+
Windows 10, version 1703 (also called the Creators Update), introduces the following changes for Microsoft Surface Hub:
## New settings
diff --git a/devices/surface/docfx.json b/devices/surface/docfx.json
index e14912dea9..ff7e999dc3 100644
--- a/devices/surface/docfx.json
+++ b/devices/surface/docfx.json
@@ -19,7 +19,8 @@
"ROBOTS": "INDEX, FOLLOW",
"ms.technology": "windows",
"ms.topic": "article",
- "ms.author": "jdecker"
+ "ms.author": "jdecker",
+ "ms.date": "05/09/2017"
},
"externalReference": [
],
diff --git a/education/docfx.json b/education/docfx.json
index d0d03f4aea..edff4fd2ac 100644
--- a/education/docfx.json
+++ b/education/docfx.json
@@ -19,7 +19,8 @@
"ms.author": "celested",
"audience": "windows-education",
"ms.topic": "article",
- "breadcrumb_path": "/education/breadcrumb/toc.json"
+ "breadcrumb_path": "/education/breadcrumb/toc.json",
+ "ms.date": "05/09/2017"
},
"externalReference": [
],
diff --git a/education/get-started/get-started-with-microsoft-education.md b/education/get-started/get-started-with-microsoft-education.md
index d82cbe9b63..a93c3a283c 100644
--- a/education/get-started/get-started-with-microsoft-education.md
+++ b/education/get-started/get-started-with-microsoft-education.md
@@ -1,7 +1,7 @@
---
title: Deploy and manage a full cloud IT solution with Microsoft Education
description: Learn how to use the new Microsoft Education system to set up a cloud infrastructure for your school, acquire devices and apps, and configure and deploy policies to your Windows 10 devices.
-keywords: education, Microsoft Education, Microsoft Education system, full cloud IT solution, school, deploy, setup, manage, Windows 10, Intune for Education, Office 365 for Education, Microsoft Store for Education, Azure AD, Set up School PCs
+keywords: education, Microsoft Education, full cloud IT solution, school, deploy, setup, manage, Windows 10, Intune for Education, Office 365 for Education, School Data Sync, Microsoft Teams, Microsoft Store for Education, Azure AD, Set up School PCs
ms.prod: w10
ms.mktglfcycl: deploy
ms.sitesec: library
@@ -27,6 +27,7 @@ Hello, IT administrators! In this walkthrough, we'll show you how you can quickl
- **Office 365 for Education** provides online apps for work from anywhere and desktop apps for advanced functionality, built for working together and available across devices, and it's free for schools, teachers, and students
- **School Data Sync** to help automate the process for importing and integrating School Information System (SIS) data that you can use with Office 365
- **OneNote Class Notebook** to organize course content, create and deliver interactive lessons to some or all students, collaborate and provide private feedback to individual students, and connect with major LMS and SIS partners for assignment workflow
+- **Microsoft Teams** to bring conversations, content, and apps together in one place and create collaborate classrooms, connect in professional learning communities, and communicate with school staff
- **Learning Tools** are moving beyond the OneNote desktop app and is now available in Office Lens, OneNote Online, Word Online, and Word desktop
- **Whiteboard** to create interactive lessons on the big screen, share and collaborate real-time by connecting to Class Notebook and Classroom
- **Windows 10, version 1703 (Creators Update)** which brings 3D for everyone and other new and updated Windows features
@@ -43,6 +44,7 @@ Go to the Mi
In this walkthrough, we'll show you the basics on how to:
- Acquire an Office 365 for Education tenant, if you don't already have one
- Import school, student, teacher, and class data using School Data Sync (SDS)
+- Deploy Microsoft Teams to enable groups and teams in your school to communicate and collaborate
- Manage apps and settings deployment with Intune for Education
- Acquire additional apps in Microsoft Store for Education
- Use the Set up School PCs app to quickly set up and provision your Windows 10 education devices
@@ -52,7 +54,7 @@ This diagram shows a high-level view of what we cover in this walkthrough. The n
**Figure 1** - Microsoft Education IT administrator workflow
-
+
## Prerequisites
Complete these tasks before you start the walkthrough:
@@ -116,7 +118,7 @@ Already have an Office 365 for Education verified tenant? Just sign in with your
3. Enter your Office 365 global admin credentials to apply the Intune for Education trial to your tenant.
-4. Skip ahead and follow the instructions in the walkthrough beginning with [3. Configure Microsoft Store for Education](#3-configure-microsoft-store-for-education).
