mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-15 10:23:37 +00:00
Merge remote-tracking branch 'refs/remotes/origin/rs1' into jdrs
This commit is contained in:
jdeckerMS
@ -6,8 +6,7 @@
|
||||
### [New policies for Windows 10](new-policies-for-windows-10.md)
|
||||
### [Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education](group-policies-for-enterprise-and-education-editions.md)
|
||||
### [Changes to Group Policy settings for Windows 10 Start](changes-to-start-policies-in-windows-10.md)
|
||||
### [Bulk provisioning for Windows 10 devices](simple-bulk-provisioning.md)
|
||||
### [Diagnostics for devices managed by MDM](diagnostics-for-mdm-devices.md)
|
||||
### [Diagnostics for Windows 10 devices](diagnostics-for-mdm-devices.md)
|
||||
### [Windows 10 Mobile and MDM](windows-10-mobile-and-mdm.md)
|
||||
### [Introduction to configuration service providers (CSPs)](how-it-pros-can-use-configuration-service-providers.md)
|
||||
## [Manage Windows 10 Start and taskbar layout](windows-10-start-layout-options-and-policies.md)
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Device Policy State Log (Windows 10)
|
||||
title: Diagnostics for Windows 10 devices (Windows 10)
|
||||
description: Device Policy State log in Windows 10, Version 1607, collects info about policies.
|
||||
keywords: ["mdm", "udiag", "device policy", "mdmdiagnostics"]
|
||||
ms.prod: W10
|
||||
@ -8,80 +8,74 @@ ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
---
|
||||
|
||||
# Device Policy State Log
|
||||
# Diagnostics for Windows 10 devices
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10
|
||||
- Windows 10 Mobile
|
||||
|
||||
[Diagnostics capability for devices managed by any MDM provider.](https://microsoft.sharepoint.com/teams/osg_core_ens/mgmt/OSMan Wiki/MDM Diagnostics - Generating and Processing Log files.aspx)
|
||||
(which SKUs?)
|
||||
|
||||
[Redstone spec](https://microsoft.sharepoint.com/teams/specstore/_layouts/15/WopiFrame.aspx?sourcedoc=%7b7E8742A2-03A1-451C-BA07-F2573B044CBF%7d&file=DM%20-%20MDM%20Diagnostics-RS.docx&action=default&DefaultItemOpen=1)
|
||||
(this isn't really MDM-managed only, is it? It can be done locally/email?)
|
||||
|
||||
The Device Policy State Log, a new log in Windows 10, Version 1607, collects information on the state of policies applied to the device to help you determine which sources are applying policies or configurations to the device. This log is a tool that enables the helpdesk to be more effectively in remotely diagnosing and resolving issues with the device.
|
||||
Two new diagnostic tools for Windows 10, version 1607, help IT administrators diagnose and resolve issues with remote devices enrolled in mobile device management (MDM): the [Device Policy State Log](#device-policy-state-log) and [UDiag](#udiag). Windows 10 for desktop editions and Windows 10 Mobile make it simple for users to export log files that you can then analyze with these tools.
|
||||
|
||||
Users can easily generate this log, both on PCs and mobile devices. (screenshot of UI)
|
||||
## Export management log files
|
||||
|
||||
Go to **Settings > Accounts > Work access > Export your management log files**.
|
||||
|
||||
|
||||
|
||||
- On desktop devices, the file is saved to C:/Users/Public/Public Documents/MDMDiagnostics/MDMDiagReport.xml
|
||||
- On phones, the file is saved to *phone*/Documents/MDMDiagnostics/MDMDiagReport.xml
|
||||
|
||||
The MDMDiagReport.xml can be used with [Device Policy State Log](#device-policy-state-log) and [UDiag](#udiag) to help you resolve issues.
