From 9615c49dde309ebe2dea46cc256217869d86ab80 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sat, 6 Nov 2021 10:20:31 +0500 Subject: [PATCH 01/36] Update deploy-wdac-policies-with-script.md --- .../deploy-wdac-policies-with-script.md | 44 +++++++++++-------- 1 file changed, 25 insertions(+), 19 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md index 36243edbf3..817a23cb09 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md +++ b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md @@ -10,7 +10,7 @@ ms.reviewer: jogeurte ms.author: jogeurte ms.manager: jsuther manager: dansimp -ms.date: 04/14/2021 +ms.date: 11/06/2021 ms.technology: windows-sec ms.topic: article ms.localizationpriority: medium @@ -32,7 +32,7 @@ This topic describes how to deploy Windows Defender Application Control (WDAC) p > [!NOTE] > To use this procedure, download and distribute the [WDAC policy refresh tool](https://aka.ms/refreshpolicy) to all managed endpoints. Ensure your WDAC policies allow the WDAC policy refresh tool or use a managed installer to distribute the tool. -## Script-based deployment process for Windows 10 version 1903 and above +## Deploying policies for Windows 10 version 1903 and above 1. Initialize the variables to be used by the script. @@ -56,23 +56,7 @@ This topic describes how to deploy Windows Defender Application Control (WDAC) p & $RefreshPolicyTool ``` -### Deploying signed policies - -In addition to the steps outlined above, the binary policy file must also be copied to the device's EFI partition. Deploying your policy via [MEM](/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune) or the Application Control CSP will handle this step automatically. - -1. Mount the EFI volume and make the directory, if it does not exist, in an elevated PowerShell prompt: - - ```powershell - mountvol J: /S - J: - mkdir J:\EFI\Microsoft\Boot\CiPolicies\Active - ``` - -2. Copy the signed policy binary as `{PolicyGUID}.cip` to `J:\EFI\Microsoft\Boot\CiPolicies\Active`. - -3. Reboot the system. - -## Script-based deployment process for Windows 10 versions earlier than 1903 +## Deploying policies for Windows 10 versions earlier than 1903 1. Initialize the variables to be used by the script. @@ -93,3 +77,25 @@ In addition to the steps outlined above, the binary policy file must also be cop ```powershell Invoke-CimMethod -Namespace root\Microsoft\Windows\CI -ClassName PS_UpdateAndCompareCIPolicy -MethodName Update -Arguments @{FilePath = $DestinationBinary} ``` + +## Deploying signed policies + +In addition to the steps outlined above, the binary policy file must also be copied to the device's EFI partition. Deploying your policy via [MEM](/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune) or the Application Control CSP will handle this step automatically. + +1. Mount the EFI volume and make the directory, if it does not exist, in an elevated PowerShell prompt: + + ```powershell + $MountPoint = 'C:\EFI' + $EFIDestinationFolder = "$MountPoint\Microsoft\Boot\CiPolicies\Active" + $EFIPartition = (Get-Partition | Where-Object IsSystem).AccessPaths[0] + mkdir $EFIDestinationFolder + mountvol $MountPoint $EFIPartition + ``` + +2. Copy the signed policy to the created folder: + + ```powershell + Copy-Item -Path $PolicyBinary -Destination $EFIDestinationFolder -Force + ``` + +3. Reboot the system. From 8643fa1cf3ddfe1cde6b00590185d5940447da87 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 9 Nov 2021 16:41:34 +0500 Subject: [PATCH 02/36] Update wdsc-app-browser-control.md --- .../wdsc-app-browser-control.md | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-security-center/wdsc-app-browser-control.md b/windows/security/threat-protection/windows-defender-security-center/wdsc-app-browser-control.md index acfa2cee01..d9747dc21d 100644 --- a/windows/security/threat-protection/windows-defender-security-center/wdsc-app-browser-control.md +++ b/windows/security/threat-protection/windows-defender-security-center/wdsc-app-browser-control.md @@ -37,14 +37,11 @@ You can prevent users from modifying settings in the Exploit protection area. Th You can only prevent users from modifying Exploit protection settings by using Group Policy. > [!IMPORTANT] -> -> ### Requirements -> > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and click **Edit**. -2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. +2. In the **Group Policy Management Editor** go to **Computer configuration**, select **Policies** and then **Administrative templates**. 3. Expand the tree to **Windows components > Windows Security > App and browser protection**. @@ -59,14 +56,11 @@ You can choose to hide the entire section by using Group Policy. The section wil This can only be done in Group Policy. > [!IMPORTANT] -> -> ### Requirements -> -> You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. +> You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and click **Edit**. -2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. +2. In the **Group Policy Management Editor** go to **Computer configuration**, select **Policies** and then **Administrative templates**. 3. Expand the tree to **Windows components > Windows Security > App and browser protection**. @@ -77,4 +71,4 @@ This can only be done in Group Policy. > [!NOTE] > If you hide all sections then the app will show a restricted interface, as in the following screenshot: > -> ![Windows Security app with all sections hidden by Group Policy.](images/wdsc-all-hide.png) \ No newline at end of file +> ![Windows Security app with all sections hidden by Group Policy.](images/wdsc-all-hide.png) From 4b6794ec3e4f7008e876076e9313dee94b747d70 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 10 Nov 2021 10:32:51 +0500 Subject: [PATCH 03/36] Update windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deployment/deploy-wdac-policies-with-script.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md index 817a23cb09..4368a1ce60 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md +++ b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md @@ -98,4 +98,4 @@ In addition to the steps outlined above, the binary policy file must also be cop Copy-Item -Path $PolicyBinary -Destination $EFIDestinationFolder -Force ``` -3. Reboot the system. +3. Restart the system. From 6f8104efdb936304d693f0d639d2fd666b9ab4b8 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 10 Nov 2021 11:46:45 +0530 Subject: [PATCH 04/36] 5548201-htmltableconvertupdate-batch02 --- .../app-v/appv-performance-guidance.md | 416 +--- ...plications-inside-a-virtual-environment.md | 45 +- ...ppv-using-the-client-management-console.md | 46 +- ...viewing-appv-server-publishing-metadata.md | 92 +- ...eshooting-wireless-network-connectivity.md | 18 +- .../client-management/mdm/applocker-csp.md | 638 +---- windows/client-management/mdm/assign-seats.md | 120 +- ...e-active-directory-integration-with-mdm.md | 588 +---- .../mdm/browserfavorite-csp.md | 40 +- ...bulk-assign-and-reclaim-seats-from-user.md | 101 +- .../mdm/cellularsettings-csp.md | 31 +- .../mdm/cm-cellularentries-csp.md | 73 +- windows/client-management/mdm/cmpolicy-csp.md | 205 +- .../mdm/cmpolicyenterprise-csp.md | 207 +- ...onfiguration-service-provider-reference.md | 2144 +++-------------- 15 files changed, 787 insertions(+), 3977 deletions(-) diff --git a/windows/application-management/app-v/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md index 392ba61769..3b15cb36d4 100644 --- a/windows/application-management/app-v/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -70,201 +70,48 @@ Use the information in the following section for more information: [Enhancing the VDI Experience through Performance Optimization/Tuning](#bkmk-evdi) -### Applicability Checklist +### Applicability Checklist -Deployment Environment +|Checklist|Deployment Environment| +|--- |--- | +|![Checklist box](images/checklistbox.gif)|Non-Persistent VDI or RDSH.| +|![Checklist box](images/checklistbox.gif)|User Experience Virtualization (UE-V), other UPM solutions or User Profile Disks (UPD).| - ---- - - - - - - - - - - -
Checklist box

Non-Persistent VDI or RDSH.

Checklist box

User Experience Virtualization (UE-V), other UPM solutions or User Profile Disks (UPD).

+|Checklist|Expected Configuration| +|--- |--- | +|![Checklist box](images/checklistbox.gif)|User Experience Virtualization (UE-V) with the App-V user state template enabled or User Profile Management (UPM) software. Non-UE-V UPM software must be capable of triggering on Login or Process/Application Start and Logoff.| +|![Checklist box](images/checklistbox.gif)|App-V Shared Content Store (SCS) is configured or can be configured.| - -Expected Configuration +|Checklist|IT Administration| +|--- |--- | +|![Checklist box](images/checklistbox.gif)|Admin may need to update the VM base image regularly to ensure optimal performance or Admin may need to manage multiple images for different user groups.| - ---- - - - - - - - - - - -
Checklist box

User Experience Virtualization (UE-V) with the App-V user state template enabled or User Profile Management (UPM) software. Non-UE-V UPM software must be capable of triggering on Login or Process/Application Start and Logoff.

Checklist box

App-V Shared Content Store (SCS) is configured or can be configured.

- - - -IT Administration - - ---- - - - - - - -
Checklist box

Admin may need to update the VM base image regularly to ensure optimal performance or Admin may need to manage multiple images for different user groups.

- - - -### Usage Scenarios +### Usage Scenarios As you review the two scenarios, keep in mind that these approach the extremes. Based on your usage requirements, you may choose to apply these steps to a subset of users, virtual application packages, or both. - ---- - - - - - - - - - - - - -
Optimized for PerformanceOptimized for Storage

To provide the most optimal user experience, this approach leverages the capabilities of a UPM solution and requires additional image preparation and can incur some additional image management overhead.

-

The following describes many performance improvements in stateful non-persistent deployments. For more information, see Sequencing Steps to Optimize Packages for Publishing Performance later in this topic.

The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in very costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image.

-

The impact of this alteration is detailed in the User Experience Walk-through section of this document.

+|Optimized for Performance|Optimized for Storage| +|--- |--- | +|To provide the most optimal user experience, this approach leverages the capabilities of a UPM solution and requires additional image preparation and can incur some additional image management overhead.

The following describes many performance improvements in stateful non-persistent deployments. For more information, see [Sequencing Steps to Optimize Packages for Publishing Performance](#sequencing-steps-to-optimize-packages-for-publishing-performance) later in this topic.|The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in very costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image.

The impact of this alteration is detailed in the [User Experience Walk-through](#bkmk-uewt) section of this document.| - - -### Preparing your Environment +### Preparing your Environment The following table displays the required steps to prepare the base image and the UE-V or another UPM solution for the approach. **Prepare the Base Image** - ---- - - - - - - - - - - - - -
Optimized for PerformanceOptimized for Storage

-
    -

  • Enable the App-V client as described in Enable the App-V in-box client.

    • -

  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.

    • -

  • Configure for Shared Content Store (SCS) mode. For more information see Deploying the App-V Sequencer and Configuring the Client.

    • -

  • Configure Preserve User Integrations on Login Registry DWORD.

    • -

  • Pre-configure all user- and global-targeted packages for example, Add-AppvClientPackage.

    • -

  • Pre-configure all user- and global-targeted connection groups for example, Add-AppvClientConnectionGroup.

    • -

  • Pre-publish all global-targeted packages.

    -

    -

    Alternatively,

    -
      -

    • Perform a global publishing/refresh.

      • -

    • Perform a user publishing/refresh.

      • -

    • Un-publish all user-targeted packages.

      • -

    • Delete the following user-Virtual File System (VFS) entries.

      • -
    -

    AppData\Local\Microsoft\AppV\Client\VFS

    -

    AppData\Roaming\Microsoft\AppV\Client\VFS

    • -

-
    -

  • Enable the App-V client as described in Enable the App-V in-box client.

    • -

  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.

    • -

  • Configure for Shared Content Store (SCS) mode. For more information see Deploying the App-V Sequencer and Configuring the Client.

    • -

  • Configure Preserve User Integrations on Login Registry DWORD.

    • -

  • Pre-configure all global-targeted packages for example, Add-AppvClientPackage.

    • -

  • Pre-configure all global-targeted connection groups for example, Add-AppvClientConnectionGroup.

    • -

  • Pre-publish all global-targeted packages.

    -

    • -
- - +|Optimized for Performance|Optimized for Storage| +|--- |--- | +|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information see [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all user- and global-targeted packages for example, **Add-AppvClientPackage**.
  • Pre-configure all user- and global-targeted connection groups for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.
    Alternatively,
  • Perform a global publishing/refresh.
  • Perform a user publishing/refresh.
  • Un-publish all user-targeted packages.
  • Delete the following user-Virtual File System (VFS) entries
    AppData\Local\Microsoft\AppV\Client\VFS
    AppData\Roaming\Microsoft\AppV\Client\VFS|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information see Deploying the
  • App-V Sequencer and Configuring the Client.
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all global-targeted packages for example,** Add-AppvClientPackage**.
  • Pre-configure all global-targeted connection groups for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.| **Configurations** - For critical App-V Client configurations and for a little more context and how-to, review the following information: - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    Configuration SettingWhat does this do?How should I use it?

    Shared Content Store (SCS) Mode

    -

    When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM).

    -

    This helps to conserve local storage and minimize disk I/O per second (IOPS).

    This is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN.

    PreserveUserIntegrationsOnLogin

    -
      -

    • Configure in the Registry under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Integration.

      • -

    • Create the DWORD value PreserveUserIntegrationsOnLogin with a value of 1.

      • -

    • Restart the App-V client service or restart the computer running the App-V Client.

      • -

    If you have not pre-configured (Add-AppvClientPackage) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then re-integrate*.

    -

    For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh.

    If you don’t plan to pre-configure every available user package in the base image, use this setting.

    MaxConcurrentPublishingRefresh

    -
      -

    • Configure in the Registry under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Publishing.

      • -

    • Create the DWORD value MaxConcurrentPublishingrefresh with the desired maximum number of concurrent publishing refreshes.

      • -

    • The App-V client service and computer do not need to be restarted.

      • -

    This setting determines the number of users that can perform a publishing refresh/sync at the same time. The default setting is no limit.

    Limiting the number of concurrent publishing refreshes prevents excessive CPU usage that could impact computer performance. This limit is recommended in an RDS environment, where multiple users can log in to the same computer at the same time and perform a publishing refresh sync.

    -

    If the concurrent publishing refresh threshold is reached, the time required to publish new applications and make them available to end users after they log in could take an indeterminate amount of time.

    - - +|Configuration Setting|What does this do?|How should I use it?| +|--- |--- |--- | +|Shared Content Store (SCS) Mode
  • Configurable in Windows PowerShell with Set-AppvClientConfiguration -SharedContentStoreMode 1
    or configurable with Group Policy, as described in [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).|When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM).
    This helps to conserve local storage and minimize disk I/O per second (IOPS).|This is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN.| +|PreserveUserIntegrationsOnLogin
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Integration**.
  • Create the DWORD value **PreserveUserIntegrationsOnLogin** with a value of 1.
  • Restart the App-V client service or restart the computer running the App-V Client.|If you have not pre-configured (**Add-AppvClientPackage**) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then re-integrate*.
    For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh.|If you don’t plan to pre-configure every available user package in the base image, use this setting.| +|MaxConcurrentPublishingRefresh
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Publishing**.
  • Create the DWORD value **MaxConcurrentPublishingrefresh** with the desired maximum number of concurrent publishing refreshes.
  • The App-V client service and computer do not need to be restarted.|This setting determines the number of users that can perform a publishing refresh/sync at the same time. The default setting is no limit.|Limiting the number of concurrent publishing refreshes prevents excessive CPU usage that could impact computer performance. This limit is recommended in an RDS environment, where multiple users can log in to the same computer at the same time and perform a publishing refresh sync.
    If the concurrent publishing refresh threshold is reached, the time required to publish new applications and make them available to end users after they log in could take an indeterminate amount of time.| ### Configure UE-V solution for App-V Approach @@ -355,83 +202,14 @@ Registry – HKEY\_CURRENT\_USER This following is a step-by-step walk-through of the App-V and UPM operations and the expectations users should expect. - ---- - - - - - - - - - - - - -
    Optimized for PerformanceOptimized for Storage

    After implementing this approach in the VDI/RDSH environment, on first login,

    -
      -

    • (Operation) A user-publishing/refresh is initiated. (Expectation) If this is the first time a user has published virtual applications (e.g. non-persistent), this will take the usual duration of a publishing/refresh.

      • -

    • (Operation) After the publishing/refresh, the UPM solution captures the user integrations. (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state.

      • -
    -

    On subsequent logins:

    -
      -

    • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.

      -

      (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away.

      • -

    • (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements. (Expectation) If there are no entitlement changes, publishing1 will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity* of virtual applications

      • -

    • (Operation) UPM solution will capture user integrations again at logoff. (Expectation) Same as previous.

      • -
    -

    ¹ The publishing operation (Publish-AppVClientPackage) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps.

    After implementing this approach in the VDI/RDSH environment, on first login,

    -
      -

    • (Operation) A user-publishing/refresh is initiated. (Expectation)

      -
        -

      • If this is the first time a user has published virtual applications (e.g., non-persistent), this will take the usual duration of a publishing/refresh.

        • -

      • First and subsequent logins will be impacted by pre-configuring of packages (add/refresh).

        -

        • -
      • -

    • (Operation) After the publishing/refresh, the UPM solution captures the user integrations. (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state

      • -
    -

    On subsequent logins:

    -
      -

    • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.

      • -

    • (Operation) Add/refresh must pre-configure all user targeted applications. (Expectation)

      -
        -

      • This may increase the time to application availability significantly (on the order of 10’s of seconds).

        • -

      • This will increase the publishing refresh time relative to the number and complexity* of virtual applications.

        -

        • -
      • -

    • (Operation) Publishing/refresh will process un-publish and publish operations for changes to user package entitlements.

      • -
    +|Optimized for Performance|Optimized for Storage| +|--- |--- | +|After implementing this approach in the VDI/RDSH environment, on first login,
  • (Operation) A user-publishing/refresh is initiated. (Expectation) If this is the first time a user has published virtual applications (e.g. non-persistent), this will take the usual duration of a publishing/refresh.
  • (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state.

    On subsequent logins:
  • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.
  • (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away.
  • (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements.
  • (Expectation) If there are no entitlement changes, publishing1 will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity* of virtual applications
  • (Operation) UPM solution will capture user integrations again at logoff. (Expectation) Same as previous.

    ¹ The publishing operation (**Publish-AppVClientPackage**) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps.|After implementing this approach in the VDI/RDSH environment, on first login
  • (Operation) A user-publishing/refresh is initiated. (Expectation)
  • (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state.

    On subsequent logins:
  • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.
  • (Operation) Add/refresh must pre-configure all user targeted applications.
  • (Operation) Publishing/refresh will process un-publish and publish operations for changes to user package entitlements.| - +|Outcome|Outcome| +|--- |--- | +|Because the user integrations are entirely preserved, there will be no work for example, integration for the publishing/refresh to complete. All virtual applications will be available within seconds of login.

    The publishing/refresh will process changes to the users entitled virtual applications which impacts the experience.|Because the add/refresh must re-configure all the virtual applications to the VM, the publishing refresh time on every login will be extended.| - ---- - - - - - - - - - - - - -
    OutcomeOutcome

    -
      -

    • Because the user integrations are entirely preserved, there will be no work for example, integration for the publishing/refresh to complete. All virtual applications will be available within seconds of login.

      • -

    • The publishing/refresh will process changes to the users entitled virtual applications which impacts the experience.

      • -

    Because the add/refresh must re-configure all the virtual applications to the VM, the publishing refresh time on every login will be extended.

    - - ### Impact to Package Life Cycle @@ -489,36 +267,9 @@ Server Performance Tuning Guidelines for Several App-V features facilitate new scenarios or enable new customer deployment scenarios. These following features can impact the performance of the publishing and launch operations. - ------ - - - - - - - - - - - - - - - - -
    StepConsiderationBenefitsTradeoffs

    No Feature Block 1 (FB1, also known as Primary FB)

    No FB1 means the application will launch immediately and stream fault (application requires file, DLL and must pull down over the network) during launch. If there are network limitations, FB1 will:

    -
      -

    • Reduce the number of stream faults and network bandwidth used when you launch an application for the first time.

      • -

    • Delay launch until the entire FB1 has been streamed.

      • -

    Stream faulting decreases the launch time.

    Virtual application packages with FB1 configured will need to be re-sequenced.

    - - +|Step|Consideration|Benefits|Tradeoffs| +|--- |--- |--- |--- | +|No Feature Block 1 (FB1, also known as Primary FB)|No FB1 means the application will launch immediately and stream fault (application requires file, DLL and must pull down over the network) during launch. If there are network limitations, FB1 will:
  • Reduce the number of stream faults and network bandwidth used when you launch an application for the first time.
  • Delay launch until the entire FB1 has been streamed.|Stream faulting decreases the launch time.|Virtual application packages with FB1 configured will need to be re-sequenced.| ### Removing FB1 @@ -555,36 +306,12 @@ Removing FB1 does not require the original application installer. After completi "C:\\UpgradedPackages" **Note**   - This cmdlet requires an executable (.exe) or batch file (.bat). You must provide an empty (does nothing) executable or batch file. + This cmdlet requires an executable (.exe) or batch file (.bat). You must provide an empty (does nothing) executable or batch file. - +|Step|Considerations|Benefits|Tradeoffs| +|--- |--- |--- |--- | +|No SXS Install at Publish (Pre-Install SxS assemblies)|Virtual Application packages do not need to be re-sequenced. SxS Assemblies can remain in the virtual application package.|The SxS Assembly dependencies will not install at publishing time.|SxS Assembly dependencies must be pre-installed.| - ------ - - - - - - - - - - - - - - - - -
    StepConsiderationsBenefitsTradeoffs

    No SXS Install at Publish (Pre-Install SxS assemblies)

    Virtual Application packages do not need to be re-sequenced. SxS Assemblies can remain in the virtual application package.

    The SxS Assembly dependencies will not install at publishing time.

    SxS Assembly dependencies must be pre-installed.

    - - ### Creating a new virtual application package on the sequencer @@ -594,33 +321,9 @@ If, during sequencer monitoring, an SxS Assembly (such as a VC++ Runtime) is ins When publishing a virtual application package, the App-V Client will detect if a required SxS dependency is already installed. If the dependency is unavailable on the computer and it is included in the package, a traditional Windows Installer (.**msi**) installation of the SxS assembly will be initiated. As previously documented, simply install the dependency on the computer running the client to ensure that the Windows Installer (.msi) installation will not occur. - ------ - - - - - - - - - - - - - - - - -
    StepConsiderationsBenefitsTradeoffs

    Selectively Employ Dynamic Configuration files

    The App-V client must parse and process these Dynamic Configuration files.

    -

    Be conscious of size and complexity (script execution, VREG inclusions/exclusions) of the file.

    -

    Numerous virtual application packages may already have User- or computer–specific dynamic configurations files.

    Publishing times will improve if these files are used selectively or not at all.

    Virtual application packages would need to be reconfigured individually or via the App-V server management console to remove associated Dynamic Configuration files.

    - +|Step|Considerations|Benefits|Tradeoffs| +|--- |--- |--- |--- | +|Selectively Employ Dynamic Configuration files|The App-V client must parse and process these Dynamic Configuration files.

    Be conscious of size and complexity (script execution, VREG inclusions/exclusions) of the file.

    Numerous virtual application packages may already have User- or computer–specific dynamic configurations files.|Publishing times will improve if these files are used selectively or not at all.|Virtual application packages would need to be reconfigured individually or via the App-V server management console to remove associated Dynamic Configuration files.| ### Disabling a Dynamic Configuration by using Windows PowerShell @@ -639,39 +342,10 @@ For documentation on How to Apply a Dynamic Configuration, see: - [How to Apply the Deployment Configuration File by Using Windows PowerShell](appv-apply-the-deployment-configuration-file-with-powershell.md) - ------ - - - - - - - - - - - - - - - - - - - - - - -
    StepConsiderationsBenefitsTradeoffs

    Account for Synchronous Script Execution during Package Lifecycle.

    If script collateral is embedded in the package, Add cmdlets may be significantly slower.

    -

    Running of scripts during virtual application launch (StartVirtualEnvironment, StartProcess) and/or Add+Publish will impact the perceived performance during one or more of these lifecycle operations.

    Use of Asynchronous (Non-Blocking) Scripts will ensure that the lifecycle operations complete efficiently.

    This step requires working knowledge of all virtual application packages with embedded script collateral, which have associated dynamic configurations files and which reference and run scripts synchronously.

    Remove Extraneous Virtual Fonts from Package.

    The majority of applications investigated by the App-V product team contained a small number of fonts, typically fewer than 20.

    Virtual Fonts impact publishing refresh performance.

    Desired fonts will need to be enabled/installed natively. For instructions, see Install or uninstall fonts.

    - - +|Step|Considerations|Benefits|Tradeoffs| +|--- |--- |--- |--- | +|Account for Synchronous Script Execution during Package Lifecycle.|If script collateral is embedded in the package, Add cmdlets may be significantly slower.
    Running of scripts during virtual application launch (StartVirtualEnvironment, StartProcess) and/or Add+Publish will impact the perceived performance during one or more of these lifecycle operations.|Use of Asynchronous (Non-Blocking) Scripts will ensure that the lifecycle operations complete efficiently.|This step requires working knowledge of all virtual application packages with embedded script collateral, which have associated dynamic configurations files and which reference and run scripts synchronously.| +|Remove Extraneous Virtual Fonts from Package.|The majority of applications investigated by the App-V product team contained a small number of fonts, typically fewer than 20.|Virtual Fonts impact publishing refresh performance.|Desired fonts will need to be enabled/installed natively. For instructions, see Install or uninstall fonts.| ### Determining what virtual fonts exist in the package diff --git a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md index b22a3ebbce..6dba0901d2 100644 --- a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md +++ b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md @@ -54,46 +54,11 @@ Starting with App-V 5.0 SP3, when using RunVirtual, you can publish packages glo 1. Using the information in the following table, create a new registry key using the name of the executable file, for example, **MyApp.exe**. - - - - - - - - - - - - - - - - - - - - - - - - - -
    Package publishing methodWhere to create the registry key

    Published globally

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual

    -

    Example: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe

    Published to the user

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual

    -

    Example: HKEY_CURRENT_USER \SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe

    Connection group can contain:

    -
      -

    • Packages that are published just globally or just to the user

      • -

    • Packages that are published globally and to the user

      • -

    Either HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER key, but all of the following must be true:

    -
      -

    • If you want to include multiple packages in the virtual environment, you must include them in an enabled connection group.

      • -

    • Create only one subkey for one of the packages in the connection group. If, for example, you have one package that is published globally, and another package that is published to the user, you create a subkey for either of these packages, but not both. Although you create a subkey for only one of the packages, all of the packages in the connection group, plus the local application, will be available in the virtual environment.

      • -

    • The key under which you create the subkey must match the publishing method you used for the package.

      -

      For example, if you published the package to the user, you must create the subkey under HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual. Do not add a key for the same application under both hives.

      • -
    - -   + |Package publishing method|Where to create the registry key| + |--- |--- | + |Published globally|HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual
    **Example:**
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe| + |Published to the user|HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual
    **Example:**
    HKEY_CURRENT_USER \SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe| + |Connection group can contain:
  • Packages that are published just globally or just to the user
  • Packages that are published globally and to the user|Either HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER key, but all of the following must be true:
  • If you want to include multiple packages in the virtual environment, you must include them in an enabled connection group.
  • Create only one subkey for one of the packages in the connection group. If, for example, you have one package that is published globally, and another package that is published to the user, you create a subkey for either of these packages, but not both. Although you create a subkey for only one of the packages, all of the packages in the connection group, plus the local application, will be available in the virtual environment.
  • The key under which you create the subkey must match the publishing method you used for the package.
  • For example, if you published the package to the user, you must create the subkey underHKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual. Do not add a key for the same application under both hives.| 2. Set the new registry subkey’s value to the PackageId and VersionId of the package, separating the values with an underscore. diff --git a/windows/application-management/app-v/appv-using-the-client-management-console.md b/windows/application-management/app-v/appv-using-the-client-management-console.md index 4d7ae4ff1a..a21128f036 100644 --- a/windows/application-management/app-v/appv-using-the-client-management-console.md +++ b/windows/application-management/app-v/appv-using-the-client-management-console.md @@ -42,47 +42,11 @@ You can obtain information about the App-V client or perform specific tasks by u The client management console contains the following described main tabs. - ---- - - - - - - - - - - - - - - - - - - - - -
    TabDescription

    Overview

    The Overview tab contains the following elements:

    -
      -

    • Update – Use the Update tile to refresh a virtualized application or to receive a new virtualized package.

      -

      The Last Refresh displays the current version of the virtualized package.

      • -

    • Download all virtual applications – Use the Download tile to download all of the packages provisioned to the current user.

      -

      (Associated Windows PowerShell cmdlet: Mount-AppvClientPackage)

      -

      • -

    • Work Offline – Use this tile to disallow all automatic and manual virtual application updates.

      -

      (Associated Windows PowerShell cmdlet: Set-AppvPublishServer –UserRefreshEnabled –GlobalRefreshEnabled)

      • -

    Virtual Apps

    The VIRTUAL APPS tab displays all of the packages that have been published to the user. You can also click a specific package and see all of the applications that are part of that package. This displays information about packages that are currently in use and how much of each package has been downloaded to the computer. You can also start and stop package downloads. Additionally, you can repair the user state. A repair will delete all user data that is associated with a package.

    -

    App Connection Groups

    The APP CONNECTION GROUPS tab displays all of the connection groups that are available to the current user. Click a specific connection group to see all of the packages that are part of the selected group. This displays information about connection groups that are already in use and how much of the connection group contents have been downloaded to the computer. Additionally, you can start and stop connection group downloads. You can use this section to initiate a repair. A repair will remove all of the user state that is associated a connection group.

    -

    (Associated Windows PowerShell cmdlets: Download - Mount-AppvClientConnectionGroup. Repair -AppvClientConnectionGroup.)