+4. Skip ahead and follow the instructions in the walkthrough beginning with [4. Configure Microsoft Store for Education](#4-configure-microsoft-store-for-education).
## 1. Set up a new Office 365 for Education tenant
@@ -131,7 +133,7 @@ Don't have an Office 365 for Education verified tenant or just starting out? Fol
-3. Save your sign-in info so you can use it to sign into https://portal.office.com (the sign-in page). Click **You're ready to go...**
+3. Save your sign-in info so you can use it to sign in to https://portal.office.com (the sign-in page). Click **You're ready to go...**
4. In the **Verify eligibility for Microsoft Office 365 for Education** screen:
1. Add your domain name and follow the steps to confirm ownership of the domain.
2. Choose your DNS hosting provider to see step-by-step instructions on how to confirm that you own the domain.
@@ -140,7 +142,7 @@ Don't have an Office 365 for Education verified tenant or just starting out? Fol
You may need to fill in other information to provide that you qualify for an education tenant. Provide and submit the info to Microsoft to continue verification for your tenant.
-As part of setting up a basic cloud infrastructure, you don't need to complete the rest of the Office 365 for Education setup so we will skip the rest of setup for now and start importing school data. You can pick up where you left off with Office 365 for Education setup once you've completed the rest of the steps in the walkthrough. See [6.3 Complete Office 365 for Education setup](#63-complete-office-365-education-setup) for info.
+As part of setting up a basic cloud infrastructure, you don't need to complete the rest of the Office 365 for Education setup so we will skip the rest of setup for now and start importing school data. You can pick up where you left off with Office 365 for Education setup once you've completed the rest of the steps in the walkthrough. See [7.3 Complete Office 365 for Education setup](#73-complete-office-365-education-setup) for info.
## 2. Use School Data Sync to import student data
@@ -240,7 +242,7 @@ The Classroom application is retired, but you will need to assign the Classroom
3. Select the domain for the schools/sections. This domain will be used for the Section email addresses created during setup. If you have more than one domain, make sure you select the appropriate domain for the sync profile and subsequent sections being created.
4. In the **Select school and section properties** section, ensure the attributes that have been automatically selected for you align to your CSV files. If you select additional properties, or deselect any properties, make sure you have the properties and values contained within the CSV files. For the walkthrough, you don't have to change the default.
5. In the **Sync option for Section Group Display Name**, check the box if you want to allow teachers to overwrite the section names. Otherwise, SDS will always reset the display name value for sections to the value contained within the CSV files.
- 6. In the **License Options** section, check the box to allow users being created to receive an Office 365 license.
+ 6. In the **License Options** section, check the box to enable the Classroom Preview license for all synced students and teachers within the sync profile.
7. Check the **Intune for Education** checkbox to allow users to receive the Intune for Education license and to create the SDS dynamic groups and security groups, which be used within Intune for Education.
8. Click **Next**.
@@ -295,35 +297,68 @@ The Classroom application is retired, but you will need to assign the Classroom
That's it for importing sample school data using SDS.
-## 3. Configure Microsoft Store for Education
+## 3. Enable Microsoft Teams for your school
+Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. Because it's built on Office 365, schools benefit from integration with their familiar Office apps and services. Your institution can use Microsoft Teams to create collaborative classrooms, connect in professional learning communities, and communicate with school staff all from a single experience in Office 365 for Education.
+
+To get started, IT administrators need to use the Office 365 Admin Center to enable Microsoft Teams for your school.
+
+**Enable Microsoft Teams for your school**
+
+1. Sign in to Office 365 with your work or school account.
+2. Click **Admin** to go to the Office 365 admin center.
+3. Go to **Settings > Services & add-ins**.
+4. On the **Services & add-ins** page, select **Microsoft Teams**.
+
+ **Figure 14** - Select Microsoft Teams from the list of services & add-ins
+
+ 
+
+5. On the Microsoft Teams settings screen, select the license that you want to configure, **Student** or **Faculty and Staff**.
+
+ **Figure 15** - Select the license that you want to configure
+
+ 
+
+6. After you select the license type, set the toggle to turn on Microsoft Teams for your organization.