|
||||
|
||||
## Device Policy State Log
|
||||
|
||||
The Device Policy State Log collects information on the state of policies applied to the device to help you determine which sources are applying policies or configurations to the device. Help desk personnel can use this log to diagnose and resolve issues with a remote device.
|
||||
|
||||
After you obtain the management log file from the user's device, run the mdmReportGenerator.ps1 script on log to create report. (download mdmReportGenerator.ps1 and mdmDiagnoseHelpers.psm1) This PowerShell script asks you to enter the name of the management log file and a name for the report that it will create, as shown in the following example:
|
||||
|
||||
|
||||
|
||||
The script produces the report in html format. There are two sections to the report, Configuration and Policy Information.
|
||||
|
||||
The configuration section lists the GUID of the sources that are applying configurations to the device.
|
||||
|
||||
|
||||
|
||||
The policy information section displays information about the specific policies that are being enforced and on the device. For each policy, you will see the Area grouping, the Policy name, its default and current value, and the configuration source. You can compare the configuration source GUID in the policy information section to the GUIDs in the configuration section to identify the source of the policy.
|
||||
|
||||
|
||||
|
||||
|
||||
(run script on log to create report)
|
||||
## UDiag
|
||||
|
||||
There are two sections to the report, Configuration and Policy Information. The configuration section enumerates the GUID of the sources that are applying configurations to the device.
|
||||
The UDiag tool applies rules to Event Tracing for Windows (ETW) files to help determine the root cause of an issue.
|
||||
|
||||
The policy information section displays information about the specific policies that are being enforced and on the device. For each policy you will see the Area grouping, the Policy name, its default and current value, in addition to the configuration source.
|
||||
(download UDiag)
|
||||
|
||||
|
||||
|
||||
|
||||
Event Trace Log (ETL) file
|
||||
|
||||
To generate on desktop or phone:
|
||||
1. **Settings** > **Accounts** > **Work access** > **Export your management log files**
|
||||
2. File is saved:
|
||||
- on desktop: Clicking on **Export** will generate the diagnostic log file, and save it in C:\Users\Public\Documents\MDMDiagnostics
|
||||
- on phone: Copy the file from the phone
|
||||
- Either connect phone to PC and copy the file from Phone\Documents\MDMDiagnostics
|
||||
OR
|
||||
- Mail the log file from your phone by selecting the file from This Device\Documents\MDMDiagnostics
|
||||
|
||||
UDiag tool: Uses rule-based analysis to determine root cause based on Event Tracing for Windows (ETW) files; reduces the amount of time needed to determine what the root case of an issue is based on ETW analysis
|
||||
To analyze MDMDiagReport.xml using UDiag
|
||||
1. Open UDiag, and select Device Management.
|
||||
2. Select your source for the log files ("cab of logs" or "directory of logs")
|
||||
|
||||
Investigating log content, identifying patterns, and adding a root cause analysis to the database (Advanced users/providers)
|
||||
|
||||
|
||||
1. While at the 'Root Causes List' panel, click the 'Diagnose' button at the bottom.
|
||||
|
||||
|
||||
2. You will then be brought to the Diagnosis panel where you can investigate and tag root causes from the content
|
||||
|
||||
[1] Evidence Groups
|
||||
|
||||
|
||||
◦When a set of logs are loaded into UDiag, the contents are processed (e.g. ETW) and organized into evidence groups.
|
||||
|
||||
|
||||
•[2] Decision Tree View
|
||||
|
||||
|
||||
◦This view shows the loaded decision tree for the current topic/topic area.
|
||||
|
||||
◦When a decision node is selected, a user can modify the regular expression and add/edit/delete an RCA for that node. Any RCA matches found in the current log set will have an 'RCA' label that is either Red or Yellow.
|
||||
|
||||
•[3] Evidence View
|
||||
|
||||
|
||||
◦Selecting an evidence group from [1], loads its content into this evidence view. Use this view to investigate issues and determine root causes. Drag and drop lines from the Evidence View [3] into the Decision Tree View [2], to build your RCA pattern.
