **Make the device 1:1** to optimize the device for use by a single student. Check this option if the device will not be part of a shared cart or lab. - - Select **Enable guest sign-in** to allow guests to use student PCs without a school account. For example, if the device will be in a library and you want other users (like visiting students or teachers) to be able to use the device, you can select this option. - - If you check **Enable guest sign-in**, this adds a **Guest** account button in the PC's sign-in screen to allow anyone to use the PC. - - - To change the default lock screen background or to use your school's custom lock screen background, click **Browse** to select a new lock screen background. - - **Figure 37** - Configure student PC settings - - ![Configure student PC settings](images/suspc_choosesettings_settings.png) - -9. When you're done configuring the student PC settings, click **Next**. - -10. In the **Review your settings** page, check that all the settings you configured appear correctly. - 1. If you need to change any of the settings, you can click on the blue links to go back to that page and make your changes. - - **Figure 38** - Review your settings and change them as needed - - ![Review your settings and change them as needed](images/suspc_setupfile_reviewsettings.png) - - 2. Click **Next**. - -11. In the **Save your settings** page: - 1. Insert a USB drive to save your settings and create a setup file on the USB drive. - 2. Set up School PCs will automatically detect the USB drive after it's inserted. Choose the USB drive from the list. - 3. Click **Save** to save the setup file to the USB drive. - - **Figure 39** - Select the USB drive and save the setup file - - ![Select the USB drive and save the setup file](images/suspc_setupfile_savesettings.png) - - 4. When the setup file is ready, you will see the name of the file and you can remove the USB drive. - - **Figure 40** - Setup file is ready - - ![Setup file is ready](images/suspc_ppkgready.png) - - 5. Click **Next** if you're done, or click **Save to another USB drive** to save the same setup file to another USB drive. - -12. Follow the instructions in the **Get the student PCs ready** page to start setting up the student PCs. - - **Figure 41** - Line up the student PCs and get them ready for setup - - ![Line up the student PCs and get them ready for setup](images/suspc_getpcsready.png) - -13. Click **Next**. -14. In the **Install the setup file on student PCs** page, follow the rest of the instructions for setting up the student PCs. - - Select **Yes, I want to start a new package** if you need to create a new provisioning package. Or, select **No, I'm done**. - - **Figure 42** - Install the setup file on the student PCs - - ![Install the setup file on the student PCs](images/suspc_installsetupfile.png) - - -**Option 2: Set up a device using Windows OOBE** -1. If you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired/Ethernet connection. -2. Go through the Windows device setup experience. On a new or reset device, this starts with the **Let's get you signed in** screen. - - **Figure 43** - Let's get you signed in - - ![Let's get you signed in](images/win10_oobe_letsgetyousignedin.png) - -3. Sign in using the user account and password that you set up for one of the users in your education tenant. Depending on the user password setting, you may be prompted to update the password. -4. Choose privacy settings for your device. Location, speech recognition, and diagnostics are all on by default. You can turn off a setting based on your privacy preferences. Click **Accept** to go through the rest of device setup. - - **Figure 44** - Windows setup is complete - - ![Windows setup is complete](images/win10_oobe_complete.png) - -### 3.2 Verify correct device setup -Verify that the device is set up correctly and boots without any issues. - -**Verify that the device was set up correctly** -1. Confirm that the Start menu contains a simple configuration. -2. Confirm that the Store and built-in apps are installed and working. The apps pushed down from Intune for Education will appear under **Recently added**. Note that it may take some time before some apps are pushed down to your device from Intune for Education. Check again later if you don't see some of the apps you provisioned for the user. - - **Figure 45** - Apps list contains the apps provisioned for the user - - ![Apps list contains the apps provisioned for the user](images/win10_start_checkapps.png) - -### 3.3 Verify the device is Azure AD joined -Let's now verify that the device is joined to your organization's Azure AD and shows up as being managed in Microsoft Intune for Education. - -**Verify if the device is joined to Azure AD** -1. Log in to the Intune for Education console. -2. Select **Groups** and select **All Devices**. -3. In the **All Devices** page, see the list of devices and verify that the device you're signed into appears on the list. - - **Figure 46** - List of all managed devices - - ![Verify that the device is managed in Intune for Education](images/i4e_groups_alldevices_aadjoined_list.png) - -4. On the Windows education device, click **Start** and go to **Settings**. -5. In the **Windows Settings** page, click **Accounts**. Select the **Access work or school** option on the left of the account info page. -6. In the **Access work or school** page, confirm that it says your device is connected to your organization's Azure AD. - - **Figure 47** - Confirm that the Windows device is joined to Azure AD - - ![Confirm that the Windows device is joined to Azure AD](images/win10_settings_accounts_aadjoined_confirmation.png) - -**That's it! You're done!** You've completed basic cloud setup for your education tenant and confirmed that your education devices and users are managed all in the cloud. - - -## 4. Finishing setup and other tasks - -### 4.1 Update group settings in Intune for Education -If you need to make changes or updates to any of the apps or settings for the group(s), follow these steps. - -1. Log in to the Intune for Education console. -2. Click **Groups** and then choose **Settings** in the taskbar at the top of the page. -3. You will see the same settings groups that you saw in express setup for Intune for Education as well as other settings categories such as **Windows Defender settings**, **Device sharing** and so on. - - **Figure 48** - Use the **Settings** option to make app or device settings changes - - ![Use the Settings option to make app and settings changes](images/i4e_groups_settings_changes.png) - -4. Click **Save** or **Discard changes**. - -### 4.2 Configure Azure settings -After completing the basic setup for your cloud infrastructure and confirming that it is up and running, it's time to prepare for additional devices to be added and enable capabilities for the user to use. - -#### Enable many devices to be added by a single person -When a device is owned by the school, you may need to have a single persion adding many devices to your cloud infrastructure. - -Follow the steps in this section to enable a single person to add many devices to your cloud infrastructure. - -1. Sign in to the Office 365 admin center. -2. Click **Admin centers** and select **Azure AD** to go to the Azure portal. -3. Configure the device settings for the school's Active Directory. From the new Azure portal, https://portal.azure.com, select **Azure Active Directory > Users and groups > Device settings**. - - **Figure 49** - Device settings in the new Azure portal - - ![Configure device settings in the new Azure portal](images/azure_newportal_usersandgroups_devicesettings.png) - - - -4. Find the setting **Maximum number of devices per user** and change the value to **Unlimited**. -5. Click **Save** to update device settings. - -#### Enable roaming settings for users -When students move from using one device to another, they may need to have their settings roam with them and be made available on other devices. - -Follow the steps in this section to ensure that settings for the each user follow them when they move from one device to another. - -1. Sign in to the Office 365 admin center. -2. Click **Admin centers** and select **Azure AD** to go to the Azure portal. -3. Configure the device settings for the school's Active Directory. From the new Azure portal, https://portal.azure.com, select **Azure Active Directory > Users and groups > Device settings**. -4. Find the setting **Users may sync settings and enterprise app data** and change the value to **All**. - - **Figure 50** - Enable settings to roam with users - - ![Enable settings to roam with users](images/azure_usersandgroups_devicesettings_ers.png) - -5. Click **Save** to update device settings. - -### 4.3 Complete Office 365 Education setup -Now that your basic cloud infrastructure is up and running, it's time to complete the rest of the Office 365 Education setup. You can find detailed information about completing Office 365 setup, services and applications, troubleshooting, and more by reading the Office 365 admin documentation. - -### 4.4 Add more users -After your cloud infrastructure is set up and you have a device management strategy in place, you may need to add more users and you want the same policies to apply to these users. - -You can add new users to your tenant simply by adding them to the Office 365 groups. Adding new users to Office 365 groups automatically adds them to the corresponding groups in Intune. - -See Add users to Office 365 to learn more. Once you're done adding new users, go to the Intune for Education console and verify that the same users were added to the Intune for Education groups as well. - -### 4.5 Connect other devices to your cloud infrastructure -Adding a new device to your cloud-based tenant is easy. For new devices, you can follow the steps in [3. Set up devices](#3-set-up-your-windows-devices). For other devices, such as those personally-owned by teachers who need to connect to the school network to access work or school resources (BYOD), you can follow the steps in this section to get these devices connected. - - > [!NOTE] - > These steps enable users to get access to the organization's resources, but it also gives the organization some control over the device. - -**To connect a personal device to your work or school** -1. On your Windows device, go to **Settings > Accounts**. -2. Select **Access work or school** and then click **Connect** in the **Connect to work or school** page. -3. In the **Set up a work or school account** window, click **Join this device to Azure Active Directory** to add an Azure AD account to the device. -4. In the **Let's get you signed in** window, enter the credentials for the account and then click **Sign in** to authenticate the user. -5. Depending on the organization's policy, you may be asked to update the password. -6. Verify the details to make sure you're connecting to the right organization and then click **Join**. -7. You will see a confirmation window that says the device is now connected to the organization. Click **Done**. -8. The **Connect to work or school** window will refresh and will now include an entry that shows you're connected to your organization's Azure AD. This means the device is now registered in Azure AD and enrolled in MDM and the account should have access to the organization's resources. -9. You can confirm that the new device and user are showing up as Intune-managed by going to the Intune management portal and following the steps in [3.3 Verify the device is Azure AD joined](#33-verify-the-device-is-azure-ad-joined). It may take several minutes before the new device shows up so check again later. - -### 4.5 Set up Classroom - -#### Tasks for IT administrator -School IT administrators can find more support documents about Microsoft Classroom by visiting https://aka.ms/classroomsupport. - -To verify that Classroom is set up properly, we recommend going through these tasks: -- Personalize Classroom -- Set up the class notebook -- Check the calendar - -#### Tasks for teachers and students -Teachers and students can find one-time setup instructions for Microsoft Classroom, info on how to use it, and other resources in Get Started with Microsoft Classroom. - -## Download and install the latest Windows 10 Creators Update image -To evaluate the full Microsoft Education System experience, we recommend using the latest Windows 10 Creators Update (version 1703) image on your Windows devices. - -### Download the latest Windows 10 image -1. Go to the Windows Server and System Center Connect site and sign in. - - > [!NOTE] - > If you are part of the TAP program and don't have access to the Connect site, contact your Microsoft representative. - -2. Go through the list of available downloads and select the latest Windows 10 Creators Update build. - - **Figure 51** - Sample download entry for the latest Windows 10 build - - ![Sample download entry for the latest Windows 10 build on Connect](images/connect_download_entry.jpg) - -3. Download the .iso for the Windows edition that you need. - - For example, the Windows 10 Education .iso will have a file name in this format: "buildnumber"."majorversion"."minorversion".RS_PRERELEASE_EDUCATION_OEMRET_X64FRE_EN-US.ISO. - -### Create a bootable Windows 10 USB key -Now that you have the latest Windows 10 Creators Update .iso from Connect, we recommend using the Windows USB/DVD Download Tool to quickly create a bootable Windows 10 USB key. - -**To download and install the Windows USB/DVD Download Tool** -1. Follow the instructions in the Windows USB/DVD Download Tool Download Center page to download and install the tool on your development workstation. - - > [!NOTE] - > In case it's hard to see, the link to tool download page is Windows USB/DVD Download Tool from CodePlex. - -2. Run the Windows USB/DVD Download Tool to create a bootable Windows 10 USB key. - - The source file must point to the path of the Windows 10 .iso file that you downloaded from Connect. - - Select USB device to create a copy on a USB key/flash drive. Make sure you select the USB device from the dropdown list. - -### Install the Windows 10 Creators Update image -Now that you have a bootable Windows 10 USB key, use it to install the image on your Windows 10 education devices. - -On the target device: -1. Hold down the Shift key and choose **Restart** from the **Power** menu. -2. When prompted, choose **Use a device**. -3. Choose **USB drive or similar option** depending on the UEFI implementation on the target device. -4. Boot off of the USB key on the target device and go through the device setup process. Choose **Custom: Install Windows only (advanced)**. -5. Delete all partitions and click **Next**. - -## Get more info - -### For IT admins -To learn more about the services and tools mentioned in this walkthrough, and learn what other tasks you can do, follow these links: -- Working with Store for Business - education scenarios -- *Resources for anyone who uses Office 365* and *Resources for admins* in Get started with Office 365 Education -- School Data Sync - - School Data Sync and Classroom introductory video - - Deployment using CSV files: How to deploy School Data Sync by using CSV files and CSV files for School Data Sync - - Deployment using PowerSchool Sync: How to deploy School Data Sync by using PowerSchool Sync and School Data Sync required attributes for PowerSchool Sync - - Deployment using Clever Sync: How to deploy School Data Sync by using Clever Sync and School Data Sync required attributes for Clever sync - - Deployment using OneRoster CSV files: How to deploy School Data Sync by using OneRoster CSV files - -### For teachers -Whether it's in the classroom, getting the most out of your devices, or learning some of the cool things you can do, we've got teachers covered. Follow these links for more info: -- [Microsoft Educator Community](https://education.microsoft.com/) -- *Resources for anyone who uses Office 365* in Get started with Office 365 Education -- Windows 10 online resources for teachers - -### For students -If you're a student, follow these links to get find out what resources and services are available to you: -- Student resources - -## Related topics - -[Windows 10 for Education](index.md) diff --git a/education/get-started/get-started-microsoft-education-system-tap.md b/education/get-started/get-started-microsoft-education-system-tap.md deleted file mode 100644 index 986e1eeaf7..0000000000 --- a/education/get-started/get-started-microsoft-education-system-tap.md +++ /dev/null @@ -1,803 +0,0 @@ ---- -title: Deploy and manage a full cloud IT solution using the Microsoft Education System -description: Learn how to use the new Microsoft Education System to set up a cloud infrastructure for your school, acquire devices and apps, and configure and deploy policies to your devices. -keywords: education, Microsoft Education System, MSES, full cloud IT solution, school, deploy, setup, manage, Windows, Intune for Education, Office 365, Store -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: edu -author: CelesteDG ---- - -# Get started: Deploy and manage a full cloud IT solution with Microsoft Education - -![Learn how to deploy and manage a cloud solution with MSES!](images/mses_getstarted_banner.png) - -**Applies to:** - -- Office 365 Education, Microsoft Classroom, School Data Sync, Intune for Education, Store for Business, Set up School PCs, Windows 10 - -Hello, IT administrators! In this walkthrough, we'll show you how you can quickly and easily use the new Microsoft Education system, consisting of new and existing cloud services and tools, to implement a full IT cloud solution for your school. - -## What is the Microsoft Education System? -**Microsoft Education System (MSES)** consists of these new and existing services and tools from Microsoft: -- **Intune for Education** for simple set up, control, and management of the resources for your school including apps, devices, and settings -- **Office 365 Education** provides online apps for work from anywhere and desktop apps for advanced functionality, built for working together and available across devices, and it's free for schools, teachers, and students - - **Microsoft Classroom** allows teachers to create classes, assignments, class calendars, conversations, and more, and **School Data Sync (SDS)** to manage your school data - - **OneNote Class Notebook** to organize course content, create and deliver interactive lessons to some or all students, collaborate and provide private feedback to individual students, and connect with major LMS and SIS partners for assignment workflow -- **Learning Tools** are moving beyond the OneNote desktop app and is now available in Office Lens, OneNote Online, Word Online, and Word desktop -- **Whiteboard** to create interactive lessons on the big screen, share and collaborate real-time by connecting to Class Notebook and Classroom -- **Windows 10 Creators Update** which brings 3D for everyone and other new and updated Windows features -- **Minecraft: Education Edition** which provides an open and immersive environment to promote creativity, collaboration, and problem-solving - -With the new Microsoft Education System, schools can: -- **Use affordable devices and simple setup** - Boost creativity and get started instantly with Windows 10 devices that support Windows Ink. Set up devices in minutes and stay in control with the new Intune for Education. -- **Collaborate in a modern classroom** - Help students become career-ready with Office apps like Word, Excel, PowerPoint, and OneNote. Increase comprehension and outcomes with the most advanced teaching apps like integrated Learning Tools. -- **Go beyond the browser with inspiring apps for classroom learning** - Inspire with Minecraft: Education Edition and innovative apps from the Store. - -Go to the Microsoft Education site to learn more about Microsoft Education System. See How to buy to learn about pricing and purchasing options for schools, students, and teachers as well as academic pricing and offers for qualified K-12 and higher education institutions. - -## What we're doing -In this walkthrough, we'll show you the basics on how to: -- Acquire an Office 365 education domain -- Import school student, teacher, and class data through School Data Sync (SDS) -- Manage app and settings deployment with Intune for Education -- Acquire additional apps in Store for Business -- Use the Set up School PCs app to quickly set up and provision your Windows education devices -- Log in and use the device - -This diagram shows a high-level view of what we cover in this walkthrough. The numbers correspond to the sections in the walkthrough and roughly correspond to the flow of the overall process, but note that not all sections are shown in the diagram. - -![Deploy and manage a full cloud IT solution using MSES](images/mses_getstarted_workflow_e2e.png) - -## Prerequisites -Here's a few a tasks you need to complete before you start the walkthrough: -- [Download and install the latest Windows 10 Creators Update image](#download-and-install-the-latest-windows-10-creators-update-image). - - This process takes a while so we recommend that you start this task before setting up your cloud infrastructure. - -- Open an InPrivate session on your browser. - - > [!IMPORTANT] - > **This document is for internal use only**. To get started, click on this link: https://aka.ms/intuneforedutrial - -## 1. Set up your cloud infrastructure -In the following sections, we'll walk you through the process of setting up a basic cloud infrastructure for your school. - -### 1.1 Set up your Office 365 Education tenant -Schools can use Office 365 to save time and be more productive. Built with powerful tools and accessible from any device, setting it up is the first step in getting your school to the cloud. - -**To set up Office 365** -1. Create an account and a user ID and password to use to sign into your account. - - **Figure 1** - Office 365 account creation - - ![Create an Office 365 account](images/o365_createaccount.png) - -2. Save your sign-in info so you can use it to sign into https://portal.office.com (the sign-in page). Click **You're ready to go...** -3. In the **Verify eligibility for Microsoft Office 365 Education** screen: - 1. In the **welcome** screen, click **Next**. - 2. In the **type a domain name** screen, click **I'll verify later** and then click **Yes** on the confirmation window that pops up. -4. Once the confirmation window goes away, you should see the Office 365 admin center. - - **Figure 2** - Office 365 admin center - - ![Office 365 admin center](images/o365_admincenter_welcome.png) - -5. **Optional**. On the **Welcome to the new Office 365 admin center** pop-up window, click **Next** to get a brief tour of the admin center. - -As part of setting up a basic cloud infrastructure, you don't need to complete the rest of the Office 365 Education setup so we will skip the rest of setup for now and start importing school data. You can pick up where you left off with Office 365 Education setup once you've completed the rest of the steps in the walkthrough. See [4.2 Complete Office 365 Education setup](#42-complete-office-365-education-setup) for info. - -### 1.2 Turn on Classroom and use SDS to import SIS data -Teachers and students can use Microsoft Classroom to manage all classses and assignment workflows. Teachers can use it to create a class notebook for everyone in the class, use it to create assignments for multiple classes at the same time, and more. See the Microsoft Classroom site to learn more. - -School Data Sync (SDS) helps you import Student Information System (SIS) data into Office 365. It helps automate the process for importing and integrating SIS data that you can use with Office 365 and apps like Classroom and OneNote Class Notebooks. To learn more about School Data Sync (SDS) and the deployment methods available to you, see Overview of School Data Sync and Classroom. We recommend using comma separated value (CSV) files with SDS to synchronize SIS users with Office 365. However, SDS supports many other deployment options such as PowerSchool Sync, Clever Sync, and OneRoster CSV files. See the *For IT admins* section in [Get more info](#get-more-info) to learn more about these other deployment options. - -In this section of the walkthrough, we created a new education tenant and we need to add new users. To simplify this process, we will use sample SDS files to prepopulate our tenant with school data. We also need to turn on Microsoft Classroom to enable users to access the app. - -**Download sample school data** - -1. Go to the O365-EDU-Tools GitHub site. -2. Click the green **Clone or download** button to download the SDS sample files. - - **Figure 3** - Download the SDS sample files from GitHub - - ![Download the SDS sample files from GitHub](images/sds_github_downloadsampledata.png) - -3. In the **Clone with HTTPS** pop-up window, choose **Download ZIP** and note the location where you're saving the folder. -4. Go to the folder where you saved the .zip and unzip the files. -5. Open the **O365-EDU-Tools-master** folder and then open the **CSV Samples** subfolder. Confirm that you can see the following sample CSV files. - - **Figure 4** - Sample CSV files - - ![Use the sample CSV files](images/sds_sample_csvfiles.png) - - > [!NOTE] - > - The sample CSV files uses sample accounts and passwords. If you are using the sample files for testing, remember the accounts and their corresponding passwords. You may be asked to change the password during your first sign in. - > - If you are modifying the sample CSV files to use in your organization, change the accounts and passwords to match the user accounts and passwords in your organization. - > - If you are using CSV files from your existing production environment, see the detailed instructions in step 5 in the next section. - - To learn more about the CSV files that are required and the info you need to include in each file, see CSV files for School Data Sync. If you run into any issues, see School Data Sync errors and troubleshooting. - -**Turn on Classroom and use SDS to import data** - -1. Go to the Microsoft School Data Sync site. -2. Click **Sign in**. You will see the **Settings** option for **Manage School Data Sync and Classroom**. - - **Figure 5** - Settings for managing SDS and Classroom - - ![Settings for managing SDS and Classroom](images/sds_sds_and_classroom_off.png) - -3. Turn on **School Data Sync**. You will get a notification that it is turned on. Click **OK**. - - New menu options will appear on the left of the SDS portal. - - **Figure 6** - New menu options appear after SDS is turned on - - ![New menu options appear after SDS is turned on](images/sds_sds_on_newmenu_items.png) - -4. Turn on **Microsoft Classroom**. You will get a notification that Classroom is turned on. -5. Click **+ Add Profile** from the sync dashboard or from the menu on the left to start syncing school data. - - This opens up the new profile setup wizard within the main page. - - **Figure 7** - New SDS profile setup wizard - - ![New SDS profile setup wizard](images/sds_updated_addnewprofile.png) - -6. For the new profile, in the **Before you begin...** screen: - 1. Enter a name for your profile, such as *ContosoAcademySDSProfile*. - 2. Select a sync method for your profile. For this walkthrough, select **CSV Files**. - - Note that for any sync method that you choose, you can click the **View steps** link to get more information about the steps you need to take depending on the sync method of your choosing. - - 3. Click **Start**. - - **Figure 8** - Add a name and sync method for the new profile - - ![Add a name and sync method for the new profile](images/sds_updated_newprofile_name_syncmethod.png) - - -7. In the **Sync options** screen: - 1. Select the domain for the schools/sections. If you have more than one domain, make sure you select the domain that corresponds to the profile you're creating. - 2. In the **Select school and section properties** section, select the properties you want to sync. If you select additional properties, make sure you have these properties and values added in the CSV files. For the walkthrough, we're not changing the default values. These are: - - **School properties:** SIS ID, Name - - **Section properties:** SIS ID, School SIS ID, Section Name - 3. In the **Select new or existing users** section, select either **New Users** or **Existing Users** based on the scenaro that applies to you. - - Choose **New Users** if this is a brand new tenant and this is the first time that you're adding users. - - Choose the **New Users** option if you are using an unaltered version of the sample CSV files from [Download sample school data](#downloadcsvsamples) or if you created your own CSV files with new users. - - - Choose **Existing Users** if you already have a live production tenant, with teachers and students that already have active accounts in Office 365 (cloud only or synced from on-premise Active Directory). - - Using the **Existing Users** option, SDS will not attempt to create new users. Instead, it uses the identity matching options in the next section of the setup wizard to match the students and teachers in your CSV files to the user accounts that already exist in Azure. All additiional details for the students and teachers contained within the CSV files will be written as extension attributes on top of the already existing user objects. You can find more information about these settings on the main SDS deployment page for CSV-based deployments in How to deploy School Data Sync by using CSV files. - - 4. In the **Sync option for Section Group Display Name**, check the box if you want to allow teachers to overwrite the section names. - 5. In the **License Options** section, check the box to **Assign Microsoft Classroom licenses to teachers and students**. - 6. Click **Next**. - - **Figure 9** - Sync options for the new profile - - ![Specify sync options for the new SDS profile](images/sds_updated_newprofile_syncoptions_updated.png) - -8. In the **Teacher mapping** screen: - 1. Select the domain for the teachers. SDS uses this to match teachers from your source data to their existing accounts in Office 365/Azure Active Directory. In the walkthrough, the CSV files are our source data. - 2. In the **Select teacher properties** section, you can add optional teacher properties to sync. For this walkthrough, you don't have to change the default. - 3. In the **Teacher licenses** section, choose the SKU to assign licenses for teachers. For this walkthrough, choose **STANDARDWOFFPACK_FACULTY**. - 4. Click **Next**. - - **Figure 10** - Specify options for teacher mapping - - ![Specify options for teacher mapping](images/sds_updated_newprofile_teachermapping_updated.png) - -9. In the **Student mapping** screen: - 1. Select the domain for the students. SDS uses this to match students from your source data to their existing accounts in Office 365/Azure Active Directory. In the walkthrough, the CSV files are our source data. - 2. In the **Select student properties** section, you can add optional student properties to sync. For this walkthrough, you don't have to change the default. - 3. In the **Student licenses** section, choose the SKU to assign licenses for students. For this walkthrough, choose **STANDARDWOFFPACK_STUDENT**. - 4. Click **Next**. - - **Figure 11** - Specify options for student mapping - - ![Specify options for student mapping](images/sds_updated_newprofile_studentmapping_updated.png) - -10. You will see a page for your profile. The status might indicate that it's still being set up. - - In the profile **Review** page, review the summary and confirm that the values matches with the data you entered. - - **Figure 12** - Review the summary and confirm that it matches with the data you entered. - - ![Review the summary and confirm that it matches with the data you entered](images/sds_updated_newprofile_summary.png) - -11. After the profile name at the top, confirm that the status for your profile now says **Ready to sync**. - - **Figure 13** - New profile is ready to sync - - ![Confirm that the new profile is ready](images/sds_updated_newprofile_status_readytosync.png) - -11. On the profile page, below the profile name and profile status, there are four options: **Upload Files**, **Start Sync**, **Edit**, and **Delete**. Click **Upload Files** and then follow these steps: - 1. In the **Select data files to be uploaded** window, click **Add Files** and navigate to the directory where you saved the six CSV files required for data import. - 2. In the File Explorer window, choose all the files at the same time and then click **Open**. - 3. In the **Select data files to be uploaded** window, confirm that all six CSV files (School.csv, Section.csv, Student.csv, StudentEnrollment.csv, Teacher.csv, and TeacherRoster.csv) are listed and then click **Upload**. - 4. After all the files are successfully uploaded, click **OK**. -12. On the profile page, click **Start Sync** and then follow these steps: - 1. In the **Would you like to start sync for *Profile_Name?*** window, click **Start Sync**. *Profile_Name* should match the name you entered for your profile in the **Before you begin...** screen. - 2. Confirm that sync successfully started for the file and then click **OK**. - - > [!NOTE] - > Sync times, like file download times, can vary widely depending on when you start the sync, how much data you are syncing, the complexity of your data (such as the number of users, schools, and class enrollments), overall system/network load, and other factors. Two people who start a sync at the same time may not have their syncs complete at the same time. - > - > You can refresh the page to confirm that your profile synced successfully. - -That's it for school data. Next, we'll configure Store for Business. - -### 1.3 Configure Store for Business for app distribution -You'll need to configure Store for Business to accept the EULA and associate your Store account with Intune for Education by selecting Intune as the management tool for distributing apps. - -**Associate your Store account with Intune for Education** -1. Sign into Store for Business. -2. Accept the Store for Business Services Agreement. This will take you to the Store portal. - - **Figure 13** - Store for Business - - ![Sign into the Store for Business](images/wsfb_portal.png) - -3. In the Store for Business portal, select **Settings > Management tools** to go to the management tools page. - - **Figure 14** - Select management tools from the Settings dropdown - - ![Select management tools from the dropdown](images/wsfb_settings_management_tools.png) - -4. In the **Management tools** page, find **Microsoft Intune** on the list and click **Activate** to get Intune for Education ready for use with Store for Business. - - **Figure 15** - Intune is activated from the Store portal - - ![Activate Intune as the management tool](images/wsfb_portal_activate_intune.png) - -5. In the **Show offline-licensed apps** window, click **Yes**. This lets the school cache apps and their licenses to deploy within within the school's network. You can find more information about offline licensing in [Apps in the Store for Business](https://technet.microsoft.com/en-us/itpro/windows/manage/apps-in-windows-store-for-business). - -Your Store account is now linked to Intune for Education so let's set that up next. - -## 2. Use Intune for Education to manage groups, apps, and settings -Intune for Education is a streamlined device management solution for educational institutions that can be used to quickly set up and manage Windows 10 devices for your school. It provides a new streamlined UI with the enterprise readiness and resiliency of the Intune service. You can learn more about Intune for Education by reading the **Intune for Education documentation**. - -#### Example - Force a sync, set up Intune for Education, buy apps from the Store, and install the apps -In this walkthrough, we'll go through a sample scenario and walk you through the steps to: -- Force a sync in Intune for Education so that apps will appear in your catalog right away -- Quickly set up Intune for Education -- Use Intune for Education to buy apps from the Store for Business -- Use Intune for Education to install the apps for all users in your tenant - -Note that for verified education tenants, Microsoft automatically provisions your app catalog with these apps so you will see them appear on your Intune catalog even before you've bought any apps: -- Excel Mobile -- Fresh Paint -- Minecraft: Education Edition (trial license) -- OneNote -- PowerPoint Mobile -- Sway -- Word Mobile - - > [!NOTE] - > Apps that you own in Store for Business are automatically available in Intune for Education. Any changes you make to your purchases get reflected in Intune for Education. - -**Sync recently purchased apps** - -To sync your most recently purchased apps and have it appear in your catalog right away, force a Store sync. - -1. Log in to the Intune for Education console. -2. Select **Tenant Settings** to see the various settings that you can configure for your tenant. - - **Figure 16** - Select tenant settings - - ![Select tenant settings](images/i4e_tenant_settings_force_sync.png) - -3. Click the ***Edit** button to make edits to the tenant settings. - 1. In the **Others** settings group, locate the **Sync with store** setting and then click **On** to turn on sync with Store for Business. - 2. Click **Save** to save your changes. - - **Figure 17** - Update your tenant settings to turn on sync with Store - - ![Update your tenant settings to turn on sync with Store](images/i4e_tenantsettings_edit_syncwithstore_on.png) - -4. In the updated **Tenant Settings** page: - 1. Confirm that **Sync with store** now says **On** next to it. - 2. At the top of the page, click **Sync with Store now** to force a sync. - -**Set up Intune for Education** - -Intune for Education provides an Express Configuration option so you can get going right away. We'll use that option here. - -1. Log into the Intune for Education console. You will see the Intune for Education dashboard once you're logged in. - - **Figure 18** - Intune for Education dashboard - - ![Intune for Education dashboard](images/i4e_dashboard_latest.png) - -2. On the dashboard, click **Launch Express Configuration**, or select the **Express Configuration** option on the menu on the left. -3. In the **Welcome to Intune for Education** screen, click **Get started**. - - **Figure 19** - Choose the group - - ![Click Get Started to configure groups, apps, and settings](images/i4e_express_configuration_welcometoi4e.png) - -4. In the **Choose group** screen, select **All Users**. All apps and settings that we select during express setup will apply to this group. - - You can choose another group during this step, but note that your experience may vary from what we show in the walkthrough. - -5. The **Next** button will appear at the bottom of the screen after you select **All Users**. Click **Next**. - - > [!TIP] - > At the top of the screen, did you notice the **Choose group** button change to a green check mark? This means we are done with that step. If you change your mind or need to make changes, simply click on the button to go back to that step. Try it! - > - > **Figure 20** - Click on the buttons to go back to that step - > - > ![Click on the buttons to back to that step](images/i4e_expressconfiguration_choosebuttontogoback.png) - -6. In the **Choose apps** screen, you will see a selection of Web apps and Windows Store apps. You will also see a list of popular apps from each category. - - - Add or remove apps by clicking on them. A blue checkmark means the app is added and will be installed for all members of the group selected in the **Choose group** step. - - In this walkthrough, it's up to you to select the apps you choose to install. Just remember what they are so that later in the walkthrough you can verify that they were installed correctly on the device. - - > [!TIP] - > Web apps are pushed as links in the Windows Start menu under **All apps**. If you want apps to appear in Edge browser tabs, use the **Homepages** setting for Edge through Express Configuration or Manage Users and Devices. - - **Figure 21** - Choose the apps that you want to install for the group - - ![Choose apps to install for the group](images/i4e_expressconfiguration_chooseapps.png) - -7. When you're done choosing apps, click **Next** at the bottom of the screen. - - If you select Store for Business apps, you will see a notification that Intune for Education is getting these apps. - -8. In the **Choose settings** screen, we will set the settings to apply to the group. Click the reverse caret (downward-facing arrow) to expand the settings group and get more information about each setting in that settings group. - - **Figure 22** - Expand the settings group to get more details - - ![Expand the settings group to get more info](images/i4e_expressconfiguration_choosesettings.png) - -9. For this walkthrough, set the following settings: - - In the **Internet browser settings** group, change the **Do-Not-Track headers** setting to **Block**. - - In the **Device update settings** group, change the **Choose how to install updates** setting to **Auto install and reboot at scheduled time**, and then set the **Auto Install and Reboot Day** to **Friday** and the **Auto Install and Reboot Time** to **4 PM**. - - **Figure 23** - Set some additional settings - - ![Set some additional settings](images/i4e_expressconfiguration_choosesettings_additionalsettings.png) - -10. Click **Next**. In the **Review** screen, you will see a summary of the apps and settings you selected to apply. -11. Click **Save** to end express configuration. -12. You will see the **You're done!