+
+ **Figure 16** - Turn on Microsoft Teams for your organization
+
+ 
+
+7. Click **Save**.
+
+You can find more info about how to control which users in your school can use Microsoft Teams, turn off group creation, configure tenant-level settings, and more by reading the *Guide for IT admins** getting started guide in the Meet Microsoft Teams page.
+
+## 4. Configure Microsoft Store for Education
You'll need to configure Microsoft Store for Education to accept the services agreement and make sure your Microsoft Store account is associated with Intune for Education.
**Associate your Microsoft Store account with Intune for Education**
-1. Sign into Microsoft Store for Education.
+
+1. Sign in to Microsoft Store for Education.
2. Accept the Microsoft Store for Business and Education Services Agreement.
This will take you to the Microsoft Store for Education portal.
- **Figure 14** - Microsoft Store for Education portal
+ **Figure 17** - Microsoft Store for Education portal
3. In the Microsoft Store portal, click **Manage** to go to the Microsoft Store **Overview** page.
4. Find the **Overview** page, find the **Store settings** tile and click **Management tools**.
- **Figure 15** - Select management tools from the list of Store settings options
+ **Figure 18** - Select management tools from the list of Store settings options
4. In the **Management tools** page, find **Microsoft Intune** on the list and click **Activate** to get Intune for Education ready for use with Microsoft Store for Education.
- **Figure 16** - Activate Intune for Education as the management tool
+ **Figure 19** - Activate Intune for Education as the management tool
Your Microsoft Store for Education account is now linked to Intune for Education so let's set that up next.
-## 4. Use Intune for Education to manage groups, apps, and settings
+## 5. Use Intune for Education to manage groups, apps, and settings
Intune for Education is a streamlined device management solution for educational institutions that can be used to quickly set up and manage Windows 10 devices for your school. It provides a new streamlined UI with the enterprise readiness and resiliency of the Intune service. You can learn more about Intune for Education by reading the Intune for Education documentation.
### Example - Set up Intune for Education, buy apps from the Store, and install the apps
@@ -351,20 +386,20 @@ Intune for Education provides an **Express configuration** option so you can get
1. Log into the Intune for Education console. You will see the Intune for Education dashboard once you're logged in.
- **Figure 17** - Intune for Education dashboard
+ **Figure 20** - Intune for Education dashboard
2. On the dashboard, click **Launch Express Configuration**, or select the **Express configuration** option on the menu on the left.
3. In the **Welcome to Intune for Education** screen, click **Get started**.
- **Figure 18** - Click Get started to set up Intune for Education
+ **Figure 21** - Click Get started to set up Intune for Education
4. In the **Get school information (optional)** screen, it should indicate that SDS is already configured. Click **Next**.
- **Figure 19** - SDS is configured
+ **Figure 22** - SDS is configured
@@ -377,7 +412,7 @@ Intune for Education provides an **Express configuration** option so you can get
> [!TIP]
> At the top of the screen, did you notice the **Choose group** button change to a green check mark? This means we are done with that step. If you change your mind or need to make changes, simply click on the button to go back to that step. Try it!
>
- > **Figure 20** - Click on the buttons to go back to that step
+ > **Figure 23** - Click on the buttons to go back to that step
>
> 
@@ -390,7 +425,7 @@ Intune for Education provides an **Express configuration** option so you can get
> [!TIP]
> Web apps are pushed as links in the Windows Start menu under **All apps**. If you want apps to appear in Microsoft Edge browser tabs, use the **Homepages** setting for Microsoft Edge through **Express configuration** or **Manage Users and Devices**.
- **Figure 21** - Choose the apps that you want to install for the group
+ **Figure 24** - Choose the apps that you want to install for the group
@@ -400,7 +435,7 @@ Intune for Education provides an **Express configuration** option so you can get
8. In the **Choose settings** screen, we will set the settings to apply to the group. Click the reverse caret (downward-facing arrow) to expand the settings group and get more information about each setting in that settings group.
- **Figure 22** - Expand the settings group to get more details
+ **Figure 25** - Expand the settings group to get more details
@@ -408,20 +443,20 @@ Intune for Education provides an **Express configuration** option so you can get
- In the **Microsoft Edge settings** group, change the **Do-Not-Track headers** setting to **Require**.