|
||||
- Evidence Groups: When a set of logs are loaded into UDiag, the contents are processed (e.g. ETW) and organized into evidence groups.
|
||||
- Decision Tree View: This view shows the loaded decision tree for the current topic/topic area. When a decision node is selected, a user can modify the regular expression and add/edit/delete an RCA for that node. Any RCA matches found in the current log set will have an 'RCA' label that is either Red or Yellow.
|
||||
- Evidence View: Selecting an evidence group loads its content into this evidence view. Use this view to investigate issues and determine root causes. Drag and drop lines from the Evidence View into the Decision Tree View, to build your root cause analysis pattern. ([Learn more about techniques for root cause analysis.](https://technet.microsoft.com/en-us/library/cc543298.aspx))
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Device Policy State Log implementation: what does admin have to do on MDM side to enable "export your management log file"?[DK] Nothing. Generating the log is entirely a client side behavior. There is a new capability in the Diagnostic Log CSP that will enable a MDM ISV to trigger generation and capture of the log over the MDM channel.
|
||||
|
||||
|
||||
Can admin pull logs without user action? [DK] Yes via the diagnostic log CSP
|
||||
|
||||
Is MDMDiagnostics.xml the file created by "export your management log file"? [DK] Yes
|
||||
|
||||
|
||||
"Run PowerShell script to process the file" – is that the user doing it? How can this workflow work in an enterprise where employees aren't computer-savvy? [DK] This is intended to be done by the help desk guy.
|
||||
|
||||
@ -91,7 +85,18 @@ Investigating log content, identifying patterns, and adding a root cause analysi
|
||||
|
||||
UDiag – where does admin get this? [DK] Publishing on DLC later this summer
|
||||
|
||||
Can admins create custom rule sets? [DK] Right now, no. but open to feedback on this.
|
||||
Can admins create custom rule sets? [DK] Right now, no. but open to feedback on this.
|
||||
|
||||
|
||||
|
||||
Link to [Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/en-us/library/windows/hardware/mt632120%28v=vs.85%29.aspx)
|
||||
|
||||
[Diagnostics capability for devices managed by any MDM provider.](https://microsoft.sharepoint.com/teams/osg_core_ens/mgmt/OSMan Wiki/MDM Diagnostics - Generating and Processing Log files.aspx)
|
||||
|
||||
[Redstone spec](https://microsoft.sharepoint.com/teams/specstore/_layouts/15/WopiFrame.aspx?sourcedoc=%7b7E8742A2-03A1-451C-BA07-F2573B044CBF%7d&file=DM%20-%20MDM%20Diagnostics-RS.docx&action=default&DefaultItemOpen=1)
|
||||
|
||||
## Related topics
|
||||
|
||||
[DiagnosticLog CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt219118.aspx)
|
||||
|
||||
[Diagnose MDM failures in Windows 10](https://msdn.microsoft.com/en-us/library/windows/hardware/mt632120.aspx)
|
||||
BIN
windows/manage/images/config-policy.png
Normal file
BIN
windows/manage/images/config-policy.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 19 KiB |
BIN
windows/manage/images/config-source.png
Normal file
BIN
windows/manage/images/config-source.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 6.6 KiB |
BIN
windows/manage/images/export-mgt-desktop.png
Normal file
BIN
windows/manage/images/export-mgt-desktop.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 58 KiB |
BIN
windows/manage/images/export-mgt-mobile.png
Normal file
BIN
windows/manage/images/export-mgt-mobile.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 40 KiB |
BIN
windows/manage/images/mdm-diag-report-powershell.PNG
Normal file
BIN
windows/manage/images/mdm-diag-report-powershell.PNG
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 11 KiB |
@ -140,20 +140,19 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
|
||||
> **Important**: It is not recommended to set additional policies on PCs configured for **Shared PC Mode**. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required.