    -

    - - - +|Tab|Description| +|--- |--- | +|Overview|The **Overview** tab contains the following elements:
  • Update – Use the Update tile to refresh a virtualized application or to receive a new virtualized package.
  • The **Last Refresh** displays the current version of the virtualized package.
  • Download all virtual applications – Use the Download tile to download all of the packages provisioned to the current user.
    (Associated Windows PowerShell cmdlet: **Mount-AppvClientPackage**)
  • Work Offline – Use this tile to disallow all automatic and manual virtual application updates.
    (Associated Windows PowerShell cmdlet: **-AppvPublishServer –UserRefreshEnabled –GlobalRefreshEnabled**)| +|Virtual Apps|The **VIRTUAL APPS** tab displays all of the packages that have been published to the user. You can also click a specific package and see all of the applications that are part of that package. This displays information about packages that are currently in use and how much of each package has been downloaded to the computer. You can also start and stop package downloads. Additionally, you can repair the user state. A repair will delete all user data that is associated with a package.| +|App Connection Groups|The **APP CONNECTION GROUPS** tab displays all of the connection groups that are available to the current user. Click a specific connection group to see all of the packages that are part of the selected group. This displays information about connection groups that are already in use and how much of the connection group contents have been downloaded to the computer. Additionally, you can start and stop connection group downloads. You can use this section to initiate a repair. A repair will remove all of the user state that is associated a connection group.
    (Associated Windows PowerShell cmdlets: Download - **Mount-AppvClientConnectionGroup**. Repair - **AppvClientConnectionGroup**.)|
    For App-V issues, use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopappv). diff --git a/windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md b/windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md index eebe3e0c35..80a68fbed3 100644 --- a/windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md +++ b/windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md @@ -77,84 +77,20 @@ To get the name of the Publishing server and the port number (`http:// - - - - - - - -Operating system -Architecture -String value - - - - -

    Windows 10/11

    -

    64-bit

    -

    WindowsClient_10.0_x64

    - - -

    Windows 10/11

    -

    32-bit

    -

    WindowsClient_10.0_x86

    - - -

    Windows 8.1

    -

    64-bit

    -

    WindowsClient_6.2_x64

    - - -

    Windows 8.1

    -

    32-bit

    -

    WindowsClient_6.2_x86

    - - -

    Windows 8

    -

    64-bit

    -

    WindowsClient_6.2_x64

    - - -

    Windows 8

    -

    32-bit

    -

    WindowsClient_6.2_x86

    - - -

    Windows Server 2012 R2

    -

    64-bit

    -

    WindowsServer_6.2_x64

    - - -

    Windows Server 2012 R2

    -

    32-bit

    -

    WindowsServer_6.2_x86

    - - -

    Windows Server 2012

    -

    64-bit

    -

    WindowsServer_6.2_x64

    - - -

    Windows Server 2012

    -

    32-bit

    -

    WindowsServer_6.2_x86

    - - -

    Windows Server 2008 R2

    -

    64-bit

    -

    WindowsServer_6.1_x64

    - - -

    Windows Server 2008 R2

    -

    32-bit

    -

    WindowsServer_6.1_x86

    - - - - - +|Operating system|Architecture|String value| +|--- |--- |--- | +|Windows 10/11|64-bit|WindowsClient_10.0_x64| +|Windows 10/11|32-bit|WindowsClient_10.0_x86| +|Windows 8.1|64-bit|WindowsClient_6.2_x64| +|Windows 8.1|32-bit|WindowsClient_6.2_x86| +|Windows 8|64-bit|WindowsClient_6.2_x64| +|Windows 8|32-bit|WindowsClient_6.2_x86| +|Windows Server 2012 R2|64-bit|WindowsServer_6.2_x64| +|Windows Server 2012 R2|32-bit|WindowsServer_6.2_x86| +|Windows Server 2012|64-bit|WindowsServer_6.2_x64| +|Windows Server 2012|32-bit|WindowsServer_6.2_x86| +|Windows Server 2008 R2|64-bit|WindowsServer_6.1_x64| +|Windows Server 2008 R2|32-bit|WindowsServer_6.1_x86|
    For App-V issues, use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopappv). diff --git a/windows/client-management/advanced-troubleshooting-wireless-network-connectivity.md b/windows/client-management/advanced-troubleshooting-wireless-network-connectivity.md index 57d2cc10a8..dbbd9f0fd8 100644 --- a/windows/client-management/advanced-troubleshooting-wireless-network-connectivity.md +++ b/windows/client-management/advanced-troubleshooting-wireless-network-connectivity.md @@ -85,17 +85,13 @@ See the [example ETW capture](#example-etw-capture) at the bottom of this articl The following is a high-level view of the main wifi components in Windows. - - - - - - -
    Windows Connection ManagerThe Windows Connection Manager (Wcmsvc) is closely associated with the UI controls (taskbar icon) to connect to various networks, including wireless networks. It accepts and processes input from the user and feeds it to the core wireless service.
    WLAN Autoconfig ServiceThe WLAN Autoconfig Service (WlanSvc) handles the following core functions of wireless networks in windows: - -- Scanning for wireless networks in range -- Managing connectivity of wireless networks
    Media Specific ModuleThe Media Specific Module (MSM) handles security aspects of connection being established.
    Native WiFi stackThe Native WiFi stack consists of drivers and wireless APIs to interact with wireless miniports and the supporting user-mode Wlansvc.
    Wireless miniportThird-party wireless miniport drivers interface with the upper wireless stack to provide notifications to and receive commands from Windows.
    - +|Wi-fi Components|Description| +|--- |--- | +|![Windows Connection Manager](images/wcm.png)|The Windows Connection Manager (Wcmsvc) is closely associated with the UI controls (taskbar icon) to connect to various networks, including wireless networks. It accepts and processes input from the user and feeds it to the core wireless service.| +|![WLAN Autoconfig Service](images/wlan.png)|The WLAN Autoconfig Service (WlanSvc) handles the following core functions of wireless networks in windows:
  • Scanning for wireless networks in range
  • Managing connectivity of wireless networks| +|![Media Specific Module](images/msm.png)|The Media Specific Module (MSM) handles security aspects of connection being established.| +|![Native WiFi stack](images/wifi-stack.png)|The Native WiFi stack consists of drivers and wireless APIs to interact with wireless miniports and the supporting user-mode Wlansvc.| +|![Wireless miniport](images/miniport.png)|Third-party wireless miniport drivers interface with the upper wireless stack to provide notifications to and receive commands from Windows.| The wifi connection state machine has the following states: - Reset diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index 5669fcf0f8..2de0a4123d 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -276,36 +276,11 @@ Supported operations are Get, Add, Delete, and Replace. The following table shows the mapping of information to the AppLocker publisher rule field. - ---- - - - - - - - - - - - - - - - - - - - - -
    Device portal dataAppLocker publisher rule field

    PackageFullName

    ProductName

    -

    The product name is first part of the PackageFullName followed by the version number. In the Windows Camera example, the ProductName is Microsoft.WindowsCamera.

    Publisher

    Publisher

    Version

    Version

    -

    This can be used either in the HighSection or LowSection of the BinaryVersionRange.

    -

    HighSection defines the highest version number and LowSection defines the lowest version number that should be trusted. You can use a wildcard for both versions to make a version- independent rule. Using a wildcard for one of the values will provide higher than or lower than a specific version semantics.

    - +|Device portal data|AppLocker publisher rule field| +|--- |--- | +|PackageFullName|ProductName
    The product name is first part of the PackageFullName followed by the version number. In the Windows Camera example, the ProductName is Microsoft.WindowsCamera.| +|Publisher|Publisher| +|Version|Version

    This can be used either in the HighSection or LowSection of the BinaryVersionRange.

    HighSection defines the highest version number and LowSection defines the lowest version number that should be trusted. You can use a wildcard for both versions to make a version- independent rule. Using a wildcard for one of the values will provide higher than or lower than a specific version semantics.| Here is an example AppLocker publisher rule: @@ -325,21 +300,11 @@ You can get the publisher name and product name of apps using a web API. 3. In your browser, run the Store for Business portal web API, to return a JavaScript Object Notation (JSON) file that includes the publisher and product name values. - - - - - - - - - - - - - - -
    Request URI

    https://bspmts.mp.microsoft.com/v1/public/catalog/Retail/Products/{app ID}/applockerdata

    +Request URI: + +```http +https://bspmts.mp.microsoft.com/v1/public/catalog/Retail/Products/{app ID}/applockerdata +``` Here is the example for Microsoft OneNote: @@ -360,35 +325,11 @@ Result } ``` - ---- - - - - - - - - - - - - - - - - - - - - -
    Result dataAppLocker publisher rule field

    packageIdentityName

    ProductName

    publisherCertificateName

    Publisher

    windowsPhoneLegacyId

    Same value maps to the ProductName and Publisher name

    -

    This value will only be present if there is a XAP package associated with the app in the Store.

    -

    If this value is populated then the simple thing to do to cover both the AppX and XAP package would be to create two rules for the app. One rule for AppX using the packageIdentityName and publisherCertificateName value and another one using the windowsPhoneLegacyId value.

    - +|Result data|AppLocker publisher rule field| +|--- |--- | +|packageIdentityName|ProductName| +|publisherCertificateName|Publisher| +|windowsPhoneLegacyId|Same value maps to the ProductName and Publisher name.

    This value will only be present if there is a XAP package associated with the app in the Store.

    If this value is populated then the simple thing to do to cover both the AppX and XAP package would be to create two rules for the app. One rule for AppX using the packageIdentityName and publisherCertificateName value and another one using the windowsPhoneLegacyId value.| ## Settings apps that rely on splash apps @@ -428,464 +369,97 @@ The following list shows the apps that may be included in the inbox. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    AppProduct IDProduct name
    3D Viewerf41647c9-d567-4378-b2ab-7924e5a152f3Microsoft.Microsoft3DViewer

    (Added in Windows 10, version 1703)

    Advanced infob6e3e590-9fa5-40c0-86ac-ef475de98e88b6e3e590-9fa5-40c0-86ac-ef475de98e88
    Age out worker09296e27-c9f3-4ab9-aa76-ecc4497d94bb
    Alarms and clock44f7d2b4-553d-4bec-a8b7-634ce897ed5fMicrosoft.WindowsAlarms
    App downloads20bf77a0-19c7-4daa-8db5-bc3dfdfa44ac
    Assigned access lock appb84f4722-313e-4f85-8f41-cf5417c9c5cb
    Bing lock images5f28c179-2780-41df-b966-27807b8de02c
    Block and filter59553c14-5701-49a2-9909-264d034deb3d
    Broker plug-in (same as Work or school account)Microsoft.AAD.BrokerPlugin
    Calculatorb58171c6-c70c-4266-a2e8-8f9c994f4456Microsoft.WindowsCalculator
    Cameraf0d8fefd-31cd-43a1-a45a-d0276db069f1Microsoft.WindowsCamera
    CertInstaller4c4ad968-7100-49de-8cd1-402e198d869e
    Color profileb08997ca-60ab-4dce-b088-f92e9c7994f3
    Connectaf7d2801-56c0-4eb1-824b-dd91cdf7ece5Microsoft.DevicesFlow
    Contact Support0db5fcff-4544-458a-b320-e352dfd9ca2bWindows.ContactSupport
    Cortanafd68dcf4-166f-4c55-a4ca-348020f71b94Microsoft.Windows.Cortana
    Cortana Listen UICortanaListenUI
    Credentials Dialog HostMicrosoft.CredDialogHost
    Device Portal PIN UXholopairingapp
    Email and accounts39cf127b-8c67-c149-539a-c02271d07060Microsoft.AccountsControl
    Enterprise installs appda52fa01-ac0f-479d-957f-bfe4595941cb
    Equalizer373cb76e-7f6c-45aa-8633-b00e85c73261
    Excelead3e7c0-fae6-4603-8699-6a448138f4dcMicrosoft.Office.Excel
    Facebook82a23635-5bd9-df11-a844-00237de2db9eMicrosoft.MSFacebook
    Field Medic73c58570-d5a7-46f8-b1b2-2a90024fc29c
    File Explorerc5e2524a-ea46-4f67-841f-6a9465d9d515c5e2524a-ea46-4f67-841f-6a9465d9d515
    FM Radiof725010e-455d-4c09-ac48-bcdef0d4b626f725010e-455d-4c09-ac48-bcdef0d4b626
    Get Startedb3726308-3d74-4a14-a84c-867c8c735c3cMicrosoft.Getstarted
    Glance106e0a97-8b19-42cf-8879-a8ed2598fcbb
    Groove Musicd2b6a184-da39-4c9a-9e0a-8b589b03dec0Microsoft.ZuneMusic
    Hands-Free Activationdf6c9621-e873-4e86-bb56-93e9f21b1d6f
    Hands-Free Activation72803bd5-4f36-41a4-a349-e83e027c4722
    HAP update background worker73c73cdd-4dea-462c-bd83-fa983056a4ef
    Holographic ShellHoloShell
    Lumia motion data8fc25fd2-4e2e-4873-be44-20e57f6ec52b
    Mapsed27a07e-af57-416b-bc0c-2596b622ef7dMicrosoft.WindowsMaps
    Messaging27e26f40-e031-48a6-b130-d1f20388991aMicrosoft.Messaging
    Microsoft account3a4fae89-7b7e-44b4-867b-f7e2772b8253Microsoft.CloudExperienceHost
    Microsoft Edge395589fb-5884-4709-b9df-f7d558663ffdMicrosoft.MicrosoftEdge
    Microsoft FrameworksProductID = 00000000-0000-0000-0000-000000000000 -

    PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US"

    Migration UIMigrationUIApp
    MiracastView906beeda-b7e6-4ddc-ba8d-ad5031223ef9906beeda-b7e6-4ddc-ba8d-ad5031223ef9
    Mixed Reality PortalMicrosoft.Windows.HolographicFirstRun
    Money1e0440f1-7abf-4b9a-863d-177970eefb5eMicrosoft.BingFinance
    Movies and TV6affe59e-0467-4701-851f-7ac026e21665Microsoft.ZuneVideo
    Music downloads3da8a0c1-f7e5-47c0-a680-be8fd013f747
    Navigation bar2cd23676-8f68-4d07-8dd2-e693d4b01279
    Network services62f172d1-f552-4749-871c-2afd1c95c245
    News9c3e8cad-6702-4842-8f61-b8b33cc9caf1Microsoft.BingNews
    OneDrivead543082-80ec-45bb-aa02-ffe7f4182ba8Microsoft.MicrosoftSkydrive
    OneNoteca05b3ab-f157-450c-8c49-a1f127f5e71dMicrosoft.Office.OneNote
    Outlook Calendar and Maila558feba-85d7-4665-b5d8-a2ff9c19799bMicrosoft.WindowsCommunicationsApps
    People60be1fb8-3291-4b21-bd39-2221ab166481Microsoft.People
    Phone5b04b775-356b-4aa0-aaf8-6491ffea56115b04b775-356b-4aa0-aaf8-6491ffea5611
    Phone (dialer)f41b5d0e-ee94-4f47-9cfe-3d3934c5a2c7Microsoft.CommsPhone
    Phone reset dialog2864278d-09b5-46f7-b502-1c24139ecbdd
    Photosfca55e1b-b9a4-4289-882f-084ef4145005Microsoft.Windows.Photos
    Podcastsc3215724-b279-4206-8c3e-61d1a9d63ed3Microsoft.MSPodcast
    Podcast downloads063773e7-f26f-4a92-81f0-aa71a1161e30
    PowerPointb50483c4-8046-4e1b-81ba-590b24935798Microsoft.Office.PowerPoint
    PrintDialog0d32eeb1-32f0-40da-8558-cea6fcbec4a4Microsoft.PrintDialog
    Purchase dialogc60e79ca-063b-4e5d-9177-1309357b2c3f
    Rate your deviceaec3bfad-e38c-4994-9c32-50bd030730ec
    RingtoneApp.WindowsPhone3e962450-486b-406b-abb5-d38b4ee7e6feMicrosoft.Tonepicker
    Save ringtoned8cf8ec7-ec6d-4892-aab9-1e3a4b5fa24b
    Settings2a4e62d8-8809-4787-89f8-69d0f01654fb2a4e62d8-8809-4787-89f8-69d0f01654fb
    SettingsSystemSettings
    Setup wizard07d87655-e4f0-474b-895a-773790ad4a32
    Sharingb0894dfd-4671-4bb9-bc17-a8b39947ffb6
    Sign in for Windows 10 HolographicWebAuthBridgeInternetSso, WebAuthBridgeInternet, WebAuthBridgeIntranetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternet, WebAuthBrokerIntranetSso, SignIn
    Skypec3f8e570-68b3-4d6a-bdbb-c0a3f4360a51Microsoft.SkypeApp
    Skype Video27e26f40-e031-48a6-b130-d1f20388991aMicrosoft.Messaging
    Sports0f4c8c7e-7114-4e1e-a84c-50664db13b17Microsoft.BingSports
    SSMHoste232aa77-2b6d-442c-b0c3-f3bb9788af2a
    Start5b04b775-356b-4aa0-aaf8-6491ffea56025b04b775-356b-4aa0-aaf8-6491ffea5602
    Storage5b04b775-356b-4aa0-aaf8-6491ffea564d5b04b775-356b-4aa0-aaf8-6491ffea564d
    Store7d47d89a-7900-47c5-93f2-46eb6d94c159Microsoft.WindowsStore
    Touch (gestures and touch)bbc57c87-46af-4c2c-824e-ac8104cceb38
    Voice recorder7311b9c5-a4e9-4c74-bc3c-55b06ba95ad0Microsoft.WindowsSoundRecorder
    Wallet587a4577-7868-4745-a29e-f996203f1462Microsoft.MicrosoftWallet
    Wallet12ae577e-f8d1-4197-a207-4d24c309ff8fMicrosoft.Wallet
    Weather63c2a117-8604-44e7-8cef-df10be3a57c8Microsoft.BingWeather
    Windows default lock screencdd63e31-9307-4ccb-ab62-1ffa5721b503
    Windows Feedback7604089d-d13f-4a2d-9998-33fc02b63ce3Microsoft.WindowsFeedback
    Word258f115c-48f4-4adb-9a68-1387e634459bMicrosoft.Office.Word
    Work or school accounte5f8b2c4-75ae-45ee-9be8-212e34f77747Microsoft.AAD.BrokerPlugin
    Xboxb806836f-eebe-41c9-8669-19e243b81b83Microsoft.XboxApp
    Xbox identity providerba88225b-059a-45a2-a8eb-d3580283e49dMicrosoft.XboxIdentityProvider
    - - +|App|Product ID|Product name| +|--- |--- |--- | +|3D Viewer|f41647c9-d567-4378-b2ab-7924e5a152f3|Microsoft.Microsoft3DViewer (Added in Windows 10, version 1703)| +|Advanced info|b6e3e590-9fa5-40c0-86ac-ef475de98e88|b6e3e590-9fa5-40c0-86ac-ef475de98e88| +|Age out worker|09296e27-c9f3-4ab9-aa76-ecc4497d94bb|| +|Alarms and clock|44f7d2b4-553d-4bec-a8b7-634ce897ed5f|Microsoft.WindowsAlarms| +|App downloads|20bf77a0-19c7-4daa-8db5-bc3dfdfa44ac|| +|Assigned access lock app|b84f4722-313e-4f85-8f41-cf5417c9c5cb|| +|Bing lock images|5f28c179-2780-41df-b966-27807b8de02c|| +|Block and filter|59553c14-5701-49a2-9909-264d034deb3d|| +|Broker plug-in (same as Work or school account)||Microsoft.AAD.BrokerPlugin| +|Calculator|b58171c6-c70c-4266-a2e8-8f9c994f4456|Microsoft.WindowsCalculator| +|Camera|f0d8fefd-31cd-43a1-a45a-d0276db069f1|Microsoft.WindowsCamera| +|CertInstaller|4c4ad968-7100-49de-8cd1-402e198d869e|| +|Color profile|b08997ca-60ab-4dce-b088-f92e9c7994f3|| +|Connect|af7d2801-56c0-4eb1-824b-dd91cdf7ece5|Microsoft.DevicesFlow| +|Contact Support|0db5fcff-4544-458a-b320-e352dfd9ca2b|Windows.ContactSupport| +|Cortana|fd68dcf4-166f-4c55-a4ca-348020f71b94|Microsoft.Windows.Cortana| +|Cortana Listen UI||CortanaListenUI| +|Credentials Dialog Host||Microsoft.CredDialogHost| +|Device Portal PIN UX||holopairingapp| +|Email and accounts|39cf127b-8c67-c149-539a-c02271d07060|Microsoft.AccountsControl| +|Enterprise installs app|da52fa01-ac0f-479d-957f-bfe4595941cb|| +|Equalizer|373cb76e-7f6c-45aa-8633-b00e85c73261|| +|Excel|ead3e7c0-fae6-4603-8699-6a448138f4dc|Microsoft.Office.Excel| +|Facebook|82a23635-5bd9-df11-a844-00237de2db9e|Microsoft.MSFacebook| +|Field Medic|73c58570-d5a7-46f8-b1b2-2a90024fc29c|| +|File Explorer|c5e2524a-ea46-4f67-841f-6a9465d9d515|c5e2524a-ea46-4f67-841f-6a9465d9d515| +|FM Radio|f725010e-455d-4c09-ac48-bcdef0d4b626|f725010e-455d-4c09-ac48-bcdef0d4b626| +|Get Started|b3726308-3d74-4a14-a84c-867c8c735c3c|Microsoft.Getstarted| +|Glance|106e0a97-8b19-42cf-8879-a8ed2598fcbb|| +|Groove Music|d2b6a184-da39-4c9a-9e0a-8b589b03dec0|Microsoft.ZuneMusic| +|Hands-Free Activation|df6c9621-e873-4e86-bb56-93e9f21b1d6f|| +|Hands-Free Activation|72803bd5-4f36-41a4-a349-e83e027c4722|| +|HAP update background worker|73c73cdd-4dea-462c-bd83-fa983056a4ef|| +|Holographic Shell||HoloShell| +|Lumia motion data|8fc25fd2-4e2e-4873-be44-20e57f6ec52b|| +|Maps|ed27a07e-af57-416b-bc0c-2596b622ef7d|Microsoft.WindowsMaps| +|Messaging|27e26f40-e031-48a6-b130-d1f20388991a|Microsoft.Messaging| +|Microsoft account|3a4fae89-7b7e-44b4-867b-f7e2772b8253|Microsoft.CloudExperienceHost| +|Microsoft Edge|395589fb-5884-4709-b9df-f7d558663ffd|Microsoft.MicrosoftEdge| +|Microsoft Frameworks|ProductID = 00000000-0000-0000-0000-000000000000 +PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US"|| +|Migration UI||MigrationUIApp| +|MiracastView|906beeda-b7e6-4ddc-ba8d-ad5031223ef9|906beeda-b7e6-4ddc-ba8d-ad5031223ef9| +|Mixed Reality Portal||Microsoft.Windows.HolographicFirstRun| +|Money|1e0440f1-7abf-4b9a-863d-177970eefb5e|Microsoft.BingFinance| +|Movies and TV|6affe59e-0467-4701-851f-7ac026e21665|Microsoft.ZuneVideo| +|Music downloads|3da8a0c1-f7e5-47c0-a680-be8fd013f747|| +|Navigation bar|2cd23676-8f68-4d07-8dd2-e693d4b01279|| +|Network services|62f172d1-f552-4749-871c-2afd1c95c245|| +|News|9c3e8cad-6702-4842-8f61-b8b33cc9caf1|Microsoft.BingNews| +|OneDrive|ad543082-80ec-45bb-aa02-ffe7f4182ba8|Microsoft.MicrosoftSkydrive| +|OneNote|ca05b3ab-f157-450c-8c49-a1f127f5e71d|Microsoft.Office.OneNote| +|Outlook Calendar and Mail|a558feba-85d7-4665-b5d8-a2ff9c19799b|Microsoft.WindowsCommunicationsApps| +|People|60be1fb8-3291-4b21-bd39-2221ab166481|Microsoft.People| +|Phone|5b04b775-356b-4aa0-aaf8-6491ffea5611|5b04b775-356b-4aa0-aaf8-6491ffea5611| +|Phone (dialer)|f41b5d0e-ee94-4f47-9cfe-3d3934c5a2c7|Microsoft.CommsPhone| +|Phone reset dialog|2864278d-09b5-46f7-b502-1c24139ecbdd|| +|Photos|fca55e1b-b9a4-4289-882f-084ef4145005|Microsoft.Windows.Photos| +|Podcasts|c3215724-b279-4206-8c3e-61d1a9d63ed3|Microsoft.MSPodcast| +|Podcast downloads|063773e7-f26f-4a92-81f0-aa71a1161e30|| +|PowerPoint|b50483c4-8046-4e1b-81ba-590b24935798|Microsoft.Office.PowerPoint| +|PrintDialog|0d32eeb1-32f0-40da-8558-cea6fcbec4a4|Microsoft.PrintDialog| +|Purchase dialog|c60e79ca-063b-4e5d-9177-1309357b2c3f|| +|Rate your device|aec3bfad-e38c-4994-9c32-50bd030730ec|| +|RingtoneApp.WindowsPhone|3e962450-486b-406b-abb5-d38b4ee7e6fe|Microsoft.Tonepicker| +|Save ringtone|d8cf8ec7-ec6d-4892-aab9-1e3a4b5fa24b|| +|Settings|2a4e62d8-8809-4787-89f8-69d0f01654fb|2a4e62d8-8809-4787-89f8-69d0f01654fb| +|Settings||SystemSettings| +|Setup wizard|07d87655-e4f0-474b-895a-773790ad4a32|| +|Sharing|b0894dfd-4671-4bb9-bc17-a8b39947ffb6|| +|Sign in for Windows 10 Holographic||WebAuthBridgeInternetSso, WebAuthBridgeInternet, WebAuthBridgeIntranetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternet, WebAuthBrokerIntranetSso, SignIn| +|Skype|c3f8e570-68b3-4d6a-bdbb-c0a3f4360a51|Microsoft.SkypeApp| +|Skype Video|27e26f40-e031-48a6-b130-d1f20388991a|Microsoft.Messaging| +|Sports|0f4c8c7e-7114-4e1e-a84c-50664db13b17|Microsoft.BingSports| +|SSMHost|e232aa77-2b6d-442c-b0c3-f3bb9788af2a|| +|Start|5b04b775-356b-4aa0-aaf8-6491ffea5602|5b04b775-356b-4aa0-aaf8-6491ffea5602| +|Storage|5b04b775-356b-4aa0-aaf8-6491ffea564d|5b04b775-356b-4aa0-aaf8-6491ffea564d| +|Store|7d47d89a-7900-47c5-93f2-46eb6d94c159|Microsoft.WindowsStore| +|Touch (gestures and touch)|bbc57c87-46af-4c2c-824e-ac8104cceb38|| +|Voice recorder|7311b9c5-a4e9-4c74-bc3c-55b06ba95ad0|Microsoft.WindowsSoundRecorder| +|Wallet|587a4577-7868-4745-a29e-f996203f1462|Microsoft.MicrosoftWallet| +|Wallet|12ae577e-f8d1-4197-a207-4d24c309ff8f|Microsoft.Wallet| +|Weather|63c2a117-8604-44e7-8cef-df10be3a57c8|Microsoft.BingWeather| +|Windows default lock screen|cdd63e31-9307-4ccb-ab62-1ffa5721b503|| +|Windows Feedback|7604089d-d13f-4a2d-9998-33fc02b63ce3|Microsoft.WindowsFeedback| +|Word|258f115c-48f4-4adb-9a68-1387e634459b|Microsoft.Office.Word| +|Work or school account|e5f8b2c4-75ae-45ee-9be8-212e34f77747|Microsoft.AAD.BrokerPlugin| +|Xbox|b806836f-eebe-41c9-8669-19e243b81b83|Microsoft.XboxApp| +|Xbox identity provider|ba88225b-059a-45a2-a8eb-d3580283e49d|Microsoft.XboxIdentityProvider| ## Allowlist examples diff --git a/windows/client-management/mdm/assign-seats.md b/windows/client-management/mdm/assign-seats.md index 74ea36df77..e99f6fb7de 100644 --- a/windows/client-management/mdm/assign-seats.md +++ b/windows/client-management/mdm/assign-seats.md @@ -18,62 +18,21 @@ The **Assign seat** operation assigns seat for a specified user in the Microsoft ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    POST

    https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats/{username}

    +**POST:** + +```http +https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats/{username} +``` -  ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    username

    string

    Requires UserPrincipalName (UPN). User name of the target user account.

    - +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|username|string|Requires UserPrincipalName (UPN). User name of the target user account.| ## Response @@ -81,58 +40,9 @@ The following parameters may be specified in the request URI. The response body contains [SeatDetails](data-structures-windows-store-for-business.md#seatdetails). - ------- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData fieldDetails

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Invalid parameter

    -

    Details: String

    Invalid can include productId, skuId or userName

    404

    Not found

    Item type: Inventory, User, Seat

    -

    Values: ProductId/SkuId, UserName, ProductId/SkuId/UserName

    ItemType: Inventory User Seat

    -

    Values: ProductId/SkuId UserName ProductId/SkuId/UserName

    409

    Conflict

    Reason: Not online

    - -  - -  - - - - - +|Error code|Description|Retry|Data field|Details| +|--- |--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name
    Reason: Invalid parameter
    Details: String|Invalid can include productId, skuId or userName| +|404|Not found||Item type: Inventory, User, Seat

    Values: ProductId/SkuId, UserName, ProductId/SkuId/UserName|ItemType: Inventory User Seat

    Values: ProductId/SkuId UserName ProductId/SkuId/UserName| +|409|Conflict||Reason: Not online|| diff --git a/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md b/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md index c0db9e8151..1ac0f3ab4d 100644 --- a/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md +++ b/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md @@ -187,40 +187,14 @@ The following image show how MDM applications show up in the Azure app gallery. The following table shows the required information to create an entry in the Azure AD app gallery. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ItemDescription

    Application ID

    The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multi-tenant app.

    Publisher

    A string that identifies the publisher of the app.

    Application URL

    A URL to the landing page of your app where your administrators can get more information about the MDM app and contains a link to the landing page of your app. This URL isn't used for the actual enrollment.

    Description

    A brief description of your MDM app, which must be under 255 characters.

    Icons

    A set of logo icons for the MDM app. Dimensions: 45 X 45, 150 X 122, 214 X 215

    +|Item|Description| +|--- |--- | +|**Application ID**|The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multi-tenant app.| +|**Publisher**|A string that identifies the publisher of the app.| +|**Application URL**|A URL to the landing page of your app where your administrators can get more information about the MDM app and contains a link to the landing page of your app. This URL isn't used for the actual enrollment.| +|**Description**|A brief description of your MDM app, which must be under 255 characters.| +|**Icons**|A set of logo icons for the MDM app. Dimensions: 45 X 45, 150 X 122, 214 X 215| + ### Add on-premises MDM to the app gallery @@ -250,42 +224,10 @@ The CSS files provided by Microsoft contain version information and we recommend An MDM page must adhere to a predefined theme depending on the scenario that is displayed. For example, if the CXH-HOSTHTTP header is FRX, which is the OOBE scenario, then the page must support a dark theme with blue background color, which uses WinJS file Ui-dark.css ver 4.0 and oobe-desktop.css ver 1.0.4. - ------- - - - - - - - - - - - - - - - - - - - - - - - - - -
    CXH-HOST (HTTP HEADER)ScenarioBackground ThemeWinJSScenario CSS
    FRXOOBEDark theme + blue background colorFilename: Ui-dark.cssFilename: oobe-dekstop.css
    MOSETSettings/ -

    Post OOBE

    		Light themeFilename: Ui-light.cssFilename: settings-desktop.css
    - +|CXH-HOST (HTTP HEADER)|Scenario|Background Theme|WinJS|Scenario CSS| +|--- |--- |--- |--- |--- | +|FRX|OOBE|Dark theme + blue background color|Filename: Ui-dark.css|Filename: oobe-dekstop.css| +|MOSET|Settings/Post OOBE|Light theme|Filename: Ui-light.css|Filename: settings-desktop.css| ## Terms of Use protocol semantics @@ -297,36 +239,12 @@ This redirect is a full page redirect to the Terms of User endpoint hosted by th The following parameters are passed in the query string: - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    ItemDescription

    redirect_uri

    After the user accepts or rejects the Terms of Use, the user is redirected to this URL.

    client-request-id

    A GUID that is used to correlate logs for diagnostic and debugging purposes. Use this parameter to log or trace the state of the enrollment request to help find the root cause of failures.

    api-version

    Specifies the version of the protocol requested by the client. This value provides a mechanism to support version revisions of the protocol.

    mode

    Specifies that the device is organization owned when mode=azureadjoin. This parameter isn't present for BYOD devices.

    +|Item|Description| +|--- |--- | +|redirect_uri|After the user accepts or rejects the Terms of Use, the user is redirected to this URL.| +|client-request-id|A GUID that is used to correlate logs for diagnostic and debugging purposes. Use this parameter to log or trace the state of the enrollment request to help find the root cause of failures.| +|api-version|Specifies the version of the protocol requested by the client. This value provides a mechanism to support version revisions of the protocol.| +|mode|Specifies that the device is organization owned when mode=azureadjoin. This parameter isn't present for BYOD devices.| ### Access token @@ -337,37 +255,13 @@ Azure AD issues a bearer access token. The token is passed in the authorization The following claims are expected in the access token passed by Windows to the Terms of Use endpoint: - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    ItemDescription

    Object ID

    Identifier of the user object corresponding to the authenticated user.

    UPN

    A claim containing the user principal name (UPN) of the authenticated user.

    TID

    A claim representing the tenant ID of the tenant. In the example above, it's Fabrikam.

    Resource

    A sanitized URL representing the MDM application. Example, https://fabrikam.contosomdm.com.

    -
    +|Item|Description| +|--- |--- | +|Object ID|Identifier of the user object corresponding to the authenticated user.| +|UPN|A claim containing the user principal name (UPN) of the authenticated user.| +|TID|A claim representing the tenant ID of the tenant. In the example above, it's Fabrikam.| +|Resource|A sanitized URL representing the MDM application. Example,
    [https://fabrikam.contosomdm.com](https://fabrikam.contosomdm.com).| + > [!NOTE] > There's no device ID claim in the access token because the device may not yet be enrolled at this time. @@ -428,184 +322,35 @@ Location: ms-appx-web://App1/ToUResponse?error=access_denied&error_description=A The following table shows the error codes. - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    CauseHTTP statusErrorDescription

    api-version

    302

    invalid_request

    unsupported version

    Tenant or user data are missing or other required prerequisites for device enrollment are not met

    302

    unauthorized_client

    unauthorized user or tenant

    Azure AD token validation failed

    302

    unauthorized_client

    unauthorized_client

    internal service error

    302

    server_error

    internal service error

    +|Cause|HTTP status|Error|Description| +|--- |--- |--- |--- | +|api-version|302|invalid_request|unsupported version| +|Tenant or user data are missing or other required prerequisites for device enrollment are not met|302|unauthorized_client|unauthorized user or tenant| +|Azure AD token validation failed|302|unauthorized_client|unauthorized_client| +|internal service error|302|server_error|internal service error| ## Enrollment protocol with Azure AD With Azure integrated MDM enrollment, there's no discovery phase and the discovery URL is directly passed down to the system from Azure. The following table shows the comparison between the traditional and Azure enrollments. - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    DetailTraditional MDM enrollmentAzure AD Join (organization-owned device)Azure AD adds a work account (user-owned device)

    MDM auto-discovery using email address to retrieve MDM discovery URL

    Enrollment

    Not applicable

    -

    Discovery URL provisioned in Azure

    Uses MDM discovery URL

    Enrollment

    -

    Enrollment renewal

    -

    ROBO

    Enrollment

    -

    Enrollment renewal

    -

    ROBO

    Enrollment

    -

    Enrollment renewal

    -

    ROBO

    Is MDM enrollment required?