- In the **App settings** group, change the **Microsoft Store for Business apps** setting to **Block**, and then set the **Require Microsoft Store for Business apps to be installed from private store** to **Require**.
- **Figure 23** - Set some additional settings
+ **Figure 26** - Set some additional settings
10. Click **Next**. In the **Review** screen, you will see a summary of the apps and settings you selected to apply.
- **Figure 24** - Review the group, apps, and settings you configured
+ **Figure 27** - Review the group, apps, and settings you configured
11. Click **Save** to end express configuration.
12. You will see the **You're done!** screen which lets you choose one of two options.
- **Figure 25** - All done with Intune for Education express configuration
+ **Figure 28** - All done with Intune for Education express configuration
@@ -438,13 +473,13 @@ Intune for Education provides an **Express configuration** option so you can get
1. In the Intune for Education console, click **Apps** from the menu on the left.
- **Figure 26** - Click on **Apps** to see the list of apps for your tenant
+ **Figure 29** - Click on **Apps** to see the list of apps for your tenant
2. In the **Store apps** section, click **+ New app**. This will take you to the Microsoft Store for Education portal and you will already be signed in.
- **Figure 27** - Select the option to add a new Store app
+ **Figure 30** - Select the option to add a new Store app
@@ -463,7 +498,7 @@ Intune for Education provides an **Express configuration** option so you can get
For example, if you bought Duolingo and Khan Academy, they will show up in your inventory along with the apps that Microsoft automatically provisioned for your education tenant.
- **Figure 28** - Apps inventory in Microsoft Store for Education
+ **Figure 31** - Apps inventory in Microsoft Store for Education
@@ -478,40 +513,40 @@ Now that you've bought the apps, use Intune for Education to specify the group t
1. In the Intune for Education console, click the **Groups** option from the menu on the left.
- **Figure 29** - Groups page in Intune for Education
+ **Figure 32** - Groups page in Intune for Education
2. In the **Groups** page, select **All Users** from the list of groups on the left, and then click **Users** in the taskbar at the top of the **All Users** page.
- **Figure 30** - List of all users in the tenant
+ **Figure 33** - List of all users in the tenant
3. In the taskbar at the top, select **Apps** and then click **Edit apps** to see a list of available apps.
- **Figure 31** - Edit apps to assign them to users
+ **Figure 34** - Edit apps to assign them to users
4. Select the apps to deploy to the group. A blue checkmark will appear next to the apps you select.
- **Figure 32** - Select the apps to deploy to the group
+ **Figure 35** - Select the apps to deploy to the group
5. Once you're done, click **Save** at the bottom of the page to deploy the selected apps to the group.
6. You'll be notified that app assignments are being updated. The updated **All Users** groups page now include the apps you selected.
- **Figure 33** - Updated list of assigned apps
+ **Figure 36** - Updated list of assigned apps
You're now done assigning apps to all users in your tenant. It's time to set up your Windows 10 device(s) and check that your cloud infrastructure is correctly set up and your apps are being pushed to your devices from the cloud.
-## 5. Set up Windows 10 devices
+## 6. Set up Windows 10 devices
-### 5.1 Set up devices using Set up School PCs or Windows OOBE
+### 6.1 Set up devices using Set up School PCs or Windows OOBE
We recommend using the latest build of Windows 10, version 1703 on your education devices. To set up new Windows 10 devices and enroll them to your education tenant, choose from one of these options:
- **Option 1: [Use the Set up School PCs app](#usesetupschoolpcs)** - You can use the app to create a setup file that you can use to quickly set up one or more Windows 10 devices.
- **Option 2: [Go through Windows OOBE and join the device to Azure AD](#usewindowsoobandjoinaad)** - You can go through a typical Windows 10 device setup or first-run experience to configure your device.
@@ -551,13 +586,13 @@ Set up School PCs makes it easy to set up Windows 10 PCs with Microsoft's recomm
1. If you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired or Ethernet connection.
2. Go through the Windows device setup experience. On a new or reset device, this starts with the **Let's start with region. Is this right?** screen.