** screen which lets you choose one of two options. - - **Figure 24** - All done with Intune for Education express setup - - ![Done with Intune for Education express setup](images/i4e_expresssetup_alldone.png) - -13. Click **All done** or click the **X** on the upper-right corner of the screen to dismiss this screen and go back to the dashboard. - -**Add apps bought from Store for Business** -- **Example 1 - Minecraft: Education Edition** - - By default, education tenants automatically get trial licenses for Minecraft: Education Edition. However, if you would like to purchase Minecraft: Education Edition or want to learn more about volume licensing, see For IT administrators - get Minecraft: Education Edition. - -- **Example 2 - Free educational/reference apps** - - 1. In the Intune for Education console, click **Apps** from the menu on the left. - - **Figure 25** - Click on **Apps** to see the list of apps for your tenant - - ![Click Apps to see the list of apps for your tenant](images/i4e_dashboard_clickapps_latest.png) - - 2. In the **Store apps** section, click **+ New app**. This will take you to the Store for Business portal and you will already be signed in. - - **Figure 26** - Select the option to add a new Store app - - ![Select the option to add a new Store app](images/i4e_apps_storeapps_newappbutton.png) - - 3. In the Store for Business page, check some of the categories for suggested apps or search the Store for a free educational or reference app. Find ones that you haven't already installed during express setup for Intune for Education. - - For example, these apps are free: - - Duolingo - Learn Languages for Free - - Flashcards Pro - - Khan Academy - - My Study Life - - 4. Select the app you want to install. - 5. In the app's Store page, select the license type and then select **Get the app**. - 6. You should see a dialog that confirms your order. Click **Close**. - 7. In the app's Store page, select **Add to private store**. - 8. Repeat steps 3-7 to install another app. - 9. In the Store for Business portal, select **Manage > Inventory** and verify that the apps you purchased appear in your inventory. - - For example, if you bought Duolingo and Khan Academy, they will show up in your inventory along with the apps that Microsoft automatically provisioned for your education tenant. - - **Figure 27** - Apps inventory in Store for Business - - ![Apps inventory in Store for Business](images/wsfb_manage_inventory_annotated.png) - - In the **Private store** column of the **Inventory** page, the status for some apps will indicate that it's "In private store" while others will say "Not in private store". We won't go over this in the walkthrough, but you can learn more about this in [Distribute apps using your private store](https://technet.microsoft.com/en-us/itpro/windows/manage/distribute-apps-from-your-private-store). - - > [!NOTE] - > You'll see in the above screenshot that some apps say that add is in progress. Sync happens automatically, but it may take up to 24 hours for your organization's private store and 12 hours for Intune for Education to sync all your purchased apps. Let's force a sync to make this process happen faster. - -**Install apps for all users** - -Now that you've bought the apps, use Intune for Education to specify the group to install the apps for. Here, we'll show you how to install the apps you bought for all devices used by all users in your tenant. - -1. In the Intune for Education console, click the **Groups** option from the menu on the left. - - **Figure 28** - Groups page in Intune for Education - - ![Groups page in Intune for Education](images/i4e_groups.png) - -2. In the **Groups** page, select **All Users** to see the list of users. The list should match all the names we imported using SDS. - - > [!TIP] - > If you don't see the names, click the **Users** option in the taskbar at the top of the **All Users** page. - - **Figure 29** - List of all users in the tenant - - ![List of all users in the tenant](images/i4e_groups_allusers_list.png) - -3. In the taskbar at the top, select **Apps** and then click **Edit apps** to see a list of available apps. - - **Figure 30** - Edit apps to assign them to users - - ![Edit apps to assign them to users](images/i4e_groups_allusers_apps_edit.png) - -4. Select the apps you want to deploy to the group. A blue checkmark will appear next to the apps you select. - - **Figure 31** - Select the apps you want to deploy to the group - - ![Select the apps you want to deploy to the group](images/i4e_groups_allusers_apps_appstodeploy.png) - -5. Once you're done, click **Save** at the bottom of the page to deploy the selected apps to the group. -6. You'll be notified that app assignments are being updated. The **All Users** groups page will now include the apps you selected. - - **Figure 32** - Updated list of assigned apps - - ![Updated list of assigned apps](images/i4e_groups_allusers_apps_updatedlist.png) - -You're now done assigning apps to all users in your tenant. It's time to set up your Windows device(s) and check that your cloud infrastructure is correctly set up and your apps are being pushed to your devices from the cloud. - -## 3. Set up your Windows devices - -### 3.1 Set up devices using Set up School PCs or Windows OOBE -We recommend using the latest build of Windows 10 Creators Update (version 1703) on your Windows education devices. If you haven't done so already, [download and install the latest Windows 10 Creators Update image](#download-and-install-the-latest-windows-10-creators-update-image). - -To set up new Windows devices and enroll them to your education tenant, choose from one of these options: -- **Option 1: [Use the Set up School PCs app](#usesetupschoolpcs)** - You can use the app to create a setup file that you can use to set up your Windows 10 devices. -- **Option 2: [Go through Windows OOBE and join the device to Azure AD](#usewindowsoobandjoinaad)** - You can go through a typical Windows device setup or first-run experience to configure your device. - -**Option 1: Set up a device using the Set up School PCs app** - - > [!NOTE] - > The Set up School PCs app is coming soon! Until it's ready, follow the steps in this section to install a setup file (provisioning package) that we created for you. You still have to go through OOBE to join Wi-Fi and Azure AD, but you won't need these steps when the Set up School PCs app is available. - -**Prerequisite:** -- Copy the latest version of the education provisioning package file, **SetupSchoolPC.ppkg**, from the Microsoft Education System TAP Yammer group to a USB key. - -1. Boot up a new or reset Windows 10 device. -2. During Windows setup, at the **Let's start with region** screen, insert the USB key into your Windows device. -3. When the **You can eject your removable device** message appears on the screen, remove the USB key. -4. Complete the rest of the Windows device setup experience. -5. If you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired/Ethernet connection. -6. On the **Let's get you signed in** screen, enter one of the accounts that you set up for your education tenant. -7. Complete the rest of device setup and then reboot the device. - -> [!NOTE] -> **The following section on using the Set up School PCs app is preliminary and subject to change. The steps are based on a preliminary build of the app, which is still in development.** - -1. Launch the Set up School PCs app. - - **Figure 33** - Launch the Set up School PCs app - - ![Launch the Set up School PCs app](images/suspc_start.png) - -2. Click **Start**. -3. In the **Sign in to Office 365 or Azure Active Directory** page, click **Sign in**. If you don't sign in, you will not be able to configure access for guest sign-in, Take a Test, and Office installation. - - If you opt to sign in: - - 1. Choose the account from the list. If you don't see the account, you can add a work or school account to sign in the devices. - 2. Click **Next** once you've specified the account. - 3. If you added an account, you may be asked to provide the user account and password. You will get a notification to allow the app to access your account. This will give Set up School PCs permission to access Store for Business, read hidden memberships, sign you in and read your profile, and more. - 4. Click **Accept**. - - The account will show up as the account that Set up School PCs will use to connect the school PCs to the cloud. - - **Figure 34** - Verify that the account you selected shows up - - ![Verify that the account you selected shows up](images/suspc_account_signin.png) - - 5. Click **Next**. - -4. To allow the student PCs to automatically connect to your school's wireless network, in the **Select the school's wireless network** page: - 1. Select the school's Wi-Fi network from the list of available wireless networks or manually add a wireless network. - 2. Click **Next**. - -5. To assign a name to the student PCs, in the **Assign a name to these PCs** page: - 1. Add a name that Set up School PCs will use as a prefix to identify and easily manage the group of devices, apps, and other settings through your device management client. - - For example, if you add *ComputerLab* as the prefix, the device names will be *ComputerLab_random-string-of-numbers-and-letters*. The random string of numbers and letters ensure that all device names are unique. - - 2. Click **Next**. - -6. If you want to set up the Take a Test app and use it for taking quizzes and high-stakes assessments by some providers like Smarter Balanced, configure the settings in the **Set up Take a Test app** page. - 1. Enter the assessment URL. - 2. Check the options whether to allow keyboard text suggestions to appear, allow teachers to monitor online tests, or allow students to print the test so they can take it offline. You can select more none, or one or more of these options. - - If you set up Take a Test, this adds a **Take a Test** button on the student PC's sign-in screen. Windows will also lock down the student PC so that students can't access anything else while taking the test. - - **Figure 35** - Configure the Take a Test app - - ![Configure the Take a Test app](images/suspc_choosesettings_takeatest.png) - - 3. Click **Next** or **Skip** depending on whether you want to set up Take a Test. - -7. If you want to add Store for Business apps to the student PCs, you can select from the list of recommended apps in the **Add STEM and Makerspace apps to Student PCs** page. - 1. Select the apps that you want to add. You'll see a checkmark on apps that you select. - 2. Click **Next**. - - **Figure 36** - Select Store apps to add to student PCs - - ![Select Store apps to add to student PCs](images/suspc_choosesettings_apps.png) - -8. To specify other settings for the student PC, in the **Configure student PC settings** page: - - Select **Clean student PC** to remove pre-installed apps from the device manufacturer. - - Select **Enable local storage** to let students save files to the **Desktop** and **Documents** folder on the student PC. We don't recommend this option if the device will be part of a shared cart or lab. - - Select **Make the device 1:1** to optimize the device for use by a single student. Check this option if the device will not be part of a shared cart or lab. - - Select **Enable guest sign-in** to allow guests to use student PCs without a school account. For example, if the device will be in a library and you want other users (like visiting students or teachers) to be able to use the device, you can select this option. - - If you check **Enable guest sign-in**, this adds a **Guest** account button in the PC's sign-in screen to allow anyone to use the PC. - - - To change the default lock screen background or to use your school's custom lock screen background, click **Browse** to select a new lock screen background. - - **Figure 37** - Configure student PC settings - - ![Configure student PC settings](images/suspc_choosesettings_settings.png) - -9. When you're done configuring the student PC settings, click **Next**. - -10. In the **Review your settings** page, check that all the settings you configured appear correctly. - 1. If you need to change any of the settings, you can click on the blue links to go back to that page and make your changes. - - **Figure 38** - Review your settings and change them as needed - - ![Review your settings and change them as needed](images/suspc_setupfile_reviewsettings.png) - - 2. Click **Next**. - -11. In the **Save your settings** page: - 1. Insert a USB drive to save your settings and create a setup file on the USB drive. - 2. Set up School PCs will automatically detect the USB drive after it's inserted. Choose the USB drive from the list. - 3. Click **Save** to save the setup file to the USB drive. - - **Figure 39** - Select the USB drive and save the setup file - - ![Select the USB drive and save the setup file](images/suspc_setupfile_savesettings.png) - - 4. When the setup file is ready, you will see the name of the file and you can remove the USB drive. - - **Figure 40** - Setup file is ready - - ![Setup file is ready](images/suspc_ppkgready.png) - - 5. Click **Next** if you're done, or click **Save to another USB drive** to save the same setup file to another USB drive. - -12. Follow the instructions in the **Get the student PCs ready** page to start setting up the student PCs. - - **Figure 41** - Line up the student PCs and get them ready for setup - - ![Line up the student PCs and get them ready for setup](images/suspc_getpcsready.png) - -13. Click **Next**. -14. In the **Install the setup file on student PCs** page, follow the rest of the instructions for setting up the student PCs. - - Select **Yes, I want to start a new package** if you need to create a new provisioning package. Or, select **No, I'm done**. - - **Figure 42** - Install the setup file on the student PCs - - ![Install the setup file on the student PCs](images/suspc_installsetupfile.png) - - -**Option 2: Set up a device using Windows OOBE** -1. If you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired/Ethernet connection. -2. Go through the Windows device setup experience. On a new or reset device, this starts with the **Let's get you signed in** screen. - - **Figure 43** - Let's get you signed in - - ![Let's get you signed in](images/win10_oobe_letsgetyousignedin.png) - -3. Sign in using the user account and password that you set up for one of the users in your education tenant. Depending on the user password setting, you may be prompted to update the password. -4. Choose privacy settings for your device. Location, speech recognition, and diagnostics are all on by default. You can turn off a setting based on your privacy preferences. Click **Accept** to go through the rest of device setup. - - **Figure 44** - Windows setup is complete - - ![Windows setup is complete](images/win10_oobe_complete.png) - -### 3.2 Verify correct device setup -Verify that the device is set up correctly and boots without any issues. - -**Verify that the device was set up correctly** -1. Confirm that the Start menu contains a simple configuration. -2. Confirm that the Store and built-in apps are installed and working. The apps pushed down from Intune for Education will appear under **Recently added**. Note that it may take some time before some apps are pushed down to your device from Intune for Education. Check again later if you don't see some of the apps you provisioned for the user. - - **Figure 45** - Apps list contains the apps provisioned for the user - - ![Apps list contains the apps provisioned for the user](images/win10_start_checkapps.png) - -### 3.3 Verify the device is Azure AD joined -Let's now verify that the device is joined to your organization's Azure AD and shows up as being managed in Microsoft Intune for Education. - -**Verify if the device is joined to Azure AD** -1. Log in to the Intune for Education console. -2. Select **Groups** and select **All Devices**. -3. In the **All Devices** page, see the list of devices and verify that the device you're signed into appears on the list. - - **Figure 46** - List of all managed devices - - ![Verify that the device is managed in Intune for Education](images/i4e_groups_alldevices_aadjoined_list.png) - -4. On the Windows education device, click **Start** and go to **Settings**. -5. In the **Windows Settings** page, click **Accounts**. Select the **Access work or school** option on the left of the account info page. -6. In the **Access work or school** page, confirm that it says your device is connected to your organization's Azure AD. - - **Figure 47** - Confirm that the Windows device is joined to Azure AD - - ![Confirm that the Windows device is joined to Azure AD](images/win10_settings_accounts_aadjoined_confirmation.png) - -**That's it! You're done!** You've completed basic cloud setup for your education tenant and confirmed that your education devices and users are managed all in the cloud. - - -## 4. Finishing setup and other tasks - -### 4.1 Update group settings in Intune for Education -If you need to make changes or updates to any of the apps or settings for the group(s), follow these steps. - -1. Log in to the Intune for Education console. -2. Click **Groups** and then choose **Settings** in the taskbar at the top of the page. -3. You will see the same settings groups that you saw in express setup for Intune for Education as well as other settings categories such as **Windows Defender settings**, **Device sharing** and so on. - - **Figure 48** - Use the **Settings** option to make app or device settings changes - - ![Use the Settings option to make app and settings changes](images/i4e_groups_settings_changes.png) - -4. Click **Save** or **Discard changes**. - -### 4.2 Configure Azure settings -After completing the basic setup for your cloud infrastructure and confirming that it is up and running, it's time to prepare for additional devices to be added and enable capabilities for the user to use. - -#### Enable many devices to be added by a single person -When a device is owned by the school, you may need to have a single persion adding many devices to your cloud infrastructure. - -Follow the steps in this section to enable a single person to add many devices to your cloud infrastructure. - -1. Sign in to the Office 365 admin center. -2. Click **Admin centers** and select **Azure AD** to go to the Azure portal. -3. Configure the device settings for the school's Active Directory. From the new Azure portal, https://portal.azure.com, select **Azure Active Directory > Users and groups > Device settings**. - - **Figure 49** - Device settings in the new Azure portal - - ![Configure device settings in the new Azure portal](images/azure_newportal_usersandgroups_devicesettings.png) - - - -4. Find the setting **Maximum number of devices per user** and change the value to **Unlimited**. -5. Click **Save** to update device settings. - -#### Enable roaming settings for users -When students move from using one device to another, they may need to have their settings roam with them and be made available on other devices. - -Follow the steps in this section to ensure that settings for the each user follow them when they move from one device to another. - -1. Sign in to the Office 365 admin center. -2. Click **Admin centers** and select **Azure AD** to go to the Azure portal. -3. Configure the device settings for the school's Active Directory. From the new Azure portal, https://portal.azure.com, select **Azure Active Directory > Users and groups > Device settings**. -4. Find the setting **Users may sync settings and enterprise app data** and change the value to **All**. - - **Figure 50** - Enable settings to roam with users - - ![Enable settings to roam with users](images/azure_usersandgroups_devicesettings_ers.png) - -5. Click **Save** to update device settings. - -### 4.3 Complete Office 365 Education setup -Now that your basic cloud infrastructure is up and running, it's time to complete the rest of the Office 365 Education setup. You can find detailed information about completing Office 365 setup, services and applications, troubleshooting, and more by reading the Office 365 admin documentation. - -### 4.4 Add more users -After your cloud infrastructure is set up and you have a device management strategy in place, you may need to add more users and you want the same policies to apply to these users. - -You can add new users to your tenant simply by adding them to the Office 365 groups. Adding new users to Office 365 groups automatically adds them to the corresponding groups in Intune. - -See Add users to Office 365 to learn more. Once you're done adding new users, go to the Intune for Education console and verify that the same users were added to the Intune for Education groups as well. - -### 4.5 Connect other devices to your cloud infrastructure -Adding a new device to your cloud-based tenant is easy. For new devices, you can follow the steps in [3. Set up devices](#3-set-up-your-windows-devices). For other devices, such as those personally-owned by teachers who need to connect to the school network to access work or school resources (BYOD), you can follow the steps in this section to get these devices connected. - - > [!NOTE] - > These steps enable users to get access to the organization's resources, but it also gives the organization some control over the device. - -**To connect a personal device to your work or school** -1. On your Windows device, go to **Settings > Accounts**. -2. Select **Access work or school** and then click **Connect** in the **Connect to work or school** page. -3. In the **Set up a work or school account** window, click **Join this device to Azure Active Directory** to add an Azure AD account to the device. -4. In the **Let's get you signed in** window, enter the credentials for the account and then click **Sign in** to authenticate the user. -5. Depending on the organization's policy, you may be asked to update the password. -6. Verify the details to make sure you're connecting to the right organization and then click **Join**. -7. You will see a confirmation window that says the device is now connected to the organization. Click **Done**. -8. The **Connect to work or school** window will refresh and will now include an entry that shows you're connected to your organization's Azure AD. This means the device is now registered in Azure AD and enrolled in MDM and the account should have access to the organization's resources. -9. You can confirm that the new device and user are showing up as Intune-managed by going to the Intune management portal and following the steps in [3.3 Verify the device is Azure AD joined](#33-verify-the-device-is-azure-ad-joined). It may take several minutes before the new device shows up so check again later. - -## Download and install the latest Windows 10, versio 1703 (Creators Update) image -To evaluate the full Microsoft Education System experience, we recommend using the latest Windows 10, version 1703 image on your Windows devices. - -### Download the latest Windows 10 image -1. Go to the Windows Server and System Center Connect site and sign in. - - > [!NOTE] - > If you are part of the TAP program and don't have access to the Connect site, contact your Microsoft representative. - -2. Go through the list of available downloads and select the latest Windows 10 Creators Update build. - - **Figure 51** - Sample download entry for the latest Windows 10 build - - ![Sample download entry for the latest Windows 10 build on Connect](images/connect_download_entry.jpg) - -3. Download the .iso for the Windows edition that you need. - - For example, the Windows 10 Education .iso will have a file name in this format: "buildnumber"."majorversion"."minorversion".RS_PRERELEASE_EDUCATION_OEMRET_X64FRE_EN-US.ISO. - -### Create a bootable Windows 10 USB key -Now that you have the latest Windows 10 Creators Update .iso from Connect, we recommend using the Windows USB/DVD Download Tool to quickly create a bootable Windows 10 USB key. - -**To download and install the Windows USB/DVD Download Tool** -1. Follow the instructions in the Windows USB/DVD Download Tool Download Center page to download and install the tool on your development workstation. - - > [!NOTE] - > In case it's hard to see, the link to tool download page is Windows USB/DVD Download Tool from CodePlex. - -2. Run the Windows USB/DVD Download Tool to create a bootable Windows 10 USB key. - - The source file must point to the path of the Windows 10 .iso file that you downloaded from Connect. - - Select USB device to create a copy on a USB key/flash drive. Make sure you select the USB device from the dropdown list. - -### Install the Windows 10 Creators Update image -Now that you have a bootable Windows 10 USB key, use it to install the image on your Windows 10 education devices. - -On the target device: -1. Hold down the Shift key and choose **Restart** from the **Power** menu. -2. When prompted, choose **Use a device**. -3. Choose **USB drive or similar option** depending on the UEFI implementation on the target device. -4. Boot off of the USB key on the target device and go through the device setup process. Choose **Custom: Install Windows only (advanced)**. -5. Delete all partitions and click **Next**. - -## Get more info - -### For IT admins -To learn more about the services and tools mentioned in this walkthrough, and learn what other tasks you can do, follow these links: -- Working with Store for Business - education scenarios -- *Resources for anyone who uses Office 365* and *Resources for admins* in Get started with Office 365 Education -- School Data Sync - - School Data Sync and Classroom introductory video - - Deployment using CSV files: How to deploy School Data Sync by using CSV files and CSV files for School Data Sync - - Deployment using PowerSchool Sync: How to deploy School Data Sync by using PowerSchool Sync and School Data Sync required attributes for PowerSchool Sync - - Deployment using Clever Sync: How to deploy School Data Sync by using Clever Sync and School Data Sync required attributes for Clever sync - - Deployment using OneRoster CSV files: How to deploy School Data Sync by using OneRoster CSV files - -### For teachers -Whether it's in the classroom, getting the most out of your devices, or learning some of the cool things you can do, we've got teachers covered. Follow these links for more info: -- [Microsoft Educator Community](https://education.microsoft.com/) -- *Resources for anyone who uses Office 365* in Get started with Office 365 Education -- Windows 10 online resources for teachers - -### For students -If you're a student, follow these links to get find out what resources and services are available to you: -- Student resources - -## Related topics - -[Windows 10 for Education](.../windows/index.md) diff --git a/education/windows/education-scenarios-store-for-business.md b/education/windows/education-scenarios-store-for-business.md index a06a16e9e1..77b128ce18 100644 --- a/education/windows/education-scenarios-store-for-business.md +++ b/education/windows/education-scenarios-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Education scenarios Windows Store for Business -description: Learn how IT admins and teachers can use Windows Store for Business to acquire and manage apps in schools. +title: Education scenarios Microsoft Store for Education +description: Learn how IT admins and teachers can use Microsoft Store for Education to acquire and manage apps in schools. keywords: ["school", "store for business"] ms.prod: W10 ms.mktglfcycl: plan @@ -9,13 +9,13 @@ localizationpriority: high author: trudyha --- -# Working with Windows Store for Business – education scenarios +# Working with Microsoft Store for Education -Learn about education scenarios for Windows Store for Business. IT admins and teachers can use Windows Store for Business to find, acquire, distribute, and manage apps. +Learn about education scenarios for Microsoft Store for Education. IT admins and teachers can use Microsoft Store to find, acquire, distribute, and manage apps. -## Manage Windows Store for Business settings +## Manage Microsoft Store for Education settings -### Access to Windows Store for Business +### Access to Microsoft Store for Education Applies to: IT admins By default, when a teacher with a work or school account acquires Minecraft: Education Edition,they are automatically signed up for Window Store for Business, and the **Basic Purchaser** role is assigned to them. **Basic Purchaser** role allows teachers to acquire Minecraft: Education Edition and to distribute it to students. @@ -23,13 +23,11 @@ By default, when a teacher with a work or school account acquires Minecraft: Edu However, tenant admins can control whether or not teachers automatically sign up for Windows Store for Business, and get the **Basic Purchaser** role. You can configure this with **Allow educators in my organization to sign up for the Windows Store for Business.** You'll find this on the **Permissions** page. **To manage educator access to Windows Store for Business** -1. In Windows Store for Business, click **Settings**, and then click **Permissions**. +1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com) +2. Click **Manage**, and then click **Permissions**. +3. Select, or clear **Allow teachers in my organization to sign up for the Microsoft Store for Education**. - ![Permission page for Windows Store for Business](images/minecraft-admin-permissions.png) - -2. Select, or clear **Allow educators in my organization to sign up for the Windows Store for Business**. - -### Windows Store for Business permissions +### Microsoft Store for Education permissions Applies to: IT admins **Minecraft: Education Edition** adds a new role for teachers: **Basic Purchaser**. As an Admin, you can assign this role to teachers in your organization. When a teacher has been granted this role, they can: @@ -37,31 +35,27 @@ Applies to: IT admins - Acquire and manage Minecraft: Education Edition, and other apps from Store for Business - Use info on Support page (including links to documentation and access to support through customer service) - ![assign roles to manage Minecraft permissions](images/minecraft-perms.png) + ![assign roles to manage Minecraft permissions](images/sfe-roles.png) **To assign Basic Purchaser role** -1. Sign in to Store for Business
+1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com)
> [!NOTE] > You need to be a Global Administrator, or have the Store for Business Admin role to access the **Permissions** page. 2. Click **Settings**, and then choose **Permissions**. - - ![Permission page for Windows Store for Business](images/minecraft-admin-permissions.png) 3. Click **Add people**, type a name, select the correct person, choose the role you want to assign, and click **Save**. - ![Permission page for Windows Store for Business](images/minecraft-assign-roles.png) + ![Permission page for Windows Store for Business](images/sfe-roles.png) - Windows Store for Business updates the list of people and permissions. - - ![Permission page for Windows Store for Business](images/minecraft-assign-roles-2.png) + Micrososft Store updates the list of people and permissions. ### Private store Applies to: IT admins -When you create you Windows Store for Business account, you'll have a set of apps included for free in your private store. Apps in your private store are available for all people in your organization to install and use. +When you create your Microsoft Store for Education account, you'll have a set of apps included for free in your private store. Apps in your private store are available for all people in your organization to install and use. These apps will automatically be in your private store: - Word mobile @@ -90,45 +84,44 @@ Applies to: IT admins and teachers Find apps for your school using Windows Store for Business. Admins in an education setting can use the same processes as Admins in an enterprise setting to find and acquire apps. **To acquire apps** -- For info on how to acquire apps, see [Acquire apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/acquire-apps-windows-store-for-business#acquire-apps) +- For info on how to acquire apps, see [Acquire apps in Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/acquire-apps-windows-store-for-business#acquire-apps) **To add a payment method - debit or credit card** If the app you purchase has a price, you’ll need to provide a payment method. -- Click **Get started! Add a way to pay.** Provide the info needed for your debit or credit card. +- During your purchase, click **Get started! Add a way to pay.** Provide the info needed for your debit or credit card. -For more information on payment options, see [payment options](https://technet.microsoft.com/itpro/windows/manage/acquire-apps-windows-store-for-business#payment-options). +For more information on payment options, see [payment options](https://docs.microsoft.com/microsoft-store/acquire-apps-windows-store-for-business#payment-options). -For more information on tax rates, see [tax information](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#organization-tax-information). +For more information on tax rates, see [tax information](https://docs.microsoft.com/microsoft-store/update-windows-store-for-business-account-settings#organization-tax-information). ### Get started with Minecraft: Education Edition Teachers and IT administrators can now get trials or subscriptions to Minecraft: Education Edition and add it to Windows Store for Business for distribution. -- [Get started with Minecraft: Education Edition](https://technet.microsoft.com/edu/windows/get-minecraft-for-education) -- [For IT admins – Minecraft: Education Edition](https://technet.microsoft.com/edu/windows/school-get-minecraft) -- [For teachers – Minecraft: Education Edition](https://technet.microsoft.com/edu/windows/teacher-get-minecraft) +- [Get started with Minecraft: Education Edition](https://docs.microsoft.com/education/windows/get-minecraft-for-education) +- [For IT admins – Minecraft: Education Edition](https://docs.microsoft.com/education/windows/school-get-minecraft) +- [For teachers – Minecraft: Education Edition](https://docs.microsoft.com/education/windows/teacher-get-minecraft) -## Manage WSfB inventory +## Manage apps and software Applies to: IT admins and teachers ### Manage purchases -IT admins and teachers in educational settings can purchase apps from Windows Store for Business. Teachers need to have the Basic purchaser role, but if they've acquired Minecraft: Education Edition, they have the role by default. +IT admins and teachers in educational settings can purchase apps from Microsoft Store for Education. Teachers need to have the Basic purchaser role, but if they've acquired Minecraft: Education Edition, they have the role by default. While both groups can purchase apps, they can't manage purchases made by the other group. Admins can: -- Manage and distribute apps they purchased and apps that are purchased by other admins in the organization. +- Manage and distribute apps they purchased and apps purchased by other admins in the organization. - View apps purchased by teachers. -- View and manage apps on **Inventory**, under **Admin purchases**. +- View and manage apps on **Manage**, under **Apps & software**. Teachers can: - Manage and distribute apps they purchased. -- View and manage apps on **Inventory**, under **User purchases**. +- View and manage apps on **Manage**, under **Apps & software**. > [!NOTE] -> Teachers can't manage or view apps purchased by other teachers, or purchased by admins. Teachers can only work with the apps they purchased. +> Teachers with the Basic purchaser role can't manage or view apps purchased by other teachers, or purchased by admins. Teachers can only work with the apps they purchased. - ### Distribute apps Manage and distribute apps to students and others in your organization. Different options are avaialble for admins and teachers. @@ -136,33 +129,30 @@ Manage and distribute apps to students and others in your organization. Differen Applies to: IT admins **To manage and distribute apps** -- For info on how to distribute **Minecraft: Education Edition**, see [For IT admins – Minecraft: Education Edition](https://technet.microsoft.com/edu/windows/school-get-minecraft#distribute_minecraft) -- For info on how to manage and distribute other apps, see [App inventory management - Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/app-inventory-management-windows-store-for-business) +- For info on how to distribute **Minecraft: Education Edition**, see [For IT admins – Minecraft: Education Edition](https://docs.microsoft.com/education/windows/school-get-minecraft#distribute-minecraft) +- For info on how to manage and distribute other apps, see [App inventory management - Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/app-inventory-management-windows-store-for-business) Applies to: Teachers -For info on how to distribute **Minecraft: Education Edition**, see [For teachers – Minecraft: Education Edition](https://technet.microsoft.com/edu/windows/teacher-get-minecraft#distribute-minecraft). +For info on how to distribute **Minecraft: Education Edition**, see [For teachers – Minecraft: Education Edition](https://docs.microsoft.com/education/windows/teacher-get-minecraft#distribute-minecraft). **To assign an app to a student** -1. Sign in to the Store for Business. -2. Click **Manage**, and then choose **Inventory**. +1. Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. 3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**. -4. Type the email address, or name for the student that you're assigning the app to, and click **Confirm**. +4. Type the email address, or name for the student that you're assigning the app to, and click **Assign**. Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**. ### Purchase additional licenses Applies to: IT admins and teachers -You can manage current app licenses, or purchase more licenses for apps in your inventory. +You can manage current app licenses, or purchase more licenses for apps in **Apps & software**. **To purchase additional app licenses** -1. From **Inventory**, click an app. -2. On the app page, click **View app details**. -3. From this page, click **Buy more** to purchase more licenses
--OR-
-Click **Manage** to distribute or reclaim current licenses. +1. Click **Manage**, click **Apps & software**, and then click an app. +2. Click **Buy more** to purchase more licenses
You'll have a summary of current license availability. @@ -170,7 +160,7 @@ You'll have a summary of current license availability. Similarly, you can purchase additional subscriptions of **Minecraft: Education Edition** through Windows Store for Business. Find **Minecraft: Education Edition** in your inventory and use the previous steps for purchasing additional app licenses. -## Manage WSfB order history +## Manage order history Applies to: IT admins and teachers You can manage your orders through Windows Store for Business. For info on order history and how to refund an order, see [Manage app orders in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/manage-orders-windows-store-for-business). diff --git a/education/windows/images/sfe-roles.png b/education/windows/images/sfe-roles.png new file mode 100644 index 0000000000..72a4ae3cef Binary files /dev/null and b/education/windows/images/sfe-roles.png differ diff --git a/education/windows/index.md b/education/windows/index.md index 218a13938e..58e566b492 100644 --- a/education/windows/index.md +++ b/education/windows/index.md @@ -9,15 +9,11 @@ ms.pagetype: edu localizationpriority: high author: CelesteDG --- +# Windows 10 for Education ![Windows 10 Education and Windows 10 Pro Education](images/windows-10-for-education-banner.png) -# Windows 10 for Education - - -## Windows 10 - -### ![Learn more about Windows](images/education.png) Learn +## ![Learn more about Windows](images/education.png) Learn