    Yes

    Yes

    No

    -

    User can decline.

    Authentication type

    OnPremise

    -

    Federated

    -

    Certificate

    Federated

    Federated

    EnrollmentPolicyServiceURL

    Optional (all auth)

    Optional (all auth)

    -

    Optional (all auth)

    -

    EnrollmentServiceURL

    Required (all auth)

    Used (all auth)

    Used (all auth)

    EnrollmentServiceURL includes OS Version, OS Platform, and other attributes provided by MDM discovery URL

    Highly recommended

    Highly recommended

    Highly recommended

    AuthenticationServiceURL used

    Used (Federated auth)

    Skipped

    Skipped

    BinarySecurityToken

    Custom per MDM

    Azure AD issued token

    Azure AD issued token

    EnrollmentType

    Full

    Device

    Full

    Enrolled certificate type

    User certificate

    Device certificate

    User certificate

    Enrolled certificate store

    My/User

    My/System

    My/User

    CSR subject name

    User Principal Name

    Device ID

    User Principal Name

    EnrollmentData Terms of Use binary blob as AdditionalContext for EnrollmentServiceURL

    Not supported

    Supported

    Supported

    CSPs accessible during enrollment

    Windows 10 support:

    -
      -
    • DMClient
      • -
    • CertificateStore
      • -
    • RootCATrustedCertificates
      • -
    • ClientCertificateInstall
      • -
    • EnterpriseModernAppManagement
      • -
    • PassportForWork
      • -
    • Policy
      • -
    • w7 APPLICATION
      • -
    -
    - - +|Detail|Traditional MDM enrollment|Azure AD Join (organization-owned device)|Azure AD adds a work account (user-owned device)| +|--- |--- |--- |--- | +|MDM auto-discovery using email address to retrieve MDM discovery URL|Enrollment|Not applicable
    Discovery URL provisioned in Azure|| +|Uses MDM discovery URL|Enrollment
    Enrollment renewal
    ROBO|Enrollment
    Enrollment renewal
    ROBO|Enrollment
    Enrollment renewal
    ROBO| +|Is MDM enrollment required?|Yes|Yes|No
    User can decline.| +|Authentication type|OnPremise
    Federated
    Certificate|Federated|Federated| +|EnrollmentPolicyServiceURL|Optional (all auth)|Optional (all auth)|Optional (all auth)| +|EnrollmentServiceURL|Required (all auth)|Used (all auth)|Used (all auth)| +|EnrollmentServiceURL includes OS Version, OS Platform, and other attributes provided by MDM discovery URL|Highly recommended|Highly recommended|Highly recommended| +|AuthenticationServiceURL used|Used (Federated auth)|Skipped|Skipped| +|BinarySecurityToken|Custom per MDM|Azure AD issued token|Azure AD issued token| +|EnrollmentType|Full|Device|Full| +|Enrolled certificate type|User certificate|Device certificate|User certificate| +|Enrolled certificate store|My/User|My/System|My/User| +|CSR subject name|User Principal Name|Device ID|User Principal Name| +|EnrollmentData Terms of Use binary blob as AdditionalContext for EnrollmentServiceURL|Not supported|Supported|Supported| +|CSPs accessible during enrollment|Windows 10 support:
  • DMClient
  • CertificateStore
  • RootCATrustedCertificates
  • ClientCertificateInstall
  • EnterpriseModernAppManagement
  • PassportForWork
  • Policy
  • w7 APPLICATION||| ## Management protocol with Azure AD @@ -737,202 +482,41 @@ When a user is enrolled into MDM through Azure Active Directory Join and then di ## Error codes - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    CodeIDError message
    0x80180001"idErrorServerConnectivity", // MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x80180002"idErrorAuthenticationFailure", // MENROLL_E_DEVICE_AUTHENTICATION_ERROR

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180003"idErrorAuthorizationFailure", // MENROLL_E_DEVICE_AUTHORIZATION_ERROR

    This user isn't authorized to enroll. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180004"idErrorMDMCertificateError", // MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR

    There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180005"idErrorServerConnectivity", // MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x80180006"idErrorServerConnectivity", // MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x80180007"idErrorAuthenticationFailure", // MENROLL_E_DEVICE_INVALIDSECURITY_ERROR

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180008"idErrorServerConnectivity", // MENROLL_E_DEVICE_UNKNOWN_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x80180009"idErrorAlreadyInProgress", // MENROLL_E_ENROLLMENT_IN_PROGRESS

    Another enrollment is in progress. You can try to do this again or contact your system administrator with the error code {0}.

    0x8018000A"idErrorMDMAlreadyEnrolled", // MENROLL_E_DEVICE_ALREADY_ENROLLED

    This device is already enrolled. You can contact your system administrator with the error code {0}.

    0x8018000D"idErrorMDMCertificateError", // MENROLL_E_DISCOVERY_SEC_CERT_DATE_INVALID

    There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.

    0x8018000E"idErrorAuthenticationFailure", // MENROLL_E_PASSWORD_NEEDED

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x8018000F"idErrorAuthenticationFailure", // MENROLL_E_WAB_ERROR

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180010"idErrorServerConnectivity", // MENROLL_E_CONNECTIVITY

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x80180012"idErrorMDMCertificateError", // MENROLL_E_INVALIDSSLCERT

    There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180013"idErrorDeviceLimit", // MENROLL_E_DEVICECAPREACHED

    Looks like there are too many devices or users for this account. Contact your system administrator with the error code {0}.

    0x80180014"idErrorMDMNotSupported", // MENROLL_E_DEVICENOTSUPPORTED

    This feature isn't supported. Contact your system administrator with the error code {0}.

    0x80180015"idErrorMDMNotSupported", // MENROLL_E_NOTSUPPORTED

    This feature isn't supported. Contact your system administrator with the error code {0}.

    0x80180016"idErrorMDMRenewalRejected", // MENROLL_E_NOTELIGIBLETORENEW

    The server did not accept the request. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180017"idErrorMDMAccountMaintenance", // MENROLL_E_INMAINTENANCE

    The service is in maintenance. You can try to do this again later or contact your system administrator with the error code {0}.

    0x80180018"idErrorMDMLicenseError", // MENROLL_E_USERLICENSE

    There was an error with your license. You can try to do this again or contact your system administrator with the error code {0}.

    0x80180019"idErrorInvalidServerConfig", // MENROLL_E_ENROLLMENTDATAINVALID

    Looks like the server isn't correctly configured. You can try to do this again or contact your system administrator with the error code {0}.

    "rejectedTermsOfUse""idErrorRejectedTermsOfUse"

    Your organization requires that you agree to the Terms of Use. Please try again or ask your support person for more information.

    0x801c0001"idErrorServerConnectivity", // DSREG_E_DEVICE_MESSAGE_FORMAT_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x801c0002"idErrorAuthenticationFailure", // DSREG_E_DEVICE_AUTHENTICATION_ERROR

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x801c0003"idErrorAuthorizationFailure", // DSREG_E_DEVICE_AUTHORIZATION_ERROR

    This user isn't authorized to enroll. You can try to do this again or contact your system administrator with the error code {0}.

    0x801c0006"idErrorServerConnectivity", // DSREG_E_DEVICE_INTERNALSERVICE_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x801c000B"idErrorUntrustedServer", // DSREG_E_DISCOVERY_REDIRECTION_NOT_TRUSTEDThe server being contacted isn't trusted. Contact your system administrator with the error code {0}.
    0x801c000C"idErrorServerConnectivity", // DSREG_E_DISCOVERY_FAILED

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x801c000E"idErrorDeviceLimit", // DSREG_E_DEVICE_REGISTRATION_QUOTA_EXCCEEDED

    Looks like there are too many devices or users for this account. Contact your system administrator with the error code {0}.

    0x801c000F"idErrorDeviceRequiresReboot", // DSREG_E_DEVICE_REQUIRES_REBOOT

    A reboot is required to complete device registration.

    0x801c0010"idErrorInvalidCertificate", // DSREG_E_DEVICE_AIK_VALIDATION_ERROR

    Looks like you have an invalid certificate. Contact your system administrator with the error code {0}.

    0x801c0011"idErrorAuthenticationFailure", // DSREG_E_DEVICE_ATTESTATION_ERROR

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x801c0012"idErrorServerConnectivity", // DSREG_E_DISCOVERY_BAD_MESSAGE_ERROR

    There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}

    0x801c0013"idErrorAuthenticationFailure", // DSREG_E_TENANTID_NOT_FOUND

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    0x801c0014"idErrorAuthenticationFailure", // DSREG_E_USERSID_NOT_FOUND

    There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.

    - - - +|Code|ID|Error message| +|--- |--- |--- | +|0x80180001|"idErrorServerConnectivity", // MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x80180002|"idErrorAuthenticationFailure", // MENROLL_E_DEVICE_AUTHENTICATION_ERROR|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180003|"idErrorAuthorizationFailure", // MENROLL_E_DEVICE_AUTHORIZATION_ERROR|This user isn't authorized to enroll. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180004|"idErrorMDMCertificateError", // MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR|There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180005|"idErrorServerConnectivity", // MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x80180006|"idErrorServerConnectivity", // MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x80180007|"idErrorAuthenticationFailure", // MENROLL_E_DEVICE_INVALIDSECURITY_ERROR|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180008|"idErrorServerConnectivity", // MENROLL_E_DEVICE_UNKNOWN_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x80180009|"idErrorAlreadyInProgress", // MENROLL_E_ENROLLMENT_IN_PROGRESS|Another enrollment is in progress. You can try to do this again or contact your system administrator with the error code {0}.| +|0x8018000A|"idErrorMDMAlreadyEnrolled", // MENROLL_E_DEVICE_ALREADY_ENROLLED|This device is already enrolled. You can contact your system administrator with the error code {0}.| +|0x8018000D|"idErrorMDMCertificateError", // MENROLL_E_DISCOVERY_SEC_CERT_DATE_INVALID|There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.| +|0x8018000E|"idErrorAuthenticationFailure", // MENROLL_E_PASSWORD_NEEDED|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x8018000F|"idErrorAuthenticationFailure", // MENROLL_E_WAB_ERROR|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180010|"idErrorServerConnectivity", // MENROLL_E_CONNECTIVITY|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x80180012|"idErrorMDMCertificateError", // MENROLL_E_INVALIDSSLCERT|There was a certificate error. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180013|"idErrorDeviceLimit", // MENROLL_E_DEVICECAPREACHED|Looks like there are too many devices or users for this account. Contact your system administrator with the error code {0}.| +|0x80180014|"idErrorMDMNotSupported", // MENROLL_E_DEVICENOTSUPPORTED|This feature isn't supported. Contact your system administrator with the error code {0}.| +|0x80180015|"idErrorMDMNotSupported", // MENROLL_E_NOTSUPPORTED|This feature isn't supported. Contact your system administrator with the error code {0}.| +|0x80180016|"idErrorMDMRenewalRejected", // MENROLL_E_NOTELIGIBLETORENEW|The server did not accept the request. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180017|"idErrorMDMAccountMaintenance", // MENROLL_E_INMAINTENANCE|The service is in maintenance. You can try to do this again later or contact your system administrator with the error code {0}.| +|0x80180018|"idErrorMDMLicenseError", // MENROLL_E_USERLICENSE|There was an error with your license. You can try to do this again or contact your system administrator with the error code {0}.| +|0x80180019|"idErrorInvalidServerConfig", // MENROLL_E_ENROLLMENTDATAINVALID|Looks like the server isn't correctly configured. You can try to do this again or contact your system administrator with the error code {0}.| +|"rejectedTermsOfUse"|"idErrorRejectedTermsOfUse"|Your organization requires that you agree to the Terms of Use. Please try again or ask your support person for more information.| +|0x801c0001|"idErrorServerConnectivity", // DSREG_E_DEVICE_MESSAGE_FORMAT_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x801c0002|"idErrorAuthenticationFailure", // DSREG_E_DEVICE_AUTHENTICATION_ERROR|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x801c0003|"idErrorAuthorizationFailure", // DSREG_E_DEVICE_AUTHORIZATION_ERROR|This user isn't authorized to enroll. You can try to do this again or contact your system administrator with the error code {0}.| +|0x801c0006|"idErrorServerConnectivity", // DSREG_E_DEVICE_INTERNALSERVICE_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x801c000B|"idErrorUntrustedServer", // DSREG_E_DISCOVERY_REDIRECTION_NOT_TRUSTED|The server being contacted isn't trusted. Contact your system administrator with the error code {0}.| +|0x801c000C|"idErrorServerConnectivity", // DSREG_E_DISCOVERY_FAILED|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x801c000E|"idErrorDeviceLimit", // DSREG_E_DEVICE_REGISTRATION_QUOTA_EXCCEEDED|Looks like there are too many devices or users for this account. Contact your system administrator with the error code {0}.| +|0x801c000F|"idErrorDeviceRequiresReboot", // DSREG_E_DEVICE_REQUIRES_REBOOT|A reboot is required to complete device registration.| +|0x801c0010|"idErrorInvalidCertificate", // DSREG_E_DEVICE_AIK_VALIDATION_ERROR|Looks like you have an invalid certificate. Contact your system administrator with the error code {0}.| +|0x801c0011|"idErrorAuthenticationFailure", // DSREG_E_DEVICE_ATTESTATION_ERROR|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x801c0012|"idErrorServerConnectivity", // DSREG_E_DISCOVERY_BAD_MESSAGE_ERROR|There was an error communicating with the server. You can try to do this again or contact your system administrator with the error code {0}| +|0x801c0013|"idErrorAuthenticationFailure", // DSREG_E_TENANTID_NOT_FOUND|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| +|0x801c0014|"idErrorAuthenticationFailure", // DSREG_E_USERSID_NOT_FOUND|There was a problem authenticating your account or device. You can try to do this again or contact your system administrator with the error code {0}.| diff --git a/windows/client-management/mdm/browserfavorite-csp.md b/windows/client-management/mdm/browserfavorite-csp.md index bf703c3671..b801864fd5 100644 --- a/windows/client-management/mdm/browserfavorite-csp.md +++ b/windows/client-management/mdm/browserfavorite-csp.md @@ -69,40 +69,12 @@ Adding a new browser favorite. The following table shows the Microsoft custom elements that this configuration service provider supports for OMA Client Provisioning. - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    ElementsAvailable

    Parm-query

    Yes

    Noparm

    Yes

    Nocharacteristic

    Yes

    Characteristic-query

    Yes

    -

    Recursive query: Yes

    -

    Top-level query: Yes

    - - +|Elements|Available| +|--- |--- | +|Parm-query|Yes| +|Noparm|Yes| +|Nocharacteristic|Yes| +|Characteristic-query|Yes

    Recursive query: Yes

    Top-level query: Yes| ## Related topics diff --git a/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md b/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md index 03804b98b6..9f78620319 100644 --- a/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md +++ b/windows/client-management/mdm/bulk-assign-and-reclaim-seats-from-user.md @@ -18,66 +18,22 @@ The **Bulk assign and reclaim seats from users** operation returns reclaimed or ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    POST

    https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats

    +**POST**: +```http +https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    username

    string

    Requires UserPrincipalName (UPN). User name of the target user account.

    seatAction

    SeatAction

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|username|string|Requires UserPrincipalName (UPN). User name of the target user account.| +|seatAction|SeatAction|| ## Response @@ -86,37 +42,8 @@ The following parameters may be specified in the request URI. The response body contains [BulkSeatOperationResultSet](data-structures-windows-store-for-business.md#bulkseatoperationresultset). - ------ - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    404

    Not found

    Item type: Inventory

    -

    Values: ProductId/SkuId

    - - - - - - - - +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|404|Not found||Item type: Inventory
    Values: ProductId/SkuId| + \ No newline at end of file diff --git a/windows/client-management/mdm/cellularsettings-csp.md b/windows/client-management/mdm/cellularsettings-csp.md index 38f858db4d..74af96a45d 100644 --- a/windows/client-management/mdm/cellularsettings-csp.md +++ b/windows/client-management/mdm/cellularsettings-csp.md @@ -30,32 +30,11 @@ CellularSettings **DataRoam**

    Optional. Integer. Specifies the default roaming value. Valid values are:

    -
    ---- - - - - - - - - - - - - - - - - - - - - -
    ValueSetting

    0

    Don’t roam

    1

    Don’t roam (or Domestic roaming if applicable)

    2

    Roam

    +|Value|Setting| +|--- |--- | +|0|Don’t roam| +|1|Don’t roam (or Domestic roaming if applicable)| +|2|Roam| ## Related topics diff --git a/windows/client-management/mdm/cm-cellularentries-csp.md b/windows/client-management/mdm/cm-cellularentries-csp.md index 37fa305bce..c8c467fcc9 100644 --- a/windows/client-management/mdm/cm-cellularentries-csp.md +++ b/windows/client-management/mdm/cm-cellularentries-csp.md @@ -70,38 +70,14 @@ CM_CellularEntries **ConnectionType**

    Optional. Type: String. Specifies the type of connection used for the APN. The following connection types are available: -
    ---- - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Gprs

    Default. Used for GPRS type connections (GPRS + GSM + EDGE + UMTS + LTE).

    Cdma

    Used for CDMA type connections (1XRTT + EVDO).

    Lte

    Used for LTE type connections (eHRPD + LTE) when the device is registered HOME.

    Legacy

    Used for GPRS + GSM + EDGE + UMTS connections.

    Lte_iwlan

    Used for GPRS type connections that may be offloaded over WiFi

    Iwlan

    Used for connections that are implemented over WiFi offload only

    +|Connection type|Usage| +|--- |--- | +|Gprs|Default. Used for GPRS type connections (GPRS + GSM + EDGE + UMTS + LTE).| +|Cdma|Used for CDMA type connections (1XRTT + EVDO).| +|Lte|Used for LTE type connections (eHRPD + LTE) when the device is registered HOME.| +|Legacy|Used for GPRS + GSM + EDGE + UMTS connections.| +|Lte_iwlan|Used for GPRS type connections that may be offloaded over WiFi| +|Iwlan|Used for connections that are implemented over WiFi offload only| @@ -295,37 +271,14 @@ Configuring a CDMA connection: ## Microsoft Custom Elements - The following table shows the Microsoft custom elements that this configuration service provider supports for OMA Client Provisioning. - ---- - - - - - - - - - - - - - - - - - - - - -
    ElementAvailable

    Nocharacteristic

    Yes

    Characteristic-query

    Yes

    Parm-query

    Yes

    +|Element|Available| +|--- |--- | +|Nocharacteristic|Yes| +|Characteristic-query|Yes| +|Parm-query|Yes| - ## Related topics diff --git a/windows/client-management/mdm/cmpolicy-csp.md b/windows/client-management/mdm/cmpolicy-csp.md index 1cac56d2f6..b3e95aae57 100644 --- a/windows/client-management/mdm/cmpolicy-csp.md +++ b/windows/client-management/mdm/cmpolicy-csp.md @@ -83,154 +83,44 @@ For `CMST_CONNECTION_NAME`, specify the connection name. For example, if you hav For `CMST_CONNECTION_TYPE`, specify the GUID for the desired connection type. The curly brackets {} around the GUID are required. The following connection types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Connection typeGUID

    GSM

    {A05DC613-E393-40ad-AA89-CCCE04277CD9}

    CDMA

    {274AD55A-4A70-4E35-93B3-AE2D2E6727FC}

    Legacy 3GPP

    {6DE4C04B-B74E-47FA-99E5-8F2097C06A92}

    LTE

    {2378E547-8312-46A5-905E-5C581E92693B}

    Wi-Fi

    {8568B401-858E-4B7B-B3DF-0FD4927F131B}

    Wi-Fi hotspot

    {072FC7DC-1D93-40D1-9BB0-2114D7D73434}

    +|Connection type|GUID| +|--- |--- | +|GSM|{A05DC613-E393-40ad-AA89-CCCE04277CD9}| +|CDMA|{274AD55A-4A70-4E35-93B3-AE2D2E6727FC}| +|Legacy 3GPP|{6DE4C04B-B74E-47FA-99E5-8F2097C06A92}| +|LTE|{2378E547-8312-46A5-905E-5C581E92693B}| +|Wi-Fi|{8568B401-858E-4B7B-B3DF-0FD4927F131B}| +|Wi-Fi hotspot|{072FC7DC-1D93-40D1-9BB0-2114D7D73434}| - For `CMST_CONNECTION_NETWORK_TYPE`, specify the GUID for the desired network type. The curly brackets {} around the GUID are required. The following network types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Network typeGUID

    GPRS

    {AFB7D659-FC1F-4EA5-BDD0-0FDA62676D96}

    1XRTT

    {B1E700AE-A62F-49FF-9BBE-B880C995F27D}

    EDGE

    {C347F8EC-7095-423D-B838-7C7A7F38CD03}

    WCDMA UMTS

    {A72F04C6-9BE6-4151-B5EF-15A53E12C482}

    WCDMA FOMA

    {B8326098-F845-42F3-804E-8CC3FF7B50B4}

    1XEVDO

    {DD42DF39-EBDF-407C-8146-1685416401B2}

    1XEVDV

    {61BF1BFD-5218-4CD4-949C-241CA3F326F6}

    HSPA HSDPA

    {047F7282-BABD-4893-AA77-B8B312657F8C}

    HSPA HSUPA

    {1536A1C6-A4AF-423C-8884-6BDDA3656F84}

    LTE

    {B41CBF43-6994-46FF-9C2F-D6CA6D45889B}

    EHRPD

    {7CFA04A5-0F3F-445C-88A4-C86ED2AD94EA}

    Ethernet 10 Mbps

    {97D3D1B3-854A-4C32-BD1C-C13069078370}

    Ethernet 100 Mbps

    {A8F4FE66-8D04-43F5-9DD2-2A85BD21029B}

    Ethernet Gbps

    {556C1E6B-B8D4-448E-836D-9451BA4CCE75}

    - +|Network type|GUID| +|--- |--- | +|GPRS|{AFB7D659-FC1F-4EA5-BDD0-0FDA62676D96}| +|1XRTT|{B1E700AE-A62F-49FF-9BBE-B880C995F27D}| +|EDGE|{C347F8EC-7095-423D-B838-7C7A7F38CD03}| +|WCDMA UMTS|{A72F04C6-9BE6-4151-B5EF-15A53E12C482}| +|WCDMA FOMA|{B8326098-F845-42F3-804E-8CC3FF7B50B4}| +|1XEVDO|{DD42DF39-EBDF-407C-8146-1685416401B2}| +|1XEVDV|{61BF1BFD-5218-4CD4-949C-241CA3F326F6}| +|HSPA HSDPA|{047F7282-BABD-4893-AA77-B8B312657F8C}| +|HSPA HSUPA|{1536A1C6-A4AF-423C-8884-6BDDA3656F84}| +|LTE|{B41CBF43-6994-46FF-9C2F-D6CA6D45889B}| +|EHRPD|{7CFA04A5-0F3F-445C-88A4-C86ED2AD94EA}| +|Ethernet 10 Mbps|{97D3D1B3-854A-4C32-BD1C-C13069078370}| +|Ethernet 100 Mbps|{A8F4FE66-8D04-43F5-9DD2-2A85BD21029B}| +|Ethernet Gbps|{556C1E6B-B8D4-448E-836D-9451BA4CCE75}| For `CMST_CONNECTION_DEVICE_TYPE`, specify the GUID for the desired device type. The curly brackets {} around the GUID are required. The following device types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    Device typeGUID

    Cellular device

    {F9A53167-4016-4198-9B41-86D9522DC019}

    Ethernet

    {97844272-00C7-4572-B20A-D8D861C095F2}

    Bluetooth

    {1D793123-701A-4fd0-B6AE-9C3C57E99C2C}

    Virtual

    {EAA02CE5-9C70-4E87-97FE-55C9DEC847D4}

    +|Device type|GUID| +|--- |--- | +|Cellular device|{F9A53167-4016-4198-9B41-86D9522DC019}| +|Ethernet|{97844272-00C7-4572-B20A-D8D861C095F2}| +|Bluetooth|{1D793123-701A-4fd0-B6AE-9C3C57E99C2C}| +|Virtual|{EAA02CE5-9C70-4E87-97FE-55C9DEC847D4}| @@ -479,36 +369,11 @@ Adding a host-based mapping policy: ## Microsoft Custom Elements - ---- - - - - - - - - - - - - - - - - - - - - -
    ElementAvailable

    parm-query

    Yes

    uncharacteristic

    Yes

    characteristic-query

    Yes

    -

    Recursive query: Yes

    -

    Top-level query: Yes

    - - +|Element|Available| +|--- |--- | +|parm-query|Yes| +|uncharacteristic|Yes| +|characteristic-query|Yes

    Recursive query: Yes

    Top-level query: Yes| ## Related topics diff --git a/windows/client-management/mdm/cmpolicyenterprise-csp.md b/windows/client-management/mdm/cmpolicyenterprise-csp.md index 3a5cc913a6..979ca7d250 100644 --- a/windows/client-management/mdm/cmpolicyenterprise-csp.md +++ b/windows/client-management/mdm/cmpolicyenterprise-csp.md @@ -83,156 +83,44 @@ For `CMST_CONNECTION_NAME`, specify the connection name. For example, if you hav For `CMST_CONNECTION_TYPE`, specify the GUID for the desired connection type. The curly brackets {} around the GUID are required. The following connection types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Connection typeGUID

    GSM

    {A05DC613-E393-40ad-AA89-CCCE04277CD9}

    CDMA

    {274AD55A-4A70-4E35-93B3-AE2D2E6727FC}

    Legacy 3GPP

    {6DE4C04B-B74E-47FA-99E5-8F2097C06A92}

    LTE

    {2378E547-8312-46A5-905E-5C581E92693B}

    Wi-Fi

    {8568B401-858E-4B7B-B3DF-0FD4927F131B}

    Wi-Fi hotspot

    {072FC7DC-1D93-40D1-9BB0-2114D7D73434}

    +|Connection type|GUID| +|--- |--- | +|GSM|{A05DC613-E393-40ad-AA89-CCCE04277CD9}| +|CDMA|{274AD55A-4A70-4E35-93B3-AE2D2E6727FC}| +|Legacy 3GPP|{6DE4C04B-B74E-47FA-99E5-8F2097C06A92}| +|LTE|{2378E547-8312-46A5-905E-5C581E92693B}| +|Wi-Fi|{8568B401-858E-4B7B-B3DF-0FD4927F131B}| +|Wi-Fi hotspot|{072FC7DC-1D93-40D1-9BB0-2114D7D73434}| For `CMST_CONNECTION_NETWORK_TYPE`, specify the GUID for the desired network type. The curly brackets {} around the GUID are required. The following network types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Network typeGUID

    GPRS

    {AFB7D659-FC1F-4EA5-BDD0-0FDA62676D96}

    1XRTT

    {B1E700AE-A62F-49FF-9BBE-B880C995F27D}

    EDGE

    {C347F8EC-7095-423D-B838-7C7A7F38CD03}

    WCDMA UMTS

    {A72F04C6-9BE6-4151-B5EF-15A53E12C482}

    WCDMA FOMA

    {B8326098-F845-42F3-804E-8CC3FF7B50B4}

    1XEVDO

    {DD42DF39-EBDF-407C-8146-1685416401B2}

    1XEVDV

    {61BF1BFD-5218-4CD4-949C-241CA3F326F6}

    HSPA HSDPA

    {047F7282-BABD-4893-AA77-B8B312657F8C}

    HSPA HSUPA

    {1536A1C6-A4AF-423C-8884-6BDDA3656F84}

    LTE

    {B41CBF43-6994-46FF-9C2F-D6CA6D45889B}

    EHRPD

    {7CFA04A5-0F3F-445C-88A4-C86ED2AD94EA}

    Ethernet 10Mbps

    {97D3D1B3-854A-4C32-BD1C-C13069078370}

    Ethernet 100Mbps

    {A8F4FE66-8D04-43F5-9DD2-2A85BD21029B}

    Ethernet Gbps

    {556C1E6B-B8D4-448E-836D-9451BA4CCE75}

    - - +|Network type|GUID| +|--- |--- | +|GPRS|{AFB7D659-FC1F-4EA5-BDD0-0FDA62676D96}| +|1XRTT|{B1E700AE-A62F-49FF-9BBE-B880C995F27D}| +|EDGE|{C347F8EC-7095-423D-B838-7C7A7F38CD03}| +|WCDMA UMTS|{A72F04C6-9BE6-4151-B5EF-15A53E12C482}| +|WCDMA FOMA|{B8326098-F845-42F3-804E-8CC3FF7B50B4}| +|1XEVDO|{DD42DF39-EBDF-407C-8146-1685416401B2}| +|1XEVDV|{61BF1BFD-5218-4CD4-949C-241CA3F326F6}| +|HSPA HSDPA|{047F7282-BABD-4893-AA77-B8B312657F8C}| +|HSPA HSUPA|{1536A1C6-A4AF-423C-8884-6BDDA3656F84}| +|LTE|{B41CBF43-6994-46FF-9C2F-D6CA6D45889B}| +|EHRPD|{7CFA04A5-0F3F-445C-88A4-C86ED2AD94EA}| +|Ethernet 10Mbps|{97D3D1B3-854A-4C32-BD1C-C13069078370}| +|Ethernet 100Mbps|{A8F4FE66-8D04-43F5-9DD2-2A85BD21029B}| +|Ethernet Gbps|{556C1E6B-B8D4-448E-836D-9451BA4CCE75}| For `CMST_CONNECTION_DEVICE_TYPE`, specify the GUID for the desired device type. The curly brackets {} around the GUID are required. The following device types are available: - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    Device typeGUID

    Cellular device

    {F9A53167-4016-4198-9B41-86D9522DC019}

    Ethernet

    {97844272-00C7-4572-B20A-D8D861C095F2}

    Bluetooth

    {1D793123-701A-4fd0-B6AE-9C3C57E99C2C}

    Virtual

    {EAA02CE5-9C70-4E87-97FE-55C9DEC847D4}

    - - +|Device type|GUID| +|--- |--- | +|Cellular device|{F9A53167-4016-4198-9B41-86D9522DC019}| +|Ethernet|{97844272-00C7-4572-B20A-D8D861C095F2}| +|Bluetooth|{1D793123-701A-4fd0-B6AE-9C3C57E99C2C}| +|Virtual|{EAA02CE5-9C70-4E87-97FE-55C9DEC847D4}| **Type** Specifies the type of connection being referenced. The following list describes the available connection types: @@ -479,36 +367,11 @@ Adding a host-based mapping policy: ## Microsoft Custom Elements - ---- - - - - - - - - - - - - - - - - - - - - -
    ElementAvailable

    parm-query

    Yes

    nocharacteristic

    Yes

    characteristic-query

    Yes

    -

    Recursive query: Yes

    -

    Top level query: Yes

    - - +|Element|Available| +|--- |--- | +|parm-query|Yes| +|nocharacteristic|Yes| +|characteristic-query|Yes