- **Figure 34** - Let's start with region
+ **Figure 37** - Let's start with region
3. Continue with setup. In the **How would you like to set up?** screen, select **Set up for an organization**.
- **Figure 35** - Select setup for an organization
+ **Figure 38** - Select setup for an organization
@@ -566,7 +601,7 @@ Set up School PCs makes it easy to set up Windows 10 PCs with Microsoft's recomm
6. Click **Accept** to go through the rest of device setup.
-### 5.2 Verify correct device setup
+### 6.2 Verify correct device setup
Verify that the device is set up correctly and boots without any issues.
**Verify that the device was set up correctly**
@@ -576,11 +611,11 @@ Verify that the device is set up correctly and boots without any issues.
> [!NOTE]
> It may take some time before some apps are pushed down to your device from Intune for Education. Check again later if you don't see some of the apps you provisioned for the user.
- **Figure 36** - Sample list of apps for a user
+ **Figure 39** - Sample list of apps for a user
-### 5.3 Verify the device is Azure AD joined
+### 6.3 Verify the device is Azure AD joined
Let's now verify that the device is joined to your organization's Azure AD and shows up as being managed in Microsoft Intune for Education.
**Verify if the device is joined to Azure AD**
@@ -588,7 +623,7 @@ Let's now verify that the device is joined to your organization's Azure AD and s
2. Select **Groups** and select **All Devices**.
3. In the **All Devices** page, see the list of devices and verify that the device you're signed into appears on the list.
- **Figure 37** - List of all managed devices
+ **Figure 40** - List of all managed devices
@@ -596,23 +631,23 @@ Let's now verify that the device is joined to your organization's Azure AD and s
5. Select **Accounts > Access work or school**.
6. In the **Access work or school** page, confirm that the device is connected to the organization's Azure AD.
- **Figure 38** - Confirm that the Windows 10 device is joined to Azure AD
+ **Figure 41** - Confirm that the Windows 10 device is joined to Azure AD
**That's it! You're done!** You've completed basic cloud setup, deployment, and management using Microsoft Education. You can continue follow the rest of the walkthrough to finish setup and complete other tasks.
-## 6. Finish setup and other tasks
+## 7. Finish setup and other tasks
-### 6.1 Update group settings in Intune for Education
+### 7.1 Update group settings in Intune for Education
If you need to make changes or updates to any of the apps or settings for the group(s), follow these steps.
1. Log in to the Intune for Education console.
2. Click **Groups** and then choose **Settings** in the taskbar at the top of the page.
3. You will see the same settings groups that you saw in express setup for Intune for Education as well as other settings categories such as **Windows Defender settings**, **Device sharing**, **Edition upgrade**, and so on.
- **Figure 39** - See the list of available settings in Intune for Education
+ **Figure 42** - See the list of available settings in Intune for Education
@@ -622,7 +657,7 @@ If you need to make changes or updates to any of the apps or settings for the gr
5. Click **Save** or **Discard changes**.
-### 6.2 Configure Azure settings
+### 7.2 Configure Azure settings
After completing the basic setup for your cloud infrastructure and confirming that it is up and running, it's time to prepare for additional devices to be added and enable capabilities for the user to use.
#### Enable many devices to be added by a single person
@@ -634,7 +669,7 @@ Follow the steps in this section to enable a single person to add many devices t
2. Configure the device settings for the school's Active Directory. To do this, go to the new Azure portal, https://portal.azure.com.
3. Select **Azure Active Directory > Users and groups > Device settings**.
- **Figure 40** - Device settings in the new Azure portal
+ **Figure 43** - Device settings in the new Azure portal
@@ -651,22 +686,22 @@ Follow the steps in this section to ensure that settings for the each user follo
3. Select **Azure Active Directory > Users and groups > Device settings**.
4. Find the setting **Users may sync settings and enterprise app data** and change the value to **All**.
- **Figure 41** - Enable settings to roam with users
+ **Figure 44** - Enable settings to roam with users
5. Click **Save** to update device settings.
-### 6.3 Complete Office 365 for Education setup
+### 7.3 Complete Office 365 for Education setup
Now that your basic cloud infrastructure is up and running, it's time to complete the rest of the Office 365 for Education setup. You can find detailed information about completing Office 365 setup, services and applications, troubleshooting, and more by reading the Office 365 admin documentation.