|
||||
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>Control Panel</strong> > <strong>Personalization</strong> </caption>
|
||||
<table border="1">
|
||||
<thead><tr><th colspan="2"><p>Policy path</p></th></tr>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr> </thead>
|
||||
<tbody>
|
||||
<tr><td colspan="2"><p><strong>Admin Templates</strong> > <strong>Control Panel</strong> > <strong>Personalization</strong></p></td>
|
||||
</tr>
|
||||
|
||||
<tr><td><p>Prevent enabling lock screen slide show</p></td><td><p>Enabled</p></td>
|
||||
</tr>
|
||||
<tr><td><p>Prevent changing lock screen and logon image</p></td><td><p>Enabled</p></td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Button Settings</strong></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr><td colspan="2"><p><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Button Settings</strong></p></td>
|
||||
</tr>
|
||||
<tr><td><p>Select the Power button action (plugged in)</p></td><td><p>Sleep</p></td>
|
||||
</tr>
|
||||
<tr><td><p>Select the Power button action (on battery)</p></td><td><p>Sleep</p></td>
|
||||
@ -163,12 +162,9 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
<tr><td><p>Select the lid switch action (plugged in)</p></td><td><p>Sleep</p></td>
|
||||
</tr>
|
||||
<tr><td><p>Select the lid switch action (on battery)</p></td><td><p>Sleep</p></td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Sleep Settings</strong></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr><td colspan="2"><p><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Sleep Settings</strong></p></td>
|
||||
</tr>
|
||||
<tr><td><p>Require a password when a computer wakes (plugged in)</p></td><td><p>Enabled</p></td>
|
||||
</tr>
|
||||
<tr><td><p>Require a password when a computer wakes (on battery)</p></td><td><p>Enabled</p></td>
|
||||
@ -177,139 +173,106 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
</tr>
|
||||
<tr><td><p>Specify the system sleep timeout (on battery)</p></td><td><p>1 hour</p></td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off hybrid sleep (plugged in) </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td> <p> Turn off hybrid sleep (plugged in) </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off hybrid sleep (on battery) </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td> <p> Turn off hybrid sleep (on battery) </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Specify the unattended sleep timeout (plugged in) </p> </td> <td> <p> 1 hour </p> </td>
|
||||
<tr> <td> <p> Specify the unattended sleep timeout (plugged in) </p> </td> <td> <p> 1 hour </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Specify the unattended sleep timeout (on battery) </p> </td> <td> <p> 1 hour </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow standby states (S1-S3) when sleeping (plugged in) </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td> <p> Allow standby states (S1-S3) when sleeping (plugged in) </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow standby states (S1-S3) when sleeping (on battery) </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Specify the system hibernate timeout (plugged in) </p> </td> <td> <p> Enabled, 0 </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Specify the system hibernate timeout (on battery) </p> </td> <td> <p> Enabled, 0 </p> </td>
|
||||
</tr> </table><bbr/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption <strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Video and Display Settings</strong> ></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>System</strong>><strong>Power Management</strong>><strong>Video and Display Settings</strong> </p> </td> </tr>
|
||||
<tr> <td> <p> Turn off the display (plugged in) </p> </td> <td> <p> 1 hour </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off the display (on battery </p> </td> <td> <p> 1 hour </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>System</strong> > <strong>Logon</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
<tr> <td> <p> Turn off the display (on battery </p> </td> <td> <p> 1 hour </p> </td>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Show first sign-in animation </p> </td> <td> <p> Disabled </p> </td>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>System</strong>><strong>Logon</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Show first sign-in animation </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Hide entry points for Fast User Switching </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn on convenience PIN sign-in </p> </td> <td> <p> Disabled </p> </td>
|
||||
<tr> <td> <p> Turn on convenience PIN sign-in </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off picture password sign-in </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td> <p> Turn off picture password sign-in </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off app notification on the lock screen </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td> <p> Turn off app notification on the lock screen </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow users to select when a password is required when resuming from connected standby </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Block user from showing account details on sign-in </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>System</strong> > <strong>User Profiles</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