    Recursive query: Yes

    Top level query: Yes| ## Related topics diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 78158a6a3f..504e6ed823 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -33,24 +33,10 @@ Additional lists: [AccountManagement CSP](accountmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|No| @@ -59,24 +45,10 @@ Additional lists: [Accounts CSP](accounts-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -85,24 +57,10 @@ Additional lists: [ActiveSync CSP](activesync-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -111,24 +69,10 @@ Additional lists: [AllJoynManagement CSP](alljoynmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|No| @@ -137,24 +81,10 @@ Additional lists: [APPLICATION CSP](application-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -163,24 +93,10 @@ Additional lists: [ApplicationControl CSP](applicationcontrol-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes6Yes6Yes6Yes6Yes6Yes6
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -189,24 +105,10 @@ Additional lists: [AppLocker CSP](applocker-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -215,24 +117,10 @@ Additional lists: [AssignedAccess CSP](assignedaccess-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes3YesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -241,24 +129,10 @@ Additional lists: [BOOTSTRAP CSP](bootstrap-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -267,24 +141,10 @@ Additional lists: [BitLocker CSP](bitlocker-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes5Yes2Yes2Yes2Yes2
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -293,24 +153,10 @@ Additional lists: [BrowserFavorite CSP](browserfavorite-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|No| @@ -319,24 +165,10 @@ Additional lists: [CMPolicy CSP](cmpolicy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes3Yes3Yes3Yes3Yes3Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -345,25 +177,10 @@ Additional lists: [CMPolicyEnterprise CSP](cmpolicyenterprise-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes1
    +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -372,24 +189,10 @@ Additional lists: [CM_CellularEntries CSP](cm-cellularentries-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes2Yes2Yes2Yes2Yes2Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -398,24 +201,10 @@ Additional lists: [CM_ProxyEntries CSP](cm-proxyentries-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes3Yes3Yes3Yes3Yes3Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -424,24 +213,10 @@ Additional lists: [CellularSettings CSP](cellularsettings-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes2Yes2Yes2Yes2Yes2Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -450,24 +225,10 @@ Additional lists: [CertificateStore CSP](certificatestore-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -476,24 +237,10 @@ Additional lists: [CleanPC CSP](cleanpc-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoYes2Yes2Yes2No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|Yes|Yes|Yes|No| @@ -502,24 +249,10 @@ Additional lists: [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -528,24 +261,10 @@ Additional lists: [CustomDeviceUI CSP](customdeviceui-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|No| @@ -554,24 +273,10 @@ Additional lists: [DMAcc CSP](dmacc-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -580,24 +285,10 @@ Additional lists: [DMClient CSP](dmclient-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -606,24 +297,10 @@ Additional lists: [Defender CSP](defender-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|No| @@ -632,24 +309,10 @@ Additional lists: [DevDetail CSP](devdetail-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -658,24 +321,10 @@ Additional lists: [DevInfo CSP](devinfo-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -684,24 +333,10 @@ Additional lists: [DeveloperSetup CSP](developersetup-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|No| @@ -710,24 +345,10 @@ Additional lists: [DeviceInstanceService CSP](deviceinstanceservice-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -736,24 +357,10 @@ Additional lists: [DeviceLock CSP](devicelock-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -762,24 +369,10 @@ Additional lists: [DeviceManageability CSP](devicemanageability-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -788,25 +381,10 @@ Additional lists: [DeviceStatus CSP](devicestatus-csp.md) - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -815,24 +393,10 @@ Additional lists: [DiagnosticLog CSP](diagnosticlog-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -841,25 +405,10 @@ Additional lists: [DynamicManagement CSP](dynamicmanagement-csp.md) - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoYes2Yes2Yes3
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|Yes|Yes|Yes| @@ -868,24 +417,10 @@ Additional lists: [EMAIL2 CSP](email2-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -894,24 +429,10 @@ Additional lists: [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes6Yes6Yes6Yes6Yes6No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|No| @@ -920,24 +441,10 @@ Additional lists: [EnterpriseAPN CSP](enterpriseapn-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes2Yes2Yes2Yes2Yes2Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -946,24 +453,10 @@ Additional lists: [EnterpriseAppManagement CSP](enterpriseappmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -972,24 +465,10 @@ Additional lists: [EnterpriseAppVManagement CSP](enterpriseappvmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoYes2Yes2No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|Yes|Yes|No| @@ -998,24 +477,10 @@ Additional lists: [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1024,25 +489,10 @@ Additional lists: [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes -Only for mobile application management (MAM)YesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes
    [Only for mobile application management (MAM)](/windows/client-management/mdm/implement-server-side-mobile-application-management#integration-with-windows-information-protection)|Yes|Yes|Yes|Yes|Yes| @@ -1051,24 +501,10 @@ Additional lists: [EnterpriseDesktopAppManagement CSP](enterprisedesktopappmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -1077,24 +513,10 @@ Additional lists: [EnterpriseExt CSP](enterpriseext-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1103,24 +525,10 @@ Additional lists: [EnterpriseExtFileSystem CSP](enterpriseextfilessystem-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1129,24 +537,10 @@ Additional lists: [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1155,24 +549,10 @@ Additional lists: [eUICCs CSP](euiccs-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes3Yes3Yes3Yes3Yes3
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1181,24 +561,10 @@ Additional lists: [FileSystem CSP](filesystem-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYesB
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1207,24 +573,10 @@ Additional lists: [Firewall CSP](firewall-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes3Yes3Yes3Yes3No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -1233,24 +585,10 @@ Additional lists: [HealthAttestation CSP](healthattestation-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1259,24 +597,10 @@ Additional lists: [HotSpot CSP](hotspot-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1285,26 +609,10 @@ Additional lists: [LanguagePackManagement CSP](language-pack-management-csp.md) - - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobileMobile Enterprise
    YesYesNoYesYesNoNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile|Mobile Enterprise| +|--- |--- |--- |--- |--- |--- |--- | +|Yes|Yes|No|Yes|Yes|No|No| @@ -1312,24 +620,10 @@ Additional lists: [Maps CSP](maps-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1338,24 +632,10 @@ Additional lists: [Messaging CSP](messaging-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes2
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1364,24 +644,10 @@ Additional lists: [MultiSIM CSP](multisim-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1390,24 +656,10 @@ Additional lists: [NAP CSP](nap-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1416,24 +668,10 @@ Additional lists: [NAPDEF CSP](napdef-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1442,24 +680,10 @@ Additional lists: [NetworkProxy CSP](networkproxy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes2Yes2Yes2Yes2Yes2
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1468,24 +692,10 @@ Additional lists: [NetworkQoSPolicy CSP](networkqospolicy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1494,24 +704,10 @@ Additional lists: [NodeCache CSP](nodecache-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1520,24 +716,10 @@ Additional lists: [Office CSP](office-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes2Yes2Yes2Yes2No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -1546,24 +728,10 @@ Additional lists: [PROXY CSP](proxy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1572,24 +740,10 @@ Additional lists: [PXLOGICAL CSP](pxlogical-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1598,24 +752,10 @@ Additional lists: [PassportForWork CSP](passportforwork-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1624,24 +764,10 @@ Additional lists: [Personalization CSP](personalization-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoYes2Yes2No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|Yes|Yes|No| @@ -1650,24 +776,10 @@ Additional lists: [Policy CSP](policy-configuration-service-provider.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1676,24 +788,10 @@ Additional lists: [PolicyManager CSP](policymanager-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1702,24 +800,10 @@ Additional lists: [Provisioning CSP](provisioning-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesBYesBYesBYesBYesBYesB
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1728,24 +812,10 @@ Additional lists: [Reboot CSP](reboot-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1754,24 +824,10 @@ Additional lists: [Registry CSP](registry-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1780,24 +836,10 @@ Additional lists: [RemoteFind CSP](remotefind-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1806,24 +848,10 @@ Additional lists: [RemoteLock](remotelock-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1832,24 +860,10 @@ Additional lists: [RemoteRing CSP](remotering-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -1858,24 +872,10 @@ Additional lists: [RemoteWipe CSP](remotewipe-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1884,24 +884,10 @@ Additional lists: [Reporting CSP](reporting-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1910,24 +896,10 @@ Additional lists: [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -1936,24 +908,10 @@ Additional lists: [SUPL CSP](supl-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -1962,24 +920,10 @@ Additional lists: [SecureAssessment CSP](secureassessment-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes1Yes1Yes1Yes1No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -1988,24 +932,10 @@ Additional lists: [SecurityPolicy CSP](securitypolicy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -2014,24 +944,10 @@ Additional lists: [SharedPC CSP](sharedpc-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes1Yes1Yes1Yes1No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2040,24 +956,10 @@ Additional lists: [Storage CSP](storage-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -2066,25 +968,10 @@ Additional lists: [SurfaceHub](surfacehub-csp.md) - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +||||||| @@ -2093,24 +980,10 @@ Additional lists: [TenantLockdown CSP](tenantlockdown-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes5Yes5Yes5Yes5No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2119,24 +992,10 @@ Additional lists: [TPMPolicy CSP](tpmpolicy-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -2145,24 +1004,10 @@ Additional lists: [UEFI CSP](uefi-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYesYesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2171,24 +1016,10 @@ Additional lists: [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoYesYesYesNo
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|Yes|Yes|Yes|No| @@ -2197,24 +1028,10 @@ Additional lists: [Update CSP](update-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -2223,24 +1040,10 @@ Additional lists: [VPN CSP](vpn-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -2249,24 +1052,10 @@ Additional lists: [VPNv2 CSP](vpnv2-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -2275,25 +1064,10 @@ Additional lists: [W4 APPLICATION CSP](w4-application-csp.md) - - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +||||||Yes| @@ -2302,24 +1076,10 @@ Additional lists: [WiFi CSP](wifi-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -2328,24 +1088,10 @@ Additional lists: [Win32AppInventory CSP](win32appinventory-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes1Yes1Yes1Yes1No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2354,24 +1100,10 @@ Additional lists: [Win32CompatibilityAppraiser CSP](win32compatibilityappraiser-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes5Yes5Yes5Yes5No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2380,24 +1112,10 @@ Additional lists: [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes1Yes1Yes1Yes1No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2406,24 +1124,10 @@ Additional lists: [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) - - - - - - - - - - - - - - - - > - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes3Yes3Yes3Yes3No
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|No| @@ -2433,24 +1137,10 @@ Additional lists: [WindowsLicensing CSP](windowslicensing-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    YesYesYesYesYesYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|Yes|Yes|Yes|Yes|Yes|Yes| @@ -2459,24 +1149,10 @@ Additional lists: [WindowsSecurityAuditing CSP](windowssecurityauditing-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoNoNoNoNoYes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|No|No|No|No|Yes| @@ -2485,24 +1161,10 @@ Additional lists: [WiredNetwork CSP](wirednetwork-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    NoYes5Yes5Yes5Yes5Yes5
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +|No|Yes|Yes|Yes|Yes|Yes| @@ -2511,24 +1173,10 @@ Additional lists: [w7 APPLICATION CSP](w7-application-csp.md) - - - - - - - - - - - - - - - - - -
    HomeProBusinessEnterpriseEducationMobile
    Yes
    + +|Home|Pro|Business|Enterprise|Education|Mobile| +|--- |--- |--- |--- |--- |--- | +||||||Yes| @@ -2555,32 +1203,32 @@ The following list shows the CSPs supported in HoloLens devices: | Configuration service provider | HoloLens (1st gen) Development Edition | HoloLens (1st gen) Commercial Suite | HoloLens 2 | |------|--------|--------|--------| -| [AccountManagement CSP](accountmanagement-csp.md) | No | Yes 4 | Yes +| [AccountManagement CSP](accountmanagement-csp.md) | No | Yes | Yes | [Accounts CSP](accounts-csp.md) | Yes | Yes | Yes | | [ApplicationControl CSP](applicationcontrol-csp.md) | No | No | Yes | | [AppLocker CSP](applocker-csp.md) | No | Yes | No | -| [AssignedAccess CSP](assignedaccess-csp.md) | No | Yes 4 | Yes | +| [AssignedAccess CSP](assignedaccess-csp.md) | No | Yes | Yes | | [CertificateStore CSP](certificatestore-csp.md) | Yes | Yes| Yes | | [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) | No | Yes | Yes | | [DevDetail CSP](devdetail-csp.md) | Yes | Yes | Yes | -| [DeveloperSetup CSP](developersetup-csp.md) | No | Yes 2 (runtime provisioning via provisioning packages only; no MDM support)| Yes | +| [DeveloperSetup CSP](developersetup-csp.md) | No | Yes (runtime provisioning via provisioning packages only; no MDM support)| Yes | | [DeviceManageability CSP](devicemanageability-csp.md) | No | No | Yes | | [DeviceStatus CSP](devicestatus-csp.md) | No | Yes | Yes | | [DevInfo CSP](devinfo-csp.md) | Yes | Yes | Yes | | [DiagnosticLog CSP](diagnosticlog-csp.md) | No | Yes | Yes | | [DMAcc CSP](dmacc-csp.md) | Yes | Yes | Yes | | [DMClient CSP](dmclient-csp.md) | Yes | Yes | Yes | -| [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md) | No | No | Yes 10 | +| [EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md) | No | No | Yes | | [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | No | Yes | Yes | | [NetworkProxy CSP](networkproxy-csp.md) | No | No | Yes | -| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | No | No | Yes 8| +| [NetworkQoSPolicy CSP](networkqospolicy-csp.md) | No | No | Yes | | [NodeCache CSP](nodecache-csp.md) | Yes | Yes | Yes | [PassportForWork CSP](passportforwork-csp.md) | No | Yes | Yes | | [Policy CSP](policy-configuration-service-provider.md) | No | Yes | Yes | -| [RemoteFind CSP](remotefind-csp.md) | No | Yes 4 | Yes | -| [RemoteWipe CSP](remotewipe-csp.md) (**doWipe** and **doWipePersistProvisionedData** nodes only) | No | Yes 4 | Yes | +| [RemoteFind CSP](remotefind-csp.md) | No | Yes | Yes | +| [RemoteWipe CSP](remotewipe-csp.md) (**doWipe** and **doWipePersistProvisionedData** nodes only) | No | Yes | Yes | | [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | No | Yes | Yes | -| [TenantLockdown CSP](tenantlockdown-csp.md) | No | No | Yes 10 | +| [TenantLockdown CSP](tenantlockdown-csp.md) | No | No | Yes | | [Update CSP](update-csp.md) | No | Yes | Yes | | [VPNv2 CSP](vpnv2-csp.md) | No | Yes | Yes | | [WiFi CSP](wifi-csp.md) | No | Yes | Yes | @@ -2589,7 +1237,7 @@ The following list shows the CSPs supported in HoloLens devices: ## CSPs supported in Microsoft Surface Hub -- [Accounts CSP](accounts-csp.md)9 +- [Accounts CSP](accounts-csp.md) > [!NOTE] > Support in Surface Hub is limited to **Domain\ComputerName**. - [AccountManagement CSP](accountmanagement-csp.md) @@ -2605,21 +1253,21 @@ The following list shows the CSPs supported in HoloLens devices: - [DMAcc CSP](dmacc-csp.md) - [DMClient CSP](dmclient-csp.md) - [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) -- [Firewall-CSP](firewall-csp.md)9 +- [Firewall-CSP](firewall-csp.md) - [HealthAttestation CSP](healthattestation-csp.md) - [NetworkQoSPolicy CSP](networkqospolicy-csp.md) - [NodeCache CSP](nodecache-csp.md) - [PassportForWork CSP](passportforwork-csp.md) - [Policy CSP](policy-configuration-service-provider.md) - [Reboot CSP](reboot-csp.md) -- [RemoteWipe CSP](remotewipe-csp.md)9 +- [RemoteWipe CSP](remotewipe-csp.md) - [Reporting CSP](reporting-csp.md) - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [SurfaceHub CSP](surfacehub-csp.md) - [UEFI CSP](uefi-csp.md) -- [Wifi-CSP](wifi-csp.md)9 +- [Wifi-CSP](wifi-csp.md) - [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) -- [Wirednetwork-CSP](wirednetwork-csp.md)9 +- [Wirednetwork-CSP](wirednetwork-csp.md) ## CSPs supported in Windows 10 IoT Core From 5c6259d9f51f5870a7c0cd03a858efceff257fcd Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 10 Nov 2021 11:58:04 +0530 Subject: [PATCH 05/36] Fixed acrolinx and build issue --- .../app-v/appv-performance-guidance.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/application-management/app-v/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md index 3b15cb36d4..0f85aca3ee 100644 --- a/windows/application-management/app-v/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -40,11 +40,11 @@ Some terms used in this document may have different meanings depending on extern Finally, this document will provide you with the information to configure the computer running App-V client and the environment for optimal performance. Optimize your virtual application packages for performance using the sequencer, and to understand how to use User Experience Virtualization (UE-V) or other user environment management technologies to provide the optimal user experience with App-V in both Remote Desktop Services (RDS) and non-persistent virtual desktop infrastructure (VDI). -To help determine what information is relevant to your environment you should review each section’s brief overview and applicability checklist. +To help determine what information is relevant to your environment, you should review each section’s brief overview and applicability checklist. ## App-V in stateful\* non-persistent deployments -This section provides information about an approach that helps ensure a user will have access to all virtual applications within seconds after logging in. This is achieved by uniquely addressing the often long-running App-V publishing refresh. As you will discover the basis of the approach, the fastest publishing refresh, is one that doesn’t have to actually do anything. A number of conditions must be met and steps followed to provide the optimal user experience. +This section provides information about an approach that helps ensure a user will have access to all virtual applications within seconds after logging in. This is achieved by uniquely addressing the often long-running App-V publishing refresh. As you will discover the basis of the approach, the fastest publishing refresh, is one that doesn’t have to actually do anything. Many conditions must be met and steps followed to provide the optimal user experience. Use the information in the following section for more information: @@ -70,7 +70,7 @@ Use the information in the following section for more information: [Enhancing the VDI Experience through Performance Optimization/Tuning](#bkmk-evdi) -### Applicability Checklist +### Applicability Checklist |Checklist|Deployment Environment| |--- |--- | @@ -87,15 +87,15 @@ Use the information in the following section for more information: |--- |--- | |![Checklist box](images/checklistbox.gif)|Admin may need to update the VM base image regularly to ensure optimal performance or Admin may need to manage multiple images for different user groups.| -### Usage Scenarios +### Usage Scenarios As you review the two scenarios, keep in mind that these approach the extremes. Based on your usage requirements, you may choose to apply these steps to a subset of users, virtual application packages, or both. |Optimized for Performance|Optimized for Storage| |--- |--- | -|To provide the most optimal user experience, this approach leverages the capabilities of a UPM solution and requires additional image preparation and can incur some additional image management overhead.

    The following describes many performance improvements in stateful non-persistent deployments. For more information, see [Sequencing Steps to Optimize Packages for Publishing Performance](#sequencing-steps-to-optimize-packages-for-publishing-performance) later in this topic.|The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in very costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image.

    The impact of this alteration is detailed in the [User Experience Walk-through](#bkmk-uewt) section of this document.| +|To provide the most optimal user experience, this approach uses the capabilities of a UPM solution and requires extra image preparation and can incur some more image management overhead.

    The following describes many performance improvements in stateful non-persistent deployments. For more information, see [Sequencing Steps to Optimize Packages for Publishing Performance](#sequencing-steps-to-optimize-packages-for-publishing-performance) later in this topic.|The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image.

    The impact of this alteration is detailed in the [User Experience Walk-through](#bkmk-uewt) section of this document.| -### Preparing your Environment +### Preparing your Environment The following table displays the required steps to prepare the base image and the UE-V or another UPM solution for the approach. @@ -103,14 +103,14 @@ The following table displays the required steps to prepare the base image and th |Optimized for Performance|Optimized for Storage| |--- |--- | -|

  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information see [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all user- and global-targeted packages for example, **Add-AppvClientPackage**.
  • Pre-configure all user- and global-targeted connection groups for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.
    Alternatively,
  • Perform a global publishing/refresh.
  • Perform a user publishing/refresh.
  • Un-publish all user-targeted packages.
  • Delete the following user-Virtual File System (VFS) entries
    AppData\Local\Microsoft\AppV\Client\VFS
    AppData\Roaming\Microsoft\AppV\Client\VFS|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information see Deploying the
  • App-V Sequencer and Configuring the Client.
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all global-targeted packages for example,** Add-AppvClientPackage**.
  • Pre-configure all global-targeted connection groups for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.| +|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information, see [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all user- and global-targeted packages, for example, **Add-AppvClientPackage**.
  • Pre-configure all user- and global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.
    Alternatively,
  • Perform a global publishing/refresh.
  • Perform a user publishing/refresh.
  • Unpublish all user-targeted packages.
  • Delete the following user-Virtual File System (VFS) entries
    AppData\Local\Microsoft\AppV\Client\VFS
    AppData\Roaming\Microsoft\AppV\Client\VFS|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information, see Deploying the
  • App-V Sequencer and Configuring the Client.
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all global-targeted packages, for example,** Add-AppvClientPackage**.
  • Pre-configure all global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.| **Configurations** - For critical App-V Client configurations and for a little more context and how-to, review the following information: |Configuration Setting|What does this do?|How should I use it?| |--- |--- |--- | -|Shared Content Store (SCS) Mode
  • Configurable in Windows PowerShell with Set-AppvClientConfiguration -SharedContentStoreMode 1
    or configurable with Group Policy, as described in [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).|When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM).
    This helps to conserve local storage and minimize disk I/O per second (IOPS).|This is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN.| -|PreserveUserIntegrationsOnLogin
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Integration**.
  • Create the DWORD value **PreserveUserIntegrationsOnLogin** with a value of 1.
  • Restart the App-V client service or restart the computer running the App-V Client.|If you have not pre-configured (**Add-AppvClientPackage**) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then re-integrate*.
    For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh.|If you don’t plan to pre-configure every available user package in the base image, use this setting.| +|Shared Content Store (SCS) Mode
  • Configurable in Windows PowerShell with Set-AppvClientConfiguration -SharedContentStoreMode 1
    Or configurable with Group Policy, as described in [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).|When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM).
    This helps to conserve local storage and minimize disk I/O per second (IOPS).|This is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN.| +|PreserveUserIntegrationsOnLogin
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Integration**.
  • Create the DWORD value **PreserveUserIntegrationsOnLogin** with a value of 1.
  • Restart the App-V client service or restart the computer running the App-V Client.|If you have not pre-configured (**Add-AppvClientPackage**) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then reintegrate*.
    For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh.|If you don’t plan to pre-configure every available user package in the base image, use this setting.| |MaxConcurrentPublishingRefresh
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Publishing**.
  • Create the DWORD value **MaxConcurrentPublishingrefresh** with the desired maximum number of concurrent publishing refreshes.
  • The App-V client service and computer do not need to be restarted.|This setting determines the number of users that can perform a publishing refresh/sync at the same time. The default setting is no limit.|Limiting the number of concurrent publishing refreshes prevents excessive CPU usage that could impact computer performance. This limit is recommended in an RDS environment, where multiple users can log in to the same computer at the same time and perform a publishing refresh sync.
    If the concurrent publishing refresh threshold is reached, the time required to publish new applications and make them available to end users after they log in could take an indeterminate amount of time.| ### Configure UE-V solution for App-V Approach From 5bdacc3ebf9a6ec23beea77aa239be95a629bfe5 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 10 Nov 2021 19:03:35 +0530 Subject: [PATCH 06/36] 5548201: HTMLTableConvertMD-Batch03 --- ...a-structures-windows-store-for-business.md | 1129 +++-------------- .../mdm/device-update-management.md | 131 +- windows/client-management/mdm/dmclient-csp.md | 299 +---- .../mdm/dmprocessconfigxmlfiltered.md | 83 +- .../mdm/enterpriseassignedaccess-csp.md | 907 +++---------- .../mdm/enterprisedataprotection-csp.md | 33 +- .../mdm/enterprisedesktopappmanagement-csp.md | 199 +-- .../client-management/mdm/get-inventory.md | 147 +-- .../mdm/get-localized-product-details.md | 98 +- .../mdm/get-offline-license.md | 105 +- .../mdm/get-product-details.md | 90 +- .../mdm/get-product-package.md | 111 +- .../mdm/get-product-packages.md | 100 +- windows/client-management/mdm/get-seat.md | 111 +- .../mdm/get-seats-assigned-to-a-user.md | 96 +- 15 files changed, 557 insertions(+), 3082 deletions(-) diff --git a/windows/client-management/mdm/data-structures-windows-store-for-business.md b/windows/client-management/mdm/data-structures-windows-store-for-business.md index b1e8b42c40..46fda3c4d4 100644 --- a/windows/client-management/mdm/data-structures-windows-store-for-business.md +++ b/windows/client-management/mdm/data-structures-windows-store-for-business.md @@ -54,1067 +54,262 @@ Here's the list of data structures used in the Microsoft Store for Business REST Specifies the properties of the alternate identifier. - ----- - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    type

    string

    LegacyWindowStoreProductId, LegacyWindowsPhoneProductId, RedirectToThresholdProductId

    value

    string

    - - +|Name|Type|Description| +|--- |--- |--- | +|type|string|LegacyWindowStoreProductId, LegacyWindowsPhoneProductId, RedirectToThresholdProductId| +|value|string|| ## BulkSeatOperationResultSet - - ---- - - - - - - - - - - - - - - - - -
    NameType

    seatDetails

    collection of SeatDetails

    failedSeatOperations

    collection of FailedSeatRequest

    - - +|Name|Type| +|--- |--- | +|seatDetails|collection of [SeatDetails](#seatdetails)| +|failedSeatOperations|collection of [FailedSeatRequest](#failedseatrequest)| ## FailedSeatRequest - - ---- - - - - - - - - - - - - - - - - - - - - -
    NameType

    failureReason

    string

    productKey

    ProductKey

    userName

    string

    - - +|Name|Type| +|--- |--- | +|failureReason|string| +|productKey|[ProductKey](#productkey)| +|userName|string| ## FrameworkPackageDetails - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    packageId

    string

    contentId

    string

    Identifies a specific application.

    location

    PackageLocation

    packageFullName

    string

    packageIdentityName

    string

    architectures

    collection of ProductArchitectures

    packageFormat

    ProductPackageFormat

    platforms

    collection of ProductPlatform

    fileSize

    integer-64

    Size of the file.

    packageRank

    integer-32

    Optional

    - - +|Name|Type|Description| +|--- |--- |--- | +|packageId|string|| +|contentId|string|Identifies a specific application.| +|location|[PackageLocation](#packagelocation)|| +|packageFullName|string|| +|packageIdentityName|string|| +|architectures|collection of [ProductArchitectures](#productarchitectures)|| +|packageFormat|[ProductPackageFormat](#productpackageformat)|| +|platforms|collection of [ProductPlatform](#productplatform)|| +|fileSize|integer-64|Size of the file.| +|packageRank|integer-32|Optional| ## InventoryDistributionPolicy - - ---- - - - - - - - - - - - - - - - - -
    NameDescription

    open

    Open distribution policy - licenses/seats can be assigned/consumed without limit

    restricted

    Restricted distribution policy - licenses/seats must be assigned/consumed according to the available count

    - - +|Name|Description| +|--- |--- | +|open|Open distribution policy - licenses/seats can be assigned/consumed without limit| +|restricted|Restricted distribution policy - licenses/seats must be assigned/consumed according to the available count| ## InventoryEntryDetails - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    productKey

    ProductKey

    Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.

    seatCapacity

    integer-64

    Total number of seats that have been purchased for an application.

    availableSeats

    integer-64

    Number of available seats remaining for an application.

    lastModified

    dateTime

    Specifies the last modified date for an application. Modifications for an application includes updated product details, updates to an application, and updates to the quantity of an application.

    licenseType

    LicenseType

    Indicates whether the set of seats for a given application supports online or offline licensing.

    distributionPolicy

    InventoryDistributionPolicy

    status

    InventoryStatus

    - - +|Name|Type|Description| +|--- |--- |--- | +|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.| +|seatCapacity|integer-64|Total number of seats that have been purchased for an application.| +|availableSeats|integer-64|Number of available seats remaining for an application.| +|lastModified|dateTime|Specifies the last modified date for an application. Modifications for an application includes updated product details, updates to an application, and updates to the quantity of an application.| +|licenseType|[LicenseType](#licensetype)|Indicates whether the set of seats for a given application supports online or offline licensing.| +|distributionPolicy|[InventoryDistributionPolicy](#inventorydistributionpolicy)|| +|status|[InventoryStatus](#inventorystatus)|| ## InventoryResultSet - ----- - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    continuationToken

    string

    Only available if there is a next page.

    inventoryEntries

    collection of InventoryEntryDetails

    - +|Name|Type|Description| +|--- |--- |--- | +|continuationToken|string|Only available if there is a next page.| +|inventoryEntries|collection of [InventoryEntryDetails](#inventoryentrydetails)|| - ## InventoryStatus - - ---- - - - - - - - - - - - - - - - - -
    NameDescription

    active

    Entry is available in the organization’s inventory.

    removed

    Entry has been removed from the organization’s inventory.

    - - +|Name|Description| +|--- |--- | +|active|Entry is available in the organization’s inventory.| +|removed|Entry has been removed from the organization’s inventory.| ## LicenseType - - ---- - - - - - - - - - - - - - - - - -
    NameDescription

    online

    Online license application.

    offline

    Offline license application.

    - - +|Name|Description| +|--- |--- | +|online|Online license application.| +|offline|Offline license application.| ## LocalizedProductDetail Specifies the properties of the localized product. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    language

    string

    Language or fallback language if the specified language is not available.

    displayName

    string

    Display name of the application.

    description

    string

    App description provided by developer can be up to 10,000 characters.

    images

    collection of ProductImage

    Artwork and icon associated with the application.

    publisher

    PublisherDetails

    Publisher of the application.

    - - +|Name|Type|Description| +|--- |--- |--- | +|language|string|Language or fallback language if the specified language is not available.| +|displayName|string|Display name of the application.| +|description|string|App description provided by developer can be up to 10,000 characters.| +|images|collection of [ProductImage](#productimage)|Artwork and icon associated with the application.| +|publisher|[PublisherDetails](#publisherdetails)|Publisher of the application.| ## OfflineLicense - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    productKey

    ProductKey

    Identifies a set of seats associated with an application.

    licenseBlob

    string

    Base-64 encoded offline license that can be installed via a CSP.

    licenseInstanceId

    string

    Version of the license.

    requestorId

    string

    Organization requesting the license.

    contentId

    string

    Identifies the specific license required by an application.

    - - +|Name|Type|Description| +|--- |--- |--- | +|productKey|[ProductKey](#productkey)|Identifies a set of seats associated with an application.| +|licenseBlob|string|Base-64 encoded offline license that can be installed via a CSP.| +|licenseInstanceId|string|Version of the license.| +|requestorId|string|Organization requesting the license.| +|contentId|string|Identifies the specific license required by an application.| ## PackageContentInfo - ---- - - - - - - - - - - - - - - - - -
    NameType

    productPlatforms

    collection of ProductPlatform

    packageFormat

    string

    - - +|Name|Type| +|--- |--- | +|productPlatforms|collection of ProductPlatform| +|packageFormat|string| ## PackageLocation - ----- - - - - - - - - - - - - - - -
    NameTypeDescription

    url

    URI

    CDN location of the packages. URL expiration is based on the estimated time to download the package.

    +|Name|Type|Description| +|--- |--- |--- | +|url|URI|CDN location of the packages. URL expiration is based on the estimated time to download the package.| - ## ProductArchitectures - - --- - - - - - - - - - - - - - - - - - - - -
    Name

    neutral

    arm

    x86

    x64

    - - +|Name| +|--- | +|neutral| +|arm| +|x86| +|x64| ## ProductDetails +|Name|Type|Description| +|--- |--- |--- | +|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.| +|productType|string|Type of product.| +|supportedLanguages|collection of string|The set of localized languages for an application.| +|publisherId|string|Publisher identifier.| +|category|string|Application category.| +|alternateIds|collection of [AlternateIdentifier](#alternateidentifier)|The identifiers that can be used to instantiate the installation of on online application.| +|packageFamilyName|string|| +|supportedPlatforms|collection of [ProductPlatform](#productplatform)|| - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    productKey

    ProductKey

    Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.

    productType

    string

    Type of product.

    supportedLanguages

    collection of string

    The set of localized languages for an application.

    publisherId

    string

    Publisher identifier.

    category

    string

    Application category.

    alternateIds

    collection of AlternateIdentifier

    The identifiers that can be used to instantiate the installation of on online application.

    packageFamilyName

    string

    supportedPlatforms

    collection of ProductPlatform

    - - ## ProductImage - Specifies the properties of the product image. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    location

    URI

    Location of the download image.

    purpose

    string

    Tag for the purpose of the image, e.g. "screenshot" or "logo".

    height

    string

    Height of the image in pixels.

    width

    string

    Width of the image in pixels.

    caption

    string

    Unlimited length.

    backgroundColor

    string

    Format "#RRGGBB"

    foregroundColor

    string

    Format "#RRGGBB"

    fileSize

    integer-64

    Size of the file.

    - - +|Name|Type|Description| +|--- |--- |--- | +|location|URI|Location of the download image.| +|purpose|string|Tag for the purpose of the image, e.g. "screenshot" or "logo".| +|height|string|Height of the image in pixels.| +|width|string|Width of the image in pixels.| +|caption|string|Unlimited length.| +|backgroundColor|string|Format "#RRGGBB"| +|foregroundColor|string|Format "#RRGGBB"| +|fileSize|integer-64|Size of the file.| ## ProductKey - Specifies the properties of the product key. - ----- - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    productId

    string

    Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Product identifier that specifies a specific SKU of an application.