-### 6.4 Add more users
+### 7.4 Add more users
After your cloud infrastructure is set up and you have a device management strategy in place, you may need to add more users and you want the same policies to apply to these users. You can add new users to your tenant simply by adding them to the Office 365 groups. Adding new users to Office 365 groups automatically adds them to the corresponding groups in Intune for Education.
See Add users to Office 365 to learn more. Once you're done adding new users, go to the Intune for Education console and verify that the same users were added to the Intune for Education groups as well.
-### 6.5 Connect other devices to your cloud infrastructure
-Adding a new device to your cloud-based tenant is easy. For new devices, you can follow the steps in [5. Set up Windows 10 devices](#5-set-up-windows-10-devices). For other devices, such as those personally-owned by teachers who need to connect to the school network to access work or school resources (BYOD), you can follow the steps in this section to get these devices connected.
+### 7.5 Connect other devices to your cloud infrastructure
+Adding a new device to your cloud-based tenant is easy. For new devices, you can follow the steps in [6. Set up Windows 10 devices](#6-set-up-windows-10-devices). For other devices, such as those personally-owned by teachers who need to connect to the school network to access work or school resources (BYOD), you can follow the steps in this section to get these devices connected.
> [!NOTE]
> These steps enable users to get access to the organization's resources, but it also gives the organization some control over the device.
@@ -679,7 +714,7 @@ Adding a new device to your cloud-based tenant is easy. For new devices, you can
For example, if a teacher connects their personal device to the school network, they'll see the following screen after typing in their account information.
- **Figure 42** - Device is now managed by Intune for Education
+ **Figure 45** - Device is now managed by Intune for Education
@@ -689,11 +724,11 @@ Adding a new device to your cloud-based tenant is easy. For new devices, you can
5. After the user's credentails are validated, the window will refresh and will now include an entry that shows the device is now connected to the organization's MDM. This means the device is now enrolled in Intune for Education MDM and the account should have access to the organization's resources.
- **Figure 43** - Device is connected to organization's MDM
+ **Figure 46** - Device is connected to organization's MDM
-6. You can confirm that the new device and user are showing up as Intune for Education-managed by going to the Intune for Education management portal and following the steps in [5.3 Verify the device is Azure AD joined](#53-verify-the-device-is-azure-ad-joined).
+6. You can confirm that the new device and user are showing up as Intune for Education-managed by going to the Intune for Education management portal and following the steps in [6.3 Verify the device is Azure AD joined](#63-verify-the-device-is-azure-ad-joined).
It may take several minutes before the new device shows up so check again later.
diff --git a/education/get-started/images/microsoft_education_it_getstarted_workflow.png b/education/get-started/images/microsoft_education_it_getstarted_workflow.png
new file mode 100644
index 0000000000..ebcaa2add9
Binary files /dev/null and b/education/get-started/images/microsoft_education_it_getstarted_workflow.png differ
diff --git a/education/get-started/images/o365_msteams_settings.PNG b/education/get-started/images/o365_msteams_settings.PNG
new file mode 100644
index 0000000000..0e3dab4886
Binary files /dev/null and b/education/get-started/images/o365_msteams_settings.PNG differ
diff --git a/education/get-started/images/o365_msteams_turnon.PNG b/education/get-started/images/o365_msteams_turnon.PNG
new file mode 100644
index 0000000000..95588d5031
Binary files /dev/null and b/education/get-started/images/o365_msteams_turnon.PNG differ
diff --git a/education/get-started/images/o365_settings_services_msteams.PNG b/education/get-started/images/o365_settings_services_msteams.PNG
new file mode 100644
index 0000000000..ca4dee07ac
Binary files /dev/null and b/education/get-started/images/o365_settings_services_msteams.PNG differ
diff --git a/education/index.md b/education/index.md
index 0bb10155b3..3f8576dfca 100644
--- a/education/index.md
+++ b/education/index.md
@@ -207,6 +207,25 @@ author: CelesteDG
+ 
+ Use the app to create a provisioning package that you can use to quickly set up one or more Windows 10 devices.
+
+ Use the app to create a provisioning package that you can use to quickly set up one or more Windows 10 devices.
+
3333| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +Mobile Enterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ |
+ |
+ |
+ |
+ |
+
Added the following new policies for Windows 10, version 1703:
+Added the following new policies for Windows 10, version 1709:
+Added new CSP in the next major update to Windows 10.
+Added new CSP in Windows 10, version 1709.