[Windows 10 editions for education customers](windows-editions-for-education-customers.md)
Windows 10, version 1607 introduces two editions designed for the unique needs of K-12 institutions: Windows 10 Pro Education and Windows 10 Education. These editions provide education-specific default settings for the evolving landscape in K-12 education IT environments.

[Compare each Windows edition](https://www.microsoft.com/en-us/WindowsForBusiness/Compare)
Find out more about the features and functionality we support in each edition of Windows.

@@ -32,7 +28,7 @@ author: CelesteDG

-### ![Plan for Windows 10 in your school](images/clipboard.png) Plan +## ![Plan for Windows 10 in your school](images/clipboard.png) Plan

[Windows 10 configuration recommendations for education customers](configure-windows-for-education.md)
Provides guidance on ways to customize the OS diagnostic data, consumer experiences, Cortana, search, as well as some of the preinstalled apps, so that Windows is ready for your school.

[Deployment recommendations for school IT administrators](edu-deployment-recommendations.md)
Learn how to customize the OS privacy settings, Skype, and Xbox for Windows-based devices used in schools so that you can choose what information is shared with Microsoft.

@@ -40,16 +36,16 @@ author: CelesteDG

[Take tests in Windows 10](take-tests-in-windows-10.md)
Take a Test is a new app that lets you create the right environment for taking tests. Learn how to use and get it set up.

[Chromebook migration guide](chromebook-migration-guide.md)
Find out how you can migrate a Chromebook-based learning environment to a Windows 10-based learning environment.

-### ![Deploy Windows 10 for education](images/PCicon.png) Deploy +## ![Deploy Windows 10 for education](images/PCicon.png) Deploy

[Set up Windows devices for education](set-up-windows-10.md)
Depending on your school's device management needs, you can use the Set up School PCs app or the Windows Configuration Designer tool to quickly set up student PCs.

[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)
Get step-by-step guidance to help you deploy Windows 10 in a school environment.

[Deploy Windows 10 in a school district](deploy-windows-10-in-a-school-district.md)
Get step-by-step guidance on how to deploy Windows 10 to PCs and devices across a school district.

Try it out: Windows 10 deployment (for education)
Learn how to upgrade devices running the Windows 7 operating system to Windows 10 Anniversary Update, and how to manage devices, apps, and users in Windows 10 Anniversary Update.

For the best experience, use this guide in tandem with the TechNet Virtual Lab: IT Pro Try-It-Out.

-### ![Upgrade to Windows 10 for education](images/windows.png) Upgrade +## ![Upgrade to Windows 10 for education](images/windows.png) Upgrade -

[Upgrade Windows 10 Pro to Pro Education from Windows Store for Business](windows-10-pro-to-pro-edu-upgrade.md)
If you have an education tenant and use Windows 10 Pro in your schools now, find out how you can opt-in to a free upgrade to Windows 10 Pro Education.

+

[Switch Windows 10 Pro to Pro Education from Microsoft Store for Education](windows-10-pro-to-pro-edu-upgrade.md)
If you have an education tenant and use Windows 10 Pro in your schools now, find out how you can opt-in to a free switch to Windows 10 Pro Education.

## Windows 8.1 Follow these links to find step-by-step guidance on how to deploy Windows 8.1 in an academic environment. @@ -62,7 +58,6 @@ Follow these links to find step-by-step guidance on how to deploy Windows 8.1 in

Windows Store apps
Explore Windows Store app deployment strategies and considerations for educational institutions running Windows 8.1.

Windows To Go
Learn about the benefits, limitations, and processes involved in deploying Windows To Go.