<tr> <td> <p> Block user from showing account details on sign-in </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Turn off the advertising ID </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>Windows Components </strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>System</strong>><strong>User Profiles</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off the advertising ID </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components </strong> </p> </td>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Do not show Windows Tips </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Turn off Microsoft consumer experiences </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Microsoft Passport for Work </p> </td> <td> <p> Disabled </p> </td>
|
||||
<tr> <td> <p> Microsoft Passport for Work </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Prevent the usage of OneDrive for file storage </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>Biometrics</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
<tr> <td> <p> Prevent the usage of OneDrive for file storage </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Allow the use of biometrics </p> </td> <td> <p> Disabled </p> </td>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Biometrics</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow the use of biometrics </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow users to log on using biometrics </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow domain users to log on using biometrics </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>Data Collection and Preview Builds</strong></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Toggle user control over Insider builds </p> </td> <td> <p> Disabled </p> </td>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Data Collection and Preview Builds</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Toggle user control over Insider builds </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Disable pre-release features or settings </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Do not show feedback notifications </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>File Explorer</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Show lock in the user tile menu </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>Maintenance Scheduler</strong></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>File Explorer</strong> </p> </td>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Automatic Maintenance Activation Boundary </p> </td> <td> <p> 12am </p> </td>
|
||||
<tr> <td> <p> Show lock in the user tile menu </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Maintenance Scheduler</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Automatic Maintenance Activation Boundary </p> </td> <td> <p> 12am </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Automatic Maintenance Random Delay </p> </td> <td> <p> Enabled, 2 hours </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Automatic Maintenance WakeUp Policy </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption> <strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>Microsoft Edge</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Microsoft Edge</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Open a new tab with an empty tab </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Configure corporate home pages </p> </td> <td> <p> Enabled, about:blank </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Admin Templates</strong> > <strong>Windows Components</strong> > <strong>Search</strong></caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td colspan="2"> <p> <strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Search</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Allow Cortana </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr> </table><br/>
|
||||
<table style="width:100%" border="1">
|
||||
<caption><strong>Windows Settings</strong> > <strong>Security Settings</strong> > <strong>Local Policies</strong> > <strong>Security Options</strong> </caption>
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th>
|
||||
</tr>
|
||||
|
||||
<tr> <td> <p> Interactive logon: Do not display last user name </p> </td> <td> <p> Enabled </p> </td>
|
||||
<tr> <td colspan="2"> <p> <strong>Windows Settings</strong>><strong>Security Settings</strong>><strong>Local Policies</strong>><strong>Security Options</strong> </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Interactive logon: Do not display last user name </p> </td> <td> <p> Enabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Interactive logon: Sign-in last interactive user automatically after a system-initiated restart </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> Shutdown: Allow system to be shut down without having to log on </p> </td> <td> <p> Disabled </p> </td>
|
||||
</tr>
|
||||
<tr> <td> <p> User Account Control: Behavior of the elevation prompt for standard users </p> </td> <td> <p> Auto deny </p> </td>
|
||||
<tr> <td> <p> User Account Control: Behavior of the elevation prompt for standard users </p> </td> <td> <p> Auto deny </p> </td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table> </br></br>
|
||||
|
||||
|
||||
|
||||
@ -1,13 +0,0 @@
|
||||
---
|
||||
title: Simple bulk provisioning (Windows 10)
|
||||
description: Use Windows 10 Configuration Designer for easy provisioning packages.
|
||||
keywords: ["runtime provisioning", "provisioning package", "bulk provisioning"]
|
||||
ms.prod: W10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
---
|
||||
|
||||
# simple bulk provisioning
|
||||
|
||||
adding text to make it build
|
||||
Reference in New Issue
Block a user