To PurposeGroups setting, added the following values for the next major update of Windows 10:
+To PurposeGroups setting, added the following values Windows 10, version 1709:
[CM_CellularEntries CSP](cm-cellularentries-csp.md)
[EnterpriseAPN CSP](enterpriseapn-csp.md)
In the next major update of Windows 10, support was added for Windows 10 Home, Pro, Enterprise, and Education editions.
+In the Windows 10, version 1709, support was added for Windows 10 Home, Pro, Enterprise, and Education editions.
Boolean value used to enable or disable enhanced anti-spoofing for facial feature recognition on Windows Hello face authentication. This node was added in Windows 10, version 1511. -
Default value is false. If you set this policy to true or don't configure this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. Windows Hello face authentication is disabled on devices that do not support enhanced anti-spoofing. +
Default value is false. If you set this policy to false or don't configure this setting, Windows doesn't require enhanced anti-spoofing for Windows Hello face authentication. -
If you set this policy to false, Windows doesn't require enhanced anti-spoofing for Windows Hello face authentication. +
If you set this policy to true, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. Windows Hello face authentication is disabled on devices that do not support enhanced anti-spoofing.
Note that enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices. diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 5b81c0026b..600a6bf293 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -11,6 +11,9 @@ author: nickbrower # Policy CSP +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + The Policy configuration service provider enables the enterprise to configure policies on Windows 10. Use this configuration service provider to configure any company policies. The Policy configuration service provider has the following sub-categories: @@ -1973,6 +1976,29 @@ ADMX Info: **Browser/AllowAddressBarDropdown** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Specifies whether to allow the address bar drop-down functionality in Microsoft Edge. If you want to minimize network connections from Microsoft Edge to Microsoft services, we recommend disabling this functionality. @@ -2358,6 +2384,29 @@ ADMX Info: **Browser/AllowMicrosoftCompatibilityList** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Specifies whether to use the Microsoft compatibility list in Microsoft Edge. The Microsoft compatibility list is a Microsoft-provided list that enables sites with known compatibility issues to display properly. By default, the Microsoft compatibility list is enabled and can be viewed by visiting "about:compat". @@ -2466,6 +2515,29 @@ By default, the Microsoft compatibility list is enabled and can be viewed by vis **Browser/AllowSearchEngineCustomization** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Allows search engine customization for MDM-enrolled devices. Users can change their default search engine. @@ -2566,6 +2638,29 @@ By default, the Microsoft compatibility list is enabled and can be viewed by vis **Browser/ClearBrowsingDataOnExit** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Specifies whether to clear browsing data on exiting Microsoft Edge. @@ -2587,6 +2682,29 @@ By default, the Microsoft compatibility list is enabled and can be viewed by vis **Browser/ConfigureAdditionalSearchEngines** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Allows you to add up to 5 additional search engines for MDM-enrolled devices. @@ -2610,6 +2728,29 @@ Employees cannot remove these search engines, but they can set any one as the de **Browser/DisableLockdownOfStartPages** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Boolean value that specifies whether the lockdown on the Start pages is disabled. This policy works with the Browser/HomePages policy, which locks down the Start pages that the users cannot modify. You can use the DisableLockdownOfStartPages policy to allow users to modify the Start pages when the Browser/HomePages policy is in effect. @@ -2819,6 +2960,29 @@ Employees cannot remove these search engines, but they can set any one as the de **Browser/PreventFirstRunPage** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Specifies whether to enable or disable the First Run webpage. On the first explicit user-launch of Microsoft Edge, a First Run webpage hosted on Microsoft.com opens automatically via a FWLINK. This policy allows enterprises (such as those enrolled in a zero-emissions configuration) to prevent this page from opening. @@ -2834,6 +2998,29 @@ Employees cannot remove these search engines, but they can set any one as the de **Browser/PreventLiveTileDataCollection** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Specifies whether Microsoft can collect information to create a Live Tile when pinning a site to Start from Microsoft Edge. @@ -3005,6 +3192,29 @@ Employees cannot remove these search engines, but they can set any one as the de **Browser/SetDefaultSearchEngine** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1703. Allows you configure the default search engine for your employees. By default, your employees can change the default search engine at any time. If you want to prevent your employees from changing the default search engine that you set, you can do so by configuring the AllowSearchEngineCustomization policy. @@ -7113,6 +7323,29 @@ ADMX Info: **Experience/AllowTailoredExperiencesWithDiagnosticData** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ |
+ |
+ |
+ 2 |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ |
+ |
+ |
+ 2 |
+ 2 |
+
Added in Windows 10, version 1607. Boolean value that turns off notification mirroring. +> [!IMPORTANT] +> This node must be accessed using the following paths: +> +> - **./User/Vendor/MSFT/Policy/Config/Notifications/DisallowNotificationMirroring** to set the policy. +> - **./User/Vendor/MSFT/Policy/Result/Notifications/DisallowNotificationMirroring** to get the result. + +
For each user logged into the device, if you enable this policy (set value to 1) the app and system notifications received by this user on this device will not get mirrored to other devices of the same logged in user. If you disable or do not configure this policy (set value to 0) the notifications received by this user on this device will be mirrored to other devices of the same logged in user. This feature can be turned off by apps that do not want to participate in Notification Mirroring. This feature can also be turned off by the user in the Cortana setting page.