- ## Related topics - [Windows 10 and Windows 10 Mobile](https://technet.microsoft.com/itpro/windows/index) diff --git a/education/windows/windows-10-pro-to-pro-edu-upgrade.md b/education/windows/windows-10-pro-to-pro-edu-upgrade.md index 0e2befd5c6..373293b8ac 100644 --- a/education/windows/windows-10-pro-to-pro-edu-upgrade.md +++ b/education/windows/windows-10-pro-to-pro-edu-upgrade.md @@ -1,6 +1,6 @@ --- title: Switch Windows 10 Pro to Pro Education -description: Describes how IT Pros can opt into switching from Windows 10 Pro to Windows 10 Pro Education from the Windows Store for Business. +description: Describes how IT Pros can opt into switching from Windows 10 Pro to Windows 10 Pro Education from the Microsoft Store for Education. keywords: switch, Pro to Pro Education, education customers ms.prod: w10 ms.mktglfcycl: deploy @@ -10,11 +10,11 @@ localizationpriority: high author: CelesteDG --- -# Switch Windows 10 Pro to Pro Education from Windows Store for Business +# Switch Windows 10 Pro to Pro Education from Microsoft Store for Education Windows 10 Pro Education is a new offering in Windows 10 Anniversary Update (Windows 10, version 1607). This edition builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools by providing education-specific default settings. -If you have an education tenant and use Windows 10 Pro in your schools now, global administrators can opt-in to a free switch to Windows 10 Pro Education through the Windows Store for Business. To take advantage of this offering, make sure you meet the [requirements for switching](#requirements-for-switching). +If you have an education tenant and use Windows 10 Pro in your schools now, global administrators can opt-in to a free switch to Windows 10 Pro Education through the Microsoft Store for Education. To take advantage of this offering, make sure you meet the [requirements for switching](#requirements-for-switching). Starting with Windows 10, version 1607, academic institutions can easily move from Windows 10 Pro to Windows 10 Pro Education—no keys and no reboots. After one of your users enters the Azure AD credentials associated with a Windows 10 Pro Education license, the operating system turns from Windows 10 Pro to Windows 10 Pro Education and all the appropriate Windows 10 Pro Education features are unlocked. When a license expires or is transferred to another user, the Windows 10 Pro Education device seamlessly steps back down to Windows 10 Pro. @@ -26,7 +26,7 @@ When you switch to Windows 10 Pro Education, you get the following benefits: - **Support from one to hundreds of users**. The Windows 10 Pro Education program does not have a limitation on the number of licenses an organization can have. - **Roll back to Windows 10 Pro at any time**. When a user leaves the domain or you turn off the setting to automatic switch to Windows 10 Pro Education, the device reverts seamlessly to Windows 10 Pro edition (after a grace period of up to 30 days). -In summary, the Windows 10 Pro Education free switch through the Windows Store for Business is an offering that provides organizations easier, more flexible access to the benefits of Windows 10 Pro Education edition. +In summary, the Windows 10 Pro Education free switch through the Microsoft Store for Education is an offering that provides organizations easier, more flexible access to the benefits of Windows 10 Pro Education edition. ## Compare Windows 10 Pro and Pro Education editions @@ -47,15 +47,17 @@ Before you switch from Windows 10 Pro to Windows 10 Pro Education, make sure you If you haven't domain joined your devices already, [prepare for deployment of Windows 10 Pro Education licenses](#preparing-for-deployment-of-windows-10-pro-education-licenses). - The user making the changes must be a member of the Azure AD global administrator group. - The Azure AD tenant must be recognized as an education approved tenant. -- You must have a Windows Store for Business account. +- You must have a Microsoft Store for Education account. ## Switch from Windows 10 Pro to Windows 10 Pro Education Once you enable the setting to switch Windows 10 Pro to Windows 10 Pro Education, the switch will begin only after a user signs in to their device. The setting applies to the entire organization so you cannot select which users will receive the switch. **To turn on the automatic switch from Windows 10 Pro to Windows 10 Pro Education** -1. Sign in to [Windows Store for Business](https://businessstore.microsoft.com/en-us/Store/Apps) with your work or school account. - If this is the first time you're signing into the Store, you'll be prompted to accept the Windows Store for Business Terms of Use. +1. Sign in to [Microsoft Store for Education](https://businessstore.microsoft.com/en-us/Store/Apps) with your work or school account. + + If this is the first time you're signing into the Microsoft Store, you'll be prompted to accept the Microsoft Store for Business and Education License Agreement. + 2. Go to **Manage > Account information**. 3. In the **Account information** page, look for the **Automatic Windows 10 Pro Education upgrade** section and follow the link. @@ -216,13 +218,13 @@ Devices must be running Windows 10 Pro, version 1607, and be Azure Active Direct ## Roll back Windows 10 Pro Education to Windows 10 Pro If your organization has the Windows 10 Pro to Windows 10 Pro Education switch enabled, and you decide to roll back to Windows 10 Pro or to cancel the switch, you can do this by: -- Logging into Windows Store for Business page and turning off the automatic switch. +- Logging into Microsoft Store for Education page and turning off the automatic switch. - Selecting the link to turn off the automatic switch from the notification email sent to all global administrators. Once the automatic switch to Windows 10 Pro Education is turned off, the change is effective immediately. Devices that were switched will revert to Windows 10 Pro only after the license has been refreshed (every 30 days) and the next time the user signs in. This means that a user whose device was switched may not immediately see Windows 10 Pro Education rolled back to Windows 10 Pro for up to 30 days. However, users who haven't signed in during the time that an switch was enabled and then turned off will never see their device change from Windows 10 Pro. **To roll back Windows 10 Pro Education to Windows 10 Pro** -1. Log in to [Windows Store for Business](https://businessstore.microsoft.com/en-us/Store/Apps) with your school or work account, or follow the link from the notification email to turn off the automatic switch. +1. Log in to [Microsoft Store for Education](https://businessstore.microsoft.com/en-us/Store/Apps) with your school or work account, or follow the link from the notification email to turn off the automatic switch. 2. Select **Manage > Account information** and locate the section **Automatic Windows 10 Pro Education upgrade** and follow the link. 3. In the **Upgrade Windows 10 Pro to Windows 10 Pro Education** page, select **Turn off the automatic upgrade to Windows 10 Pro Education**. diff --git a/mdop/medv-v2/windows-virtual-pc-application-exclude-list.md b/mdop/medv-v2/windows-virtual-pc-application-exclude-list.md index f0f22b199f..6ec3d5c3a4 100644 --- a/mdop/medv-v2/windows-virtual-pc-application-exclude-list.md +++ b/mdop/medv-v2/windows-virtual-pc-application-exclude-list.md @@ -15,7 +15,7 @@ ms.prod: w7 In some instances, you might not want applications that are installed in the MED-V workspace to be published to the host computer **Start** menu. You can unpublish these applications by following the instructions at [How to Publish and Unpublish an Application on the MED-V Workspace](how-to-publish-and-unpublish-an-application-on-the-med-v-workspace.md). However, if the program ever automatically updates, it might also be automatically republished. This causes you to have to unpublish the application again. -Windows Virtual PC includes a feature known as the "Exclude List" that lets you specify certain installed applications that you do not want published to the host **Start** menu. The "Exclude List" is located in the guest registry in the HLKM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Virtual Machine\\VPCVAppExcludeList key and lists those applications that are not published to the host **Start** menu. You can think of the “Exclude List” as permanently unpublishing the specified applications because any automatic updates to the applications that are listed will not cause them to be automatically republished. +Windows Virtual PC includes a feature known as the "Exclude List" that lets you specify certain installed applications that you do not want published to the host **Start** menu. The "Exclude List" is located in the guest registry in the HKLM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Virtual Machine\\VPCVAppExcludeList key and lists those applications that are not published to the host **Start** menu. You can think of the “Exclude List” as permanently unpublishing the specified applications because any automatic updates to the applications that are listed will not cause them to be automatically republished. ## Managing Applications by Using the Exclude List in Windows Virtual PC diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md index 81657682cf..ba2c1b8c8a 100644 --- a/store-for-business/TOC.md +++ b/store-for-business/TOC.md @@ -1,30 +1,30 @@ -# [Windows Store for Business](index.md) +# [Microsoft Store for Business](index.md) ## [Sign up and get started](sign-up-windows-store-for-business-overview.md) -###[Windows Store for Business overview](windows-store-for-business-overview.md) -### [Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md) -### [Sign up for Windows Store for Business](sign-up-windows-store-for-business.md) -### [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md) -### [Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md) +###[Microsoft Store for Business and Microsoft Store for Education overview](windows-store-for-business-overview.md) +### [Prerequisites for Microsoft Store for Business and Education](prerequisites-windows-store-for-business.md) +### [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-windows-store-for-business.md) +### [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md) +### [Settings reference: Microsoft Store for Business and Education](settings-reference-windows-store-for-business.md) ## [Find and acquire apps](find-and-acquire-apps-overview.md) -### [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md) -### [Acquire apps in the Windows Store for Business](acquire-apps-windows-store-for-business.md) +### [Apps in the Microsoft Store for Business and Education](apps-in-windows-store-for-business.md) +### [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-windows-store-for-business.md) ### [Working with line-of-business apps](working-with-line-of-business-apps.md) -## [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md) +## [Distribute apps to your employees from the Microsoft Store for Business and Education](distribute-apps-to-your-employees-windows-store-for-business.md) ### [Distribute apps using your private store](distribute-apps-from-your-private-store.md) ### [Assign apps to employees](assign-apps-to-employees.md) ### [Distribute apps with a management tool](distribute-apps-with-management-tool.md) ### [Distribute offline apps](distribute-offline-apps.md) ## [Manage apps](manage-apps-windows-store-for-business-overview.md) -### [App inventory managemement for Windows Store for Business](app-inventory-management-windows-store-for-business.md) -### [Manage app orders in Windows Store for Business](manage-orders-windows-store-for-business.md) +### [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-windows-store-for-business.md) +### [Manage app orders in Microsoft Store for Business and Education](manage-orders-windows-store-for-business.md) ### [Manage access to private store](manage-access-to-private-store.md) ### [Manage private store settings](manage-private-store-settings.md) ### [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) ## [Device Guard signing portal](device-guard-signing-portal.md) ### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) ### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) -## [Manage settings in the Windows Store for Business](manage-settings-windows-store-for-business.md) -### [Update Windows Store for Business account settings](update-windows-store-for-business-account-settings.md) -### [Manage user accounts in Windows Store for Business](manage-users-and-groups-windows-store-for-business.md) -## [Troubleshoot Windows Store for Business](troubleshoot-windows-store-for-business.md) +## [Manage settings in the Microsoft Store for Business and Education](manage-settings-windows-store-for-business.md) +### [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-windows-store-for-business-account-settings.md) +### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) +## [Troubleshoot Microsoft Store for Business](troubleshoot-windows-store-for-business.md) diff --git a/store-for-business/acquire-apps-windows-store-for-business.md b/store-for-business/acquire-apps-windows-store-for-business.md index 156d071c04..77563b064c 100644 --- a/store-for-business/acquire-apps-windows-store-for-business.md +++ b/store-for-business/acquire-apps-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Acquire apps in Windows Store for Business (Windows 10) -description: As an admin, you can acquire apps from the Windows Store for Business for your employees. Some apps are free, and some have a price. For info on app types that are supported, see Apps in the Windows Store for Business. +title: Acquire apps in Microsoft Store for Business (Windows 10) +description: As an admin, you can acquire apps from the Microsoft Store for Business for your employees. Some apps are free, and some have a price. For info on app types that are supported, see Apps in the Microsoft Store for Business. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -9,16 +9,16 @@ author: TrudyHa localizationpriority: high --- -# Acquire apps in Windows Store for Business -As an admin, you can acquire apps from the Windows Store for Business for your employees. Some apps are free, and some have a price. For info on app types that are supported, see [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md). +# Acquire apps in Microsoft Store for Business and Education +As an admin, you can acquire apps from the Microsoft Store for Business and Education for your employees. Some apps are free, and some have a price. For info on app types that are supported, see [Apps in the Microsoft Store for Business](apps-in-windows-store-for-business.md). ## App licensing model -The Business store supports two options to license apps: online and offline. **Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Admins control whether or not offline apps are available in Store for Business with an offline app visibility setting. For more information, see [offline license visibility](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#offline-licensing). +The Microsoft Store supports two options to license apps: online and offline. **Online** licensing is the default licensing model. Online licensed apps require users and devices to connect to the Microsoft Store services to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Admins control whether or not offline apps are available in Microsoft Store with an offline app visibility setting. For more information, see [offline license visibility](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#offline-licensing). -For more information on the Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model). +For more information on the Microsoft Store licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model). ## Payment options -Some apps are free, and some have a price. Apps can be purchased in the Windows Store for Business using your credit card. You can enter your credit card information on **Account Information**, or when you purchase an app. Currently, we accept these credit cards: +Some apps are free, and some have a price. Apps can be purchased in the Microsoft Store using your credit card. You can enter your credit card information on **Account Information**, or when you purchase an app. Currently, we accept these credit cards: - VISA - MasterCard - Discover @@ -26,11 +26,10 @@ Some apps are free, and some have a price. Apps can be purchased in the Windows - Japan Commercial Bureau (JCB) ## Organization info -There are a couple of things we need to know when you pay for apps. You can add this info to the **Account information** page before you buy apps. If you haven’t provided it, we’ll ask when you make a purchase. Either way works. Here’s the info you’ll need to provide: +There are a couple of things we need to know when you pay for apps. You can add this info to the **Account information** or **Payments & billing** page before you buy apps. If you haven’t provided it, we’ll ask when you make a purchase. Either way works. Here’s the info you’ll need to provide: - Legal business address - Payment option (credit card) -You can add payment info on **Account information**. If you don’t have one saved with your account, you’ll be prompted to provide one when you buy an app. ## Acquire apps **To acquire an app** @@ -38,17 +37,17 @@ You can add payment info on **Account information**. If you don’t have one sav 2. Click Shop, or use Search to find an app. 3. Click the app you want to purchase. 4. On the product description page, choose your license type - either online or offline. -5. Free apps will be added to Inventory. For apps with a price, you can set the quantity you want to buy. Type the quantity and click **Next**. -6. If you don’t have a payment method saved in Account settings, Store for Business will prompt you for one. -7. Add your credit card or debit card info, and click **Next**. Your card info is saved as a payment option on **Account information**. +5. Free apps will be added to **Inventory** or **Apps & software**. For apps with a price, you can set the quantity you want to buy. Type the quantity and click **Next**. +6. If you don’t have a payment method saved in **Account Information** or **Payments & billing**, we will prompt you for one. +7. Add your credit card or debit card info, and click **Next**. Your card info is saved as a payment option on **Account information** or **Payments & billing**. -You’ll also need to have your business address saved on **Account information**. The address is used to generate tax rates. For more information on taxes for apps, see [organization tax information](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#organization-tax-information). +You’ll also need to have your business address saved on **Account information** or **Payments & billing**. The address is used to generate tax rates. For more information on taxes for apps, see [organization tax information](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#organization-tax-information). -Store for Business adds the app to your inventory. From **Inventory**, you can: +Microsoft Store adds the app to your inventory. From **Inventory**or **Apps & software**, you can: - Distribute the app: add to private store, or assign licenses - View app licenses: review current licenses, reclaim and reassign licenses - View app details: review the app details page and purchase more licenses -For info on distributing apps, see [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). +For info on distributing apps, see [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). For info on offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md). diff --git a/store-for-business/add-unsigned-app-to-code-integrity-policy.md b/store-for-business/add-unsigned-app-to-code-integrity-policy.md index a0c9e5ac70..491172a16d 100644 --- a/store-for-business/add-unsigned-app-to-code-integrity-policy.md +++ b/store-for-business/add-unsigned-app-to-code-integrity-policy.md @@ -21,35 +21,27 @@ localizationpriority: high When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies. ## In this section - - -- [Create a code integrity policy based on a reference device](#create-ci-policy) -- [Create catalog files for your unsigned app](#create-catalog-files) -- [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal) +- [Create a code integrity policy based on a reference device](#create-ci-policy) +- [Create catalog files for your unsigned app](#create-catalog-files) +- [Catalog signing with Device Guard signing portal](#catalog-signing-device-guard-portal) ## Create a code integrity policy based on a reference device - - To add an unsigned app to a code integrity policy, your code integrity policy must be created from golden image machine. For more information, see [Create a Device Guard code integrity policy based on a reference device](https://technet.microsoft.com/library/mt243445.aspx). ## Create catalog files for your unsigned app - - Creating catalog files starts the process for adding an unsigned app to a code integrity policy. Before you get started, be sure to review these best practices and requirements: **Requirements** -- You'll use Package Inspector during this process. - -- Only perform this process with a code integrity policy running in audit mode. You should not perform this process on a system running an enforced Device Guard policy. +- You'll use Package Inspector during this process. +- Only perform this process with a code integrity policy running in audit mode. You should not perform this process on a system running an enforced Device Guard policy. **Best practices** -- **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). - -- **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted. +- **Naming convention** -- Using a naming convention makes it easier to find deployed catalog files. We'll use \*-Contoso.cat as the naming convention in this topic. For more information, see the section Inventorying catalog files by using Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). +- **Where to deploy code integrity policy** -- The [code integrity policy that you created](#create-ci-policy) should be deployed to the system on which you are running Package Inspector. This will ensure that the code integrity policy binaries are trusted. Copy the commands for each step into an elevated Windows PowerShell session. You'll use Package Inspector to find and trust all binaries in the app. @@ -85,34 +77,25 @@ After you're done, the files are saved to your desktop. You still need to sign t ## Catalog signing with Device Guard signing portal - To sign catalog files with the Device Guard signing portal, you need to be signed up with the Windows Store for Business. For more information, see [Sign up for the Windows Store for Business](sign-up-windows-store-for-business.md). Catalog signing is a vital step to adding your unsigned apps to your code integrity policy. **To sign a catalog file with Device Guard signing portal** -1. Sign in to the Store for Business - -2. Click **Settings**, and then choose **Device Guard signing**. - -3. Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files). - -4. After the files are uploaded, click **Sign** to sign the catalog files. - -5. Click Download to download each item: - - - signed catalog file - - - default policy - - - root certificate for your organization - +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Settings**, click **Store settings**, and then click **Device Guard**. +3. Click **Upload** to upload your unsigned catalog files. These are the catalog files you created earlier in [Create catalog files for your unsigned app](#create-catalog-files). +4. After the files are uploaded, click **Sign** to sign the catalog files. +5. Click Download to download each item: + - signed catalog file + - default policy + - root certificate for your organization + When you use the Device Guard signing portal to sign a catalog file, the signing certificate is added to the default policy. When you download the signed catalog file, you should also download the default policy and merge this code integrity policy with your existing code integrity policies to protect machines running the catalog file. You need to do this step to trust and run your catalog files. For more information, see the Merging code integrity policies in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). -6. Open the root certificate that you downloaded, and follow the steps in **Certificate Import wizard** to install the certificate in your machine's certificate store. - -7. Deploy signed catalogs to your managed devices. For more information, see Deploy catalog files with Group Policy, or Deploy catalog files with System Center Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). +6. Open the root certificate that you downloaded, and follow the steps in **Certificate Import wizard** to install the certificate in your machine's certificate store. +7. Deploy signed catalogs to your managed devices. For more information, see Deploy catalog files with Group Policy, or Deploy catalog files with System Center Configuration Manager in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx).   diff --git a/store-for-business/app-inventory-management-windows-store-for-business.md b/store-for-business/app-inventory-management-windows-store-for-business.md index e228b7bbba..71dceb3427 100644 --- a/store-for-business/app-inventory-management-windows-store-for-business.md +++ b/store-for-business/app-inventory-management-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: App inventory management for Windows Store for Business (Windows 10) -description: You can manage all apps that you've acquired on your Inventory page. +title: App inventory management for Microsoft Store for Business and Microsoft Store for Education (Windows 10) +description: You can manage all apps that you've acquired on your Apps & Software page. ms.assetid: 44211937-801B-4B85-8810-9CA055CDB1B2 ms.prod: w10 ms.mktglfcycl: manage @@ -9,29 +9,26 @@ ms.pagetype: store author: TrudyHa --- -# App inventory management for Windows Store for Business - +# App inventory management for Microsoft Store for Business and Education **Applies to** - Windows 10 - Windows 10 Mobile -You can manage all apps that you've acquired on your **Inventory** page. - -The **Inventory** page in Windows Store for Business shows all apps in your inventory. This includes all apps that you've acquired from Store for Business, and the line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Inventory** page. On the **New line-of-business apps** page, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role. +You can manage all apps that you've acquired on your **Apps & software** page. This page shows all of the content you've acquired, including apps that from Microsoft Store, and line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role. All of these apps are treated the same once they are in your inventory and you can perform app lifecycle tasks for them: distribute apps, add apps to private store, review license details, and reclaim app licenses. -![Image shows Inventory page in Windows Store for Business with status status options for an app.](images/wsfb-inventoryaddprivatestore.png) + -Store for Business shows this info for each app in your inventory: - -- Name -- Access to actions for the app -- Last modified -- Available licenses -- Private store status +Microsoft Store for Business and Education shows this info for each app in your inventory: +- Name +- Last modified +- Private store status +- Available licenses +- Supported devices +- Access to actions for the app The last modified date tracks changes about the app as an item in your inventory. The last modified date changes when one of the following happens: - First purchase (the date you acquire the app from Windows Store for Business) @@ -40,100 +37,52 @@ The last modified date tracks changes about the app as an item in your inventory - Reclaim license - Refund order (applies to purchased apps, not free apps) -The last modified date does not correspond to when an app was last updated in the Store. It tracks activity for that app, as an item in your inventory. +The last modified date does not correspond to when an app was last updated in Microsoft Store. It tracks activity for that app, as an item in your inventory. -### Find apps in your inventory +## Find apps in your inventory There are a couple of ways to find specific apps, or groups of apps in your inventory. -**Search** - Use the Search box to search for an app. - -**Refine** - Use **Refine** to scope your list of apps by one or more of these app attributes: - -- **License** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model). - -- **Platforms** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory. - -- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps. - -- **Private store** - **In private store**, or **Not in private store**, depending on whether or not you've added the app to your private store. - -### Manage apps in your inventory +**Search** - Use the Search box to search for an app.
+**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes: +- **License type** - Online or offline licenses. For more info, see [Apps in Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model). +- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory. +- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps. +- **Product type** - Product categories, such as app, or game. +- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store. +## Manage apps in your inventory Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model). There are different actions you can take depending on the app license type. They're summarized in this table. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ActionOnline-licensed appOffline-licensed app