    - - +|Name|Type|Description| +|--- |--- |--- | +|productId|string|Product identifier for an application that is used by the Store for Business.| +|skuId|string|Product identifier that specifies a specific SKU of an application.| ## ProductPackageDetails - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    frameworkDependencyPackages

    collection of FrameworkPackageDetails

    packageId

    string

    contentId

    string

    Identifies a specific application.

    location

    PackageLocation

    packageFullName

    string

    example, Microsoft.BingTranslator_1.1.10917.2059_x86__8wekyb3d8bbwe

    packageIdentityName

    string

    example, Microsoft.BingTranslator

    architectures

    collection of ProductArchitectures

    Values {x86, x64, arm, neutral}

    packageFormat

    ProductPackageFormat

    Extension of the package file.

    platforms

    collection of ProductPlatform

    fileSize

    integer-64

    Size of the file.

    packageRank

    integer-32

    Optional

    - - +|Name|Type|Description| +|--- |--- |--- | +|frameworkDependencyPackages|collection of [FrameworkPackageDetails](#frameworkpackagedetails)|| +|packageId|string|| +|contentId|string|Identifies a specific application.| +|location|[PackageLocation](#packagelocation)|| +|packageFullName|string|example,Microsoft.BingTranslator_1.1.10917.2059_x86__8wekyb3d8bbwe| +|packageIdentityName|string|example, Microsoft.BingTranslator| +|architectures|collection of [ProductArchitectures](#productarchitectures)|Values {x86, x64, arm, neutral}| +|packageFormat|[ProductPackageFormat](#productpackageformat)|Extension of the package file.| +|platforms|collection of [ProductPlatform](#productplatform)|| +|fileSize|integer-64|Size of the file.| +|packageRank|integer-32|Optional| ## ProductPackageFormat - - --- - - - - - - - - - - - - - - - - -
    Name

    appx

    appxBundle

    xap

    - - +|Name| +|--- | +|appx| +|appxBundle| +|xap| ## ProductPackageSet - - ----- - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    packageSetId

    string

    An identifier for the particular combination of application packages.

    productPackages

    collection of ProductPackageDetails

    A collection of application packages.

    - - +|Name|Type|Description| +|--- |--- |--- | +|packageSetId|string|An identifier for the particular combination of application packages.| +|productPackages|collection of [ProductPackageDetails](#productpackagedetails)|A collection of application packages.| ## ProductPlatform - - ---- - - - - - - - - - - - - - - - - - - - - -
    NameType

    platformName

    string

    minVersion

    VersionInfo

    maxTestedVersion

    VersionInfo

    - - +|Name|Type| +|--- |--- | +|platformName|string| +|minVersion|[VersionInfo](#versioninfo)| +|maxTestedVersion|[VersionInfo](#versioninfo)| ## PublisherDetails - Specifies the properties of the publisher details. - ----- - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    publisherName

    string

    Name of the publisher.

    publisherWebsite

    string

    Website of the publisher.

    - - +|Name|Type|Description| +|--- |--- |--- | +|publisherName|string|Name of the publisher.| +|publisherWebsite|string|Website of the publisher.| ## SeatAction - --- - - - - - - - - - - - - - -
    Name

    assign

    reclaim

    - - +|Name| +|--- | +|assign| +|reclaim| ## SeatDetails - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    NameTypeDescription

    assignedTo

    string

    Format = UPN (user@domain)

    dateAssigned

    datetime

    state

    SeatState

    productKey

    ProductKey

    - - +|Name|Type|Description| +|--- |--- |--- | +|assignedTo|string|Format = UPN (user@domain)| +|dateAssigned|datetime|| +|state|[SeatState](#seatstate)|| +|productKey|[ProductKey](#productkey)|| ## SeatDetailsResultSet - - ---- - - - - - - - - - - - - - - - - -
    NameType

    seats

    collection of SeatDetails

    continuationToken

    string

    - - +|Name|Type| +|--- |--- | +|seats|collection of [SeatDetails](#seatdetails)| +|continuationToken|string| ## SeatState - - --- - - - - - - - - - - - - - -
    Name

    active

    revoked

    - - +|Name| +|--- | +|active| +|revoked| ## SupportedProductPlatform - - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    NameType

    platformName

    string

    minVersion

    VersionInfo

    maxTestedVersion

    VersionInfo

    architectures

    collection of ProductArchitectures

    - - +|Name|Type| +|--- |--- | +|platformName|string| +|minVersion|[VersionInfo](#versioninfo)| +|maxTestedVersion|[VersionInfo](#versioninfo)| +|architectures|collection of [ProductArchitectures](#productarchitectures)| ## VersionInfo - - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    NameType

    major

    integer-32

    minor

    integer-32

    build

    integer-32

    revision

    integer-32

    +|Name|Type| +|--- |--- | +|major|integer-32| +|minor|integer-32| +|build|integer-32| +|revision|integer-32| diff --git a/windows/client-management/mdm/device-update-management.md b/windows/client-management/mdm/device-update-management.md index b41ccfecfa..2586da6859 100644 --- a/windows/client-management/mdm/device-update-management.md +++ b/windows/client-management/mdm/device-update-management.md @@ -356,57 +356,11 @@ If the **Specify intranet Microsoft update service location** policy is enabled, If the **Allow Telemetry** policy is enabled and the Options value is set to 0, then the **Defer upgrades by**, **Defer updates by** and **Pause Updates and Upgrades** settings have no effect. - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Update categoryMaximum deferralDeferral incrementUpdate type/notes

    OS upgrade

    8 months

    1 month

    Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5

    Update

    1 month

    1 week

    -Note -If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic. -
    -
      -
    • Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441
      • -
    • Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4
      • -
    • Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F
      • -
    • Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828
      • -
    • Tools - B4832BD8-E735-4761-8DAF-37F882276DAB
      • -
    • Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F
      • -
    • Update - CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83
      • -
    • Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0
      • -

    Other/cannot defer

    No deferral

    No deferral

    Any update category not enumerated above falls into this category.

    -

    Definition Update - E0789628-CE08-4437-BE74-2495B842F43B

    - +|Update category|Maximum deferral|Deferral increment|Update type/notes| +|--- |--- |--- |--- | +|OS upgrade|8 months|1 month|Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5| +|Update|1 month|1 week|
    **Note:**
    If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic.
  • Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441
  • Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4
  • Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F
  • Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828
  • Tools - B4832BD8-E735-4761-8DAF-37F882276DAB
  • Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F
  • Update -
  • CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83
  • Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0| +|Other/cannot defer|No deferral|No deferral|Any update category not enumerated above falls into this category.

    Definition Update - E0789628-CE08-4437-BE74-2495B842F43B| **Update/DeferUpgradePeriod** > [!NOTE] @@ -878,71 +832,16 @@ Here are the new policies added in Windows 10, version 1607 in [Policy CSP](pol Here's the list of corresponding Group Policy settings in HKLM\\Software\\Policies\\Microsoft\\Windows\\WindowsUpdate. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    GPO keyTypeValue

    BranchReadinessLevel

    REG_DWORD

    16: systems take Feature Updates on the Current Branch (CB) train

    -

    32: systems take Feature Updates on the Current Branch for Business

    -

    Other value or absent: receive all applicable updates (CB)

    DeferQualityUpdates

    REG_DWORD

    1: defer quality updates

    -

    Other value or absent: don’t defer quality updates

    DeferQualityUpdatesPeriodInDays

    REG_DWORD

    0-30: days to defer quality updates

    PauseQualityUpdates

    REG_DWORD

    1: pause quality updates

    -

    Other value or absent: don’t pause quality updates

    DeferFeatureUpdates

    REG_DWORD

    1: defer feature updates

    -

    Other value or absent: don’t defer feature updates

    DeferFeatureUpdatesPeriodInDays

    REG_DWORD

    0-180: days to defer feature updates

    PauseFeatureUpdates

    REG_DWORD

    1: pause feature updates

    -

    Other value or absent: don’t pause feature updates

    ExcludeWUDriversInQualityUpdate

    REG_DWORD

    1: exclude WU drivers

    -

    Other value or absent: offer WU drivers

    - - +|GPO key|Type|Value| +|--- |--- |--- | +|BranchReadinessLevel|REG_DWORD|16: systems take Feature Updates on the Current Branch (CB) train

    32: systems take Feature Updates on the Current Branch for Business

    Other value or absent: receive all applicable updates (CB)| +|DeferQualityUpdates|REG_DWORD|1: defer quality updates

    Other value or absent: don’t defer quality updates| +|DeferQualityUpdatesPeriodInDays|REG_DWORD|0-30: days to defer quality updates| +|PauseQualityUpdates|REG_DWORD|1: pause quality updates

    Other value or absent: don’t pause quality updates| +|DeferFeatureUpdates|REG_DWORD|1: defer feature updates

    Other value or absent: don’t defer feature updates| +|DeferFeatureUpdatesPeriodInDays|REG_DWORD|0-180: days to defer feature updates| +|PauseFeatureUpdates|REG_DWORD|1: pause feature updates

    Other value or absent: don’t pause feature updates| +|ExcludeWUDriversInQualityUpdate|REG_DWORD|1: exclude WU drivers

    Other value or absent: offer WU drivers| Here's the list of older policies that are still supported for backward compatibility. You can use these older policies for Windows 10, version 1511 devices. diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index 797a8ff619..592daf59ec 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -328,220 +328,50 @@ If there's no infinite schedule set, then a 24-hour schedule is created and sche **Valid poll schedule: sigmoid polling schedule with infinite schedule (Recommended).** - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Schedule nameSchedule set by the serverActual value queried on device

    IntervalForFirstSetOfRetries

    15

    15

    NumberOfFirstRetries

    5

    5

    IntervalForSecondSetOfRetries

    60

    60

    NumberOfSecondRetries

    10

    10

    IntervalForRemainingScheduledRetries

    1440

    1440

    NumberOfRemainingScheduledRetries

    0

    0

    +|Schedule name|Schedule set by the server|Actual value queried on device| +|--- |--- |--- | +|IntervalForFirstSetOfRetries|15|15| +|NumberOfFirstRetries|5|5| +|IntervalForSecondSetOfRetries|60|60| +|NumberOfSecondRetries|10|10| +|IntervalForRemainingScheduledRetries|1440|1440| +|NumberOfRemainingScheduledRetries|0|0| - +**Valid poll schedule: initial enrollment only [no infinite schedule]** -**Valid poll schedule: initial enrollment only \[no infinite schedule\]** - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Schedule nameSchedule set by the serverActual value queried on device

    IntervalForFirstSetOfRetries

    15

    15

    NumberOfFirstRetries

    5

    5

    IntervalForSecondSetOfRetries

    60

    60

    NumberOfSecondRetries

    10

    10

    IntervalForRemainingScheduledRetries

    0

    0

    NumberOfRemainingScheduledRetries

    0

    0

    - - +|Schedule name|Schedule set by the server|Actual value queried on device| +|--- |--- |--- | +|IntervalForFirstSetOfRetries|15|15| +|NumberOfFirstRetries|5|5| +|IntervalForSecondSetOfRetries|60|60| +|NumberOfSecondRetries|10|10| +|IntervalForRemainingScheduledRetries|0|0| +|NumberOfRemainingScheduledRetries|0|0| **Invalid poll schedule: disable all poll schedules** > [!NOTE] > Disabling poll schedules results in UNDEFINED behavior and enrollment may fail if poll schedules are all set to zero. +|Schedule name|Schedule set by the server|Actual value queried on device| +|--- |--- |--- | +|IntervalForFirstSetOfRetries|0|0| +|NumberOfFirstRetries|0|0| +|IntervalForSecondSetOfRetries|0|0| +|NumberOfSecondRetries|0|0| +|IntervalForRemainingScheduledRetries|0|0| +|NumberOfRemainingScheduledRetries|0|0| - - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Schedule nameSchedule set by the serverActual value queried on device

    IntervalForFirstSetOfRetries

    0

    0

    NumberOfFirstRetries

    0

    0

    IntervalForSecondSetOfRetries

    0

    0

    NumberOfSecondRetries

    0

    0

    IntervalForRemainingScheduledRetries

    0

    0

    NumberOfRemainingScheduledRetries

    0

    0

    - - - **Invalid poll schedule: two infinite schedules** - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Schedule nameSchedule set by serverActual schedule set on deviceActual experience

    IntervalForFirstSetOfRetries

    15

    15

    Device polls

    NumberOfFirstRetries

    5

    5

    Device polls

    IntervalForSecondSetOfRetries

    1440

    1440

    Device polls the server once in 24 hours

    NumberOfSecondRetries

    0

    0

    Device polls the server once in 24 hours

    IntervalForRemainingScheduledRetries

    1440

    0

    Third schedule is disabled

    NumberOfRemainingScheduledRetries

    0

    0

    Third schedule is disabled

    - - +|Schedule name|Schedule set by server|Actual schedule set on device|Actual experience| +|--- |--- |--- |--- | +|IntervalForFirstSetOfRetries|15|15|Device polls| +|NumberOfFirstRetries|5|5|Device polls| +|IntervalForSecondSetOfRetries|1440|1440|Device polls the server once in 24 hours| +|NumberOfSecondRetries|0|0|Device polls the server once in 24 hours| +|IntervalForRemainingScheduledRetries|1440|0|Third schedule is disabled| +|NumberOfRemainingScheduledRetries|0|0|Third schedule is disabled| If the device was previously enrolled in MDM with polling schedule configured using the registry key values directly, the MDM provider that supports using DMClient CSP to update polling schedule must first send an Add command to add a **./Vendor/MSFT/DMClient/Enrollment/<ProviderID>/Poll** node before it sends a Get/Replace command to query or update polling parameters using the DMClient CSP @@ -654,58 +484,17 @@ Supported operation is Get. The status error mapping is listed below. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    StatusDescription

    0

    Success

    1

    Failure: invalid PFN

    2

    Failure: invalid or expired device authentication with MSA

    3

    Failure: WNS client registration failed due to an invalid or revoked PFN

    4

    Failure: no Channel URI assigned

    5

    Failure: Channel URI has expired

    6

    Failure: Channel URI failed to be revoked

    7

    Failure: push notification received, but unable to establish an OMA-DM session due to power or connectivity limitations.

    8

    Unknown error

    - - +|Status|Description| +|--- |--- | +|0|Success| +|1|Failure: invalid PFN| +|2|Failure: invalid or expired device authentication with MSA| +|3|Failure: WNS client registration failed due to an invalid or revoked PFN| +|4|Failure: no Channel URI assigned| +|5|Failure: Channel URI has expired| +|6|Failure: Channel URI failed to be revoked| +|7|Failure: push notification received, but unable to establish an OMA-DM session due to power or connectivity limitations.| +|8|Unknown error| **Provider/*ProviderID*/CustomEnrollmentCompletePage** Optional. Added in Windows 10, version 1703. diff --git a/windows/client-management/mdm/dmprocessconfigxmlfiltered.md b/windows/client-management/mdm/dmprocessconfigxmlfiltered.md index ece8bfd765..1dbe4932a9 100644 --- a/windows/client-management/mdm/dmprocessconfigxmlfiltered.md +++ b/windows/client-management/mdm/dmprocessconfigxmlfiltered.md @@ -92,42 +92,13 @@ If **DMProcessConfigXMLFiltered** retrieves a document, the *pbstrXmlOut* holds Returns the standard **HRESULT** value **S\_OK** to indicate success. The following table shows more error codes that can be returned: - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Return codeDescription

    CONFIG_E_OBJECTBUSY

    Another instance of the configuration management service is currently running.

    CONFIG_E_ENTRYNOTFOUND

    No metabase entry was found.

    CONFIG_E_CSPEXCEPTION

    An exception occurred in one of the configuration service providers.

    CONFIG_E_TRANSACTIONINGFAILURE

    A configuration service provider failed to roll back properly. The affected settings might be in an unknown state.

    CONFIG_E_BAD_XML

    The XML input is invalid or malformed.

    - - +|Return code|Description| +|--- |--- | +|**CONFIG_E_OBJECTBUSY**|Another instance of the configuration management service is currently running.| +|**CONFIG_E_ENTRYNOTFOUND**|No metabase entry was found.| +|**CONFIG_E_CSPEXCEPTION**|An exception occurred in one of the configuration service providers.| +|**CONFIG_E_TRANSACTIONINGFAILURE**|A configuration service provider failed to roll back properly. The affected settings might be in an unknown state.| +|**CONFIG_E_BAD_XML**|The XML input is invalid or malformed.| ## Remarks @@ -190,38 +161,14 @@ if ( bstr != NULL ) ## Requirements - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Minimum supported client

    None supported

    Minimum supported server

    None supported

    Minimum supported phone

    Windows Phone 8.1

    Header

    Dmprocessxmlfiltered.h

    Library

    Dmprocessxmlfiltered.lib

    DLL

    Dmprocessxmlfiltered.dll

    +|Requirement|Support| +|--- |--- | +|Minimum supported client|None supported| +|Minimum supported server|None supported| +|Minimum supported phone|Windows Phone 8.1| +|Header|Dmprocessxmlfiltered.h| +|Library|Dmprocessxmlfiltered.lib| +|DLL|Dmprocessxmlfiltered.dll| ## See also diff --git a/windows/client-management/mdm/enterpriseassignedaccess-csp.md b/windows/client-management/mdm/enterpriseassignedaccess-csp.md index ee057f96bd..19e286781b 100644 --- a/windows/client-management/mdm/enterpriseassignedaccess-csp.md +++ b/windows/client-management/mdm/enterpriseassignedaccess-csp.md @@ -631,110 +631,30 @@ Supported operations are Get and Replace. **Theme/ThemeAccentColorID** The accent color to apply as the foreground color for tiles, controls, and other visual elements on the device. The following table shows the possible values. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ValueDescription

    0

    Lime

    1

    Green

    2

    Emerald

    3

    Teal (Viridian)

    4

    Cyan (Blue)

    5

    Cobalt

    6

    Indigo

    7

    Violet (Purple)

    8

    Pink

    9

    Magenta

    10

    Crimson

    11

    Red

    12

    Orange (Mango)

    13

    Amber

    14

    Yellow

    15

    Brown

    16

    Olive

    17

    Steel

    18

    Mauve

    19

    Sienna

    101 through 104

    Optional colors, as defined by the OEM

    151

    Custom accent color for Enterprise

    - - +|Value|Description| +|--- |--- | +|0|Lime| +|1|Green| +|2|Emerald| +|3|Teal (Viridian)| +|4|Cyan (Blue)| +|5|Cobalt| +|6|Indigo| +|7|Violet (Purple)| +|8|Pink| +|9|Magenta| +|10|Crimson| +|11|Red| +|12|Orange (Mango)| +|13|Amber| +|14|Yellow| +|15|Brown| +|16|Olive| +|17|Steel| +|18|Mauve| +|19|Sienna| +|101 through 104|Optional colors, as defined by the OEM| +|151|Custom accent color for Enterprise| Supported operations are Get and Replace. @@ -758,433 +678,111 @@ An integer that specifies the time zone of the device. The following table shows Supported operations are Get and Replace. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ValueTime zone

    0

    UTC-12 International Date Line West

    100

    UTC+13 Samoa

    110

    UTC-11 Coordinated Universal Time-11

    200

    UTC-10 Hawaii

    300

    UTC-09 Alaska

    400

    UTC-08 Pacific Time (US & Canada)

    410

    UTC-08 Baja California

    500

    UTC-07 Mountain Time (US & Canada)

    510

    UTC-07 Chihuahua, La Paz, Mazatlan

    520

    UTC-07 Arizona

    600

    UTC-06 Saskatchewan

    610

    UTC-06 Central America

    620

    UTC-06 Central Time (US & Canada)

    630

    UTC-06 Guadalajara, Mexico City, Monterrey

    700

    UTC-05 Eastern Time (US & Canada)

    710

    UTC-05 Bogota, Lima, Quito

    720

    UTC-05 Indiana (East)

    800

    UTC-04 Atlantic Time (Canada)

    810

    UTC-04 Cuiaba

    820

    UTC-04 Santiago

    830

    UTC-04 Georgetown, La Paz, Manaus, San Juan

    840

    UTC-04 Caracas

    850

    UTC-04 Asuncion

    900

    UTC-03:30 Newfoundland

    910

    UTC-03 Brasilia

    920

    UTC-03 Greenland

    930

    UTC-03 Montevideo

    940

    UTC-03 Cayenne, Fortaleza

    950

    UTC-03 Buenos Aires

    960

    UTC-03 Salvador

    1000

    UTC-02 Mid-Atlantic

    1010

    UTC-02 Coordinated Universal Time-02

    1100

    UTC-01 Azores

    1110

    UTC-01 Cabo Verde

    1200

    UTC Dublin, Edinburgh, Lisbon, London

    1210

    UTC Monrovia, Reykjavik

    1220

    UTC Casablanca

    1230

    UTC Coordinated Universal Time

    1300

    UTC+01 Belgrade, Bratislava, Budapest, Ljubljana, Prague

    1310

    UTC+01 Sarajevo, Skopje, Warsaw, Zagreb

    1320

    UTC+01 Brussels, Copenhagen, Madrid, Paris

    1330

    UTC+01 West Central Africa

    1340

    UTC+01 Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna

    1350

    UTC+01 Windhoek

    1360

    UTC+01 Tripoli

    1400

    UTC+02 E. Europe

    1410

    UTC+02 Cairo

    1420

    UTC+02 Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius

    1430

    UTC+02 Athens, Bucharest

    1440

    UTC+02 Jerusalem

    1450

    UTC+02 Amman

    1460

    UTC+02 Beirut

    1470

    UTC+02 Harare, Pretoria

    1480

    UTC+02 Damascus

    1490

    UTC+02 Istanbul

    1500

    UTC+03 Kuwait, Riyadh

    1510

    UTC+03 Baghdad

    1520

    UTC+03 Nairobi

    1530

    UTC+03 Kaliningrad, Minsk

    1540

    UTC+04 Moscow, St. Petersburg, Volgograd

    1550

    UTC+03 Tehran

    1600

    UTC+04 Abu Dhabi, Muscat

    1610

    UTC+04 Baku

    1620

    UTC+04 Yerevan

    1630

    UTC+04 Kabul

    1640

    UTC+04 Tbilisi

    1650

    UTC+04 Port Louis

    1700

    UTC+06 Ekaterinburg

    1710

    UTC+05 Tashkent

    1720

    UTC+05 Chennai, Kolkata, Mumbai, New Delhi

    1730

    UTC+05 Sri Jayawardenepura

    1740

    UTC+05 Kathmandu

    1750

    UTC+05 Islamabad, Karachi

    1800

    UTC+06 Astana

    1810

    UTC+07 Novosibirsk

    1820

    UTC+06 Yangon (Rangoon)

    1830

    UTC+06 Dhaka

    1900

    UTC+08 Krasnoyarsk

    1910

    UTC+07 Bangkok, Hanoi, Jakarta

    1900

    UTC+08 Krasnoyarsk

    2000

    UTC+08 Beijing, Chongqing, Hong Kong SAR, Urumqi

    2010

    UTC+09 Irkutsk

    2020

    UTC+08 Kuala Lumpur, Singapore

    2030

    UTC+08 Taipei

    2040

    UTC+08 Perth

    2050

    UTC+08 Ulaanbaatar

    2100

    UTC+09 Seoul

    2110

    UTC+09 Osaka, Sapporo, Tokyo

    2120

    UTC+10 Yakutsk

    2130

    UTC+09 Darwin

    2140

    UTC+09 Adelaide

    2200

    UTC+10 Canberra, Melbourne, Sydney

    2210

    UTC+10 Brisbane

    2220

    UTC+10 Hobart

    2230

    UTC+11 Vladivostok

    2240

    UTC+10 Guam, Port Moresby

    2300

    UTC+11 Solomon Is., New Caledonia

    2310

    UTC+12 Magadan

    2400

    UTC+12 Fiji

    2410

    UTC+12 Auckland, Wellington

    2420

    UTC+12 Petropavlovsk-Kamchatsky

    2430

    UTC+12 Coordinated Universal Time +12

    2500

    UTC+13 Nuku'alofa

    - +|Value|Time zone| +|--- |--- | +|0|UTC-12 International Date Line West| +|100|UTC+13 Samoa| +|110|UTC-11 Coordinated Universal Time-11| +|200|UTC-10 Hawaii| +|300|UTC-09 Alaska| +|400|UTC-08 Pacific Time (US & Canada)| +|410|UTC-08 Baja California| +|500|UTC-07 Mountain Time (US & Canada)| +|510|UTC-07 Chihuahua, La Paz, Mazatlan| +|520|UTC-07 Arizona| +|600|UTC-06 Saskatchewan| +|610|UTC-06 Central America| +|620|UTC-06 Central Time (US & Canada)| +|630|UTC-06 Guadalajara, Mexico City, Monterrey| +|700|UTC-05 Eastern Time (US & Canada)| +|710|UTC-05 Bogota, Lima, Quito| +|720|UTC-05 Indiana (East)| +|800|UTC-04 Atlantic Time (Canada)| +|810|UTC-04 Cuiaba| +|820|UTC-04 Santiago| +|830|UTC-04 Georgetown, La Paz, Manaus, San Juan| +|840|UTC-04 Caracas| +|850|UTC-04 Asuncion| +|900|UTC-03:30 Newfoundland| +|910|UTC-03 Brasilia| +|920|UTC-03 Greenland| +|930|UTC-03 Montevideo| +|940|UTC-03 Cayenne, Fortaleza| +|950|UTC-03 Buenos Aires| +|960|UTC-03 Salvador| +|1000|UTC-02 Mid-Atlantic| +|1010|UTC-02 Coordinated Universal Time-02| +|1100|UTC-01 Azores| +|1110|UTC-01 Cabo Verde| +|1200|UTC Dublin, Edinburgh, Lisbon, London| +|1210|UTC Monrovia, Reykjavik| +|1220|UTC Casablanca| +|1230|UTC Coordinated Universal Time| +|1300|UTC+01 Belgrade, Bratislava, Budapest, Ljubljana, Prague| +|1310|UTC+01 Sarajevo, Skopje, Warsaw, Zagreb| +|1320|UTC+01 Brussels, Copenhagen, Madrid, Paris| +|1330|UTC+01 West Central Africa| +|1340|UTC+01 Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna| +|1350|UTC+01 Windhoek| +|1360|UTC+01 Tripoli| +|1400|UTC+02 E. Europe| +|1410|UTC+02 Cairo| +|1420|UTC+02 Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius| +|1430|UTC+02 Athens, Bucharest| +|1440|UTC+02 Jerusalem| +|1450|UTC+02 Amman| +|1460|UTC+02 Beirut| +|1470|UTC+02 Harare, Pretoria| +|1480|UTC+02 Damascus| +|1490|UTC+02 Istanbul| +|1500|UTC+03 Kuwait, Riyadh| +|1510|UTC+03 Baghdad| +|1520|UTC+03 Nairobi| +|1530|UTC+03 Kaliningrad, Minsk| +|1540|UTC+04 Moscow, St. Petersburg, Volgograd| +|1550|UTC+03 Tehran| +|1600|UTC+04 Abu Dhabi, Muscat| +|1610|UTC+04 Baku| +|1620|UTC+04 Yerevan| +|1630|UTC+04 Kabul| +|1640|UTC+04 Tbilisi| +|1650|UTC+04 Port Louis| +|1700|UTC+06 Ekaterinburg| +|1710|UTC+05 Tashkent| +|1720|UTC+05 Chennai, Kolkata, Mumbai, New Delhi| +|1730|UTC+05 Sri Jayawardenepura| +|1740|UTC+05 Kathmandu| +|1750|UTC+05 Islamabad, Karachi| +|1800|UTC+06 Astana| +|1810|UTC+07 Novosibirsk| +|1820|UTC+06 Yangon (Rangoon)| +|1830|UTC+06 Dhaka| +|1900|UTC+08 Krasnoyarsk| +|1910|UTC+07 Bangkok, Hanoi, Jakarta| +|1900|UTC+08 Krasnoyarsk| +|2000|UTC+08 Beijing, Chongqing, Hong Kong SAR, Urumqi| +|2010|UTC+09 Irkutsk| +|2020|UTC+08 Kuala Lumpur, Singapore| +|2030|UTC+08 Taipei| +|2040|UTC+08 Perth| +|2050|UTC+08 Ulaanbaatar| +|2100|UTC+09 Seoul| +|2110|UTC+09 Osaka, Sapporo, Tokyo| +|2120|UTC+10 Yakutsk| +|2130|UTC+09 Darwin| +|2140|UTC+09 Adelaide| +|2200|UTC+10 Canberra, Melbourne, Sydney| +|2210|UTC+10 Brisbane| +|2220|UTC+10 Hobart| +|2230|UTC+11 Vladivostok| +|2240|UTC+10 Guam, Port Moresby| +|2300|UTC+11 Solomon Is., New Caledonia| +|2310|UTC+12 Magadan| +|2400|UTC+12 Fiji| +|2410|UTC+12 Auckland, Wellington| +|2420|UTC+12 Petropavlovsk-Kamchatsky| +|2430|UTC+12 Coordinated Universal Time +12| +|2500|UTC+13 Nuku'alofa| **Locale/Language/** The culture code that identifies the language to display on a device, and specifies the formatting of numbers, currencies, time, and dates. For language values, see [Locale IDs Assigned by Microsoft](/openspecs/windows_protocols/ms-lcid/a9eac961-e77d-41a6-90a5-ce1a8b0cdb9c). @@ -1469,212 +1067,45 @@ The following example shows how to set the language. ## Product IDs in Windows 10 Mobile - The following table lists the product ID and AUMID for each app that is included in Windows 10 Mobile. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    AppProduct IDAUMID
    Alarms and clock44F7D2B4-553D-4BEC-A8B7-634CE897ED5FMicrosoft.WindowsAlarms_8wekyb3d8bbwe!App
    CalculatorB58171C6-C70C-4266-A2E8-8F9C994F4456Microsoft.WindowsCalculator_8wekyb3d8bbwe!App
    CameraF0D8FEFD-31CD-43A1-A45A-D0276DB069F1Microsoft.WindowsCamera_8wekyb3d8bbwe!App
    Contact Support0DB5FCFF-4544-458A-B320-E352DFD9CA2BWindows.ContactSupport_cw5n1h2txyewy!App
    CortanaFD68DCF4-166F-4C55-A4CA-348020F71B94Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI
    ExcelEAD3E7C0-FAE6-4603-8699-6A448138F4DCMicrosoft.Office.Excel_8wekyb3d8bbwe!microsoft.excel
    Facebook82A23635-5BD9-DF11-A844-00237DE2DB9EMicrosoft.MSFacebook_8wekyb3d8bbwe!x82a236355bd9df11a84400237de2db9e
    File ExplorerC5E2524A-EA46-4F67-841F-6A9465D9D515c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy!App
    FM RadioF725010E-455D-4C09-AC48-BCDEF0D4B626N/A
    Get StartedB3726308-3D74-4A14-A84C-867C8C735C3CMicrosoft.Getstarted_8wekyb3d8bbwe!App
    Groove MusicD2B6A184-DA39-4C9A-9E0A-8B589B03DEC0Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic
    MapsED27A07E-AF57-416B-BC0C-2596B622EF7DMicrosoft.WindowsMaps_8wekyb3d8bbwe!App
    Messaging27E26F40-E031-48A6-B130-D1F20388991AMicrosoft.Messaging_8wekyb3d8bbwe!x27e26f40ye031y48a6yb130yd1f20388991ax
    Microsoft Edge395589FB-5884-4709-B9DF-F7D558663FFDMicrosoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge
    Money1E0440F1-7ABF-4B9A-863D-177970EEFB5EMicrosoft.BingFinance_8wekyb3d8bbwe!AppexFinance
    Movies and TV6AFFE59E-0467-4701-851F-7AC026E21665Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo
    News9C3E8CAD-6702-4842-8F61-B8B33CC9CAF1Microsoft.BingNews_8wekyb3d8bbwe!AppexNews
    OneDriveAD543082-80EC-45BB-AA02-FFE7F4182BA8Microsoft.MicrosoftSkydrive_8wekyb3d8bbwe!App
    OneNoteCA05B3AB-F157-450C-8C49-A1F127F5E71DMicrosoft.Office.OneNote_8wekyb3d8bbwe!microsoft.onenoteim
    Outlook Calendar

    A558FEBA-85D7-4665-B5D8-A2FF9C19799B

    Microsoft.WindowsCommunicationsApps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar

    Outlook Mail

    A558FEBA-85D7-4665-B5D8-A2FF9C19799B

    Microsoft.WindowsCommunicationsApps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail

    People60BE1FB8-3291-4B21-BD39-2221AB166481Microsoft.People_8wekyb3d8bbwe!xb94d6231y84ddy49a8yace3ybc955e769e85x
    Phone (dialer)F41B5D0E-EE94-4F47-9CFE-3D3934C5A2C7Microsoft.CommsPhone_8wekyb3d8bbwe!App
    PhotosFCA55E1B-B9A4-4289-882F-084EF4145005Microsoft.Windows.Photos_8wekyb3d8bbwe!App
    PodcastsC3215724-B279-4206-8C3E-61D1A9D63ED3Microsoft.MSPodcast_8wekyb3d8bbwe!xc3215724yb279y4206y8c3ey61d1a9d63ed3x
    PowerPointB50483C4-8046-4E1B-81BA-590B24935798Microsoft.Office.PowerPoint_8wekyb3d8bbwe!microsoft.pptim
    Settings2A4E62D8-8809-4787-89F8-69D0F01654FB2a4e62d8-8809-4787-89f8-69d0f01654fb_8wekyb3d8bbwe!App
    SkypeC3F8E570-68B3-4D6A-BDBB-C0A3F4360A51Microsoft.SkypeApp_kzf8qxf38zg5c!Skype.AppId
    Skype Video27E26F40-E031-48A6-B130-D1F20388991AMicrosoft.Messaging_8wekyb3d8bbwe!App
    Sports0F4C8C7E-7114-4E1E-A84C-50664DB13B17Microsoft.BingSports_8wekyb3d8bbwe!AppexSports
    Storage5B04B775-356B-4AA0-AAF8-6491FFEA564DN/A
    Store7D47D89A-7900-47C5-93F2-46EB6D94C159Microsoft.WindowsStore_8wekyb3d8bbwe!App
    Voice recorder7311B9C5-A4E9-4C74-BC3C-55B06BA95AD0Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
    Wallet587A4577-7868-4745-A29E-F996203F1462Microsoft.MicrosoftWallet_8wekyb3d8bbwe!App
    Weather63C2A117-8604-44E7-8CEF-DF10BE3A57C8Microsoft.BingWeather_8wekyb3d8bbwe!App
    Windows Feedback7604089D-D13F-4A2D-9998-33FC02B63CE3Microsoft.WindowsFeedback_8wekyb3d8bbwe!App
    Word258F115C-48F4-4ADB-9A68-1387E634459BMicrosoft.Office.Word_8wekyb3d8bbwe!microsoft.word
    XboxB806836F-EEBE-41C9-8669-19E243B81B83Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp
    \ No newline at end of file +|App|Product ID|AUMID| +|--- |--- |--- | +|Alarms and clock|44F7D2B4-553D-4BEC-A8B7-634CE897ED5F|Microsoft.WindowsAlarms_8wekyb3d8bbwe!App| +|Calculator|B58171C6-C70C-4266-A2E8-8F9C994F4456|Microsoft.WindowsCalculator_8wekyb3d8bbwe!App| +|Camera|F0D8FEFD-31CD-43A1-A45A-D0276DB069F1|Microsoft.WindowsCamera_8wekyb3d8bbwe!App| +|Contact Support|0DB5FCFF-4544-458A-B320-E352DFD9CA2B|Windows.ContactSupport_cw5n1h2txyewy!App| +|Cortana|FD68DCF4-166F-4C55-A4CA-348020F71B94|Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI| +|Excel|EAD3E7C0-FAE6-4603-8699-6A448138F4DC|Microsoft.Office.Excel_8wekyb3d8bbwe!microsoft.excel| +|Facebook|82A23635-5BD9-DF11-A844-00237DE2DB9E|Microsoft.MSFacebook_8wekyb3d8bbwe!x82a236355bd9df11a84400237de2db9e| +|File Explorer|C5E2524A-EA46-4F67-841F-6A9465D9D515|c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy!App| +|FM Radio|F725010E-455D-4C09-AC48-BCDEF0D4B626|N/A| +|Get Started|B3726308-3D74-4A14-A84C-867C8C735C3C|Microsoft.Getstarted_8wekyb3d8bbwe!App| +|Groove Music|D2B6A184-DA39-4C9A-9E0A-8B589B03DEC0|Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic| +|Maps|ED27A07E-AF57-416B-BC0C-2596B622EF7D|Microsoft.WindowsMaps_8wekyb3d8bbwe!App| +|Messaging|27E26F40-E031-48A6-B130-D1F20388991A|Microsoft.Messaging_8wekyb3d8bbwe!x27e26f40ye031y48a6yb130yd1f20388991ax| +|Microsoft Edge|395589FB-5884-4709-B9DF-F7D558663FFD|Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge| +|Money|1E0440F1-7ABF-4B9A-863D-177970EEFB5E|Microsoft.BingFinance_8wekyb3d8bbwe!AppexFinance| +|Movies and TV|6AFFE59E-0467-4701-851F-7AC026E21665|Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo| +|News|9C3E8CAD-6702-4842-8F61-B8B33CC9CAF1|Microsoft.BingNews_8wekyb3d8bbwe!AppexNews| +|OneDrive|AD543082-80EC-45BB-AA02-FFE7F4182BA8|Microsoft.MicrosoftSkydrive_8wekyb3d8bbwe!App| +|OneNote|CA05B3AB-F157-450C-8C49-A1F127F5E71D|Microsoft.Office.OneNote_8wekyb3d8bbwe!microsoft.onenoteim| +|Outlook Calendar|A558FEBA-85D7-4665-B5D8-A2FF9C19799B|Microsoft.WindowsCommunicationsApps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar| +|Outlook Mail|A558FEBA-85D7-4665-B5D8-A2FF9C19799B|Microsoft.WindowsCommunicationsApps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail| +|People|60BE1FB8-3291-4B21-BD39-2221AB166481|Microsoft.People_8wekyb3d8bbwe!xb94d6231y84ddy49a8yace3ybc955e769e85x| +|Phone (dialer)|F41B5D0E-EE94-4F47-9CFE-3D3934C5A2C7|Microsoft.CommsPhone_8wekyb3d8bbwe!App| +|Photos|FCA55E1B-B9A4-4289-882F-084EF4145005|Microsoft.Windows.Photos_8wekyb3d8bbwe!App| +|Podcasts|C3215724-B279-4206-8C3E-61D1A9D63ED3|Microsoft.MSPodcast_8wekyb3d8bbwe!xc3215724yb279y4206y8c3ey61d1a9d63ed3x| +|PowerPoint|B50483C4-8046-4E1B-81BA-590B24935798|Microsoft.Office.PowerPoint_8wekyb3d8bbwe!microsoft.pptim| +|Settings|2A4E62D8-8809-4787-89F8-69D0F01654FB|2a4e62d8-8809-4787-89f8-69d0f01654fb_8wekyb3d8bbwe!App| +|Skype|C3F8E570-68B3-4D6A-BDBB-C0A3F4360A51|Microsoft.SkypeApp_kzf8qxf38zg5c!Skype.AppId| +|Skype Video|27E26F40-E031-48A6-B130-D1F20388991A|Microsoft.Messaging_8wekyb3d8bbwe!App| +|Sports|0F4C8C7E-7114-4E1E-A84C-50664DB13B17|Microsoft.BingSports_8wekyb3d8bbwe!AppexSports| +|Storage|5B04B775-356B-4AA0-AAF8-6491FFEA564D|N/A| +|Store|7D47D89A-7900-47C5-93F2-46EB6D94C159|Microsoft.WindowsStore_8wekyb3d8bbwe!App| +|Voice recorder|7311B9C5-A4E9-4C74-BC3C-55B06BA95AD0|Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App| +|Wallet|587A4577-7868-4745-A29E-F996203F1462|Microsoft.MicrosoftWallet_8wekyb3d8bbwe!App| +|Weather|63C2A117-8604-44E7-8CEF-DF10BE3A57C8|Microsoft.BingWeather_8wekyb3d8bbwe!App| +|Windows Feedback|7604089D-D13F-4A2D-9998-33FC02B63CE3|Microsoft.WindowsFeedback_8wekyb3d8bbwe!App| +|Word|258F115C-48F4-4ADB-9A68-1387E634459B|Microsoft.Office.Word_8wekyb3d8bbwe!microsoft.word| +|Xbox|B806836F-EEBE-41C9-8669-19E243B81B83|Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp| diff --git a/windows/client-management/mdm/enterprisedataprotection-csp.md b/windows/client-management/mdm/enterprisedataprotection-csp.md index 3b596b6652..b999a6dbee 100644 --- a/windows/client-management/mdm/enterprisedataprotection-csp.md +++ b/windows/client-management/mdm/enterprisedataprotection-csp.md @@ -300,36 +300,9 @@ A read-only bit mask that indicates the current state of WIP on the Device. The Suggested values: - ------- - - - - - - - - - - - - - - - - -

    Reserved for future use

    WIP mandatory settings

    -

    Set = 1

    -

    Not set = 0

    Reserved for future use

    AppLocker configured

    -

    Yes = 1

    -

    No = 0

    WIP on = 1

    -

    WIP off = 0

    4

    3

    2

    1

    0

    +|Reserved for future use|WIP mandatory settings
    Set = 1
    Not set = 0|Reserved for future use|AppLocker configured
    Yes = 1
    No = 0|WIP on = 1
    WIP off = 0| +|--- |--- |--- |--- |--- | +|4|3|2|1|0| diff --git a/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md b/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md index 78f0b5cb28..70beb72229 100644 --- a/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisedesktopappmanagement-csp.md @@ -259,41 +259,12 @@ The following table describes the fields in the previous sample: The following table describes the fields in the previous sample: - ---- - - - - - - - - - - - - - - - - +|Name|Description| +|--- |--- | +|Add|This is required to precede the Exec command.
  • CmdID - Input value used to reference the request. Responses includes this value, which can be use to match the request and response.
  • LocURI - Path to Win32 CSP command processor, including the Product ID (in this example, 1803A630-3C38-4D2B-9B9A-0CB37243539C) property escaped for XML formatting.| +|Exec|The Exec node includes the parameters and properties requires to locate, download, validate and perform product installation.
  • CmdID - Input value used to reference the request. Responses will include this value which can be used to match request and response.
  • LocURI - Path to Win32 CSP command processor, including the Product ID (in this example, 1803A630-3C38-4D2B-9B9A-0CB37243539C) property escaped for XML formatting.
  • Data - The Data node contains an embedded XML, of type “MsiInstallJob”
  • MsiInstallJob - Contains all information required for the successful download, validation and execution of the MSI installation process (see section at the end of this document for details on this embedded data object).|
    • NameDescription
    AddThis is required to precede the Exec command. -
      -
    • CmdID - Input value used to reference the request. Responses includes this value, which can be use to match the request and response.
      • -
    • LocURI - Path to Win32 CSP command processor, including the Product ID (in this example, 1803A630-3C38-4D2B-9B9A-0CB37243539C) property escaped for XML formatting.
      • -
    ExecThe Exec node includes the parameters and properties requires to locate, download, validate and perform product installation. -
      -
    • CmdID - Input value used to reference the request. Responses will include this value which can be used to match request and response.
      • -
    • LocURI - Path to Win32 CSP command processor, including the Product ID (in this example, 1803A630-3C38-4D2B-9B9A-0CB37243539C) property escaped for XML formatting.
      • -
    • Data - The Data node contains an embedded XML, of type “MsiInstallJob”
      • -
    • MsiInstallJob - Contains all information required for the successful download, validation and execution of the MSI installation process (see section at the end of this document for details on this embedded data object).
      • -
    - - > [!Note] > Information status on the MSI job will be reported using standard OMA-DM notification mechanism. The status reported is represented using standard MSIEXEC return codes as HRESULT as defined in the MSIEXEC topic on Microsoft TechNet at [Msiexec (command-line options)](https://technet.microsoft.com/library/cc759262%28v=ws.10%29.aspx). @@ -353,70 +324,20 @@ The following table describes the fields in the previous sample: The following table MsiInstallJob describes the schema elements. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ElementDescription
    MsiInstallJobroot element -

    "Attribute: "id - the application identifier of the application being installed

    Productchild element of MsiInstallJob -

    Attribute: “Version” – string representation of application version

    Downloadchild element of Product. Container for download configuration information.
    ContentURLListchild element of Download. Contains list of 1 or more content download URL locators in the form of ContentURL elements.
    ContentURLLocation content should be downloaded from. Must be a property formatted URL that points to the .MSI file.
    ValidationContains information used to validate contend authenticity. • FileHash – SHA256 hash value of file content
    FileHashSHA256 hash value of file content
    Enforcementinstallation properties to be used when installing this MSI
    CommandLineCommand-line options to be used when calling MSIEXEC.exe
    TimeOutAmount of time, in minutes that the installation process can run before the installer considers the installation may have failed and no longer monitors the installation operation.
    RetryCountThe number of times the download and installation operation will be retried before the installation will be marked as failed.
    RetryIntervalAmount of time, in minutes between retry operations.
    +|Element|Description| +|--- |--- | +|MsiInstallJob|root element
    "Attribute: "id - the application identifier of the application being installed| +|Product|child element of MsiInstallJob
    Attribute: “Version” – string representation of application version| +|Download|child element of Product. Container for download configuration information.| +|ContentURLList|child element of Download. Contains list of 1 or more content download URL locators in the form of ContentURL elements.| +|ContentURL|Location content should be downloaded from. Must be a property formatted URL that points to the .MSI file.| +|Validation|Contains information used to validate contend authenticity. • FileHash – SHA256 hash value of file content| +|FileHash|SHA256 hash value of file content| +|Enforcement|installation properties to be used when installing this MSI| +|CommandLine|Command-line options to be used when calling MSIEXEC.exe| +|TimeOut|Amount of time, in minutes that the installation process can run before the installer considers the installation may have failed and no longer monitors the installation operation.| +|RetryCount|The number of times the download and installation operation will be retried before the installation will be marked as failed.| +|RetryInterval|Amount of time, in minutes between retry operations.| @@ -453,85 +374,17 @@ The following tables shows how app targeting and MSI package type (per-user, per For Intune standalone environment, the MSI package will determine the MSI execution context. - ------ - - - - - - - - - - - - - - - - - - - - - - -
    TargetPer-user MSIPer-machine MSIDual mode MSI
    UserInstall the MSI per-user -

    LocURI contains a User prefix, such as ./User

    		Install the MSI per-device -

    LocURI contains a Device prefix, such as ./Device

    		Install the MSI per-user -

    LocURI contains a User prefix, such as ./User

    SystemInstall the MSI per-user -

    LocURI contains a User prefix, such as ./User

    		Install the MSI per-device -

    LocURI contains a Device prefix, such as ./Device

    		Install the MSI per-user -

    LocURI contains a User prefix, such as ./User

    - - +|Target|Per-user MSI|Per-machine MSI|Dual mode MSI| +|--- |--- |--- |--- | +|User|Install the MSI per-user
    LocURI contains a User prefix, such as ./User|Install the MSI per-device
    LocURI contains a Device prefix, such as ./Device|Install the MSI per-user
    LocURI contains a User prefix, such as ./User| +|System|Install the MSI per-user
    LocURI contains a User prefix, such as ./User|Install the MSI per-device
    LocURI contains a Device prefix, such as ./Device|Install the MSI per-user
    LocURI contains a User prefix, such as ./User| The following table applies to SCCM hybrid environment. - ------ - - - - - - - - - - - - - - - - - - - - - - -
    TargetPer-user MSIPer-machine MSIDual mode MSI
    UserInstall the MSI per-user -

    LocURI contains a User prefix, such as ./User

    		Install the MSI per-device -

    LocURI contains a Device prefix, such as ./Device

    		Install the MSI per-user -

    LocURI contains a User prefix, such as ./User

    SystemInstall the MSI per-user -

    LocURI contains a User prefix, such as ./User

    		Install the MSI per-device -

    LocURI contains a Device prefix, such as ./Device

    		Install the MSI per- system context -

    LocURI contains a Device prefix, such as ./Device

    - - +|Target|Per-user MSI|Per-machine MSI|Dual mode MSI| +|--- |--- |--- |--- | +|User|Install the MSI per-user
    LocURI contains a User prefix, such as ./User|Install the MSI per-device
    LocURI contains a Device prefix, such as ./Device|Install the MSI per-user
    LocURI contains a User prefix, such as ./User| +|System|Install the MSI per-user
    LocURI contains a User prefix, such as ./User|Install the MSI per-device
    LocURI contains a Device prefix, such as ./Device|Install the MSI per- system context
    LocURI contains a Device prefix, such as ./Device| ## How to determine the package type from the MSI package diff --git a/windows/client-management/mdm/get-inventory.md b/windows/client-management/mdm/get-inventory.md index 94c9465267..4c01145bb3 100644 --- a/windows/client-management/mdm/get-inventory.md +++ b/windows/client-management/mdm/get-inventory.md @@ -21,143 +21,34 @@ The **Get Inventory** operation retrieves information from the Microsoft Store f ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Inventory?continuationToken={ContinuationToken}&modifiedSince={ModifiedSince}&licenseTypes={LicenseType}&maxResults={MaxResults}

    - - - +**GET:** +```http +https://bspmts.mp.microsoft.com/V1/Inventory?continuationToken={ContinuationToken}&modifiedSince={ModifiedSince}&licenseTypes={LicenseType}&maxResults={MaxResults} +``` ### URI parameters The following parameters may be specified in the request URI. - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDefault valueDescription

    continuationToken

    string

    Null

    modifiedSince

    datetime

    Null

    Optional. Used to determine changes since a specific date.

    licenseTypes

    collection of LicenseType

    {online,offline}

    Optional. A collection of license types

    maxResults

    integer-32

    25

    Optional. Specifies the maximum number of applications returned in a single query.

    - - - +|Parameter|Type|Default value|Description| +|--- |--- |--- |--- | +|continuationToken|string|Null|| +|modifiedSince|datetime|Null|Optional. Used to determine changes since a specific date.| +|licenseTypes|collection of [LicenseType](data-structures-windows-store-for-business.md#licensetype)|{online,offline}|Optional. A collection of license types| +|maxResults|integer-32|25|Optional. Specifies the maximum number of applications returned in a single query.| Here are some examples. - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    Query typeExample query

    Online and offline

    https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&licenseTypes=offline&maxResults=25

    Online only

    https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&maxResults=25

    Offline only

    https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=offline&maxResults=25

    Both license types and a time filter

    https://bspmts.mp.microsoft.com/V1/Inventory?modifiedSince=2015-07-13T14%3a02%3a25.6863382-07%3a00&licenseTypes=online&licenseTypes=offline&maxResults=25

    - - - - - ------ - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Invalid modified date, license, or continuationToken

    -

    Details: String

    - - +|Query type|Example query| +|--- |--- | +|Online and offline|[https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&licenseTypes=offline&maxResults=25](https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&licenseTypes=offline&maxResults=25)| +|Online only|[https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&maxResults=25](https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=online&maxResults=25)| +|Offline only|[https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=offline&maxResults=25](https://bspmts.mp.microsoft.com/V1/Inventory?licenseTypes=offline&maxResults=25)| +|Both license types and a time filter|[https://bspmts.mp.microsoft.com/V1/Inventory?modifiedSince=2015-07-13T14%3a02%3a25.6863382-07%3a00&licenseTypes=online&licenseTypes=offline&maxResults=25](https://bspmts.mp.microsoft.com/V1/Inventory?modifiedSince=2015-07-13T14%3a02%3a25.6863382-07%3a00&licenseTypes=online&licenseTypes=offline&maxResults=25)| +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name

    Invalid modified date, license, or continuationToken

    Details: String| ## Response diff --git a/windows/client-management/mdm/get-localized-product-details.md b/windows/client-management/mdm/get-localized-product-details.md index 52848ed620..3e13a8f8e4 100644 --- a/windows/client-management/mdm/get-localized-product-details.md +++ b/windows/client-management/mdm/get-localized-product-details.md @@ -18,97 +18,27 @@ The **Get localized product details** operation retrieves the localization infor ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Products/{ProductId}/{SkuId}/LocalizedDetails/{language}

    +**GET:** + +```http +https://bspmts.mp.microsoft.com/V1/Products/{ProductId}/{SkuId}/LocalizedDetails/{language} +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    language

    string

    Required. Language in ISO format, such as en-us, en-ca.

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|language|string|Required. Language in ISO format, such as en-us, en-ca.| - - ------ - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Missing parameter or invalid parameter

    -

    Details: String

    404

    Not found

    Item type: productId, skuId, language

    - -  +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name
    Reason: Missing parameter or invalid parameter
    Details: String| +|404|Not found||Item type: productId, skuId, language| ## Response diff --git a/windows/client-management/mdm/get-offline-license.md b/windows/client-management/mdm/get-offline-license.md index 87699a8b11..0f60251a1c 100644 --- a/windows/client-management/mdm/get-offline-license.md +++ b/windows/client-management/mdm/get-offline-license.md @@ -18,102 +18,27 @@ The **Get offline license** operation retrieves the offline license information ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    POST

    https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/OfflineLicense/{contentId}

    +**POST:** + +```http +https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/OfflineLicense/{contentId} +``` -  ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Identifies a specific product that has been acquired.

    skuId

    string

    Required. The SKU identifier.

    contentId

    string

    Required. Identifies a specific application.

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Identifies a specific product that has been acquired.| +|skuId|string|Required. The SKU identifier.| +|contentId|string|Required. Identifies a specific application.| - - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Missing parameter or invalid parameter

    -

    Details: String

    404

    Not found

    409

    Conflict

    Reason: Not owned, Not offline

    - +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name
    Reason: Missing parameter or invalid parameter
    Details: String| +|404|Not found||| +|409|Conflict||Reason: Not owned, Not offline| ## Response diff --git a/windows/client-management/mdm/get-product-details.md b/windows/client-management/mdm/get-product-details.md index 18a0174509..9b32395cbd 100644 --- a/windows/client-management/mdm/get-product-details.md +++ b/windows/client-management/mdm/get-product-details.md @@ -18,92 +18,26 @@ The **Get product details** operation retrieves the product information from the ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}

    +**GET:** +```http +https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId} +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name
    Reason: Missing parameter or invalid parameter
    Details: String| +|404|Not found||| - ------ - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Missing parameter or invalid parameter

    -

    Details: String

    404

    Not found

    - -  ## Response ### Response body diff --git a/windows/client-management/mdm/get-product-package.md b/windows/client-management/mdm/get-product-package.md index 662580acde..7c5c2e077b 100644 --- a/windows/client-management/mdm/get-product-package.md +++ b/windows/client-management/mdm/get-product-package.md @@ -18,108 +18,29 @@ The **Get product package** operation retrieves the information about a specific ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/Packages/{packageId}

    +**GET:** -  +```http +https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/Packages/{packageId} +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    packageId

    string

    Required.

    - - - ------- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData fieldDetails

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Invalid parameter

    -

    Details: String

    Can be productId, skuId, or packageId

    404

    Not found

    Item type: Product/SKU

    409

    Conflict

    Reason: Not owned

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|packageId|string|Required.| +|Error code|Description|Retry|Data field|Details| +|--- |--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name +Reason: Invalid parameter +Details: String|Can be productId, skuId, or packageId| +|404|Not found|||Item type: Product/SKU| +|409|Conflict||Reason: Not owned|| ## Response diff --git a/windows/client-management/mdm/get-product-packages.md b/windows/client-management/mdm/get-product-packages.md index 5ad2851bc5..9c3e90586c 100644 --- a/windows/client-management/mdm/get-product-packages.md +++ b/windows/client-management/mdm/get-product-packages.md @@ -18,97 +18,29 @@ The **Get product packages** operation retrieves the information about applicati ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/Packages

    +**GET:** + +```http +https://bspmts.mp.microsoft.com/V1/Products/{productId}/{skuId}/Packages +```   ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    - -  - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Missing parameter or invalid parameter

    -

    Details: String

    404

    Not found

    409

    Conflict

    Reason: Not owned

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name +Reason: Missing parameter or invalid parameter +Details: String| +|404|Not found||| +|409|Conflict||Reason: Not owned| ## Response diff --git a/windows/client-management/mdm/get-seat.md b/windows/client-management/mdm/get-seat.md index 598d24ea19..82f7c29f61 100644 --- a/windows/client-management/mdm/get-seat.md +++ b/windows/client-management/mdm/get-seat.md @@ -18,61 +18,21 @@ The **Get seat** operation retrieves the information about an active seat for a ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats/{username}

    +**GET:** +```http +https://bspmts.mp.microsoft.com/V1/Inventory/{productId}/{skuId}/Seats/{username} +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    productId

    string

    Required. Product identifier for an application that is used by the Store for Business.

    skuId

    string

    Required. Product identifier that specifies a specific SKU of an application.

    username

    string

    Requires UserPrincipalName (UPN). User name of the target user account.

    +|Parameter|Type|Description| +|--- |--- |--- | +|productId|string|Required. Product identifier for an application that is used by the Store for Business.| +|skuId|string|Required. Product identifier that specifies a specific SKU of an application.| +|username|string|Requires UserPrincipalName (UPN). User name of the target user account.|   ## Response @@ -81,51 +41,14 @@ The following parameters may be specified in the request URI. The response body contains [SeatDetails](data-structures-windows-store-for-business.md#seatdetails). - ------- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData fieldDetails

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Missing parameter or invalid parameter

    -

    Details: String

    Invalid can include productId, skuId or username

    404

    Not found

    ItemType: Inventory, User, Seat

    -

    Values: ProductId/SkuId, UserName, ProductId/SkuId/Username

    409

    Conflict

    Reason: Not online

    - +|Error code|Description|Retry|Data field|Details| +|--- |--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name +Reason: Missing parameter or invalid parameter +Details: String|Invalid can include productId, skuId or username| +|404|Not found|||ItemType: Inventory, User, Seat +Values: ProductId/SkuId, UserName, ProductId/SkuId/Username| +|409|Conflict||Reason: Not online||     diff --git a/windows/client-management/mdm/get-seats-assigned-to-a-user.md b/windows/client-management/mdm/get-seats-assigned-to-a-user.md index 016e2a8711..123c7969ce 100644 --- a/windows/client-management/mdm/get-seats-assigned-to-a-user.md +++ b/windows/client-management/mdm/get-seats-assigned-to-a-user.md @@ -18,61 +18,21 @@ The **Get seats assigned to a user** operation retrieves information about assig ## Request - ---- - - - - - - - - - - - - -
    MethodRequest URI

    GET

    https://bspmts.mp.microsoft.com/V1/Users/{username}/Seats?continuationToken={ContinuationToken}&maxResults={MaxResults}

    +**GET:** +```http +https://bspmts.mp.microsoft.com/V1/Users/{username}/Seats?continuationToken={ContinuationToken}&maxResults={MaxResults} +``` ### URI parameters The following parameters may be specified in the request URI. - ----- - - - - - - - - - - - - - - - - - - - - - - - - -
    ParameterTypeDescription

    useName

    string

    Requires UserPrincipalName (UPN). User name of the target user account.

    continuationToken

    string

    Optional.

    maxResults

    inteter-32

    Optional. Default = 25, Maximum = 100

    +|Parameter|Type|Description| +|--- |--- |--- | +|useName|string|Requires UserPrincipalName (UPN). User name of the target user account.| +|continuationToken|string|Optional.| +|maxResults|inteter-32|Optional. Default = 25, Maximum = 100|   ## Response @@ -81,39 +41,11 @@ The following parameters may be specified in the request URI. The response body contain [SeatDetailsResultSet](data-structures-windows-store-for-business.md#seatdetailsresultset). - ------ - - - - - - - - - - - - - - - - - - - - - - -
    Error codeDescriptionRetryData field