Assign to employees

X

Add to private store

X

Remove from private store

X

View license details

X

View product details

X

X

Download for offline use

X

- -  +| Action | Online-licensed app | Offline-licensed app | +| ------ | ------------------- | -------------------- | +| Assign to employees | X | | +| Add to private store | X | | +| Remove from private store | X | | +| View license details | X | | +| View product details | X | X | +| Download for offline use | | X | The actions in the table are how you distribute apps, and manage app licenses. We'll cover those in the next sections. Working with offline-licensed apps has different steps. For more information on distributing offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md). -### Distribute apps +## Distribute apps For online-licensed apps, there are a couple of ways to distribute apps from your inventory: +- Assign apps to people in your organization. +- Add apps to your private store, and let people in your organization install the app. -- Assign apps to people in your organization. - -- Add apps to your private store, and let people in your organization install the app. - -If you use a management tool that supports Store for Business, you can distribute apps with your management tool. Once it is configured to work with Store for Business, your managment tool will have access to all apps in your inventory. For more information, see [Distribute apps with a management tool](distribute-apps-with-management-tool.md). +If you use a management tool that supports Microsoft Store, you can distribute apps with your management tool. Once it is configured to work with Store for Business, your managment tool will have access to all apps in your inventory. For more information, see [Distribute apps with a management tool](distribute-apps-with-management-tool.md). Once an app is in your private store, people in your org can install the app on their devices. For more information, see [Distribute apps using your private store](distribute-apps-from-your-private-store.md). -**To make an app in inventory available in your private store** +**To make an app in Apps & software available in your private store** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then choose **Inventory**. -3. Click **Refine**, and then choose **Online**. Store for Business will update the list of apps on the **Inventory** page. -4. From an app in **Inventory**, click the ellipses under **Action**, and then choose **Add to private store**. - -The value under Private store for the app will change to pending. It will take approximately twelve hours before the app is available in the private store. +1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. +3. Use **Refine results** to search for online-licensed apps under **License type**. +4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**. +The value under **Private store** for the app will change to pending. It will take approximately twelve hours before the app is available in the private store. Employees can claim apps that admins added to the private store by doing the following. **To claim an app from the private store** @@ -148,94 +97,72 @@ If you decide that you don't want an app available for employees to install on t **To remove an app from the private store** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then choose **Inventory**. -3. Find an app, click the ellipses under **Action**, and then choose **Remove from private store**, and then click **Remove**. +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. +3. Find an app, click the ellipses under **Action**, choose **Remove from private store**, and then click **Remove**. The app will still be in your inventory, but your employees will not have access to the app from your private store. **To assign an app to an employee** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Micrososft Store for Education](https://businessstore.microsoft.com). 2. Click **Manage**, and then choose **Inventory**. 3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**. 4. Type the email address for the employee that you're assigning the app to, and click **Confirm**. Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**. -### Manage app licenses +## Manage app licenses For each app in your inventory, you can view and manage license details. This give you another way to assign apps to people in your organization. It also allows you to reclaim app licenses after they've been assigned to people, or claimed by people in your organization. **To view license details** -1. Sign in to [Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) +1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. +3. Click an app you want to manage. +4. On the app page, you'll see the names of people in your organization who have installed the app and are using one of the licenses. From here, you can: -2. Click **Manage**, and then choose **Inventory**. + - Assign the app to other people in your organization. + - Reclaim app licenses. + - View app details. + - Add the app to your private store, if it is not in the private store. -3. Click the ellipses for an app, and then choose **View license details**. +You can assign the app to more people in your organization, or reclaim licenses. - ![Image showing Inventory page in Windows Store for Business.](images/wsfb-inventory-viewlicense.png) +**To assign an app to more people** - You'll see the names of people in your organization who have installed the app and are using one of the licenses. +- On the app page, click **Assign users**, type the email address for the person that you're assigning the app to, and click **Assign**. - ![Image showing assigned licenses for an app.](images/wsfb-licensedetails.png) +Micrososft Store updates the list of assigned licenses. - On **Assigned licenses**, you can do several things: +**To reclaim licenses** - - Assign the app to other people in your organization. +- On the app page, choose the person you want to reclaim the license from, click the ellipses, and then click **Reclaim licenses**. - - Reclaim app licenses. +Microsoft Store updates the list of assigned licenses. - - View app details. - - - Add the app to your private store, if it is not in the private store. - - You can assign the app to more people in your organization, or reclaim licenses. - - **To assign an app to more people** - - - Click **Assign to people**, type the email address for the employee that you're assigning the app to, and click **Assign**. - - ![Image showing Assign to people dialog for assigning app licenses to people in your organization.](images/wsfb-licenseassign.png) - - Store for Business updates the list of assigned licenses. - - **To reclaim licenses** - - - Choose the person you want to reclaim the license from, click **Reclaim licenses**, and then click **Reclaim licenses**. - - ![Image showing Assign to people dialog for reclaiming app licenses from people in your organization.](images/wsfb-licensereclaim.png) - - Store for Business updates the list of assigned licenses. - -### Purchase additional licenses +## Purchase additional licenses You can purchase additional licenses for apps in your Inventory. **To purchase additional app licenses** -1. Sign in to [Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) -2. Click **Manage**, and then choose **Inventory**. -3. From **Inventory**, click an app. -4. On the app page, click **View app details**. -5. From this page, click **Buy more** for additional licenses, or click **Manage** to work with your current licenses. +1. Sign in to [Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Micrososft Store for Education](https://businessstore.microsoft.com) +2. Click **Manage**, and then choose **Apps & software**. +3. From **Apps & software**, click an app. +4. On the app page, click **Buy more** for additional licenses, or click **Assign users** to manage your current licenses. You'll have a summary of current license availability. -### Download offline-licensed app - +## Download offline-licensed app Offline licensing is a new feature in Windows 10 and allows apps to be deployed to devices that are not connected to the Internet. This means organizations can deploy apps when users or devices do not have connectivity to the Store. You can download offline-licensed apps from your inventory. You'll need to download these items: +- App metadata +- App package +- App license +- App framework -- App metadata - -- App package - -- App license - -- App framework - -For more information about online and offline licenses, see [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md#licensing-model). +For more information about online and offline licenses, see [Apps in the Microsoft Store for Business](apps-in-windows-store-for-business.md#licensing-model). For more information about downloading offline-licensed apps, see [Download offline apps](distribute-offline-apps.md). \ No newline at end of file diff --git a/store-for-business/apps-in-windows-store-for-business.md b/store-for-business/apps-in-windows-store-for-business.md index 5dcc21f0b4..da6eb860b6 100644 --- a/store-for-business/apps-in-windows-store-for-business.md +++ b/store-for-business/apps-in-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Apps in Windows Store for Business (Windows 10) -description: Windows Store for Business has thousands of apps from many different categories. +title: Apps in Microsoft Store for Business and Education (Windows 10) +description: Microsoft Store for Business has thousands of apps from many different categories. ms.assetid: CC5641DA-3CEA-4950-AD81-1AF1AE876926 ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Apps in Windows Store for Business +# Apps in Microsoft Store for Business and Education **Applies to** @@ -18,83 +18,57 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Windows Store for Business has thousands of apps from many different categories. +Microsoft Store for Business and Education has thousands of apps from many different categories. -## +These app types are supported in Microsoft Store for Business and Education: - -These app types are supported in Store for Business: - -- Universal Windows apps for Windows 10 - -- Universal Windows apps, by device: phone, Surface Hub, IoT, HoloLens +- Universal Windows apps for Windows 10 +- Universal Windows apps, by device: phone, Surface Hub, IoT, HoloLens Apps in your inventory will have at least one of these supported platforms listed for the app: -- Windows 10 desktops +- Windows 10 desktops +- Windows 10 phones +- Windows 10 xbox +- Windows 10 IOT devices +- Windows 10 servers +- Windows 10 \*all devices\* +- Windows 10 Surface Hub +- Windows 10 HoloLens -- Windows 10 phones - -- Windows 10 xbox - -- Windows 10 IOT devices - -- Windows 10 servers - -- Windows 10 \*all devices\* - -- Windows 10 Surface Hub - -- Windows 10 HoloLens - -Apps that you acquire from the Store for Business only work on Windows 10-based devices. Even though an app might list Windows 8 as its supported platform, that tells you what platform the app was originally written for. Apps developed for Windows 8, or Windows phone 8 will work on Windows 10. +Apps that you acquire from the Microsoft Store only work on Windows 10-based devices. Even though an app might list Windows 8 as its supported platform, that tells you what platform the app was originally written for. Apps developed for Windows 8, or Windows Phone 8 will work on Windows 10. Some apps are free, and some apps charge a price. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time. -Some apps which are available to consumers in the Windows Store might not be available to organizations in the Windows Store for Business. App developers can opt-out their apps, and they also need to meet eligibility requirements for Windows Store for Business. For more information, read this info on [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing). +Some apps which are available to consumers in the Windows Store might not be available to organizations in the Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing). -**Note**
-We are still setting up the catalog of apps for Windows Store for Business. If you are searching for an app and it isn’t available, please check again in a couple of days. +Line-of-business (LOB) apps are also supported using the Micrososft Store. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to Microsoft Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md). -Line-of-business (LOB) apps are also supported using the Store for Business. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to the Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app from Store for Business. For more information, see Working with Line-of-Business apps. +## In-app purchases -## In-app purchases - - -Some apps offer you the option to make in-app purchases. In-app purchases are not currently supported for apps that are acquired through Store for Business and distributed to employees. +Some apps offer you the option to make in-app purchases. In-app purchases are not currently supported for apps that are acquired through Micrososft Store and distributed to employees. If an employee makes an in-app purchase, they'll make it with their personal Microsoft account and pay for it with a personal payment method. The employee will own the item purchased, and it cannot be transferred to your organization’s inventory. ## Licensing model: online and offline licenses +Microsoft Store supports two options to license apps: online and offline. -Store for Business supports two options to license apps: online and offline. - -**Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. Licensing management is enforced based on the user’s Azure AD identity and maintained by the store as well as the management tool. By default app updates are handled by Windows Update. +### Online licensing +Online licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require customers and devices to connect to the Microsoft Store service to acquire an app and its license. License management is enforced based on the user’s Azure AD identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update. Distribution options for online-licensed apps include the ability to: -- Assign an app to employees. +- Assign an app to employees. +- Add an app to your private store, allowing employees to download the app. +- Distribute through a management tool. -- Add an app to your private store, allowing employees to download the app. - -- Distribute through a management tool. - -**Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. Admins control whether or not offline apps are available in Store for Business with an offline app visibility setting. For more information, see [offline license visibility](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#offline-licensing). +### Offline licensing +Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Microsoft Store. This model means organizations can deploy apps when users or devices do not have connectivity to Microsost Store. Admins control whether or not offline apps are available in Microsost Store with an offline app visibility setting. For more information, see [offline license visibility](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings#offline-licensing). You have the following distribution options for offline-licensed apps: -- Include the app in a provisioning package, and then use it as part of imaging a device. - -- Distribute the app through a management tool. - -For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). - -  - -  - - - - +- Include the app in a provisioning package, and then use it as part of imaging a device. +- Distribute the app through a management tool. +For more information, see [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). \ No newline at end of file diff --git a/store-for-business/assign-apps-to-employees.md b/store-for-business/assign-apps-to-employees.md index a329393689..cffba1a162 100644 --- a/store-for-business/assign-apps-to-employees.md +++ b/store-for-business/assign-apps-to-employees.md @@ -1,6 +1,6 @@ --- title: Assign apps to employees (Windows 10) -description: Administrators can assign online-licensed apps to employees in their organization. +description: Administrators can assign online-licensed apps to employees and students in their organization. ms.assetid: A0DF4EC2-BE33-41E1-8832-DBB0EBECA31A ms.prod: w10 ms.mktglfcycl: manage @@ -18,17 +18,16 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Administrators can assign online-licensed apps to employees in their organization. +Adminis, Purchasers, and Basic Purchasers can assign online-licensed apps to employees in their organization. **To assign an app to an employee** - -1. Sign in to Windows Store for Business. - -2. Click **Manage**, and then choose **Inventory**. - + +1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. 3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**. - -4. Type the email address for the employee that you're assigning the app to, and click **Confirm**. +-OR- + Click the app, and then click **Assign User**. +4. Type the email address for the person you're assigning the app to, and click **Assign**. Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**. diff --git a/store-for-business/configure-mdm-provider-windows-store-for-business.md b/store-for-business/configure-mdm-provider-windows-store-for-business.md index 8d22548f35..c11269d2f5 100644 --- a/store-for-business/configure-mdm-provider-windows-store-for-business.md +++ b/store-for-business/configure-mdm-provider-windows-store-for-business.md @@ -12,47 +12,30 @@ localizationpriority: high # Configure an MDM provider - **Applies to** - - Windows 10 - Windows 10 Mobile -For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Windows Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content. +For companies or organizations using mobile device management (MDM) tools,those tools can synchronize with Windows Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content. Your management tool needs to be installed and configured with Azure AD, in the same directory that you are using for Store for Business. Once that's done, you can configure it to work with Store for Business **To configure a management tool in Azure AD** 1. Sign in to the Azure Portal as an Administrator. - 2. Click **Active Directory**, and then choose your directory.  - 3. Click **Applications**, find the application, and add it to your directory. -After your management tool is added to your Azure AD directory, you can configure it to work with Store for Business. You can configure multiple management tools - just repeat the following procedure. +After your management tool is added to your Azure AD directory, you can configure it to work with Microsoft Store. You can configure multiple management tools - just repeat the following procedure. **To configure a management tool in Store for Business** -1. Log in to Store for Business. - -2. Click **Settings**, and then choose **Management tool**. - - You'll see a list of available MDM tools. - - ![Screenshot showing page in Management tools page in Windows Store for Business](images/wsfb-settings-mgmt.png) - -3. Choose the MDM tool you want to synchronize with Store for Business, and then click **Activate.** - -Your MDM tool is ready to use with Store for Business. Consult docs for your management tool to learn how to distribute apps from your synchronized inventory. - -See [Manage apps you purchased from Windows Store for Business with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx) to learn how to configure synchroniztion and deploy apps. - -  - -  - - - +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com) +2. Click **Manage**, click **Store settings**, and then click **Management tools**. +3. From the list of MDM tools, select the one you want to synchronize with Microsoft Store, and then click **Activate.** +Your MDM tool is ready to use with Microsoft Store. To learn how to configure synchroniztion and deploy apps, see these topics: +- [Manage apps you purchased from Windows Store for Business with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx) +- [Manage apps from Windows Store for Business with System Center Configuration Manager](https://docs.microsoft.com/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) +For third-party MDM providers or management servers, check your product documentation. \ No newline at end of file diff --git a/store-for-business/device-guard-signing-portal.md b/store-for-business/device-guard-signing-portal.md index e9dabd0581..de51622611 100644 --- a/store-for-business/device-guard-signing-portal.md +++ b/store-for-business/device-guard-signing-portal.md @@ -1,6 +1,6 @@ --- title: Device Guard signing (Windows 10) -description: Device Guard signing is a Device Guard feature that is available in the Windows Store for Business. +description: Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business and Microsoft Store for Education. ms.assetid: 8D9CD2B9-5FC6-4C3D-AA96-F135AFEEBB78 ms.prod: w10 ms.mktglfcycl: manage @@ -18,41 +18,18 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Device Guard signing is a Device Guard feature that is available in the Windows Store for Business. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files. +Device Guard signing is a Device Guard feature that is available in Microsoft Store for Business and Education. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files,they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files. Device Guard is a feature set that consists of both hardware and software system integrity hardening features. These features use new virtualization-based security options and the trust-nothing mobile device operating system model. A key feature in this model is called configurable code integrity, which allows your organization to choose exactly which software or trusted software publishers are allowed to run code on your client machines. Also, Device Guard offers organizations a way to sign existing line-of-business (LOB) applications so that they can trust their own code, without the requirement that the application be repackaged. Also, this same method of signing allows organizations to trust individual third-party applications. For more information, see [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). ## In this section - - ---- - - - - - - - - - - - - - - - - -
TopicDescription

[Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md)

When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies.

[Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md)

Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal.

- -  +| Topic | Description | +| ----- | ----------- | +| [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) | When you want to add an unsigned app to a code integrity policy, you need to start with a code integrity policy created from a reference device. Then, create the catalog files for your unsigned app, sign the catalog files, and then merge the default policy that includes your signing certificate with existing code integrity policies. | +| [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) | Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal. | ## File and size limits - - When you're uploading files for Device Guard signing, there are a few limits for files and file size: | Description | Limit | @@ -61,11 +38,7 @@ When you're uploading files for Device Guard signing, there are a few limits for | Maximum size for multiple files (uploaded in a group) | 4 MB | | Maximum number of files per upload | 15 files | -  - -## File types - - + ## File types Catalog and policy files have required files types. | File | Required file type | @@ -73,23 +46,8 @@ Catalog and policy files have required files types. | catalog files | .cat | | policy files | .bin | -  - -## Store for Business roles and permissions - - + ## Store for Business roles and permissions Signing code integrity policies and access to Device Guard portal requires the Device Guard signer role. ## Device Guard signing certificates - - -All certificates generated by the Device Guard signing service are unique per customer and are independent of the Microsoft production code signing certificate authorities. All Certification Authority (CA) keys are stored within the cryptographic boundary of Federal Information Processing Standards (FIPS) publication 140-2 compliant hardware security modules. After initial generation, root certificate keys and top level CA keys are removed from the online signing service, encrypted, and stored offline. - -  - -  - - - - - +All certificates generated by the Device Guard signing service are unique per customer and are independent of the Microsoft production code signing certificate authorities. All Certification Authority (CA) keys are stored within the cryptographic boundary of Federal Information Processing Standards (FIPS) publication 140-2 compliant hardware security modules. After initial generation, root certificate keys and top level CA keys are removed from the online signing service, encrypted, and stored offline. \ No newline at end of file diff --git a/store-for-business/distribute-apps-from-your-private-store.md b/store-for-business/distribute-apps-from-your-private-store.md index 8c53c8e10d..608cfdca5f 100644 --- a/store-for-business/distribute-apps-from-your-private-store.md +++ b/store-for-business/distribute-apps-from-your-private-store.md @@ -1,6 +1,6 @@ --- title: Distribute apps using your private store (Windows 10) -description: The private store is a feature in Windows Store for Business that organizations receive during the sign up process. +description: The private store is a feature in Microsoft Store for Business and Microsoft Store for Education that organizations receive during the signup process. ms.assetid: C4644035-845C-4C84-87F0-D87EA8F5BA19 ms.prod: w10 ms.mktglfcycl: manage @@ -18,33 +18,31 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -The private store is a feature in Windows Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. +The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. You can make an app available in your private store when you acquire the app, or you can do it later from your inventory. Once the app is in your private store, employees can claim and install the app. **To acquire an app and make it available in your private store** -1. Sign in to the [Store for Business](https://businessstore.microsoft.com). +1. Sign in to [Micrososft Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://educationstore.microsoft.com). 2. Click an app, choose the license type, and then click **Get the app** to acquire the app for your organization. - ![Image showing Distribute options for app in the Windows Store for Business.](images/wsfb-distribute.png) + -Windows Store for Business add the app to your **Inventory**. Click **Manage**, **Inventory** for app distribution options. +Microsoft Store adds the app to **Apps & software**. Click **Manage**, **Apps & software** for app distribution options. -**To make an app in Inventory available in your private store** +**To make an app in Apps & software available in your private store** -1. Sign in to the [Store for Business](https://businessstore.microsoft.com). +1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Micrososft Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. -2. Click **Manage**, and then choose **Inventory**. + - ![Image showing Manage menu in Windows Store for Business.](images/wsfb-manageinventory.png) +3. Use **Refine results** to search for online-licensed apps under **License type**. +4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**. -3. Click **Refine**, and then choose **Online**. Store for Business will update the list of apps on the **Inventory** page. - -4. From an app in **Inventory**, click the ellipses under **Action**, and then choose **Add to private store**. - - ![Image showing options from Action for each app in Inventory.](images/wsfb-inventoryaddprivatestore.png) + The value under **Private store** for the app will change to pending. It will take approximately twelve hours before the app is available in the private store. @@ -52,18 +50,13 @@ Employees can claim apps that admins added to the private store by doing the fol **To claim an app from the private store** -1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app. - -2. Click the **private store** tab. - -3. Click the app you want to install, and then click **Install**. +1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app. +2. Click the **private store** tab. +3. Click the app you want to install, and then click **Install**. ## Related topics - - -[Manage access to private store](manage-access-to-private-store.md) - -[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store) +- [Manage access to private store](manage-access-to-private-store.md) +- [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)   diff --git a/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md b/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md index 8863d87a80..b72519ba89 100644 --- a/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md +++ b/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Distribute apps to your employees from the Windows Store for Business (Windows 10) -description: Distribute apps to your employees from Windows Store for Business. You can assign apps to employees, or let employees install them from your private store. +title: Distribute apps to your employees from the Microsoft Store for Business and Education (Windows 10) +description: Distribute apps to your employees from Microsoft Store for Business or Microsoft Store for Education. You can assign apps to employees,or let employees install them from your private store. ms.assetid: E591497C-6DFA-49C1-8329-4670F2164E9E ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Distribute apps to your employees from the Windows Store for Business +# Distribute apps to your employees from Microsoft Store for Business and Education **Applies to** @@ -18,49 +18,14 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Distribute apps to your employees from Windows Store for Business. You can assign apps to employees, or let employees install them from your private store. +Distribute apps to your employees from Microsoft Store for Business and Microsoft Store for Education. You can assign apps to employees, or let employees install them from your private store. ## In this section - - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
TopicDescription

[Distribute apps using your private store](distribute-apps-from-your-private-store.md)

The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.

[Assign apps to employees](assign-apps-to-employees.md)

Administrators can assign online-licensed apps to employees in their organization.

[Distribute apps with a management tool](distribute-apps-with-management-tool.md)

You can configure a mobile device management (MDM) tool to synchronize your Store for Business inventory. Store for Business management tool services work with MDM tools to manage content.

[Distribute offline apps](distribute-offline-apps.md)

Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. ISVs or devs can opt-in their apps for offline licensing when they submit them to the Windows Dev Center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in the Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store.

- -  - -  - -  - - - - +| Topic | Description | +| ----- | ----------- | +| [Distribute apps using your private store](distribute-apps-from-your-private-store.md) | The private store is a feature in Microsoft Store that organizations and schools receive during the signup process. When admins add apps to the private store, all people in the organization can view and download the apps. Only apps with online licenses can be added to the private store. | +| [Assign apps to employees](assign-apps-to-employees.md) | Adminis can assign online-licensed apps to people in their organization. | +| [Distribute apps with a management tool](distribute-apps-with-management-tool.md) | Admins can configure a mobile device management (MDM) tool to synchronize your Microsoft Store inventory. Microsoft Store management tool services work with MDM tools to manage content. | +| [Distribute offline apps](distribute-offline-apps.md) | Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. This allows organizations to deploy apps to devices without connectivity to the Store. | diff --git a/store-for-business/distribute-apps-with-management-tool.md b/store-for-business/distribute-apps-with-management-tool.md index f030d0d1ce..391e5173f4 100644 --- a/store-for-business/distribute-apps-with-management-tool.md +++ b/store-for-business/distribute-apps-with-management-tool.md @@ -1,6 +1,6 @@ --- title: Distribute apps with a management tool (Windows 10) -description: You can configure a mobile device management (MDM) tool to synchronize your Store for Business inventory. Store for Business management tool services work with MDM tools to manage content. +description: You can configure a mobile device management (MDM) tool to synchronize your Microsoft Store for Business or Microsoft Store for Education inventory. Microsoft Store management tool services work with MDM tools to manage content. ms.assetid: 006F5FB1-E688-4769-BD9A-CFA6F5829016 ms.prod: w10 ms.mktglfcycl: manage @@ -18,13 +18,13 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -You can configure a mobile device management (MDM) tool to synchronize your Store for Business inventory. Store for Business management tool services work with MDM tools to manage content. +You can configure a mobile device management (MDM) tool to synchronize your Microsoft Store for Business or Microsoft Store for Education inventory. Microsoft Store management tool services work with MDM tools to manage content. -Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Windows Store for Business. +Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Microsoft Store. -In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Store for Business. This allows the MDM tool to call Store for Business management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) and [Manage apps you purchased from the Windows Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune). +In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) and [Manage apps you purchased from the Windows Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune). -Store for Business services provide: +Microsoft Store services provide: - Services for third-party MDM tools. @@ -38,14 +38,13 @@ MDM tool requirements: - Must be an Azure Active Directory (AD) application to authenticate against the Store for Business services. -- Must be configured in Azure AD, and Store for Business. +- Must be configured in Azure AD, and Microsoft Store. -- Azure AD identity is required to authorize Store for Business services. +- Azure AD identity is required to authorize Microsoft Store services. ## Distribute offline-licensed apps - -If your vendor doesn’t support the ability to synchronize applications from the management tool services or cannot connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Windows Store for Business.](apps-in-windows-store-for-business.md#licensing-model) +If your vendor doesn’t support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Windows Store for Business.](apps-in-windows-store-for-business.md#licensing-model) This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices. @@ -53,17 +52,14 @@ This diagram shows how you can use a management tool to distribute offline-licen ## Distribute online-licensed apps +This diagram shows how you can use a management tool to distribute an online-licensed app to employees in your organization. Once synchronized from Microsoft Store, management tools use the Windows Management framework to distribute applications to devices. For online-licensed applications, the management tool calls back to Microsoft Store management services to assign an application prior to issuing the policy to install the application. -This diagram shows how you can use a management tool to distribute an online-licensed app to employees in your organization. Once synchronized from Store for Business, management tools use the Windows Management framework to distribute applications to devices. For Online licensed applications, the management tool calls back in to Store for Business management services to assign an application prior to issuing the policy to install the application. - -![Image showing flow for distributing online-licensed app from Wndows Store for Business.](images/wsfb-online-distribute-mdm.png) +![Image showing flow for distributing online-licensed app from Microsoft Store for Business.](images/wsfb-online-distribute-mdm.png) ## Related topics - [Configure MDM Provider](configure-mdm-provider-windows-store-for-business.md) - -[Manage apps you purchased from the Windows Store for Business with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx) +[Manage apps you purchased from the Microsoft Store for Business and Education with Microsoft InTune](https://technet.microsoft.com/library/mt676514.aspx)   diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index b0a6b60bc0..2e540c478f 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -18,22 +18,21 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Offline licensing is a new licensing option for Windows 10 Store for Business. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. ISVs or devs can opt-in their apps for offline licensing when they submit them to the Windows Dev Center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in the Windows Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. +Offline licensing is a new licensing option for Windows 10 with Microsoft Store for Business and Microsoft Store for Education. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. ISVs or devs can opt-in their apps for offline licensing when they submit them to the Windows Dev Center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in the Microsoft Store for Business and Microsoft Store for Education. This model allows organizations to deploy apps when users or devices do not have connectivity to the Store. ## Why offline-licensed apps? +Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps: -Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps include: - -- **You don't have access to Windows Store services** - If your employees don't have access to the internet and Windows Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps. +- **You don't have access to Windows Store services** - If your employees don't have access to the internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps. - **You use imaging to manage devices in your organization** - Offline-licensed apps can be added to images and deployed with Deployment Image Servicing and Management (DISM), or Windows Imaging and Configuration Designer (ICD). -- **Your employees do not have Azure Active Directory (AD) accounts** - Azure AD accounts are required for employees that install apps assigned to them from Store for Business or that claim apps from a private store. +- **Your employees do not have Azure Active Directory (AD) accounts** - Azure AD accounts are required for employees that install apps assigned to them from Microsoft Store or that claim apps from a private store. ## Distribution options for offline-licensed apps -You can't distribute offline-licensed apps directly from the Store for Business. Once you download the items for the offline-licensed app, you have options for distributing the apps: +You can't distribute offline-licensed apps directly from the Microsoft Store. Once you download the items for the offline-licensed app, you have options for distributing the apps: - **Deployment Image Servicing and Management**. DISM is a command-line tool that is used to mount and service Microsoft Windows images before deployment. You can also use DISM to install, uninstall, configure, and update Windows features, packages, drivers, and international settings in a .wim file or VHD using the DISM servicing commands. DISM commands are used on offline images. For more information, see [Deployment Image Servicing and Management](https://msdn.microsoft.com/windows/hardware/commercialize/manufacture/desktop/dism---deployment-image-servicing-and-management-technical-reference-for-windows). @@ -60,12 +59,9 @@ There are several items to download or create for offline-licensed apps. The app **To download an offline-licensed app** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com/). - -2. Click **Manage**, and then choose **Inventory**. - -3. Click **Refine**, and then choose **Offline**. - +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. +3. Refine results by **License type** to show apps with offline licenses. 4. Find the app you want to download, click the ellipses under **Actions**, and then choose **Download for offline use**. - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional. - **To download app package**: Click to expand the package details information, choose the Platform and Architecture combination that you need for your organization, and then click **Download**. Save the downloaded app package. This is required. diff --git a/store-for-business/education/TOC.md b/store-for-business/education/TOC.md new file mode 100644 index 0000000000..2e4ef3a73c --- /dev/null +++ b/store-for-business/education/TOC.md @@ -0,0 +1,35 @@ +# [Microsoft Store for Education](/microsoft-store/index?toc=/microsoft-store/education/toc.json) + +## [Sign up and get started](/microsoft-store/sign-up-windows-store-for-business-overview?toc=/microsoft-store/education/toc.json) +###[Microsoft Store for Business and Education overview](/microsoft-store/windows-store-for-business-overview?toc=/microsoft-store/education/toc.json) +### [Prerequisites for Microsoft Store for Business and Education](/microsoft-store/prerequisites-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Sign up for Microsoft Store for Business or Microsoft Store for Education](/microsoft-store/sign-up-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Roles and permissions in the Microsoft Store for Business and Education](/microsoft-store/roles-and-permissions-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Settings reference: Microsoft Store for Business and Education](/microsoft-store/settings-reference-windows-store-for-business?toc=/microsoft-store/education/toc.json) +## [Working with Microsoft Store for Education](/education/windows/education-scenarios-store-for-business?toc=/microsoft-store/education/toc.json) +## [Find and acquire apps](/microsoft-store/find-and-acquire-apps-overview?toc=/microsoft-store/education/toc.json) +### [Apps in the Microsoft Store for Business and Education](/microsoft-store/apps-in-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Acquire apps in the Microsoft Store for Business and Education](/microsoft-store/acquire-apps-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Working with line-of-business apps](/microsoft-store/working-with-line-of-business-apps?toc=/microsoft-store/education/toc.json) +## [Get Minecraft: Education Edition](/education/windows/get-minecraft-for-education?toc=/microsoft-store/education/toc.json) +### [For teachers: get Minecraft Education Edition](/education/windows/teacher-get-minecraft?toc=/microsoft-store/education/toc.json) +### [For IT administrators: get Minecraft Education Edition](/education/windows/school-get-minecraft?toc=/microsoft-store/education/toc.json) +## [Distribute apps to your employees from the Microsoft Store for Business and Education](/microsoft-store/distribute-apps-to-your-employees-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Distribute apps using your private store](/microsoft-store/distribute-apps-from-your-private-store?toc=/microsoft-store/education/toc.json) +### [Assign apps to employees](/microsoft-store/assign-apps-to-employees?toc=/microsoft-store/education/toc.json) +### [Distribute apps with a management tool](/microsoft-store/distribute-apps-with-management-tool?toc=/microsoft-store/education/toc.json) +### [Distribute offline apps](/microsoft-store/distribute-offline-apps?toc=/microsoft-store/education/toc.json) +## [Manage apps](/microsoft-store/manage-apps-windows-store-for-business-overview?toc=/microsoft-store/education/toc.json) +### [App inventory managemement for Microsoft Store for Business](/microsoft-store/app-inventory-management-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Manage app orders in Microsoft Store for Business and Education](/microsoft-store/manage-orders-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Manage access to private store](/microsoft-store/manage-access-to-private-store?toc=/microsoft-store/education/toc.json) +### [Manage private store settings](/microsoft-store/manage-private-store-settings?toc=/microsoft-store/education/toc.json) +### [Configure MDM provider](/microsoft-store/configure-mdm-provider-windows-store-for-business?toc=/microsoft-store/education/toc.json) +## [Device Guard signing portal](/microsoft-store/device-guard-signing-portal?toc=/microsoft-store/education/toc.json) +### [Add unsigned app to code integrity policy](/microsoft-store/add-unsigned-app-to-code-integrity-policy?toc=/microsoft-store/education/toc.json) +### [Sign code integrity policy with Device Guard signing](/microsoft-store/sign-code-integrity-policy-with-device-guard-signing?toc=/microsoft-store/education/toc.json) +## [Manage settings in the Microsoft Store for Business and Education](/microsoft-store/manage-settings-windows-store-for-business?toc=/microsoft-store/education/toc.json) +### [Update Microsoft Store for Business and Microsoft Store for Education account settings](/microsoft-store/update-windows-store-for-business-account-settings?toc=/microsoft-store/education/toc.json) +### [Manage user accounts in Microsoft Store for Business and Education](/microsoft-store/manage-users-and-groups-windows-store-for-business?toc=/microsoft-store/education/toc.json) +## [Troubleshoot Microsoft Store for Business](/microsoft-store/troubleshoot-windows-store-for-business?toc=/microsoft-store/education/toc.json) + diff --git a/store-for-business/find-and-acquire-apps-overview.md b/store-for-business/find-and-acquire-apps-overview.md index 30ca08ff48..fd460d3479 100644 --- a/store-for-business/find-and-acquire-apps-overview.md +++ b/store-for-business/find-and-acquire-apps-overview.md @@ -1,6 +1,6 @@ --- title: Find and acquire apps (Windows 10) -description: Use the Windows Store for Business to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. +description: Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. ms.assetid: 274A5003-5F15-4635-BB8B-953953FD209A ms.prod: w10 ms.mktglfcycl: manage @@ -18,45 +18,13 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Use the Windows Store for Business to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. +Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. ## In this section - - ---- - - - - - - - - - - - - - - - - - - - - -
TopicDescription

[Apps in the Windows Store for Business](apps-in-windows-store-for-business.md)

Store for Business has thousands of apps from many different categories.

[Acquire apps in the Windows Store for Business](acquire-apps-windows-store-for-business.md)

You can acquire apps from the Windows Store for Business for your employees.

[Working with line-of-business apps](working-with-line-of-business-apps.md)

Your company can make line-of-business (LOB) applications available through Store for Business. These apps are custom to your company – they might be internal business apps, or apps specific to your business or industry.

- -  - -  - -  - - - - +| Topic | Description | +| ----- | ----------- | +| [Apps in the Microsoft Store for Business and Education](apps-in-windows-store-for-business.md) | Store for Business and Education has thousands of apps from many different categories. | +| [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-windows-store-for-business.md) | You can acquire apps from the Microsoft Store for Business and Education for your employees. | +| [Working with line-of-business apps](working-with-line-of-business-apps.md) | Your company can make line-of-business (LOB) applications available through Microsoft Store for Business and Education. These apps are custom to your company – they might be internal business apps, or apps specific to your business or industry. | diff --git a/store-for-business/index.md b/store-for-business/index.md index 7db0654659..f8fca9deb1 100644 --- a/store-for-business/index.md +++ b/store-for-business/index.md @@ -1,6 +1,6 @@ --- -title: Windows Store for Business (Windows 10) -description: Welcome to the Windows Store for Business You can use the Store for Business, to find, acquire, distribute, and manage apps for your organization. +title: Microsoft Store for Business and Education (Windows 10) +description: Welcome to the Microsoft Store for Business and Education. You can use Microsoft Store, to find, acquire, distribute, and manage apps for your organization or school. ms.assetid: 527E611E-4D47-44F0-9422-DCC2D1ACBAB8 ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Windows Store for Business +# Microsoft Store for Business and Education **Applies to** @@ -18,51 +18,15 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Welcome to the Windows Store for Business! You can use the Store for Business, to find, acquire, distribute, and manage apps for your organization. +Welcome to the Microsoft Store for Business and Education! You can use Microsoft Store to find, acquire, distribute, and manage apps for your organization or school. ## In this section - - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
TopicDescription

[Sign up and get started](sign-up-windows-store-for-business-overview.md)

IT admins can sign up for the Store for Business, and get started working with apps.

[Find and acquire apps](find-and-acquire-apps-overview.md)

Use the Store for Business to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization.

[Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md)

Distribute apps to your employees from Store for Business. You can assign apps to employees, or let employees install them from your private store.

[Manage apps](manage-apps-windows-store-for-business-overview.md)

Manage settings and access to apps in Store for Business.

[Device Guard signing portal](device-guard-signing-portal.md)

Device Guard signing is a Device Guard feature that is available in the Store for Business. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files.

[Manage settings in the Windows Store for Business](manage-settings-windows-store-for-business.md)

You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant

[Troubleshoot Windows Store for Business](troubleshoot-windows-store-for-business.md)

Troubleshooting topics for Store for Business.

- +| Topic | Description | +| ----- | ----------- | +| [Sign up and get started](sign-up-windows-store-for-business-overview.md) | IT admins can sign up for the Microsoft Store for Business and Education, and get started working with apps. | +| [Find and acquire apps](find-and-acquire-apps-overview.md) | Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. | +| [Manage apps](manage-apps-windows-store-for-business-overview.md) | Manage settings and access to apps in Microsoft Store for Business and Education. | +| [Device Guard signing portal](device-guard-signing-portal.md) | Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business and Education. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files. | +| [Manage settings in the Microsoft Store for Business and Education](manage-settings-windows-store-for-business.md) | You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant | +| [Troubleshoot Microsoft Store for Business and Education](troubleshoot-windows-store-for-business.md) | Troubleshooting topics for Microsoft Store for Business and Education. | \ No newline at end of file diff --git a/store-for-business/manage-access-to-private-store.md b/store-for-business/manage-access-to-private-store.md index 248ea4396f..36e3b78d0b 100644 --- a/store-for-business/manage-access-to-private-store.md +++ b/store-for-business/manage-access-to-private-store.md @@ -1,6 +1,6 @@ --- title: Manage access to private store (Windows 10) -description: You can manage access to your private store in Windows Store for Business. +description: You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education. ms.assetid: 4E00109C-2782-474D-98C0-02A05BE613A5 ms.prod: w10 ms.mktglfcycl: manage @@ -17,13 +17,13 @@ author: TrudyHa - Windows 10 - Windows 10 Mobile -You can manage access to your private store in Windows Store for Business. +You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education. -Organizations might want control the set of apps that are available to their employees, and not show the full set of applications that are in the Windows Store. Using the private store with the Store for Business, an administrator can curate the set of apps that are available to their employees. +You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in the Windows Store. Using the private store with the Micrososft Store for Business and Eduction, admins can curate the set of apps that are available. The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this: -![Image showing the Windows Store app, with a private store tab highlighted.](images/wsfb-wsappprivatestore.png) + Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store. @@ -41,7 +41,7 @@ For more information on configuring an MDM provider, see [Configure an MDM provi ## Show private store only using Group Policy -If you're using Windows Store for Business and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store. +If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store. **Only display the private store within the Windows Store app** group policy is supported on the following Windows 10 editions: - Enterprise @@ -63,9 +63,7 @@ You can also prevent employees from using the Windows Store. For more informatio ## Related topics - [Distribute apps using your private store](distribute-apps-from-your-private-store.md) - [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)   diff --git a/store-for-business/manage-apps-windows-store-for-business-overview.md b/store-for-business/manage-apps-windows-store-for-business-overview.md index f4248b9b04..6757e4eecd 100644 --- a/store-for-business/manage-apps-windows-store-for-business-overview.md +++ b/store-for-business/manage-apps-windows-store-for-business-overview.md @@ -1,6 +1,6 @@ --- -title: Manage apps in Windows Store for Business (Windows 10) -description: Manage settings and access to apps in Windows Store for Business. +title: Manage apps in Microsoft Store for Business (Windows 10) +description: Manage settings and access to apps in Microsoft Store for Business. ms.assetid: 2F65D4C3-B02C-41CC-92F0-5D9937228202 ms.prod: w10 ms.mktglfcycl: manage @@ -10,57 +10,20 @@ author: TrudyHa localizationpriority: high --- -# Manage apps in Windows Store for Business - +# Manage apps in Microsoft Store for Business and Education **Applies to** - Windows 10 - Windows 10 Mobile -Manage settings and access to apps in Windows Store for Business. +Manage settings and access to apps in Microsoft Store for Business and Microsoft Store for Education. ## In this section - - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
TopicDescription

[Manage access to private store](manage-access-to-private-store.md)

You can manage access to your private store in Store for Business.

[App inventory managemement for Windows Store for Business](app-inventory-management-windows-store-for-business.md)

You can manage all apps that you've acquired on your Inventory page.

[Manage private store settings](manage-private-store-settings.md)

The private store is a feature in the Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.

[Configure MDM provider](configure-mdm-provider-windows-store-for-business.md)

For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content.

- -  - -  - -  - - - - - +| Topic | Description | +| ----- | ----------- | +| [Manage access to private store](manage-access-to-private-store.md) | You can manage access to your private store in Store for Business. | +| [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-windows-store-for-business.md) | You can manage all apps that you've acquired on your **Apps & software** page. | +| [Manage private store settings](manage-private-store-settings.md) | The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store. | +| [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) | For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Microsoft Store for Business inventory to manage apps with offline licenses. Microsoft Store management tool services work with your third-party management tool to manage content. | \ No newline at end of file diff --git a/store-for-business/manage-orders-windows-store-for-business.md b/store-for-business/manage-orders-windows-store-for-business.md index 9ca7ce1322..ee1a065e82 100644 --- a/store-for-business/manage-orders-windows-store-for-business.md +++ b/store-for-business/manage-orders-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Manage app orders in Windows Store for Business (Windows 10) -description: You can view your order history with Windows Store for Business. +title: Manage app orders in Microsoft Store for Business or Microsoft Store for Education (Windows 10) +description: You can view your order history with Micrsoft Store for Business or Micrsoft Store for Education. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -9,9 +9,9 @@ author: TrudyHa localizationpriority: high --- -# Manage app orders in Windows Store for Business +# Manage app orders in Microsoft Store for Business and Education -After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can buy more license for an app, view invoices, and request refunds. +After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can view invoices, and request refunds. **Order history** lists orders in chronological order and shows: - Date ordered @@ -31,18 +31,6 @@ Click to expand an order, and the following info is available: Invoices for orders are available approximatley 24 hours after your purchase. The link opens a .pdf that you can save for your records. -## Buy more licenses - -You can purchase more copies of apps that are in your order history. - -**To buy more licenses** - -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then choose **Order history**. -3. Click an order, and then click **Buy more**. - -You can buy more copies of the app from the product page. - ## Refund an order Refunds work a little differently for free apps, and apps that have a price. In both cases, you must reclaim licenses before requesting a refund. @@ -61,13 +49,12 @@ Refunds work a little differently for free apps, and apps that have a price. In **To refund an order** Reclaim licenses, and then request a refund. If you haven't assigned licenses, start on step 5. -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then choose **Inventory**. -3. Find the app you want to refund, click the ellipses under **Action**, and then choose **View license details**. -4. Select the number of licenses you need to reclaim, and then click **Reclaim licenses**. -5. Click **Manage**, and then choose **Order history**. -6. Click the order you want to refund, and click **Refund order**. +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then choose **Apps & software**. +3. Find the app you want to refund, click the ellipses under **Actions**, and then choose **View license details**. +4. Select the the people who you want to reclaim license from, click the ellipses under **Actions**, and then choose **Reclaim licenses**. +5. Click **Order history**, click the order you want to refund, and click **Refund order**. -For free apps, the app will be removed from your inventory. +For free apps, the app will be removed from your inventory in **Apps & software**. For apps with a price, your payment option will be refunded with the cost of the app, and the app will be removed from your inventory. diff --git a/store-for-business/manage-private-store-settings.md b/store-for-business/manage-private-store-settings.md index e070bd57ea..5f93dc0e99 100644 --- a/store-for-business/manage-private-store-settings.md +++ b/store-for-business/manage-private-store-settings.md @@ -1,6 +1,6 @@ --- title: Manage private store settings (Windows 10) -description: The private store is a feature in the Windows Store for Business that organizations receive during the sign up process. +description: The private store is a feature in the Microsoft Store for Business and Microsoft Store for Education that organizations receive during the sign up process. ms.assetid: 2D501538-0C6E-4408-948A-2BF5B05F7A0C ms.prod: w10 ms.mktglfcycl: manage @@ -12,32 +12,25 @@ localizationpriority: high # Manage private store settings - **Applies to** - Windows 10 - Windows 10 Mobile -The private store is a feature in the Windows Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store. +The private store is a feature in the Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store. -The name of your private store is shown on a tab in the Windows Store app. +The name of your private store is shown on a tab in the Windows Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com). ![Image showing Windows Store app with private store tab highlighted.](images/wsfb-wsappprivatestore.png) -You can change the name of your private store in Store for Business. +You can change the name of your private store in Microsoft Store. +## Change private store name **To change the name of your private store** -1. Sign in to Store for Business. - -2. Click **Settings**, and then choose **Private store**. - - You'll see your private store name. - - ![Image showing Private store page in Windows Store for Business.](images/wsfb-privatestore.png) - -3. Click **Change**. - +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com) +2. Click **Manage**, click **Permissions**. +3. On the **Private store ** tab, click **Change**. 4. Type a new display name for your private store, and click **Save**. ![Image showing Private store dialog used to change private store display name.](images/wsfb-renameprivatestore.png) diff --git a/store-for-business/manage-settings-windows-store-for-business.md b/store-for-business/manage-settings-windows-store-for-business.md index 704d4d4401..e7c764ce7d 100644 --- a/store-for-business/manage-settings-windows-store-for-business.md +++ b/store-for-business/manage-settings-windows-store-for-business.md @@ -1,5 +1,5 @@ --- -title: Manage settings for the Windows Store for Business (Windows 10) +title: Manage settings for the Microsoft Store for Business and Microsoft Store for Education (Windows 10) description: You can add users and groups, as well as update some of the settings associated with the Azure Active Directory (AD) tenant. ms.assetid: E3283D77-4DB2-40A9-9479-DDBC33D5A895 ms.prod: w10 @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Manage settings for the Windows Store for Business +# Manage settings for the Microsoft Store for Business and Education **Applies to** @@ -22,37 +22,9 @@ You can add users and groups, as well as update some of the settings associated ## In this section - - ---- - - - - - - - - - - - - - - - - -
TopicDescription

[Update Windows Store for Business account settings](update-windows-store-for-business-account-settings.md)

The Account information page in Windows Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings.

[Manage user accounts in Windows Store for Business](manage-users-and-groups-windows-store-for-business.md)

Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups.

- -  - -  - -  - - - +| Topic | Description | +| ----- | ----------- | +| [Update Microsoft Store for Business and Education account settings](update-windows-store-for-business-account-settings.md) | The **Account information** page in Microsoft Store for Business shows information about your organization that you can update, including: organization information, payment options, and offline licensing settings. | +| [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) | Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. | diff --git a/store-for-business/manage-users-and-groups-windows-store-for-business.md b/store-for-business/manage-users-and-groups-windows-store-for-business.md index 23783a767d..83baed4cea 100644 --- a/store-for-business/manage-users-and-groups-windows-store-for-business.md +++ b/store-for-business/manage-users-and-groups-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Manage user accounts in Windows Store for Business (Windows 10) -description: Windows Store for Business manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups. +title: Manage user accounts in Microsoft Store for Business and Microsoft Store for Education (Windows 10) +description: Microsoft Store for Business and Microsoft Store for Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups. ms.assetid: 5E7FA071-CABD-4ACA-8AAE-F549EFCE922F ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Manage user accounts in Windows Store for Business +# Manage user accounts in Microsoft Store for Business and Education **Applies to** @@ -18,35 +18,27 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Windows Store for Business manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. +Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-windows-store-for-business.md), but not to groups. ## Why Azure AD accounts? - - For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and the Store for Business. Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes: -- Single sign-on to any cloud and on-premises web app. - -- Works with multiple platforms and devices. - -- Integrate with on-premises Active Directory. +- Single sign-on to any cloud and on-premises web app. +- Works with multiple platforms and devices. +- Integrate with on-premises Active Directory. For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611). ## Add user accounts to your Azure AD directory - - If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-windows-store-for-business.md) You can use the [Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708616) or [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=691086) to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708617). For more information, see: - -- [Add user accounts using Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708618) - -- [Add user accounts using Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708619) +- [Add user accounts using Office 365 admin dashboard](https://go.microsoft.com/fwlink/p/?LinkId=708618) +- [Add user accounts using Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708619)   diff --git a/store-for-business/prerequisites-windows-store-for-business.md b/store-for-business/prerequisites-windows-store-for-business.md index 0ca1be50d5..2bd8d40451 100644 --- a/store-for-business/prerequisites-windows-store-for-business.md +++ b/store-for-business/prerequisites-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Prerequisites for Windows Store for Business (Windows 10) -description: There are a few prerequisites for using Windows Store for Business. +title: Prerequisites for Microsoft Store for Business and Education (Windows 10) +description: There are a few prerequisites for using Microsoft Store for Business or Microsoft Store for Education. ms.assetid: CEBC6870-FFDD-48AD-8650-8B0DC6B2651D ms.prod: w10 ms.mktglfcycl: manage @@ -10,43 +10,42 @@ author: TrudyHa localizationpriority: high --- -# Prerequisites for Windows Store for Business - +# Prerequisites for Microsoft Store for Business and Education **Applies to** - Windows 10 - Windows 10 Mobile -There are a few prerequisites for using Windows Store for Business. +There are a few prerequisites for using Microsoft Store for Business or Microsoft Store for Education. ## Prerequisites -You'll need this software to work with Store for Business. +You'll need this software to work with Microsoft Store for Business or Education. ### Required -- IT Pros that are administering Store for Business need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox. -- Employees using apps from Store for Business need at least Windows 10, version 1511 running on a PC or mobile device. +- IT Pros that are administering Microsoft Store for Business and Education need a browser compatible with Microsoft Store for Business and Education running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox. Javascript needs to be supported and enabled. +- Employees using apps from Micrsoft Store for Business and Education need at least Windows 10, version 1511 running on a PC or mobile device. -Microsoft Azure Active Directory (AD) accounts for your employees: -- IT Pros need Azure AD accounts to sign up for Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses. -- Employees need Azure AD accounts when they access Store for Business content from Windows-based devices. +Microsoft Azure Active Directory (AD) or Office 365 accounts for your employees: +- IT Pros need Azure AD or Office 365 accounts to sign up for Microsoft Store for Business and Education, and then to sign in, get apps, distribute apps, and manage app licenses. +- Employees need Azure AD accounts when they access Microsoft Store for Business or Education content from Windows-based devices. - If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account. For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611). ### Optional -While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. If you're considering using management tools, check with the management tool vendor to see if they support Store for Business. The management tool will need to: +While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. If you're considering using management tools, check with the management tool vendor to see if they support Microsoft Store for Business and Education. The management tool will need to: - Integrate with the Windows 10 management framework and Azure AD. -- Sync with the Store for Business inventory to distribute apps. +- Sync with the Microsoft Store for Business and Education inventory to distribute apps. ### Proxy configuration -If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Store for Business. Some of the Store for Business features use Windows Store app and Windows Store services. Devices using Store for Business – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy server to block traffic, your configuration needs to allow these URLs: +If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Windows Store app and Microsoft Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy sever to block traffic, your configuration needs to allow these URLs: - login.live.com - login.windows.net diff --git a/store-for-business/roles-and-permissions-windows-store-for-business.md b/store-for-business/roles-and-permissions-windows-store-for-business.md index 8985c21e1c..fc3fbae54c 100644 --- a/store-for-business/roles-and-permissions-windows-store-for-business.md +++ b/store-for-business/roles-and-permissions-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Roles and permissions in Windows Store for Business (Windows 10) -description: The first person to sign in to Windows Store for Business must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees. +title: Roles and permissions in Microsoft Store for Business and Education (Windows 10) +description: The first person to sign in to Microsoft Store for Business or Microsoft Store for Education must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees. ms.assetid: CB6281E1-37B1-4B8B-991D-BC5ED361F1EE ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Roles and permissions in Windows Store for Business +# Roles and permissions in Microsoft Store for Business and Education **Applies to** @@ -18,36 +18,36 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -The first person to sign in to Windows Store for Business must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees. +The first person to sign in to Microsoft Store for Business or Microsoft Store for Education must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees. -Store for Business has a set of roles that help admins and employees manage access to apps and tasks for the Store for Business. Employees with these roles will need to use their Azure AD account to access the Store for Business. Global Administrators and global user accounts that are used with other Microsoft services, such as Azure, or Office 365 can sign in to Store for Business. Global user accounts have some permissions in the Store for Business. Store for Business has a set of roles that help IT admins and employees manage access to apps and tasks for the Store for Business. +Microsoft Store for Business and Education has a set of roles that help admins and employees manage access to apps and tasks for Microsoft Store. Employees with these roles will need to use their Azure AD account to access the Store. Global Administrators and global user accounts that are used with other Microsoft services, such as Azure, or Office 365 can sign in to Microsoft Store. Global user accounts have some permissions in Microsoft Store, and Microsoft Store has a set of roles that help IT admins and employees manage access to apps and tasks for Microsoft Store. -### Global user account permissions in Store for Business +## Global user account permissions in Microsoft Store -This table lists the global user accounts and the permissions they have in the Store for Business. +This table lists the global user accounts and the permissions they have in Microsoft Store. | | Global Administrator | Billing Administrator | | ------------------------------ | --------------------- | --------------------- | -| Sign up for Store for Business | X | | +| Sign up for Microsoft Store for Business and Education | X | | | Modify company profile settings | X | | | Acquire apps | X | X | | Distribute apps | X | X |   -- **Global Administrator** - IT Pros with this account have full access to Store for Business. They can do everything allowed in the Store for Business Admin role, plus they can sign up for the Store for Business. +- **Global Administrator** - IT Pros with this account have full access to Microsoft Store. They can do everything allowed in the Microsoft Store Admin role, plus they can sign up for the Microsoft Store. -- **Billing Administrator** - IT Pros with this account have the same permissions as the Store for Business Purchaser role. +- **Billing Administrator** - IT Pros with this account have the same permissions as Microsoft Store Purchaser role. -### Store for Business roles and permissions +## Microsoft Store roles and permissions -Store for Business has a set of roles that help IT admins and employees manage access to apps and tasks for the Store for Business. Employees with these roles will need to use their Azure AD account to access the Store for Business. +Microsoft Store has a set of roles that help IT admins and employees manage access to apps and tasks for Microsoft Store. Employees with these roles will need to use their Azure AD account to access Microsoft Store. This table lists the roles and their permissions. | | Admin | Purchaser | Device Guard signer | | ------------------------------ | ------ | -------- | ------------------- | | Assign roles | X | | | -| Manage Store for Business settings | X | | | +| Manage Microsoft Store for business and education settings | X | | | | Acquire apps | X | X | | | Distribute apps | X | X | | | Sign policies and catalogs | X | | | @@ -56,50 +56,40 @@ This table lists the roles and their permissions. These permissions allow people to: -- **Manage Store for Business settings** - Manage Store for Business settings: +- **Manage Microsoft Store settings**: - Account information (view only) - - Device Guard signing - - LOB publishers - - Management tools - - Offline licensing - - Permissions - - Private store -- **Acquire apps** - Acquire apps from Store for Business and add them to your inventory. +- **Acquire apps** - Acquire apps from Microsoft Store and add them to your inventory. -- **Distribute apps** - Distribute apps that are in your inventory. You can distribute from inventory, private store, or management tool. +- **Distribute apps** - Distribute apps that are in your inventory. You can distribute from inventory, private store, or use a management tool. **To assign roles to people** -1. Sign in to Store for Business. +1. Sign in to Microsoft Store for Business or Microsoft Store for Education. >[!Note] - >You need to be a Global Administrator, or have the Store for Business Admin role to access the **Permissions** page.  + >You need to be a Global Administrator, or have the Microsoft Store Admin role to access the **Permissions** page.  To assign roles, you need to be a Global Administrator or a Store Administrator. 2. Click **Settings**, and then choose **Permissions**. - ![Image showing Permissions page in Windows Store for Business.](images/wsfb-settings-permissions.png) + OR + + Click **Manage**, and then click **Permissions** on the left-hand menu. + + 3. Click **Add people**, type a name, choose the role you want to assign, and click **Save** . - ![Image showing Assign roles to people box in Windows Store for Business.](images/wsfb-permissions-assignrole.png) - -4. If you are not finding the name you want, you might need to add people to your Azure AD directory. For more information, see [Manage user accounts in the Windows Store for Business.](manage-users-and-groups-windows-store-for-business.md) - -  - -  - - - + +4. If you don't find the name you want, you might need to add people to your Azure AD directory. For more information, see [Manage user accounts in the Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md). diff --git a/store-for-business/settings-reference-windows-store-for-business.md b/store-for-business/settings-reference-windows-store-for-business.md index 8b88eba8e5..08ce28a32e 100644 --- a/store-for-business/settings-reference-windows-store-for-business.md +++ b/store-for-business/settings-reference-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Settings reference Windows Store for Business (Windows 10) -description: The Windows Store for Business has a group of settings that admins use to manage the store. +title: Settings reference Microsoft Store for Business and Education (Windows 10) +description: The Microsoft Store for Business and Education has a group of settings that admins use to manage the store. ms.assetid: 34F7FA2B-B848-454B-AC00-ECA49D87B678 ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Settings reference: Windows Store for Business +# Settings reference: Microsoft Store for Business and Education **Applies to** @@ -18,17 +18,20 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -The Windows Store for Business has a group of settings that admins use to manage the store. +The Microsoft Store for Business and Education has a group of settings that admins use to manage the store. + +| Setting | Description | Location under **Manage** | +| ------- | ----------- | ------------------------------ | +| Account information and payment options | Manage organization and payment option information. For more information, see [Manage settings for the Microsoft Store for Business and Education](manage-settings-windows-store-for-business.md).| **Payments & billing** | +| Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). | **Store settings** | +| Offline licensing | Configure whether or not to make offline-licensed apps available in the Microsoft Store for Business and Education. For more information, see [Distribute offline apps](distribute-offline-apps.md). | **Store settings** (Private store tab) | +| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). | **Store settings** | +| Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | **Store settings** | +| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md). | **Permissions** | +| Line-of-business (LOB) publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | **Permissions** | + + -| | | -|----------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Setting | Description | -| Account information | Manage organization and payment option information. For more information, see [Manage settings for the Windows Store for Business](manage-settings-windows-store-for-business.md).