    400

    Invalid parameters

    No

    Parameter name

    -

    Reason: Invalid parameter

    -

    Details: String

    404

    Not found

    Item type: User

    -

    Values: UserName

    +|Error code|Description|Retry|Data field| +|--- |--- |--- |--- | +|400|Invalid parameters|No|Parameter name
    Reason: Invalid parameter
    Details: String| +|404|Not found||Item type: User +Values: UserName|   From d58ffa414c31a24f3bb369a5086541f068f709ad Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Wed, 10 Nov 2021 19:14:58 +0530 Subject: [PATCH 07/36] Fixing acrolinx and build issues --- ...a-structures-windows-store-for-business.md | 173 +++++++++--------- .../mdm/enterpriseappmanagement-csp.md | 52 +----- 2 files changed, 96 insertions(+), 129 deletions(-) diff --git a/windows/client-management/mdm/data-structures-windows-store-for-business.md b/windows/client-management/mdm/data-structures-windows-store-for-business.md index 46fda3c4d4..b20c4ce200 100644 --- a/windows/client-management/mdm/data-structures-windows-store-for-business.md +++ b/windows/client-management/mdm/data-structures-windows-store-for-business.md @@ -6,7 +6,7 @@ MS-HAID: ms.assetid: ABE44EC8-CBE5-4775-BA8A-4564CB73531B ms.reviewer: manager: dansimp -description: +description: Learn about data structures for Microsoft Store for Business. ms.author: dansimp ms.topic: article ms.prod: w10 @@ -17,7 +17,6 @@ ms.date: 09/18/2017 # Data structures for Microsoft Store for Business - Here's the list of data structures used in the Microsoft Store for Business REST APIs: - [AlternateIdentifier](#alternateidentifier) @@ -56,36 +55,36 @@ Specifies the properties of the alternate identifier. |Name|Type|Description| |--- |--- |--- | -|type|string|LegacyWindowStoreProductId, LegacyWindowsPhoneProductId, RedirectToThresholdProductId| -|value|string|| +|Type|String|LegacyWindowStoreProductId, LegacyWindowsPhoneProductId, RedirectToThresholdProductId| +|Value|String|| ## BulkSeatOperationResultSet |Name|Type| |--- |--- | -|seatDetails|collection of [SeatDetails](#seatdetails)| -|failedSeatOperations|collection of [FailedSeatRequest](#failedseatrequest)| +|seatDetails|Collection of [SeatDetails](#seatdetails)| +|failedSeatOperations|Collection of [FailedSeatRequest](#failedseatrequest)| ## FailedSeatRequest |Name|Type| |--- |--- | -|failureReason|string| +|failureReason|String| |productKey|[ProductKey](#productkey)| -|userName|string| +|userName|String| ## FrameworkPackageDetails |Name|Type|Description| |--- |--- |--- | -|packageId|string|| -|contentId|string|Identifies a specific application.| -|location|[PackageLocation](#packagelocation)|| -|packageFullName|string|| -|packageIdentityName|string|| -|architectures|collection of [ProductArchitectures](#productarchitectures)|| +|packageId|String|| +|contentId|String|Identifies a specific application.| +|Location|[PackageLocation](#packagelocation)|| +|packageFullName|String|| +|packageIdentityName|String|| +|Architectures|Collection of [ProductArchitectures](#productarchitectures)|| |packageFormat|[ProductPackageFormat](#productpackageformat)|| -|platforms|collection of [ProductPlatform](#productplatform)|| +|Platforms|Collection of [ProductPlatform](#productplatform)|| |fileSize|integer-64|Size of the file.| |packageRank|integer-32|Optional| @@ -93,42 +92,42 @@ Specifies the properties of the alternate identifier. |Name|Description| |--- |--- | -|open|Open distribution policy - licenses/seats can be assigned/consumed without limit| -|restricted|Restricted distribution policy - licenses/seats must be assigned/consumed according to the available count| +|Open|Open distribution policy - licenses/seats can be assigned/consumed without limit| +|Restricted|Restricted distribution policy - licenses/seats must be assigned/consumed according to the available count| ## InventoryEntryDetails |Name|Type|Description| |--- |--- |--- | -|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.| +|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get more content including product descriptions, offline license, and download URLs.| |seatCapacity|integer-64|Total number of seats that have been purchased for an application.| |availableSeats|integer-64|Number of available seats remaining for an application.| -|lastModified|dateTime|Specifies the last modified date for an application. Modifications for an application includes updated product details, updates to an application, and updates to the quantity of an application.| +|lastModified|dateTime|Specifies the last modified date for an application. Modifications for an application include updated product details, updates to an application, and updates to the quantity of an application.| |licenseType|[LicenseType](#licensetype)|Indicates whether the set of seats for a given application supports online or offline licensing.| |distributionPolicy|[InventoryDistributionPolicy](#inventorydistributionpolicy)|| -|status|[InventoryStatus](#inventorystatus)|| +|Status|[InventoryStatus](#inventorystatus)|| ## InventoryResultSet |Name|Type|Description| |--- |--- |--- | -|continuationToken|string|Only available if there is a next page.| -|inventoryEntries|collection of [InventoryEntryDetails](#inventoryentrydetails)|| +|continuationToken|String|Only available if there is a next page.| +|inventoryEntries|Collection of [InventoryEntryDetails](#inventoryentrydetails)|| ## InventoryStatus |Name|Description| |--- |--- | -|active|Entry is available in the organization’s inventory.| -|removed|Entry has been removed from the organization’s inventory.| +|Active|Entry is available in the organization’s inventory.| +|Removed|Entry has been removed from the organization’s inventory.| ## LicenseType |Name|Description| |--- |--- | -|online|Online license application.| -|offline|Offline license application.| +|Online|Online license application.| +|Offline|Offline license application.| ## LocalizedProductDetail @@ -137,11 +136,11 @@ Specifies the properties of the localized product. |Name|Type|Description| |--- |--- |--- | -|language|string|Language or fallback language if the specified language is not available.| -|displayName|string|Display name of the application.| -|description|string|App description provided by developer can be up to 10,000 characters.| -|images|collection of [ProductImage](#productimage)|Artwork and icon associated with the application.| -|publisher|[PublisherDetails](#publisherdetails)|Publisher of the application.| +|Language|String|Language or fallback language if the specified language is not available.| +|displayName|String|Display name of the application.| +|Description|String|App description provided by developer can be up to 10,000 characters.| +|Images|Collection of [ProductImage](#productimage)|Artwork and icon associated with the application.| +|Publisher|[PublisherDetails](#publisherdetails)|Publisher of the application.| ## OfflineLicense @@ -149,33 +148,33 @@ Specifies the properties of the localized product. |Name|Type|Description| |--- |--- |--- | |productKey|[ProductKey](#productkey)|Identifies a set of seats associated with an application.| -|licenseBlob|string|Base-64 encoded offline license that can be installed via a CSP.| -|licenseInstanceId|string|Version of the license.| -|requestorId|string|Organization requesting the license.| -|contentId|string|Identifies the specific license required by an application.| +|licenseBlob|String|Base-64 encoded offline license that can be installed via a CSP.| +|licenseInstanceId|String|Version of the license.| +|requestorId|String|Organization requesting the license.| +|contentId|String|Identifies the specific license required by an application.| ## PackageContentInfo |Name|Type| |--- |--- | -|productPlatforms|collection of ProductPlatform| -|packageFormat|string| +|productPlatforms|Collection of ProductPlatform| +|packageFormat|String| ## PackageLocation |Name|Type|Description| |--- |--- |--- | -|url|URI|CDN location of the packages. URL expiration is based on the estimated time to download the package.| +|Url|URI|CDN location of the packages. URL expiration is based on the estimated time to download the package.| ## ProductArchitectures |Name| |--- | -|neutral| -|arm| +|Neutral| +|Arm| |x86| |x64| @@ -183,14 +182,14 @@ Specifies the properties of the localized product. |Name|Type|Description| |--- |--- |--- | -|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get additional content including product descriptions, offline license, and download URLs.| -|productType|string|Type of product.| -|supportedLanguages|collection of string|The set of localized languages for an application.| -|publisherId|string|Publisher identifier.| -|category|string|Application category.| -|alternateIds|collection of [AlternateIdentifier](#alternateidentifier)|The identifiers that can be used to instantiate the installation of on online application.| -|packageFamilyName|string|| -|supportedPlatforms|collection of [ProductPlatform](#productplatform)|| +|productKey|[ProductKey](#productkey)|Identifier used on subsequent requests to get more content including product descriptions, offline license, and download URLs.| +|productType|String|Type of product.| +|supportedLanguages|Collection of string|The set of localized languages for an application.| +|publisherId|String|Publisher identifier.| +|Category|String|Application category.| +|alternateIds|Collection of [AlternateIdentifier](#alternateidentifier)|The identifiers that can be used to instantiate the installation of on online application.| +|packageFamilyName|String|| +|supportedPlatforms|Collection of [ProductPlatform](#productplatform)|| ## ProductImage @@ -199,13 +198,13 @@ Specifies the properties of the product image. |Name|Type|Description| |--- |--- |--- | -|location|URI|Location of the download image.| -|purpose|string|Tag for the purpose of the image, e.g. "screenshot" or "logo".| -|height|string|Height of the image in pixels.| -|width|string|Width of the image in pixels.| -|caption|string|Unlimited length.| -|backgroundColor|string|Format "#RRGGBB"| -|foregroundColor|string|Format "#RRGGBB"| +|Location|URI|Location of the download image.| +|Purpose|String|Tag for the purpose of the image, for example "screenshot" or "logo".| +|Height|String|Height of the image in pixels.| +|Width|String|Width of the image in pixels.| +|Caption|String|Unlimited length.| +|backgroundColor|String|Format "#RRGGBB"| +|foregroundColor|String|Format "#RRGGBB"| |fileSize|integer-64|Size of the file.| ## ProductKey @@ -214,22 +213,22 @@ Specifies the properties of the product key. |Name|Type|Description| |--- |--- |--- | -|productId|string|Product identifier for an application that is used by the Store for Business.| -|skuId|string|Product identifier that specifies a specific SKU of an application.| +|productId|String|Product identifier for an application that is used by the Store for Business.| +|skuId|String|Product identifier that specifies a specific SKU of an application.| ## ProductPackageDetails |Name|Type|Description| |--- |--- |--- | -|frameworkDependencyPackages|collection of [FrameworkPackageDetails](#frameworkpackagedetails)|| -|packageId|string|| -|contentId|string|Identifies a specific application.| -|location|[PackageLocation](#packagelocation)|| -|packageFullName|string|example,Microsoft.BingTranslator_1.1.10917.2059_x86__8wekyb3d8bbwe| -|packageIdentityName|string|example, Microsoft.BingTranslator| -|architectures|collection of [ProductArchitectures](#productarchitectures)|Values {x86, x64, arm, neutral}| +|frameworkDependencyPackages|Collection of [FrameworkPackageDetails](#frameworkpackagedetails)|| +|packageId|String|| +|contentId|String|Identifies a specific application.| +|Location|[PackageLocation](#packagelocation)|| +|packageFullName|String|Example, Microsoft.BingTranslator_1.1.10917.2059_x86__8wekyb3d8bbwe| +|packageIdentityName|String|Example, Microsoft.BingTranslator| +|Architectures|Collection of [ProductArchitectures](#productarchitectures)|Values {x86, x64, arm, neutral}| |packageFormat|[ProductPackageFormat](#productpackageformat)|Extension of the package file.| -|platforms|collection of [ProductPlatform](#productplatform)|| +|Platforms|Collection of [ProductPlatform](#productplatform)|| |fileSize|integer-64|Size of the file.| |packageRank|integer-32|Optional| @@ -237,22 +236,22 @@ Specifies the properties of the product key. |Name| |--- | -|appx| +|Appx| |appxBundle| -|xap| +|Xap| ## ProductPackageSet |Name|Type|Description| |--- |--- |--- | -|packageSetId|string|An identifier for the particular combination of application packages.| -|productPackages|collection of [ProductPackageDetails](#productpackagedetails)|A collection of application packages.| +|packageSetId|String|An identifier for the particular combination of application packages.| +|productPackages|Collection of [ProductPackageDetails](#productpackagedetails)|A collection of application packages.| ## ProductPlatform |Name|Type| |--- |--- | -|platformName|string| +|platformName|String| |minVersion|[VersionInfo](#versioninfo)| |maxTestedVersion|[VersionInfo](#versioninfo)| @@ -262,54 +261,54 @@ Specifies the properties of the publisher details. |Name|Type|Description| |--- |--- |--- | -|publisherName|string|Name of the publisher.| -|publisherWebsite|string|Website of the publisher.| +|publisherName|String|Name of the publisher.| +|publisherWebsite|String|Website of the publisher.| ## SeatAction |Name| |--- | -|assign| -|reclaim| +|Assign| +|Reclaim| ## SeatDetails |Name|Type|Description| |--- |--- |--- | -|assignedTo|string|Format = UPN (user@domain)| -|dateAssigned|datetime|| -|state|[SeatState](#seatstate)|| +|assignedTo|String|Format = UPN (user@domain)| +|dateAssigned|Datetime|| +|State|[SeatState](#seatstate)|| |productKey|[ProductKey](#productkey)|| ## SeatDetailsResultSet |Name|Type| |--- |--- | -|seats|collection of [SeatDetails](#seatdetails)| -|continuationToken|string| +|Seats|Collection of [SeatDetails](#seatdetails)| +|continuationToken|String| ## SeatState |Name| |--- | -|active| -|revoked| +|Active| +|Revoked| ## SupportedProductPlatform |Name|Type| |--- |--- | -|platformName|string| +|platformName|String| |minVersion|[VersionInfo](#versioninfo)| |maxTestedVersion|[VersionInfo](#versioninfo)| -|architectures|collection of [ProductArchitectures](#productarchitectures)| +|Architectures|Collection of [ProductArchitectures](#productarchitectures)| ## VersionInfo |Name|Type| |--- |--- | -|major|integer-32| -|minor|integer-32| -|build|integer-32| -|revision|integer-32| +|Major|integer-32| +|Minor|integer-32| +|Build|integer-32| +|Revision|integer-32| diff --git a/windows/client-management/mdm/enterpriseappmanagement-csp.md b/windows/client-management/mdm/enterpriseappmanagement-csp.md index f5132cb038..fd9d3891b3 100644 --- a/windows/client-management/mdm/enterpriseappmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappmanagement-csp.md @@ -158,48 +158,16 @@ Supported operations are Get, Add, and Replace. **/Download/*ProductID*/Status** Required. The integer value that indicates the status of the current download process. The following table shows the possible values. - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    0: CONFIRM

    Waiting for confirmation from user.

    1: QUEUED

    Waiting for download to start.

    2: DOWNLOADING

    In the process of downloading.

    3: DOWNLOADED

    Waiting for installation to start.

    4: INSTALLING

    Handed off for installation.

    5: INSTALLED

    Successfully installed

    6: FAILED

    Application was rejected (not signed properly, bad XAP format, not enrolled properly, etc.)

    7:DOWNLOAD_FAILED

    Unable to connect to server, file doesn't exist, etc.

    - - +|Value|Description| +|--- |--- | +|0: CONFIRM|Waiting for confirmation from user.| +|1: QUEUED|Waiting for download to start.| +|2: DOWNLOADING|In the process of downloading.| +|3: DOWNLOADED|Waiting for installation to start.| +|4: INSTALLING|Handed off for installation.| +|5: INSTALLED|Successfully installed| +|6: FAILED|Application was rejected (not signed properly, bad XAP format, not enrolled properly, etc.)| +|7:DOWNLOAD_FAILED|Unable to connect to server, file doesn't exist, etc.| Scope is dynamic. Supported operations are Get, Add, and Replace. From f62961cc8cb93cc4bc924a23163748b07ddf64af Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 10:45:09 -0500 Subject: [PATCH 08/36] Removed table and put text in bullets --- ...ppv-using-the-client-management-console.md | 29 +++++++++++++++---- 1 file changed, 23 insertions(+), 6 deletions(-) diff --git a/windows/application-management/app-v/appv-using-the-client-management-console.md b/windows/application-management/app-v/appv-using-the-client-management-console.md index a21128f036..47b3877b5c 100644 --- a/windows/application-management/app-v/appv-using-the-client-management-console.md +++ b/windows/application-management/app-v/appv-using-the-client-management-console.md @@ -42,13 +42,30 @@ You can obtain information about the App-V client or perform specific tasks by u The client management console contains the following described main tabs. -|Tab|Description| -|--- |--- | -|Overview|The **Overview** tab contains the following elements:
  • Update – Use the Update tile to refresh a virtualized application or to receive a new virtualized package.
  • The **Last Refresh** displays the current version of the virtualized package.
  • Download all virtual applications – Use the Download tile to download all of the packages provisioned to the current user.
    (Associated Windows PowerShell cmdlet: **Mount-AppvClientPackage**)
  • Work Offline – Use this tile to disallow all automatic and manual virtual application updates.
    (Associated Windows PowerShell cmdlet: **-AppvPublishServer –UserRefreshEnabled –GlobalRefreshEnabled**)| -|Virtual Apps|The **VIRTUAL APPS** tab displays all of the packages that have been published to the user. You can also click a specific package and see all of the applications that are part of that package. This displays information about packages that are currently in use and how much of each package has been downloaded to the computer. You can also start and stop package downloads. Additionally, you can repair the user state. A repair will delete all user data that is associated with a package.| -|App Connection Groups|The **APP CONNECTION GROUPS** tab displays all of the connection groups that are available to the current user. Click a specific connection group to see all of the packages that are part of the selected group. This displays information about connection groups that are already in use and how much of the connection group contents have been downloaded to the computer. Additionally, you can start and stop connection group downloads. You can use this section to initiate a repair. A repair will remove all of the user state that is associated a connection group.
    (Associated Windows PowerShell cmdlets: Download - **Mount-AppvClientConnectionGroup**. Repair - **AppvClientConnectionGroup**.)| +- **Overview**: The **Overview** tab contains the following elements: -
    For App-V issues, use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopappv). + - **Update**: Refreshes a virtualized application or to receive a new virtualized package. + - **Last Refresh**: Displays the current version of the virtualized package. + - **Download all virtual applications**: Use the Download tile to download all of the packages provisioned to the current user. + + Associated Windows PowerShell cmdlet: `Mount-AppvClientPackage` + + - **Work Offline**: Disallows all automatic and manual virtual application updates. + + Associated Windows PowerShell cmdlet: `-AppvPublishServer –UserRefreshEnabled –GlobalRefreshEnabled` + +- **VIRTUAL APPS**: Displays all of the packages that have been published to the user. + + You can also click a specific package and see all of the applications that are part of that package. This option displays information about packages that are currently in use and how much of each package has been downloaded to the computer. You can also start and stop package downloads, and repair the user state. A repair will delete all user data that is associated with a package. + +- **APP CONNECTION GROUPS**: Displays all of the connection groups that are available to the current user. Click a specific connection group to see all of the packages that are part of the selected group. This displays information about connection groups that are already in use and how much of the connection group contents have been downloaded to the computer. Additionally, you can start and stop connection group downloads. You can use this section to initiate a repair. A repair will remove all of the user state that is associated a connection group. + + Associated Windows PowerShell cmdlets: + + - Download: `Mount-AppvClientConnectionGroup` + - Repair: `AppvClientConnectionGroup` + +For App-V issues, use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopappv). ## Related topics From f223c11aa452095ce1c6b4fadbf1b0c08a40e972 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 11:02:42 -0500 Subject: [PATCH 09/36] Removed text from table, and put in bullets Also removed HTML tags and put text in code blocks --- ...plications-inside-a-virtual-environment.md | 54 +++++++++---------- 1 file changed, 27 insertions(+), 27 deletions(-) diff --git a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md index 6dba0901d2..02c25af40d 100644 --- a/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md +++ b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md @@ -54,21 +54,35 @@ Starting with App-V 5.0 SP3, when using RunVirtual, you can publish packages glo 1. Using the information in the following table, create a new registry key using the name of the executable file, for example, **MyApp.exe**. - |Package publishing method|Where to create the registry key| - |--- |--- | - |Published globally|HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual
    **Example:**
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe| - |Published to the user|HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual
    **Example:**
    HKEY_CURRENT_USER \SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe| - |Connection group can contain:
  • Packages that are published just globally or just to the user
  • Packages that are published globally and to the user|Either HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER key, but all of the following must be true:
  • If you want to include multiple packages in the virtual environment, you must include them in an enabled connection group.
  • Create only one subkey for one of the packages in the connection group. If, for example, you have one package that is published globally, and another package that is published to the user, you create a subkey for either of these packages, but not both. Although you create a subkey for only one of the packages, all of the packages in the connection group, plus the local application, will be available in the virtual environment.
  • The key under which you create the subkey must match the publishing method you used for the package.
  • For example, if you published the package to the user, you must create the subkey underHKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual. Do not add a key for the same application under both hives.| + - **Published globally**: Create the `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual` registry key. + + For example, create `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe`. + + - **Published to the user**: Create the `HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual` registry key. + + For example, create `HKEY_CURRENT_USER \SOFTWARE\Microsoft\AppV\Client\RunVirtual\MyApp.exe`. + + - Connection group can be: + - Packages that are published just globally or just to the user + - Packages that are published globally and to the user + + Use the `HKEY_LOCAL_MACHINE` or `HKEY_CURRENT_USER` key. But, all of the following must be true: + + - If you want to include multiple packages in the virtual environment, you must include them in an enabled connection group. + - Create only one subkey for one of the packages in the connection group. If, for example, you have one package that is published globally, and another package that is published to the user, you create a subkey for either of these packages, but not both. Although you create a subkey for only one of the packages, all of the packages in the connection group, plus the local application, will be available in the virtual environment. + - The key under which you create the subkey must match the publishing method you used for the package. + + For example, if you published the package to the user, you must create the subkey under `HKEY_CURRENT_USER\SOFTWARE\Microsoft\AppV\Client\RunVirtual`. Do not add a key for the same application under both hives. 2. Set the new registry subkey’s value to the PackageId and VersionId of the package, separating the values with an underscore. - **Syntax**: <PackageId>\_<VersionId> + **Syntax**: `_` **Example**: 4c909996-afc9-4352-b606-0b74542a09c1\_be463724-Oct1-48f1-8604-c4bd7ca92fa The application in the previous example would produce a registry export file (.reg file) like the following: - ``` syntax + ```registry Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\RunVirtual] @="" @@ -81,24 +95,24 @@ Starting with App-V 5.0 SP3, when using RunVirtual, you can publish packages glo You can use the **Start-AppVVirtualProcess** cmdlet to retrieve the package name and then start a process within the specified package's virtual environment. This method lets you launch any command within the context of an App-V package, regardless of whether the package is currently running. -Use the following example syntax, and substitute the name of your package for **<Package>**: +Use the following example syntax, and substitute the name of your package for ``: `$AppVName = Get-AppvClientPackage ` `Start-AppvVirtualProcess -AppvClientObject $AppVName cmd.exe` -If you don’t know the exact name of your package, you can use the command line Get-AppvClientPackage \*executable\*, where **executable** is the name of the application, for example:
    Get-AppvClientPackage \*Word\* +If you don’t know the exact name of your package, you can use the command line `Get-AppvClientPackage YourExecutable`, where `YourExecutable` is the name of the application. For example, enter `Get-AppvClientPackage Word`. -## Command line switch /appvpid:<PID> +## Command line switch `/appvpid:` -You can apply the **/appvpid:<PID>** switch to any command, which enables that command to run within a virtual process that you select by specifying its process ID (PID). Using this method launches the new executable in the same App-V environment as an executable that is already running. +You can apply the `/appvpid:` switch to any command, which enables that command to run within a virtual process that you select by specifying its process ID (PID). Using this method launches the new executable in the same App-V environment as an executable that is already running. Example: `cmd.exe /appvpid:8108` To find the process ID (PID) of your App-V process, run the command **tasklist.exe** from an elevated command prompt. -## Command line hook switch /appvve:<GUID> +## Command line hook switch `/appvve:` This switch lets you run a local command within the virtual environment of an App-V package. Unlike the **/appvid** switch, where the virtual environment must already be running, this switch enables you to start the virtual environment. @@ -117,25 +131,11 @@ To get the package GUID and version GUID of your application, run the **Get-Appv - Version ID of the desired package -If you don’t know the exact name of your package, use the command line Get-AppvClientPackage \*executable\*, where **executable** is the name of the application, for example:
    Get-AppvClientPackage \*Word\* +If you don’t know the exact name of your package, use the command line `Get-AppvClientPackage YourExecutable`, where `YourExecutable` is the name of the application. For example, enter `Get-AppvClientPackage Word`. This method lets you launch any command within the context of an App-V package, regardless of whether the package is currently running. - - - -
    For App-V issues, use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopappv). - ## Related topics [Technical Reference for App-V](appv-technical-reference.md) - -  - -  - - - - - From a71d36e78a05b967bc6cbb46487148d23bf40101 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 10 Nov 2021 08:46:33 -0800 Subject: [PATCH 10/36] Update submission-guide.md --- .../threat-protection/intelligence/submission-guide.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/intelligence/submission-guide.md b/windows/security/threat-protection/intelligence/submission-guide.md index 44bcc3e46e..4033a6633b 100644 --- a/windows/security/threat-protection/intelligence/submission-guide.md +++ b/windows/security/threat-protection/intelligence/submission-guide.md @@ -23,7 +23,7 @@ If you have a file that you suspect might be malware or is being incorrectly det ## How do I send a malware file to Microsoft? -You can send us files that you think might be malware or files that have been incorrectly detected through the [sample submission portal](https://www.microsoft.com/wdsi/filesubmission). +You can send us files that you think might be malware or files that have been incorrectly detected through the [sample submission portal](https://www.microsoft.com/en-us/wdsi/filesubmission). We receive a large number of samples from many sources. Our analysis is prioritized by the number of file detections and the type of submission. You can help us complete a quick analysis by providing detailed information about the product you were using and what you were doing when you found the file. @@ -31,7 +31,7 @@ After you sign in, you will be able to track your submissions. ## Can I send a sample by email? -No, we only accept submissions through our [sample submission portal](https://www.microsoft.com/wdsi/filesubmission). +No, we only accept submissions through our [sample submission portal](https://www.microsoft.com/en-us/wdsi/filesubmission). ## Can I submit a sample without signing in? @@ -43,7 +43,7 @@ The [Software Assurance ID (SAID)](https://www.microsoft.com/licensing/licensing ### How do I dispute the detection of my program? -[Submit the file](https://www.microsoft.com/wdsi/filesubmission) in question as a software developer. Wait until your submission has a final determination. +[Submit the file](https://www.microsoft.com/en-us/wdsi/filesubmission) in question as a software developer. Wait until your submission has a final determination. If you’re not satisfied with our determination of the submission, use the developer contact form provided with the submission results to reach Microsoft. We will use the information you provide to investigate further if necessary. @@ -51,7 +51,7 @@ We encourage all software vendors and developers to read about [how Microsoft id ## How do I track or view past sample submissions? -You can track your submissions through the [submission history page](https://www.microsoft.com/wdsi/submissionhistory). +You can track your submissions through the [submission history page](https://www.microsoft.com/en-us/wdsi/submissionhistory). ## What does the submission status mean? @@ -63,7 +63,7 @@ Each submission is shown to be in one of the following status types: * Closed—a final determination has been given by an analyst -You can see the status of any files you submit to us on the [submission history page](https://www.microsoft.com/wdsi/submissionhistory). +You can see the status of any files you submit to us on the [submission history page](https://www.microsoft.com/en-us/wdsi/submissionhistory). ## How does Microsoft prioritize submissions From 30cb6695254bf9900c3d642c73dbbe379a8a7502 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 12:14:38 -0500 Subject: [PATCH 11/36] Moved content from tables into bullets --- .../app-v/appv-performance-guidance.md | 155 ++++++++++++++---- 1 file changed, 119 insertions(+), 36 deletions(-) diff --git a/windows/application-management/app-v/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md index 0f85aca3ee..9465ab32da 100644 --- a/windows/application-management/app-v/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -35,8 +35,8 @@ You should read and understand the following information before reading this doc - [App-V Sequencing Guide](https://www.microsoft.com/download/details.aspx?id=27760) -**Note**   -Some terms used in this document may have different meanings depending on external source and context. For more information about terms used in this document followed by an asterisk * review the [Application Virtualization Performance Guidance Terminology](#bkmk-terms1) section of this document. +> [!Note] +> Some terms used in this document may have different meanings depending on external source and context. For more information about terms used in this document followed by an asterisk `*`, review the [Application Virtualization Performance Guidance Terminology](#bkmk-terms1) section of this document. Finally, this document will provide you with the information to configure the computer running App-V client and the environment for optimal performance. Optimize your virtual application packages for performance using the sequencer, and to understand how to use User Experience Virtualization (UE-V) or other user environment management technologies to provide the optimal user experience with App-V in both Remote Desktop Services (RDS) and non-persistent virtual desktop infrastructure (VDI). @@ -91,27 +91,78 @@ Use the information in the following section for more information: As you review the two scenarios, keep in mind that these approach the extremes. Based on your usage requirements, you may choose to apply these steps to a subset of users, virtual application packages, or both. -|Optimized for Performance|Optimized for Storage| -|--- |--- | -|To provide the most optimal user experience, this approach uses the capabilities of a UPM solution and requires extra image preparation and can incur some more image management overhead.

    The following describes many performance improvements in stateful non-persistent deployments. For more information, see [Sequencing Steps to Optimize Packages for Publishing Performance](#sequencing-steps-to-optimize-packages-for-publishing-performance) later in this topic.|The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image.

    The impact of this alteration is detailed in the [User Experience Walk-through](#bkmk-uewt) section of this document.| +- **Performance**: To provide the most optimal user experience, this approach uses the capabilities of a UPM solution and requires extra image preparation and can incur some more image management overhead. + + The following describes many performance improvements in stateful non-persistent deployments. For more information, see [Sequencing Steps to Optimize Packages for Publishing Performance](#sequencing-steps-to-optimize-packages-for-publishing-performance) (in this article). + +- **Storage**: The general expectations of the previous scenario still apply here. However, keep in mind that VM images are typically stored in costly arrays; a slight alteration has been made to the approach. Do not pre-configure user-targeted virtual application packages in the base image. + + The impact of this alteration is detailed in the [User Experience Walk-through](#bkmk-uewt) (in this article). ### Preparing your Environment -The following table displays the required steps to prepare the base image and the UE-V or another UPM solution for the approach. +The following information displays the required steps to prepare the base image and the UE-V or another UPM solution for the approach. -**Prepare the Base Image** +#### Prepare the Base Image -|Optimized for Performance|Optimized for Storage| -|--- |--- | -|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information, see [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all user- and global-targeted packages, for example, **Add-AppvClientPackage**.
  • Pre-configure all user- and global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.
    Alternatively,
  • Perform a global publishing/refresh.
  • Perform a user publishing/refresh.
  • Unpublish all user-targeted packages.
  • Delete the following user-Virtual File System (VFS) entries
    AppData\Local\Microsoft\AppV\Client\VFS
    AppData\Roaming\Microsoft\AppV\Client\VFS|
  • Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md).
  • Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps.
  • Configure for Shared Content Store (SCS) mode. For more information, see Deploying the
  • App-V Sequencer and Configuring the Client.
  • Configure Preserve User Integrations on Login Registry DWORD.
  • Pre-configure all global-targeted packages, for example,** Add-AppvClientPackage**.
  • Pre-configure all global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**.
  • Pre-publish all global-targeted packages.| +- **Performance**: -**Configurations** - For critical App-V Client configurations and for a little more context and how-to, review the following information: + - Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md). + - Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps. + - Configure for Shared Content Store (SCS) mode. For more information, see [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md). + - Configure Preserve User Integrations on Login Registry DWORD. + - Pre-configure all user and global-targeted packages, for example, **Add-AppvClientPackage**. + - Pre-configure all user- and global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**. + - Pre-publish all global-targeted packages. Or: + - Perform a global publishing/refresh. + - Perform a user publishing/refresh. + - Unpublish all user-targeted packages. + - Delete the following user-Virtual File System (VFS) entries: -|Configuration Setting|What does this do?|How should I use it?| -|--- |--- |--- | -|Shared Content Store (SCS) Mode
  • Configurable in Windows PowerShell with Set-AppvClientConfiguration -SharedContentStoreMode 1
    Or configurable with Group Policy, as described in [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md).|When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM).
    This helps to conserve local storage and minimize disk I/O per second (IOPS).|This is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN.| -|PreserveUserIntegrationsOnLogin
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Integration**.
  • Create the DWORD value **PreserveUserIntegrationsOnLogin** with a value of 1.
  • Restart the App-V client service or restart the computer running the App-V Client.|If you have not pre-configured (**Add-AppvClientPackage**) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then reintegrate*.
    For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh.|If you don’t plan to pre-configure every available user package in the base image, use this setting.| -|MaxConcurrentPublishingRefresh
  • Configure in the Registry under **HKEY_LOCAL_MACHINE \ Software \ Microsoft \ AppV \ Client \ Publishing**.
  • Create the DWORD value **MaxConcurrentPublishingrefresh** with the desired maximum number of concurrent publishing refreshes.
  • The App-V client service and computer do not need to be restarted.|This setting determines the number of users that can perform a publishing refresh/sync at the same time. The default setting is no limit.|Limiting the number of concurrent publishing refreshes prevents excessive CPU usage that could impact computer performance. This limit is recommended in an RDS environment, where multiple users can log in to the same computer at the same time and perform a publishing refresh sync.
    If the concurrent publishing refresh threshold is reached, the time required to publish new applications and make them available to end users after they log in could take an indeterminate amount of time.| + - `AppData\Local\Microsoft\AppV\Client\VFS` + - `AppData\Roaming\Microsoft\AppV\Client\VFS` + +- **Storage**: + + - Enable the App-V client as described in [Enable the App-V in-box client](appv-enable-the-app-v-desktop-client.md). + - Enable UE-V and download the App-V Settings Template from the UE-V template Gallery, see the following steps. + - Configure for Shared Content Store (SCS) mode. For more information, see [Deploying the + App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md). + - Configure Preserve User Integrations on Login Registry DWORD. + - Pre-configure all global-targeted packages, for example, **Add-AppvClientPackage**. + - Pre-configure all global-targeted connection groups, for example, **Add-AppvClientConnectionGroup**. + - Pre-publish all global-targeted packages. + +#### Configurations + +For critical App-V Client configurations and for a little more context and how-to, review the following configuration settings: + +- **Shared Content Store (SCS) Mode**: When running the shared content store only publishing data is maintained on hard disk; other virtual application assets are maintained in memory (RAM). This helps to conserve local storage and minimize disk I/O per second (IOPS). + + This setting is recommended when low-latency connections are available between the App-V Client endpoint and the SCS content server, SAN. + + - Configurable in Windows PowerShell: `Set-AppvClientConfiguration -SharedContentStoreMode 1` + - Configurable with Group Policy: See [Deploying the App-V Sequencer and Configuring the Client](appv-deploying-the-appv-sequencer-and-client.md). + +- **PreserveUserIntegrationsOnLogin**: If you have not pre-configured (**Add-AppvClientPackage**) a specific package and this setting is not configured, the App-V Client will de-integrate* the persisted user integrations, then reintegrate*. + + For every package that meets the above conditions, effectively twice the work will be done during publishing/refresh. + + If you don’t plan to pre-configure every available user package in the base image, use this setting. + + - Configure in the Registry under `HKEY_LOCAL_MACHINE\Software\Microsoft\AppV\Client\Integration`. + - Create the DWORD value **PreserveUserIntegrationsOnLogin** with a value of 1. + - Restart the App-V client service or restart the computer running the App-V Client. + +- **MaxConcurrentPublishingRefresh**: This setting determines the number of users that can perform a publishing refresh/sync at the same time. The default setting is no limit. + + Limiting the number of concurrent publishing refreshes prevents excessive CPU usage that could impact computer performance. This limit is recommended in an RDS environment, where multiple users can log in to the same computer at the same time and perform a publishing refresh sync. + + If the concurrent publishing refresh threshold is reached, the time required to publish new applications and make them available to end users after they log in could take an indeterminate amount of time. + + - Configure in the Registry under `HKEY_LOCAL_MACHINE\Software\Microsoft\AppV\Client\Publishing`. + - Create the DWORD value **MaxConcurrentPublishingrefresh** with the desired maximum number of concurrent publishing refreshes. + - The App-V client service and computer do not need to be restarted. ### Configure UE-V solution for App-V Approach @@ -125,8 +176,8 @@ For more information, see: In essence all that is required is to enable the UE-V service and download the following Microsoft authored App-V settings template from the [Microsoft User Experience Virtualization (UE-V) template gallery](https://gallery.technet.microsoft.com/Authored-UE-V-Settings-bb442a33). Register the template. For more information about UE-V templates, see [User Experience Virtualization (UE-V) for Windows client overview](/windows/configuration/ue-v/uev-for-windows). -**Note**   -Without performing an additional configuration step, User Environment Virtualization (UE-V) will not be able to synchronize the Start menu shortcuts (.lnk files) on the target computer. The .lnk file type is excluded by default. +> [!Note] +> Without performing an additional configuration step, User Environment Virtualization (UE-V) will not be able to synchronize the Start menu shortcuts (.lnk files) on the target computer. The .lnk file type is excluded by default. UE-V will only support removing the .lnk file type from the exclusion list in the RDS and VDI scenarios, where every user’s device will have the same set of applications installed to the same location and every .lnk file is valid for all the users’ devices. For example, UE-V would not currently support the following two scenarios, because the net result will be that the shortcut will be valid on one but not all devices. @@ -134,12 +185,10 @@ UE-V will only support removing the .lnk file type from the exclusion list in th - If a user has an application installed on one device but not another with .lnk files enabled. -**Important**   -This topic describes how to change the Windows registry by using Registry Editor. If you change the Windows registry incorrectly, you can cause serious problems that might require you to reinstall Windows. You should make a backup copy of the registry files (System.dat and User.dat) before you change the registry. Microsoft cannot guarantee that the problems that might occur when you change the registry can be resolved. Change the registry at your own risk. +> [!Important] +> This topic describes how to change the Windows registry by using Registry Editor. If you change the Windows registry incorrectly, you can cause serious problems that might require you to reinstall Windows. You should make a backup copy of the registry files (System.dat and User.dat) before you change the registry. Microsoft cannot guarantee that the problems that might occur when you change the registry can be resolved. Change the registry at your own risk. - - -Using the Microsoft Registry Editor (regedit.exe), navigate to **HKEY\_LOCAL\_MACHINE** \\ **Software** \\ **Microsoft** \\ **UEV** \\ **Agent** \\ **Configuration** \\ **ExcludedFileTypes** and remove **.lnk** from the excluded file types. +Using the Microsoft Registry Editor (regedit.exe), navigate to `HKEY\_LOCAL\_MACHINE\Software\Microsoft\UEV\Agent\Configuration\ExcludedFileTypes` and remove `.lnk` from the excluded file types. ## Configure other User Profile Management (UPM) solutions for App-V Approach @@ -155,12 +204,11 @@ To enable an optimized login experience, for example the App-V approach for the - Attaching and detaching a user profile disk (UPD) or similar technology that contains the user integrations. - **Note**   - App-V is supported when using UPD only when the entire profile is stored on the user profile disk. - - App-V packages are not supported when using UPD with selected folders stored in the user profile disk. The Copy on Write driver does not handle UPD selected folders. - - + > [!Note] + > + > App-V is supported when using UPD only when the entire profile is stored on the user profile disk. + > + > App-V packages are not supported when using UPD with selected folders stored in the user profile disk. The Copy on Write driver does not handle UPD selected folders. - Capturing changes to the locations, which constitute the user integrations, prior to session logoff. @@ -202,15 +250,50 @@ Registry – HKEY\_CURRENT\_USER This following is a step-by-step walk-through of the App-V and UPM operations and the expectations users should expect. -|Optimized for Performance|Optimized for Storage| -|--- |--- | -|After implementing this approach in the VDI/RDSH environment, on first login,
  • (Operation) A user-publishing/refresh is initiated. (Expectation) If this is the first time a user has published virtual applications (e.g. non-persistent), this will take the usual duration of a publishing/refresh.
  • (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state.