Configure whether or not to make offline-licensed apps available in the Store for Business. For more information, see [Distribute offline apps](distribute-offline-apps.md).| -| Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | -| LOB publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | -| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). | -| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md). | -| Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). |   diff --git a/store-for-business/sign-code-integrity-policy-with-device-guard-signing.md b/store-for-business/sign-code-integrity-policy-with-device-guard-signing.md index 96a6b5344b..75d490b304 100644 --- a/store-for-business/sign-code-integrity-policy-with-device-guard-signing.md +++ b/store-for-business/sign-code-integrity-policy-with-device-guard-signing.md @@ -12,7 +12,6 @@ localizationpriority: high # Sign code integrity policy with Device Guard signing - **Applies to** - Windows 10 @@ -21,35 +20,19 @@ localizationpriority: high Signing code integrity policies prevents policies from being tampered with after they're deployed. You can sign code integrity policies with the Device Guard signing portal. ## Sign your code integrity policy - - Before you get started, be sure to review these best practices: **Best practices** -- Test your code integrity policies on a group of devices before deploying them to a large group of devices. - -- Use rule options 9 and 10 during testing. For more information, see the section Code integrity policy rules in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). +- Test your code integrity policies on a group of devices before deploying them to a large group of devices. +- Use rule options 9 and 10 during testing. For more information, see the section Code integrity policy rules in the [Device Guard deployment guide](https://technet.microsoft.com/library/mt463091.aspx). **To sign a code integrity policy** -1. Sign in to the Windows Store for Business - -2. Click **Settings**, and then choose **Device Guard signing**. - +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, click **Store settings**, and then click **Device Guard**. 3. Click **Upload** to upload your code integrity policy. - 4. After the files are uploaded, click **Sign** to sign the code integrity policy. - 5. Click **Download** to download the signed code integrity policy. - When you sign a code integrity policy with the Device Guard signing portal, the signing certificate is added to the policy. This means you can't modify this policy. If you need to make changes, make them to an unsigned version of the policy, and then resign the policy. - -  - -  - - - - - + When you sign a code integrity policy with the Device Guard signing portal, the signing certificate is added to the policy. This means you can't modify this policy. If you need to make changes, make them to an unsigned version of the policy, and then resign the policy. \ No newline at end of file diff --git a/store-for-business/sign-up-windows-store-for-business-overview.md b/store-for-business/sign-up-windows-store-for-business-overview.md index 5a85ddec8a..b96261fb90 100644 --- a/store-for-business/sign-up-windows-store-for-business-overview.md +++ b/store-for-business/sign-up-windows-store-for-business-overview.md @@ -1,6 +1,6 @@ --- title: Sign up and get started (Windows 10) -description: IT admins can sign up for the Windows Store for Business, and get started working with apps. +description: IT admins can sign up for the Microsoft Store for Business or Microsoft Store for Education and get started working with apps. ms.assetid: 87C6FA60-3AB9-4152-A85C-6A1588A20C7B ms.prod: w10 ms.mktglfcycl: manage @@ -12,58 +12,22 @@ localizationpriority: high # Sign up and get started - **Applies to** - Windows 10 - Windows 10 Mobile -IT admins can sign up for the Windows Store for Business, and get started working with apps. +IT admins can sign up for the Microsoft Store for Business and Education, and get started working with apps. ## In this section - - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
TopicDescription

[Windows Store for Business overview](windows-store-for-business-overview.md)

Learn about Windows Store for Business.

[Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md)

There are a few prerequisites for using Store for Business.

[Sign up for Windows Store for Business](sign-up-windows-store-for-business.md)

Before you sign up for Store for Business, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Store for Business. If not, we'll help you create an Azure AD account and directory as part of the sign up process.

[Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md)

The first person to sign in to Store for Business must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees.

[Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md)

The Store for Business has a group of settings that admins use to manage the store.

- -  - -  - -  - +| Topic | Description | +| ----- | ----------- | +| [Microsoft Store for Business and Education overview](windows-store-for-business-overview.md) | Learn about Microsoft Store for Business. | +| [Prerequisites for Microsoft Store for Business and Education](prerequisites-windows-store-for-business.md) | There are a few prerequisites for using Microsoft Store for Business and Education. | +| [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-windows-store-for-business.md) | Before you sign up for Store for Business and Education, at a minimum, you'll need an Azure Active Directory (AD) or Office 365 account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Store for Business. If not, we'll help you create an Azure AD or Office 365 account and directory as part of the sign up process. | +| [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md) | The first person to sign in to Microsoft Store for Business and Education must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees. | +| [Settings reference: Microsoft Store for Business and Education](settings-reference-windows-store-for-business.md) | The Microsoft Store for Business and Education has a group of settings that admins use to manage the store. | diff --git a/store-for-business/sign-up-windows-store-for-business.md b/store-for-business/sign-up-windows-store-for-business.md index 69d44f17e8..adccdea373 100644 --- a/store-for-business/sign-up-windows-store-for-business.md +++ b/store-for-business/sign-up-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Sign up for Windows Store for Business (Windows 10) -description: Before you sign up for Windows Store for Business, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. +title: Sign up for Microsoft Store for Business or Microsoft Store for Education (Windows 10) +description: Before you sign up for Microsoft Store for Business or Microsoft Store for Education, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. ms.assetid: 296AAC02-5C79-4999-B221-4F5F8CEA1F12 ms.prod: w10 ms.mktglfcycl: manage @@ -10,7 +10,7 @@ author: TrudyHa localizationpriority: high --- -# Sign up for Windows Store for Business +# Sign up for Microsoft Store for Business or Microsoft Store for Education **Applies to** @@ -18,28 +18,28 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Before you sign up for Windows Store for Business, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Store for Business. If not, we'll help you create an Azure AD account and directory as part of the sign up process. +Before you sign up for Microsoft Store for Business or Microsoft Store for Education, you'll need an Azure Active Directory (AD) or Office 365 account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Microsoft Store for Business or Microsoft Store for Education. If not, we'll help you create an Azure AD or Office 365 account and directory as part of the sign up process. -## Sign up for Store for Business +## Sign up for Microsoft Store -Before signing up for the Store for Business, make sure you're the global administrator for your organization. +Before signing up for Microsoft Store, make sure you're the global administrator for your organization. -**To sign up for the Store for Business** +**To sign up for Microsoft Store** -1. Go to [https://www.microsoft.com/business-store](https://go.microsoft.com/fwlink/p/?LinkId=691845), and click **Sign up**. +1. Go to [https://www.microsoft.com/business-store](https://www.microsoft.com/business-store), or [https://www.microsoft.com/education-store](https://www.microsoft.com/education-store) and click **Sign up**. - - If you start the Store for Business sign up process, and don't have an Azure AD directory for your organization, we'll help you create one. For more info, see [Sign up for Azure AD accounts](#o365-welcome). + - If you start the Microsoft Store sign-up process, and don't have an Azure AD directory for your organization, we'll help you create one. For more info, see [Sign up for Azure AD accounts](#o365-welcome). - If you already have an Azure AD directory, you'll [sign in to Store for Business](#sign-in), and then accept Store for Business terms. - ![Image showing Windows Store for Business page with invitation to sign up, or sign in.](images/wsfb-landing.png) + ![Image showing Microsoft Store for Business page with invitation to sign up, or sign in.](images/wsfb-landing.png) **To sign up for Azure AD accounts through Office 365 for Business** - - Signing up for Store for Business will create an Azure AD directory and global administrator account for you. There are just a few steps. + - Signing up for Microsoft Store will create an Azure AD directory and global administrator account for you. There are just a few steps. Step 1: About you. @@ -69,27 +69,26 @@ Before signing up for the Store for Business, make sure you're the global admini Be sure to save the portal sign-in page and your user ID info. Click **You're ready to go**. - ![Image showing sign-in page and user ID for Windows Store for Business. ](images/wsfb-onboard-5.png) + ![Image showing sign-in page and user ID for Microsoft Store for Business. ](images/wsfb-onboard-5.png) - At this point, you'll have an Azure AD directory created with one user account. That user account is the global administrator. You can use that account to sign in to Store for Business. 2. Sign in with your Azure AD account. - ![Image showing sign-in page for Windows Store for Business.](images/wsfb-onboard-7.png) + ![Image showing sign-in page for Microsoft Store for Business.](images/wsfb-onboard-7.png) -3. Read through and accept Store for Business terms. +3. Read through and accept Microsoft Store for Business and Education terms. 4. Welcome to the Store for Business. Click **Next** to continue. - ![Image showing welcome message for Windows Store for Business.](images/wsfb-firstrun.png) + ![Image showing welcome message for Microsoft Store for business.](images/wsfb-firstrun.png) -### Next steps +## Next steps -After signing up for Store for Business, you can: +After signing up for Microsoft Store for Business or Microsoft Store for Education, you can: -- **Add users to your Azure AD directory**. If you created your Azure AD directory during Store for Business sign up, additional user accounts are required for employees to install apps you assign to them, or to browse the private store. For more information, see [Manage user accounts in Store for Business](manage-users-and-groups-windows-store-for-business.md). - -- **Assign roles to employees**. For more information, see [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md). +- **Add users to your Azure AD directory**. If you created your Azure AD directory during sign up, additional user accounts are required for employees to install apps you assign to them, or to browse the private store in Store app. For more information, see [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md). +- **Assign roles to employees**. For more information, see [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md).   diff --git a/store-for-business/troubleshoot-windows-store-for-business.md b/store-for-business/troubleshoot-windows-store-for-business.md index d0a9381cf9..5ea7623579 100644 --- a/store-for-business/troubleshoot-windows-store-for-business.md +++ b/store-for-business/troubleshoot-windows-store-for-business.md @@ -1,6 +1,6 @@ --- -title: Troubleshoot Windows Store for Business (Windows 10) -description: Troubleshooting topics for Windows Store for Business. +title: Troubleshoot Microsoft Store for Business (Windows 10) +description: Troubleshooting topics for Microsoft Store for Business. ms.assetid: 243755A3-9B20-4032-9A77-2207320A242A ms.prod: w10 ms.mktglfcycl: manage @@ -10,24 +10,19 @@ author: TrudyHa localizationpriority: high --- -# Troubleshoot Windows Store for Business - +# Troubleshoot Microsoft Store for Business **Applies to** - Windows 10 - Windows 10 Mobile -Troubleshooting topics for Windows Store for Business. +Troubleshooting topics for Microsoft Store for Business. ## Can't find apps in private store - - The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check: - -- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back. - -- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account. +- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back. +- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account. **To sign in with organization account in Windows Store app** diff --git a/store-for-business/update-windows-store-for-business-account-settings.md b/store-for-business/update-windows-store-for-business-account-settings.md index 43a9468143..56aaa46e30 100644 --- a/store-for-business/update-windows-store-for-business-account-settings.md +++ b/store-for-business/update-windows-store-for-business-account-settings.md @@ -1,6 +1,6 @@ --- -title: Update Windows Store for Business account settings (Windows 10) -description: The Account information page in Windows Store for Business shows information about your organization that you can update, including country or region, organization name, default domain, and language preference. +title: Update Microsoft Store for Business and Microsoft Store for Education account settings (Windows 10) +description: The Account information page in Microsoft Store for Business and Microsoft Store for Education shows information about your organization that you can update, including country or region, organization name, default domain, and language preference. ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library @@ -9,27 +9,30 @@ author: TrudyHa localizationpriority: high --- -# Update Windows Store for Business account settings - +# Update Microsoft Store for Business and Microsoft Store for Education account settings **Applies to** - Windows 10 - Windows 10 Mobile -The **Account information** page in Windows Store for Business allows you to manage organization information, payment options, and offline licensing settings. The organization information and payment options are required before you can acquire apps that have a price. +The **Payments & billing** page in Microsoft Store for Business allows you to manage organization information, billing information, and payment options. The organization information and payment options are required before you can acquire apps that have a price. ## Organization information -We’ll need your business address, email contact, and tax-exemption certificates that apply to your country or locale. +We need your business address, email contact, and tax-exemption certificates that apply to your country or locale. -**Business address and email contact**
Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address . +### Business address and email contact -We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Windows Store for Business. If we don’t have an address,we’ll ask you to enter it during your first purchase. +Before purchasing apps that have a fee, you need to add or update your organization's business address, and contact email address. -We need an email address in case we need to contact you about your Store for Business account. This email account should reach the admin for your organization’s O365 or Azure AD tenant that is used with Store for Business. +We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through the Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in the Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase. -To update Organization information, click **Edit organization information**. +We need an email address in case we need to contact you about your Microsoft Store for Business and Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store. + +**To update Organization information** +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com) +2. Click **Manage**, click **Payments & billing**, and then click **Edit**. ## Organization tax information Taxes for Windows Store for Business purchases are determined by your business address. Businesses in these countries can provide their VAT number or local equivalent: @@ -58,7 +61,7 @@ Taxes for Windows Store for Business purchases are determined by your business a - Switzerland - United Kingdom -These countries can provide their VAT number or local equivalent in **Account information**. However, they can only acquire free apps. +These countries can provide their VAT number or local equivalent in **Payments & billing**. However, they can only acquire free apps. |Market| Tax identifier | |------|----------------| @@ -66,8 +69,7 @@ These countries can provide their VAT number or local equivalent in **Account in | India | CST ID, VAT ID | | Taiwan | Unified business number| - -**Tax-exempt status** +### Tax-exempt status If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization. @@ -85,7 +87,7 @@ You’ll need this documentation: | International organizations that hold tax exaemption | Certification / letter confirmation from local tax authorities | -**Calculating tax** +### Calculating tax Sales taxes are calculated against the unit price, and then aggregated. @@ -98,34 +100,34 @@ For example:
## Payment options You can purchase apps from the Windows Store for Business using your credit card. You can enter your credit card information on Account Information, or when you purchase an app. We currently accept these credit cards: -1. VISA -2. MasterCard -3. Discover -4. American Express -5. Japan Commercial Bureau (JCB) +1. VISA +2. MasterCard +3. Discover +4. American Express +5. Japan Commercial Bureau (JCB) > [!NOTE] > Not all cards available in all countries. When you add a payment option, Store for Business shows which cards are available in your region. **To add a new payment option** -1. Sign in to [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then click **Account information**. -3. Under **My payment options**, tap or click **Show my payment options**, and then select the type of credit card that you want to add. -4. Add information to any required fields, and then click **Next**. +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then click **Payments & billing**. +3. Under **Payment options**, click **Show my payment options**, and then select the type of credit card that you want to add. +4. Add information to any required fields, and then click **Next**. Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems. > [!NOTE] -> When adding credit or debit cards, you may be prompted to enter a CVV . The CVV is only used for verification purposes and is not stored in our systems after validation +> When adding credit or debit cards, you may be prompted to enter a CVV. The CVV is only used for verification purposes and is not stored in our systems after validation. **To update a payment option** -1. Sign in to [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then click **Account information**. -3. Under **My payment options** > **Credit Cards**, select the payment option that you want to update, and then click **Update**. -4. Enter any updated information in the appropriate fields, and then click **Next**. -Once you click **Next**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems. +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then click **Payments & billng**. +3. Under **Payment options** > **Show my payment options**, select the payment option that you want to update, and then click **Update**. +4. Enter any updated information in the appropriate fields, and then click **Next**. +Once you click **Next**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise,you will be prompted for additional information or notified if there are any problems. > [!NOTE] > Certain actions, like updating or adding a payment option, require temporary “test authorization” transactions to validate the payment option. These may appear on your statement as $0.00 authorizations or as small pending transactions. These transactions are temporary and should not impact your account unless you make several changes in a short period of time, or have a low balance. @@ -138,9 +140,9 @@ Admins can decide whether or not offline licenses are shown for apps in Windows **To set offline license visibility** -1. Sign in to [Store for Business](http://businessstore.microsoft.com). -2. Click **Manage**, and then click **Account information**. -3. Under **Offline licensing**, click **Show offline licensed apps to people shopping in the store** to show availability for both online and offline licenses. +1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +2. Click **Manage**, and then click **Payments & billing**. +3. Under **Offline licensing**, click **Show offline licensed apps to people shopping in the store** to show availability for both online and offline licenses. You have the following distribution options for offline-licensed apps: - Include the app in a provisioning package, and then use it as part of imaging a device. diff --git a/store-for-business/windows-store-for-business-overview.md b/store-for-business/windows-store-for-business-overview.md index fa37237c48..5640ea1f23 100644 --- a/store-for-business/windows-store-for-business-overview.md +++ b/store-for-business/windows-store-for-business-overview.md @@ -1,6 +1,6 @@ --- -title: Windows Store for Business overview (Windows 10) -description: With the new Windows Store for Business, organizations can make volume purchases of Windows apps. +title: Microsoft Store for Business and Microsoft Store for Education overview (Windows 10) +description: With Microsoft Store for Business and Microsoft Store for Education, organizations and schools can make volume purchases of Windows apps. ms.assetid: 9DA71F6B-654D-4121-9A40-D473CC654A1C ms.prod: w10 ms.pagetype: store, mobile @@ -10,40 +10,36 @@ author: TrudyHa localizationpriority: high --- -# Windows Store for Business overview - +# Microsoft Store for Business and Microsoft Store for Education overview **Applies to** - Windows 10 - Windows 10 Mobile -With Windows Store for Business, organizations can make volume purchases of Windows apps. The Store for Business provides app purchases based on organizational identity, flexible distribution options, and the ability to reclaim or re-use licenses. Organizations can also use the Store for Business to create a private store for their employees that includes apps from the Store, as well private Line-of-Business (LOB) apps. +Designed for organizations, Microsoft Store for Business and Microsoft Store for Education gives IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Windows Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Windows Store, or connect with management solutions for more options. ## Features +Organizations of any size can benefit from using the Microsoft Store: +- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate the Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts. +- **Bulk app acquisition** - Acquire apps in volume from the Store for Business. +- **Centralized management** – Microsoft Store provides centralized management for inventory, billing, permissions, and order history. You can use Microsoft Store to view, manage and distribute items purchased from: + - **Microsoft Store for Business** – Apps and subscriptions + - **Microsoft Store for Education** – Apps and subscriptions + - **Office 365** – Subscriptions + - **Volume licensing** - Apps purchased with volume licensing +- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. Your private store is available from Windows Store app, or with a browser on the Web. People in your organization can download apps from the private store on Windows 10 devices. +- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices: + - Distribute through Store for Business services. You can assign apps to individual employees, or make apps available to all employees in your private store. + - Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images. + - Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images. +- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options. +- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps. +- **Up-to-date apps** - Microsoft Store manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees. +- **Office app launcher** Office apps while working with Store for Business. +- **Find a partner** – Microsoft Store allows businesses to search and find a Microsoft Partner who can assist you with Microsoft solutions for your business. -Organizations of any size can benefit from using the Store for Business: - -- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate the Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts. - -- **Bulk app acquisition** - Acquire apps in volume from the Store for Business. - -- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. - -- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices: - - - Distribute through Store for Business services. You can assign apps to individual employees, or make apps available to all employees in your private store. - - - Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images. - - - Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images. - -- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options. - -- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps. - -- **Up-to-date apps** - The Store for Business manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees. ## Prerequisites @@ -51,19 +47,17 @@ You'll need this software to work with the Store for Business. ### Required -- IT Pros that are administering Store for Business need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox. +- Admins working with Microsoft Store for Business and Education need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled. -- Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device. +- Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device. Microsoft Azure Active Directory (AD) accounts for your employees: -- Admins need Azure AD accounts to sign up for the Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses. - -- Employees need Azure AD account when they access Store for Business content from Windows devices. - -- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account - -- For offline-licensed apps, Azure AD accounts are not required for employees. +- Admins need Azure AD accounts to sign up for the Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses. +- Employees need Azure AD account when they access Store for Business content from Windows devices. +- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account +- For offline-licensed apps, Azure AD accounts are not required for employees. +- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscrition. You can access the Office 365 admin portal directly from the Microsoft Store for Business and Eduction. For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611). @@ -71,19 +65,19 @@ For more information on Azure AD, see [About Office 365 and Azure Active Directo While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools: -- Need to integrate with Windows 10 management framework and Azure AD. +- Need to integrate with Windows 10 management framework and Azure AD. -- Need to sync with the Store for Business inventory to distribute apps. +- Need to sync with the Store for Business inventory to distribute apps. ## How does the Store for Business work? -### Sign up! +## Sign up! -The first step for getting your organization started with the Store for Business is signing up. To sign up for the Business store, you need an Azure AD account and you must be a Global Administrator for your organization. +The first step for getting your organization started with the Store for Business is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we’ll quickly create an account for you. You must be a Global Administrator for your organization. For more information, see [Sign up for the Store for Business](sign-up-windows-store-for-business.md). -### Set up +## Set up After your admin signs up for the Store for Business, they can assign roles to other employees in your company. The admin needs Azure AD User Admin permissions to assign WSFB roles. These are the roles and their permissions. @@ -92,20 +86,23 @@ After your admin signs up for the Store for Business, they can assign roles to o | Admin | X | X | X | | | Purchaser | | X | X | | | Device Guard signer | | | | X | +| Basic purchaser | | X | X | | + +> [!NOTE] +> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see In some cases, admins will need to add Azure Active Directory (AD) accounts for their employees. For more information, see [Manage user accounts and groups](manage-users-and-groups-windows-store-for-business.md). Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with the Store for Business. -### Get apps and content +## Get apps and content -Once signed in to the Store for Business, you can browse and search for all products in the Store for Business catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time. +Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time. -**App types** -- These app types are supported in the Store for Business: +**App types** -- These app types are supported in the Microsoft Store for Business: -- Universal Windows Platform apps - -- Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens +- Universal Windows Platform apps +- Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens Apps purchased from the Store for Business only work on Windows 10 devices. @@ -117,55 +114,42 @@ The Business store supports two options to license apps: online and offline. **O For more information, see [Apps in the Store for Business](apps-in-windows-store-for-business.md#licensing-model). -### Distribute apps and content +## Distribute apps and content App distribution is handled through two channels, either through the Store for Business, or using a management tool. You can use either or both distribution methods in your organization. **Using the Store for Business** – Distribution options for the Store for Business: -- Email link – After purchasing an app, admins can send employees a link in an email message. Employees can click the link to install the app. - -- Curate private store for all employees – A private store can include content you’ve purchased from the Store, and your line-of-business apps that you’ve submitted to the Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed. - -- To use the options above users must be signed in with an Azure AD account on a Windows 10 device. +- Email link – After purchasing an app, admins can send employees a link in an email message. Employees can click the link to install the app. +- Curate private store for all employees – A private store can include content you’ve purchased from the Store, and your line-of-business apps that you’ve submitted to the Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed. +- To use the options above users must be signed in with an Azure AD account on a Windows 10 device. Licenses are assigned as individuals install apps. **Using a management tool** – For larger organizations that might want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options: -- Scoped content distribution – Ability to scope content distribution to specific groups of employees. +- Scoped content distribution – Ability to scope content distribution to specific groups of employees. +- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees. -- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees. - -Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps. +Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata,management tools can enable portals or apps as a destination for employees to acquire apps. For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). -### Manage Store for Business settings and content +## Manage Store for Business settings and content Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory. **Manage Store for Business settings** - -- Assign and change roles for employees or groups - -- Device Guard signing - -- Register a management server to deploy and install content - -- Manage relationships with LOB publishers - -- Manage offline licenses - -- Update the name of your private store +- Assign and change roles for employees or groups +- Device Guard signing +- Register a management server to deploy and install content +- Manage relationships with LOB publishers +- Manage offline licenses +- Update the name of your private store **Manage inventory** - -- Assign app licenses to employees - -- Reclaim and reassign app licenses - -- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server. - -- Download apps for offline installs +- Assign app licenses to employees +- Reclaim and reassign app licenses +- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server. +- Download apps for offline installs For more information, see [Manage settings in the Store for Business](manage-settings-windows-store-for-business.md) and [Manage apps](manage-apps-windows-store-for-business-overview.md). @@ -334,22 +318,18 @@ Microsoft Store for Business services get names and email addresses of people in - Managing app licenses - Distributing apps to people (names appear in a list that admins can select from) -Store for Business does not save names, or email addresses. +Microsoft Store for Business and Education does not save names, or email addresses. -Your use of Store for Business is also governed by the Store for Business Terms of Use. +Your use of Microsoft Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement). -Information sent to Store for Business is subject to the [Store for Business Privacy Statement](https://privacy.microsoft.com/privacystatement/). +Information sent to Microsoft Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/). ## ISVs and the Store for Business - Developers in your organization, or ISVs can create content specific to your organization. In the Store for Business, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this: - -- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs. - -- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization. - -- Admin adds the app to Store for Business inventory. +- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs. +- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization. +- Admin adds the app to Store for Business inventory. Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in the Store for Business. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in the Store for Business will work only on Windows 10. diff --git a/store-for-business/working-with-line-of-business-apps.md b/store-for-business/working-with-line-of-business-apps.md index e6fff0c3bc..f991c3a1e0 100644 --- a/store-for-business/working-with-line-of-business-apps.md +++ b/store-for-business/working-with-line-of-business-apps.md @@ -1,6 +1,6 @@ --- title: Working with line-of-business apps (Windows 10) -description: Your company can make line-of-business (LOB) applications available through Windows Store for Business. These apps are custom to your company – they might be internal business apps, or apps specific to your business or industry. +description: Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your organization – they might be internal business apps, or apps specific to your school, business, or industry. ms.assetid: 95EB7085-335A-447B-84BA-39C26AEB5AC7 ms.prod: w10 ms.mktglfcycl: manage @@ -17,16 +17,17 @@ localizationpriority: high - Windows 10 - Windows 10 Mobile -Your company can make line-of-business (LOB) applications available through Windows Store for Business. These apps are custom to your company – they might be internal business apps, or apps specific to your business or industry. +Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your school or organization – they might be internal apps, or apps specific to your school,business, or industry. -Developers within your own company, or ISVs that you invite, can become LOB publishers and submit apps to the Windows Store for your company. Once a LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in the Store, and then can be managed or deployed using the same process as any other app that has been acquired through the Store. +Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in the Store, and then can be managed or deployed using the same process as any other app that has been acquired through the Store. -One advantage of making apps available through Store for Business is that the app has been signed by the Store, and uses the standard Store policies. For companies that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported in Windows 10. +One advantage of making apps available through Microsoft Store is that the app has been signed by the Store, and uses the standard Store policies. For organizations that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported in Windows 10. ## Adding LOB apps to your private store +Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use the Store for Business portal; ISVs or devs use the Windows Dev center on MSDN. -Your Store for Business admin and ISV each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees. They’ll use the Store for Business portal, and the Windows Dev center on MSDN. Here’s what’s involved: +Here’s what’s involved: - The Store for Business admin invites a developer or ISV to become an LOB publisher for your company. @@ -34,26 +35,27 @@ Your Store for Business admin and ISV each own different parts of the process fo - The Store for Business admin accepts the app and can distribute the app to employees in your company. -What you'll have to set up: +You'll need to set up: -- Your company needs to be signed up with Store for Business. +- Your company needs to be signed up with Microsoft Store for Business or Microsoft Store for Education. - LOB publishers need to have an active developer account. To learn more about account options, see [Ready to sign up](https://go.microsoft.com/fwlink/p/?LinkId=623432). - LOB publishers need to have an app in the Store, or have an app ready to submit to the Store. -### Add an LOB publisher (Store for Business Admin) +## Add an LOB publisher (Admin) -For developers within your own organization, or ISVs you're working with to create LOB apps, you'll need to invite them to become a LOB publisher. +Admins need to invite developer or ISVs to become an LOB publisher. **To invite a developer to become an LOB publisher** 1. Sign in to the [Windows Store for Business]( https://go.microsoft.com/fwlink/p/?LinkId=623531). -2. Click **Settings**, and then choose **LOB publishers**. -3. On the Line-of business publishers page, click **Add** to complete a form and send an email invitation to a developer.
-**Note** This needs to be the email address listed in contact info for the developer account. - -### Submit apps (LOB publisher) +2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**. +3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer. + >[!Note] + > This needs to be the email address listed in contact info for the developer account. + +## Submit apps (LOB publisher) The developer receives an email invite to become an LOB publisher for your company. Once they accept the invite, they can log in to the Windows Dev Center to create an app submission for your company. The info here assumes that devs or ISVs have an active developer account. @@ -80,17 +82,19 @@ After an app is published and available in the Store, ISVs publish an updated ve 5. Click **Save** to save your changes and start the app submission process. For more information, see [Organizational licensing options]( https://go.microsoft.com/fwlink/p/?LinkId=708615) and [Distributing LOB apps to enterprises](https://go.microsoft.com/fwlink/p/?LinkId=627543).
-**Note** In order to get the LOB app, the organization must be located in a [supported market](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview#supported-markets), and you must not have excluded that market when submitting your app. + + >[!Note] + > In order to get the LOB app, the organization must be located in a [supported market](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview#supported-markets), and you must not have excluded that market when submitting your app. -### Add app to inventory (admin) +## Add app to inventory (admin) -After an ISV submits the LOB app for your company, the Store for Businessadmin needs to accept the app. +After an ISV submits the LOB app for your company or school, someone with Microsoft Store for Business and Eduction admin permissions needs to accept the app. **To add the LOB app to your inventory** 1. Sign in to the Store for Business. -2. Click **Manage**, and then choose **New LOB apps**. -3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **add to inventory**. +2. Click **Manage**, click **Apps & Software**, and then choose **New LOB apps**. +3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **Add to inventory**. After you add the app to your inventory, you can choose how to distribute the app. For more information, see: diff --git a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md index 1def305540..ebc8b9c83d 100644 --- a/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md +++ b/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus.md @@ -43,7 +43,7 @@ The app also includes the settings and status of: - Parental and Family Controls >[!NOTE] ->The Windows Defender Security Center app is a client interface on Windows 10, version 1703. It is not the Windows Defender Advanced Security Center, which is the web portal used to review and manage [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md). +>The Windows Defender Security Center app is a client interface on Windows 10, version 1703. It is not the Windows Defender Security Center web portal that is used to review and manage [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md). **Review virus and threat protection settings in the Windows Defender Security Center app:** diff --git a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md index bc98961754..31ea9b52b2 100644 --- a/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md +++ b/windows/threat-protection/windows-information-protection/create-wip-policy-using-intune.md @@ -1,5 +1,5 @@ --- -title: Create a Windows Information Protection (WIP) policy using Microsoft Intune (Windows 10) +title: Create a Windows Information Protection (WIP) with enrollment policy using Microsoft Intune (Windows 10) description: Microsoft Intune helps you create and deploy your Windows Information Protection (WIP) policy, including letting you choose your protected apps, your WIP-protection level, and how to find enterprise data on the network. ms.assetid: 4b307c99-3016-4d6a-9ae7-3bbebd26e721 ms.prod: w10 @@ -10,7 +10,7 @@ author: eross-msft localizationpriority: high --- -# Create a Windows Information Protection (WIP) policy using Microsoft Intune +# Create a Windows Information Protection (WIP) with enrollment policy using Microsoft Intune **Applies to:** @@ -19,13 +19,16 @@ localizationpriority: high Microsoft Intune helps you create and deploy your Windows Information Protection (WIP) policy, including letting you choose your allowed apps, your WIP-protection level, and how to find enterprise data on the network. +>[!Important] +>This topic covers creating a Windows Information Protection (WIP) policy for organizations already managing devices by using Mobile Device Management (MDM) solutions. If your organization uses a mobile application management (MAM) solution to deploy your WIP policy to Intune apps without managing devices, you must follow the instructions in the [Create and deploy Windows Information Protection (WIP) app protection policy with Intune](https://docs.microsoft.com/en-us/intune/deploy-use/create-windows-information-protection-policy-with-intune) topic. + ## Add a WIP policy After you’ve set up Intune for your organization, you must create a WIP-specific policy. **To add a WIP policy** 1. Open the Microsoft Intune mobile application management console, click **All settings**, and then click **App policy**. - ![Microsoft Azure Intune management console: App policy link](images/wip-azure-portal-start.png) + ![Microsoft Intune management console: App policy link](images/wip-azure-portal-start.png) 2. In the **App policy** screen, click **Add a policy**, and then fill out the fields: - **Name.** Type a name (required) for your new policy. @@ -36,7 +39,10 @@ After you’ve set up Intune for your organization, you must create a WIP-specif - **Enrollment state.** Choose **With enrollment** as the enrollment state for your policy. - ![Microsoft Azure Intune management console: Create your new policy in the Add a policy blade](images/wip-azure-portal-add-policy.png) + ![Microsoft Intune management console: Create your new policy in the Add a policy blade](images/wip-azure-portal-add-policy.png) + + >[!Important] + >Choosing **With enrollment** only applies for organizations using MDM. If you're using MAM, you must use these instructions, [Create and deploy Windows Information Protection (WIP) app protection policy with Intune](https://docs.microsoft.com/en-us/intune/deploy-use/create-windows-information-protection-policy-with-intune), instead. 3. Click **Create**. @@ -53,7 +59,6 @@ The steps to add your apps are based on the type of template being applied. You >[!Important] >WIP-aware apps are expected to prevent enterprise data from going to unprotected network locations and to avoid encrypting personal data. On the other hand, WIP-unaware apps might not respect the corporate network boundary, and WIP-unaware apps will encrypt all files they create or modify. This means that they could encrypt personal data and cause data loss during the revocation process.

Care must be taken to get a support statement from the software provider that their app is safe with WIP before adding it to your **Allowed apps** list. If you don’t get this statement, it’s possible that you could experience app compat issues due to an app losing the ability to access a necessary file after revocation. - #### Add a Recommended app to your Allowed apps list For this example, we’re going to add Microsoft Edge, a recommended app, to the **Allowed apps** list. @@ -62,19 +67,19 @@ For this example, we’re going to add Microsoft Edge, a recommended app, to the The **Allowed apps** blade appears, showing you any apps that are already included in the list for this policy. - ![Microsoft Azure Intune management console: Viewing the recommended apps that you can add to your policy](images/wip-azure-allowed-apps-pane.png) + ![Microsoft Intune management console: Viewing the recommended apps that you can add to your policy](images/wip-azure-allowed-apps-pane.png) 2. From the **Allowed apps** blade, click **Add apps**. The **Add apps** blade appears, showing you all **Recommended apps**. - ![Microsoft Azure Intune management console: Adding recommended apps to your policy](images/wip-azure-add-recommended-apps.png) + ![Microsoft Intune management console: Adding recommended apps to your policy](images/wip-azure-add-recommended-apps.png) 3. Select each app you want to access your enterprise data, and then click **OK**. The **Allowed apps** blade updates to show you your selected apps. - ![Microsoft Azure Intune management console: Allowed apps blade with recommended apps](images/wip-azure-allowed-apps-with-apps.png) + ![Microsoft Intune management console: Allowed apps blade with recommended apps](images/wip-azure-allowed-apps-with-apps.png) #### Add a Store app to your Allowed apps list For this example, we’re going to add Microsoft Power BI, a store app, to the **Allowed apps** list. @@ -97,7 +102,7 @@ For this example, we’re going to add Microsoft Power BI, a store app, to the * >[!NOTE] >To add multiple Store apps at the same time, you can click the menu **(…)** at the end of the app row, and then continue to add more apps. When you’re done, click **OK**. - ![Microsoft Azure Intune management console: Adding Store app info](images/wip-azure-add-store-apps.png) + ![Microsoft Intune management console: Adding Store app info](images/wip-azure-add-store-apps.png) If you don't know the publisher or product name, you can find them for both desktop devices and Windows 10 Mobile phones by following these steps. @@ -200,7 +205,7 @@ For this example, we’re going to add WordPad, a desktop app, to the **Allowed >[!Note] >To add multiple Desktop apps at the same time, you can click the menu **(…)** at the end of the app row, and then continue to add more apps. When you’re done, click **OK**. - ![Microsoft Azure Intune management console: Adding Desktop app info](images/wip-azure-add-desktop-apps.png) + ![Microsoft Intune management console: Adding Desktop app info](images/wip-azure-add-desktop-apps.png) **To find the Publisher values for Desktop apps** If you’re unsure about what to include for the publisher, you can run this PowerShell command: @@ -301,7 +306,7 @@ For this example, we’re going to add an AppLocker XML file to the **Allowed ap The blade changes to let you add your import file. - ![Microsoft Azure Intune, Importing your AppLocker policy file using Intune](images/wip-azure-import-apps.png) + ![Microsoft Intune, Importing your AppLocker policy file using Intune](images/wip-azure-import-apps.png) 2. Browse to your exported AppLocker policy file, and then click **Open**. @@ -343,7 +348,7 @@ We recommend that you start with **Silent** or **Allow Overrides** while verifyi The **Required settings** blade appears. - ![Microsoft Azure Intune, Required settings blade showing Windows Information Protection mode](images/wip-azure-required-settings-protection-mode.png) + ![Microsoft Intune, Required settings blade showing Windows Information Protection mode](images/wip-azure-required-settings-protection-mode.png) |Mode |Description | |-----|------------| @@ -367,7 +372,7 @@ Starting with Windows 10, version 1703, Intune automatically determines your cor 2. If the identity isn’t correct, or if you need to add additional domains, type info into the **Corporate identity** field. For example, `contoso.com|newcontoso.com`. - ![Microsoft Azure Intune, Set your corporate identity for your organization](images/wip-azure-required-settings-corp-identity.png) + ![Microsoft Intune, Set your corporate identity for your organization](images/wip-azure-required-settings-corp-identity.png) ### Choose where apps can access enterprise data After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. @@ -387,7 +392,7 @@ There are no default locations included with WIP, you must add each of your netw The **Add network boundary** blade appears. - ![Microsoft Azure Intune, Set where your apps can access enterprise data on your network](images/wip-azure-advanced-settings-network.png) + ![Microsoft Intune, Set where your apps can access enterprise data on your network](images/wip-azure-advanced-settings-network.png) 3. Select the type of network boundary to add from the **Boundary type** box. @@ -440,7 +445,7 @@ There are no default locations included with WIP, you must add each of your netw 6. Decide if you want to Windows to look for additional network settings: - ![Microsoft Azure Intune, Choose if you want Windows to search for additional proxy servers or IP ranges in your enterprise](images/wip-azure-advanced-settings-network-autodetect.png) + ![Microsoft Intune, Choose if you want Windows to search for additional proxy servers or IP ranges in your enterprise](images/wip-azure-advanced-settings-network-autodetect.png) - **Enterprise Proxy Servers list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the proxy servers you specified in the network boundary definition as the complete list of proxy servers available on your network. If you clear this box, Windows will search for additional proxy servers in your immediate network. @@ -459,7 +464,7 @@ After you create and deploy your WIP policy to your employees, Windows begins to 2. In the **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. - ![Microsoft Azure Intune, Upload your Data Recovery Agent (DRA) certificate](images/wip-azure-advanced-settings-efsdra.png) + ![Microsoft Intune, Upload your Data Recovery Agent (DRA) certificate](images/wip-azure-advanced-settings-efsdra.png) ### Choose your optional WIP-related settings After you've decided where your protected apps can access enterprise data on your network, you’ll be asked to decide if you want to add any optional WIP settings. @@ -468,7 +473,7 @@ After you've decided where your protected apps can access enterprise data on you 1. Choose to set any or all optional settings: - ![Microsoft Azure Intune, Choose if you want to include any of the optional settings](images/wip-azure-advanced-settings-optional.png) + ![Microsoft Intune, Choose if you want to include any of the optional settings](images/wip-azure-advanced-settings-optional.png) - **Prevent corporate data from being accessed by apps when the device is locked. Applies only to Windows 10 Mobile.** Determines whether to encrypt enterprise data using a key that's protected by an employee's PIN code on a locked device. Apps won't be able to read corporate data when the device is locked. The options are: @@ -505,11 +510,21 @@ Optionally, if you don’t want everyone in your organization to be able to shar >For more info about setting the **AllowAzureRMSForEDP** and the **RMSTemplateIDForEDP** MDM settings, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/enterprisedataprotection-csp) topic. For more info about setting up and using a custom template, see [Configuring custom templates for the Azure Rights Management service](https://docs.microsoft.com/en-us/information-protection/deploy-use/configure-custom-templates) topic. ## Related topics -- [Deploy your Windows Information Protection (WIP) policy](deploy-wip-policy-using-intune.md) -- [Associate and deploy your Windows Information Protection (WIP) and VPN policies by using Microsoft Intune](create-vpn-and-wip-policy-using-intune.md) -- [General guidance and best practices for Windows Information Protection (WIP)](guidance-and-best-practices-wip.md) -- [Azure RMS Documentation Update for May 2016](https://blogs.technet.microsoft.com/enterprisemobility/2016/05/31/azure-rms-documentation-update-for-may-2016/) - [What is Azure Rights Management?]( https://docs.microsoft.com/en-us/information-protection/understand-explore/what-is-azure-rms) +- [Create and deploy Windows Information Protection (WIP) app protection policy with Intune](https://docs.microsoft.com/en-us/intune/deploy-use/create-windows-information-protection-policy-with-intune) + +- [Intune MAM Without Enrollment](https://blogs.technet.microsoft.com/configmgrdogs/2016/02/04/intune-mam-without-enrollment/) + +- [Deploy your Windows Information Protection (WIP) policy](deploy-wip-policy-using-intune.md) + +- [Associate and deploy your Windows Information Protection (WIP) and VPN policies by using Microsoft Intune](create-vpn-and-wip-policy-using-intune.md) + +- [General guidance and best practices for Windows Information Protection (WIP)](guidance-and-best-practices-wip.md) + +- [Azure RMS Documentation Update for May 2016](https://blogs.technet.microsoft.com/enterprisemobility/2016/05/31/azure-rms-documentation-update-for-may-2016/) + + + >[!NOTE] >Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). diff --git a/windows/whats-new/whats-new-windows-10-version-1703.md b/windows/whats-new/whats-new-windows-10-version-1703.md index 6b9af04119..f6b99a4592 100644 --- a/windows/whats-new/whats-new-windows-10-version-1703.md +++ b/windows/whats-new/whats-new-windows-10-version-1703.md @@ -139,12 +139,12 @@ Some of the highlights of the new library include: New features for Windows Defender AV in Windows 10, version 1703 include: -- [Updates to how the Block at First Sight feature can be configured](/windows/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus) -- [The ability to specify the level of cloud-protection](/windows/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus) -- [Windows Defender Antivirus protection in the Windows Defender Security Center app](/windows/windows-defender-antivirus/windows-defender-security-center-antivirus) +- [Updates to how the Block at First Sight feature can be configured](/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus) +- [The ability to specify the level of cloud-protection](/windows/threat-protection/windows-defender-antivirus/specify-cloud-protection-level-windows-defender-antivirus) +- [Windows Defender Antivirus protection in the Windows Defender Security Center app](/windows/threat-protection/windows-defender-antivirus/windows-defender-security-center-antivirus) -In Windows 10, version 1607, we [invested heavily in helping to protect against ransomware](https://blogs.windows.com/business/2016/11/11/defending-against-ransomware-with-windows-10-anniversary-update/#UJlHc6SZ2Zm44jCt.97), and we continue that investment in version 1703 with [updated beahvior monitoring and always-on real-time protection](/windows/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). +In Windows 10, version 1607, we [invested heavily in helping to protect against ransomware](https://blogs.windows.com/business/2016/11/11/defending-against-ransomware-with-windows-10-anniversary-update/#UJlHc6SZ2Zm44jCt.97), and we continue that investment in version 1703 with [updated behavior monitoring and always-on real-time protection](/windows/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). You can read more about ransomware mitigations and detection capability in Windows Defender AV in the [Ransomware Protection in Windows 10 Anniversary Update whitepaper (PDF)](http://wincom.blob.core.windows.net/documents/Ransomware_protection_in_Windows_10_Anniversary_Update.pdf) and at the [Microsoft Malware Protection Center blog](https://blogs.technet.microsoft.com/mmpc/category/research/ransomware/).