    On subsequent logins:
  • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.
  • (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away.
  • (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements.
  • (Expectation) If there are no entitlement changes, publishing1 will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity* of virtual applications
  • (Operation) UPM solution will capture user integrations again at logoff. (Expectation) Same as previous.

    ¹ The publishing operation (**Publish-AppVClientPackage**) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps.|After implementing this approach in the VDI/RDSH environment, on first login
  • (Operation) A user-publishing/refresh is initiated. (Expectation)
  • (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state.

    On subsequent logins:
  • (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh.
  • (Operation) Add/refresh must pre-configure all user targeted applications.
  • (Operation) Publishing/refresh will process un-publish and publish operations for changes to user package entitlements.| +- **Performance**: After implementing this approach in the VDI/RDSH environment, on first login, + - (Operation) A user-publishing/refresh is initiated. (Expectation) If this is the first time a user has published virtual applications (e.g. non-persistent), this will take the usual duration of a publishing/refresh. + - (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state. + + **On subsequent logins**: -|Outcome|Outcome| -|--- |--- | -|Because the user integrations are entirely preserved, there will be no work for example, integration for the publishing/refresh to complete. All virtual applications will be available within seconds of login.

    The publishing/refresh will process changes to the users entitled virtual applications which impacts the experience.|Because the add/refresh must re-configure all the virtual applications to the VM, the publishing refresh time on every login will be extended.| + - (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh. + (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away. + - (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements. + + (Expectation) If there are no entitlement changes, publishing1 will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity* of virtual applications + + - (Operation) UPM solution will capture user integrations again at logoff. (Expectation) Same as previous. + + ¹ The publishing operation (**Publish-AppVClientPackage**) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps. + + **Outcome**: + + - Because the user integrations are entirely preserved, there will be no work for example, integration for the publishing/refresh to complete. All virtual applications will be available within seconds of login. + - The publishing/refresh will process changes to the users entitled virtual applications which impacts the experience. + +- **Storage**: After implementing this approach in the VDI/RDSH environment, on first login + + - (Operation) A user-publishing/refresh is initiated. (Expectation) + - If this is the first time a user has published virtual applications (e.g., non-persistent), this will take the usual duration of a publishing/refresh. + - First and subsequent logins will be impacted by pre-configuring of packages (add/refresh). + + - (Operation) After the publishing/refresh, the UPM solution captures the user integrations. + + (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state. + + **On subsequent logins**: + + - (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh. + - (Operation) Add/refresh must pre-configure all user targeted applications. + - (Expectation) This may increase the time to application availability significantly (on the order of 10’s of seconds). + - This will increase the publishing refresh time relative to the number and complexity* of virtual applications. + + - (Operation) Publishing/refresh will process un-publish and publish operations for changes to user package entitlements. + + **Outcome**: Because the add/refresh must re-configure all the virtual applications to the VM, the publishing refresh time on every login will be extended. + ### Impact to Package Life Cycle Upgrading a package is a crucial aspect of the package lifecycle. To help guarantee users have access to the appropriate upgraded (published) or downgraded (un-published) virtual application packages, it is recommended you update the base image to reflect these changes. To understand why review the following section: @@ -418,4 +501,4 @@ The following terms are used when describing concepts and actions related to App ## Related topics -[Application Virtualization (App-V) overview](appv-for-windows.md) \ No newline at end of file +[Application Virtualization (App-V) overview](appv-for-windows.md) From f554f4063bf96ee5487821d140966b28a12d7d9c Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 12:24:29 -0500 Subject: [PATCH 12/36] Fixed numbering --- windows/client-management/mdm/applocker-csp.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md index 2de0a4123d..47fa84cd93 100644 --- a/windows/client-management/mdm/applocker-csp.md +++ b/windows/client-management/mdm/applocker-csp.md @@ -258,19 +258,19 @@ Data type is string. Supported operations are Get, Add, Delete, and Replace. -6. On your phone under **Device discovery**, tap **Pair**. You will get a code (case sensitive). -7. On the browser on the **Set up access page**, enter the code (case sensitive) into the text box and click **Submit**. +1. On your phone under **Device discovery**, tap **Pair**. You will get a code (case sensitive). +2. On the browser on the **Set up access page**, enter the code (case sensitive) into the text box and click **Submit**. The **Device Portal** page opens on your browser. ![device portal screenshot.](images/applocker-screenshot1.png) -8. On the desktop **Device Portal** page, click **Apps** to open the **App Manager**. -9. On the **App Manager** page under **Running apps**, you will see the **Publisher** and **PackageFullName** of apps. +3. On the desktop **Device Portal** page, click **Apps** to open the **App Manager**. +4. On the **App Manager** page under **Running apps**, you will see the **Publisher** and **PackageFullName** of apps. ![device portal app manager.](images/applocker-screenshot3.png) -10. If you do not see the app that you want, look under **Installed apps**. Using the drop- down menu, click on the application and you get the Version, Publisher, and PackageFullName displayed. +5. If you do not see the app that you want, look under **Installed apps**. Using the drop- down menu, click on the application and you get the Version, Publisher, and PackageFullName displayed. ![app manager.](images/applocker-screenshot2.png) @@ -278,7 +278,7 @@ The following table shows the mapping of information to the AppLocker publisher |Device portal data|AppLocker publisher rule field| |--- |--- | -|PackageFullName|ProductName
    The product name is first part of the PackageFullName followed by the version number. In the Windows Camera example, the ProductName is Microsoft.WindowsCamera.| +|PackageFullName|ProductName

    The product name is first part of the PackageFullName followed by the version number. In the Windows Camera example, the ProductName is Microsoft.WindowsCamera.| |Publisher|Publisher| |Version|Version

    This can be used either in the HighSection or LowSection of the BinaryVersionRange.

    HighSection defines the highest version number and LowSection defines the lowest version number that should be trusted. You can use a wildcard for both versions to make a version- independent rule. Using a wildcard for one of the values will provide higher than or lower than a specific version semantics.| @@ -1461,4 +1461,4 @@ In this example, Contoso is the node name. We recommend using a GUID for this no ## Related topics -[Configuration service provider reference](configuration-service-provider-reference.md) \ No newline at end of file +[Configuration service provider reference](configuration-service-provider-reference.md) From 447f1bcd8929bda76a03fe696be8be1c1511ac91 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 12:32:43 -0500 Subject: [PATCH 13/36] Put sample URLs in code tags --- .../mdm/azure-active-directory-integration-with-mdm.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md b/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md index 1ac0f3ab4d..ccbc13402c 100644 --- a/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md +++ b/windows/client-management/mdm/azure-active-directory-integration-with-mdm.md @@ -135,7 +135,7 @@ Use the following steps to register a cloud-based MDM application with Azure AD. 8. Enter the login URL for your MDM service. -9. For the App ID, enter **https://<your\_tenant\_name>/ContosoMDM**, then select OK. +9. For the App ID, enter `https:///ContosoMDM`, then select OK. 10. While still in the Azure portal, select the **Configure** tab of your application. @@ -235,7 +235,7 @@ The Terms of Use endpoint is hosted by the MDM server. During the Azure AD Join ### Redirect to the Terms of Use endpoint -This redirect is a full page redirect to the Terms of User endpoint hosted by the MDM. Here's an example URL, https://fabrikam.contosomdm.com/TermsOfUse. +This redirect is a full page redirect to the Terms of User endpoint hosted by the MDM. Here's an example URL, `https://fabrikam.contosomdm.com/TermsOfUse`. The following parameters are passed in the query string: @@ -260,7 +260,7 @@ The following claims are expected in the access token passed by Windows to the T |Object ID|Identifier of the user object corresponding to the authenticated user.| |UPN|A claim containing the user principal name (UPN) of the authenticated user.| |TID|A claim representing the tenant ID of the tenant. In the example above, it's Fabrikam.| -|Resource|A sanitized URL representing the MDM application. Example,
    [https://fabrikam.contosomdm.com](https://fabrikam.contosomdm.com).| +|Resource|A sanitized URL representing the MDM application. Example: `https://fabrikam.contosomdm.com` | > [!NOTE] From aacc66032a162161ee5688016a3a3eacc343c13a Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 12:54:07 -0500 Subject: [PATCH 14/36] Removed extra --- .../mdm/configuration-service-provider-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index 504e6ed823..8c85cf952f 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -1288,7 +1288,7 @@ The following list shows the CSPs supported in HoloLens devices: - [Policy CSP](policy-configuration-service-provider.md) - [Provisioning CSP (Provisioning only)](provisioning-csp.md) - [Reboot CSP](reboot-csp.md) -- [RemoteWipe CSP](remotewipe-csp.md)5 +- [RemoteWipe CSP](remotewipe-csp.md) - [RootCATrustedCertificates CSP](rootcacertificates-csp.md) - [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md) - [Update CSP](update-csp.md) From e5b19b31f69a7c0f0572014e928769dc45586b87 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:19:36 -0500 Subject: [PATCH 15/36] Removed text from table into bullets --- .../mdm/device-update-management.md | 29 +++++++++++++++---- 1 file changed, 24 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/device-update-management.md b/windows/client-management/mdm/device-update-management.md index 2586da6859..b1d7b62247 100644 --- a/windows/client-management/mdm/device-update-management.md +++ b/windows/client-management/mdm/device-update-management.md @@ -356,11 +356,30 @@ If the **Specify intranet Microsoft update service location** policy is enabled, If the **Allow Telemetry** policy is enabled and the Options value is set to 0, then the **Defer upgrades by**, **Defer updates by** and **Pause Updates and Upgrades** settings have no effect. -|Update category|Maximum deferral|Deferral increment|Update type/notes| -|--- |--- |--- |--- | -|OS upgrade|8 months|1 month|Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5| -|Update|1 month|1 week|
    **Note:**
    If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic.
  • Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441
  • Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4
  • Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F
  • Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828
  • Tools - B4832BD8-E735-4761-8DAF-37F882276DAB
  • Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F
  • Update -
  • CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83
  • Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0| -|Other/cannot defer|No deferral|No deferral|Any update category not enumerated above falls into this category.

    Definition Update - E0789628-CE08-4437-BE74-2495B842F43B| +- **Update category**: OS upgrade + - **Maximum deferral**: 8 months + - **Deferral increment**: 1 month + - **Update type/notes**: Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5 + +- **Update category**: Update + - **Maximum deferral**: 1 month + - **Deferral increment**: 1 week + - **Update type/notes**: If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic. + + - Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441 + - Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4 + - Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F + - Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828 + - Tools - B4832BD8-E735-4761-8DAF-37F882276DAB + - Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F + - Update - CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83 + - Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0 + +- **Update category**: Other/cannot defer + - **Maximum deferral**: No deferral + - **Deferral increment**: No deferral + - **Update type/notes**: Any update category not enumerated above falls into this category. + - Definition Update - E0789628-CE08-4437-BE74-2495B842F43B **Update/DeferUpgradePeriod** > [!NOTE] From 9089f3afd59c73a6b527d0590f4f7dfbee109bdc Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:30:40 -0500 Subject: [PATCH 16/36] Added
    tags to table --- windows/client-management/mdm/get-product-package.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/client-management/mdm/get-product-package.md b/windows/client-management/mdm/get-product-package.md index 7c5c2e077b..d08a8b434a 100644 --- a/windows/client-management/mdm/get-product-package.md +++ b/windows/client-management/mdm/get-product-package.md @@ -36,9 +36,7 @@ The following parameters may be specified in the request URI. |Error code|Description|Retry|Data field|Details| |--- |--- |--- |--- |--- | -|400|Invalid parameters|No|Parameter name -Reason: Invalid parameter -Details: String|Can be productId, skuId, or packageId| +|400|Invalid parameters|No|Parameter name

    Reason: Invalid parameter

    Details: String|Can be productId, skuId, or packageId| |404|Not found|||Item type: Product/SKU| |409|Conflict||Reason: Not owned|| From 1954e1ff6e2d0cb001bd0bbf7419c9a9fe28e630 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:32:10 -0500 Subject: [PATCH 17/36] Added
    tags to table --- windows/client-management/mdm/get-product-packages.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/client-management/mdm/get-product-packages.md b/windows/client-management/mdm/get-product-packages.md index 9c3e90586c..6dede5eb3e 100644 --- a/windows/client-management/mdm/get-product-packages.md +++ b/windows/client-management/mdm/get-product-packages.md @@ -36,9 +36,7 @@ The following parameters may be specified in the request URI. |Error code|Description|Retry|Data field| |--- |--- |--- |--- | -|400|Invalid parameters|No|Parameter name -Reason: Missing parameter or invalid parameter -Details: String| +|400|Invalid parameters|No|Parameter name

    Reason: Missing parameter or invalid parameter

    Details: String| |404|Not found||| |409|Conflict||Reason: Not owned| From bbb4270b46108837b52d8b5321684935a1c32d95 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:34:38 -0500 Subject: [PATCH 18/36] Added
    tags to table --- windows/client-management/mdm/get-seat.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/get-seat.md b/windows/client-management/mdm/get-seat.md index 82f7c29f61..10a3f3ea3b 100644 --- a/windows/client-management/mdm/get-seat.md +++ b/windows/client-management/mdm/get-seat.md @@ -43,11 +43,8 @@ The response body contains [SeatDetails](data-structures-windows-store-for-busin |Error code|Description|Retry|Data field|Details| |--- |--- |--- |--- |--- | -|400|Invalid parameters|No|Parameter name -Reason: Missing parameter or invalid parameter -Details: String|Invalid can include productId, skuId or username| -|404|Not found|||ItemType: Inventory, User, Seat -Values: ProductId/SkuId, UserName, ProductId/SkuId/Username| +|400|Invalid parameters|No|Parameter name

    Reason: Missing parameter or invalid parameter

    Details: String|Invalid can include productId, skuId or username| +|404|Not found|||ItemType: Inventory, User, Seat

    Values: ProductId/SkuId, UserName, ProductId/SkuId/Username| |409|Conflict||Reason: Not online||   From c5bf48081958f54ab3095f810c9c1e3b54f0f1ae Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:36:21 -0500 Subject: [PATCH 19/36] Added
    tags to table --- .../client-management/mdm/get-seats-assigned-to-a-user.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/get-seats-assigned-to-a-user.md b/windows/client-management/mdm/get-seats-assigned-to-a-user.md index 123c7969ce..099ad10917 100644 --- a/windows/client-management/mdm/get-seats-assigned-to-a-user.md +++ b/windows/client-management/mdm/get-seats-assigned-to-a-user.md @@ -43,9 +43,8 @@ The response body contain [SeatDetailsResultSet](data-structures-windows-store-f |Error code|Description|Retry|Data field| |--- |--- |--- |--- | -|400|Invalid parameters|No|Parameter name
    Reason: Invalid parameter
    Details: String| -|404|Not found||Item type: User -Values: UserName| +|400|Invalid parameters|No|Parameter name

    Reason: Invalid parameter

    Details: String| +|404|Not found||Item type: User

    Values: UserName|   From 7e81b99142a8c7c3590e9878f0232b84069c7b19 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 13:42:40 -0500 Subject: [PATCH 20/36] Removed extra spacing to rebuild file --- windows/client-management/mdm/get-seat.md | 8 -------- 1 file changed, 8 deletions(-) diff --git a/windows/client-management/mdm/get-seat.md b/windows/client-management/mdm/get-seat.md index 10a3f3ea3b..920c40c4e5 100644 --- a/windows/client-management/mdm/get-seat.md +++ b/windows/client-management/mdm/get-seat.md @@ -46,11 +46,3 @@ The response body contains [SeatDetails](data-structures-windows-store-for-busin |400|Invalid parameters|No|Parameter name

    Reason: Missing parameter or invalid parameter

    Details: String|Invalid can include productId, skuId or username| |404|Not found|||ItemType: Inventory, User, Seat

    Values: ProductId/SkuId, UserName, ProductId/SkuId/Username| |409|Conflict||Reason: Not online|| -  - -  - - - - - From 5e1c6b77383742f75ec0847a0a4da1461f4c4892 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:15:33 -0800 Subject: [PATCH 21/36] Correct note styles --- .../mdm/enterpriseappmanagement-csp.md | 12 +++++++----- .../mdm/enterpriseassignedaccess-csp.md | 9 ++++++--- 2 files changed, 13 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/enterpriseappmanagement-csp.md b/windows/client-management/mdm/enterpriseappmanagement-csp.md index fd9d3891b3..9d5a10633f 100644 --- a/windows/client-management/mdm/enterpriseappmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappmanagement-csp.md @@ -17,7 +17,8 @@ ms.date: 06/26/2017 The EnterpriseAppManagement enterprise configuration service provider is used to handle enterprise application management tasks such as installing an enterprise application token, the first auto-downloadable app link, querying installed enterprise applications (name and version), auto updating already installed enterprise applications, and removing all installed enterprise apps (including the enterprise app token) during unenrollment. -> **Note**   The EnterpriseAppManagement CSP is only supported in Windows 10 Mobile. +> [!NOTE] +> The EnterpriseAppManagement CSP is only supported in Windows 10 Mobile. @@ -81,7 +82,8 @@ Optional. The character string that contains the search criteria to search for t Supported operations are Get and Add. -> **Note**   Do NOT use Subject=CN%3DB1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\\x00. The server must replace this value in the supplied client certificate. If your server returns a client certificate containing the same Subject value, this can cause unexpected behavior. The server should always override the subject value and not use the default device-provided Device ID Subject= Subject=CN%3DB1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\\x00 +> [!NOTE] +> Do NOT use Subject=CN%3DB1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\\x00. The server must replace this value in the supplied client certificate. If your server returns a client certificate containing the same Subject value, this can cause unexpected behavior. The server should always override the subject value and not use the default device-provided Device ID Subject= Subject=CN%3DB1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\\x00 @@ -431,10 +433,10 @@ Install or update the installed app with the product ID “{B316008A-141D-4A79-8 To perform an XAP update, create the Name, URL, Version, and DownloadInstall nodes first, then perform an “execute” on the “DownloadInstall” node (all within an “Atomic” operation). If the application does not exist, the application will be silently installed without any user interaction. If the application cannot be installed, the user will be notified with an Alert dialog. -> **Note**   +> [!NOTE]   > 1. If a previous app-update node existed for this product ID (the node can persist for up to 1 week or 7 days after an installation has completed), then a 418 (already exist) error would be returned on the “Add”. To get around the 418 error, the server should issue a Replace command for the Name, URL, and Version nodes, and then execute on the “DownloadInstall” (within an “Atomic” operation). - -2. The application product ID curly braces need to be escaped where { is %7B and } is %7D. +> +> 2. The application product ID curly braces need to be escaped where { is %7B and } is %7D. diff --git a/windows/client-management/mdm/enterpriseassignedaccess-csp.md b/windows/client-management/mdm/enterpriseassignedaccess-csp.md index 19e286781b..8d9ab483ca 100644 --- a/windows/client-management/mdm/enterpriseassignedaccess-csp.md +++ b/windows/client-management/mdm/enterpriseassignedaccess-csp.md @@ -17,7 +17,8 @@ ms.date: 07/12/2017 The EnterpriseAssignedAccess configuration service provider allows IT administrators to configure settings, such as language and themes, lock down a device, and configure custom layouts on a device. For example, the administrator can lock down a device so that only applications specified in an Allow list are available. Apps not on the Allow list remain installed on the device, but are hidden from view and blocked from launching. -> **Note**   The EnterpriseAssignedAccess CSP is only supported in Windows 10 Mobile. +> [!NOTE] +> The EnterpriseAssignedAccess CSP is only supported in Windows 10 Mobile. For more information about how to interact with the lockdown XML at runtime, see [**DeviceLockdownProfile class**](/uwp/api/Windows.Embedded.DeviceLockdown.DeviceLockdownProfile). @@ -789,7 +790,8 @@ The culture code that identifies the language to display on a device, and specif The language setting is configured in the Default User profile only. -> **Note**  Apply the Locale ID only after the corresponding language packs are built into and supported for the OS image running on the device. The specified language will be applied as the phone language and a restart may be required. +> [!NOTE] +> Apply the Locale ID only after the corresponding language packs are built into and supported for the OS image running on the device. The specified language will be applied as the phone language and a restart may be required. Supported operations are Get and Replace. @@ -798,7 +800,8 @@ Supported operations are Get and Replace. The XML examples in this section show how to perform various tasks by using OMA client provisioning. -> **Note**  These examples are XML snippets and do not include all sections that are required for a complete lockdown XML file. +> [!NOTE] +> These examples are XML snippets and do not include all sections that are required for a complete lockdown XML file. From d6a8f600c666be0de37613adc20a6da7fe31a98a Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:16:57 -0800 Subject: [PATCH 22/36] Correct list, from ordered to unordered --- windows/client-management/mdm/enterpriseappmanagement-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/enterpriseappmanagement-csp.md b/windows/client-management/mdm/enterpriseappmanagement-csp.md index 9d5a10633f..edba999d96 100644 --- a/windows/client-management/mdm/enterpriseappmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappmanagement-csp.md @@ -434,9 +434,9 @@ Install or update the installed app with the product ID “{B316008A-141D-4A79-8 To perform an XAP update, create the Name, URL, Version, and DownloadInstall nodes first, then perform an “execute” on the “DownloadInstall” node (all within an “Atomic” operation). If the application does not exist, the application will be silently installed without any user interaction. If the application cannot be installed, the user will be notified with an Alert dialog. > [!NOTE]   -> 1. If a previous app-update node existed for this product ID (the node can persist for up to 1 week or 7 days after an installation has completed), then a 418 (already exist) error would be returned on the “Add”. To get around the 418 error, the server should issue a Replace command for the Name, URL, and Version nodes, and then execute on the “DownloadInstall” (within an “Atomic” operation). +> - If a previous app-update node existed for this product ID (the node can persist for up to 1 week or 7 days after an installation has completed), then a 418 (already exist) error would be returned on the “Add”. To get around the 418 error, the server should issue a Replace command for the Name, URL, and Version nodes, and then execute on the “DownloadInstall” (within an “Atomic” operation). > -> 2. The application product ID curly braces need to be escaped where { is %7B and } is %7D. +> -The application product ID curly braces need to be escaped where { is %7B and } is %7D. From f136bda35ce906b310cd0e89561199d149f652f6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:24:33 -0800 Subject: [PATCH 23/36] Corrected code block label to a valid type Valid types are listed here: https://review.docs.microsoft.com/en-us/help/contribute/metadata-taxonomies?branch=master#dev-lang --- .../mdm/enterprisedataprotection-csp.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/enterprisedataprotection-csp.md b/windows/client-management/mdm/enterprisedataprotection-csp.md index b999a6dbee..07388f0b79 100644 --- a/windows/client-management/mdm/enterprisedataprotection-csp.md +++ b/windows/client-management/mdm/enterprisedataprotection-csp.md @@ -30,7 +30,8 @@ To learn more about WIP, see the following articles: - [General guidance and best practices for Windows Information Protection (WIP)](/windows/security/information-protection/windows-information-protection/guidance-and-best-practices-wip) The following shows the EnterpriseDataProtection CSP in tree format. -``` + +```console ./Device/Vendor/MSFT EnterpriseDataProtection ----Settings @@ -45,6 +46,7 @@ EnterpriseDataProtection --------EDPShowIcons ----Status ``` + **./Device/Vendor/MSFT/EnterpriseDataProtection** The root node for the CSP. @@ -71,7 +73,6 @@ Changing the primary enterprise ID is not supported and may cause unexpected beh > [!Note] > The client requires domain name to be canonical, otherwise the setting will be rejected by the client. - Here are the steps to create canonical domain names: @@ -111,7 +112,6 @@ The CSP checks the current edition and hardware support (TPM), and returns an er > [!Note] > This setting is only supported in Windows 10 Mobile. - Supported operations are Add, Get, Replace, and Delete. Value type is integer. @@ -124,7 +124,7 @@ Specifies a recovery certificate that can be used for data recovery of encrypted DRA information from MDM policy must be a serialized binary blob identical to what we expect from GP. The binary blob is the serialized version of following structure: -``` syntax +```cpp // //  Recovery Policy Data Structures // @@ -243,7 +243,6 @@ typedef enum _PUBLIC_KEY_SOURCE_TAG { EfsCertificate, EfsCertificateThumbprint } PUBLIC_KEY_SOURCE_TAG, *PPUBLIC_KEY_SOURCE_TAG; - ``` For EFSCertificate KeyTag, it is expected to be a DER ENCODED binary certificate. From 5365950ead00043ac91cfda01bf8e755bf464c0e Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:29:34 -0800 Subject: [PATCH 24/36] Removed spaces after "> [!NOTE]" to fix [Warning: invalid-note-section] --- windows/client-management/mdm/enterpriseappmanagement-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enterpriseappmanagement-csp.md b/windows/client-management/mdm/enterpriseappmanagement-csp.md index edba999d96..e175307cbd 100644 --- a/windows/client-management/mdm/enterpriseappmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappmanagement-csp.md @@ -433,7 +433,7 @@ Install or update the installed app with the product ID “{B316008A-141D-4A79-8 To perform an XAP update, create the Name, URL, Version, and DownloadInstall nodes first, then perform an “execute” on the “DownloadInstall” node (all within an “Atomic” operation). If the application does not exist, the application will be silently installed without any user interaction. If the application cannot be installed, the user will be notified with an Alert dialog. -> [!NOTE]   +> [!NOTE] > - If a previous app-update node existed for this product ID (the node can persist for up to 1 week or 7 days after an installation has completed), then a 418 (already exist) error would be returned on the “Add”. To get around the 418 error, the server should issue a Replace command for the Name, URL, and Version nodes, and then execute on the “DownloadInstall” (within an “Atomic” operation). > > -The application product ID curly braces need to be escaped where { is %7B and } is %7D. From c54fd2f39b848ce6e5dddb291d104fa22a1c1b6f Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:37:14 -0800 Subject: [PATCH 25/36] Fix misformatted bullet --- windows/client-management/mdm/enterpriseappmanagement-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enterpriseappmanagement-csp.md b/windows/client-management/mdm/enterpriseappmanagement-csp.md index e175307cbd..1910df9821 100644 --- a/windows/client-management/mdm/enterpriseappmanagement-csp.md +++ b/windows/client-management/mdm/enterpriseappmanagement-csp.md @@ -436,7 +436,7 @@ To perform an XAP update, create the Name, URL, Version, and DownloadInstall nod > [!NOTE] > - If a previous app-update node existed for this product ID (the node can persist for up to 1 week or 7 days after an installation has completed), then a 418 (already exist) error would be returned on the “Add”. To get around the 418 error, the server should issue a Replace command for the Name, URL, and Version nodes, and then execute on the “DownloadInstall” (within an “Atomic” operation). > -> -The application product ID curly braces need to be escaped where { is %7B and } is %7D. +> - The application product ID curly braces need to be escaped where { is %7B and } is %7D. From d638609390c896c0db3596f881cc8feadd234855 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 10 Nov 2021 12:39:45 -0800 Subject: [PATCH 26/36] Add valid label to code block --- windows/client-management/mdm/enterpriseassignedaccess-csp.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enterpriseassignedaccess-csp.md b/windows/client-management/mdm/enterpriseassignedaccess-csp.md index 8d9ab483ca..db8f48e055 100644 --- a/windows/client-management/mdm/enterpriseassignedaccess-csp.md +++ b/windows/client-management/mdm/enterpriseassignedaccess-csp.md @@ -23,7 +23,8 @@ The EnterpriseAssignedAccess configuration service provider allows IT administra For more information about how to interact with the lockdown XML at runtime, see [**DeviceLockdownProfile class**](/uwp/api/Windows.Embedded.DeviceLockdown.DeviceLockdownProfile). The following shows the EnterpriseAssignedAccess configuration service provider in tree format as used by both the Open Mobile Alliance (OMA) Device Management (DM) and OMA Client Provisioning. -``` + +```console ./Vendor/MSFT EnterpriseAssignedAccess ----AssignedAccess @@ -39,6 +40,7 @@ EnterpriseAssignedAccess ----Locale --------Language ``` + The following list shows the characteristics and parameters. **./Vendor/MSFT/EnterpriseAssignedAccess/** From faa9ed2d64a96aef022239e4bed51e81d326df89 Mon Sep 17 00:00:00 2001 From: Mandi Ohlinger Date: Wed, 10 Nov 2021 18:55:38 -0500 Subject: [PATCH 27/36] Fixed formatting issues --- .../app-v/appv-performance-guidance.md | 39 +++++++++++-------- 1 file changed, 22 insertions(+), 17 deletions(-) diff --git a/windows/application-management/app-v/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md index 9465ab32da..1c1e8d7d21 100644 --- a/windows/application-management/app-v/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -254,19 +254,21 @@ This following is a step-by-step walk-through of the App-V and UPM operations an - (Operation) A user-publishing/refresh is initiated. (Expectation) If this is the first time a user has published virtual applications (e.g. non-persistent), this will take the usual duration of a publishing/refresh. - (Operation) After the publishing/refresh, the UPM solution captures the user integrations.
  • (Expectation) Depending on how the UPM solution is configured, this may occur as part of the logoff process. This will incur the same/similar overhead as persisting the user state. - **On subsequent logins**: + **On subsequent logins**: - - (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh. + - (Operation) UPM solution applies the user integrations to the system prior to publishing/refresh. - (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away. + (Expectation) There will be shortcuts present on the desktop, or in the start menu, which work immediately. When the publishing/refresh completes (i.e., package entitlements change), some may go away. - - (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements. + - (Operation) Publishing/refresh will process un-publish and publish operations for changes in user package entitlements. - (Expectation) If there are no entitlement changes, publishing1 will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity* of virtual applications - - - (Operation) UPM solution will capture user integrations again at logoff. (Expectation) Same as previous. + (Expectation) If there are no entitlement changes, publishing will complete in seconds. Otherwise, the publishing/refresh will increase relative to the number and complexity of virtual applications - ¹ The publishing operation (**Publish-AppVClientPackage**) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps. + The publishing operation (**Publish-AppVClientPackage**) adds entries to the user catalog, maps entitlement to the user, identifies the local store, and finishes by completing any integration steps. + + - (Operation) UPM solution will capture user integrations again at logoff. + + (Expectation) Same as previous. **Outcome**: @@ -275,9 +277,12 @@ This following is a step-by-step walk-through of the App-V and UPM operations an - **Storage**: After implementing this approach in the VDI/RDSH environment, on first login - - (Operation) A user-publishing/refresh is initiated. (Expectation) - - If this is the first time a user has published virtual applications (e.g., non-persistent), this will take the usual duration of a publishing/refresh. - - First and subsequent logins will be impacted by pre-configuring of packages (add/refresh). + - (Operation) A user-publishing/refresh is initiated. + + (Expectation): + + - If this is the first time a user has published virtual applications (e.g., non-persistent), this will take the usual duration of a publishing/refresh. + - First and subsequent logins will be impacted by pre-configuring of packages (add/refresh). - (Operation) After the publishing/refresh, the UPM solution captures the user integrations. @@ -388,8 +393,8 @@ Removing FB1 does not require the original application installer. After completi "C:\\UpgradedPackages" - **Note**   - This cmdlet requires an executable (.exe) or batch file (.bat). You must provide an empty (does nothing) executable or batch file. + > [!Note] + > This cmdlet requires an executable (.exe) or batch file (.bat). You must provide an empty (does nothing) executable or batch file. |Step|Considerations|Benefits|Tradeoffs| |--- |--- |--- |--- | @@ -438,15 +443,15 @@ For documentation on How to Apply a Dynamic Configuration, see: - Open AppxManifest.xml and locate the following: - ``` + ```xml ``` - **Note**  If there are fonts marked as **DelayLoad**, those will not impact first launch. - + > [!Note] + > If there are fonts marked as **DelayLoad**, those will not impact first launch. ### Excluding virtual fonts from the package @@ -456,7 +461,7 @@ Use the dynamic configuration file that best suits the user scope – deployment Fonts -``` +```xml -->