No reboot or service restart is required for this policy to take effect. @@ -11618,6 +11950,100 @@ ADMX Info: + + +**Power/DisplayOffTimeoutOnBattery** + + +
Added in Windows 10, version 1709. Turn off the display (on battery). This policy setting allows you to specify the period of inactivity before Windows turns off the display. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display. + +
If you disable or do not configure this policy setting, users control this setting. + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + + +ADMX Info: +- GP english name: *Turn off the display (on battery)* +- GP name: *VideoPowerDownTimeOutDC_2* +- GP path: *System/Power Management/Video and Display Settings* +- GP ADMX file name: *power.admx* + + + + + +**Power/DisplayOffTimeoutPluggedIn** + + + +
Added in Windows 10, version 1709. Turn off the display (plugged in). This policy setting allows you to specify the period of inactivity before Windows turns off the display. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display. + +
If you disable or do not configure this policy setting, users control this setting. + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + + +ADMX Info: +- GP english name: *Turn off the display (plugged in)* +- GP name: *VideoPowerDownTimeOutAC_2* +- GP path: *System/Power Management/Video and Display Settings* +- GP ADMX file name: *power.admx* + + + + + +**Power/HibernateTimeoutOnBattery** + + +
Added in Windows 10, version 1709. Specify the system hibernate timeout (on battery). This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate. + +
If you disable or do not configure this policy setting, users control this setting. + + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + +ADMX Info: +- GP english name: *Specify the system hibernate timeout (on battery)* +- GP name: *DCHibernateTimeOut_2* +- GP path: *System/Power Management/Sleep Settings* +- GP ADMX file name: *power.admx* + + + + + +**Power/HibernateTimeoutPluggedIn** + + +
Added in Windows 10, version 1709. Specify the system hibernate timeout (plugged in). This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate. + +
If you disable or do not configure this policy setting, users control this setting. + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + + +ADMX Info: +- GP english name: *Specify the system hibernate timeout (plugged in)* +- GP name: *ACHibernateTimeOut_2* +- GP path: *System/Power Management/Sleep Settings* +- GP ADMX file name: *power.admx* + + + + **Power/RequirePasswordWhenComputerWakesOnBattery** @@ -11658,6 +12084,53 @@ ADMX Info: + + +**Power/StandbyTimeoutOnBattery** + + +
Added in Windows 10, version 1709. Specify the system sleep timeout (on battery). This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep. + +
If you disable or do not configure this policy setting, users control this setting. + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + + +ADMX Info: +- GP english name: *Specify the system sleep timeout (on battery)* +- GP name: *DCStandbyTimeOut_2* +- GP path: *System/Power Management/Sleep Settings* +- GP ADMX file name: *power.admx* + + + + + +**Power/StandbyTimeoutPluggedIn** + + +
Added in Windows 10, version 1709. Specify the system sleep timeout (plugged in). This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep. + +
If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep. + +
If you disable or do not configure this policy setting, users control this setting. + +
If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The "Prevent enabling lock screen slide show" (DeviceLock/PreventLockScreenSlideShow) policy setting can be used to disable the slide show feature. + + + +ADMX Info: +- GP english name: *Specify the system sleep timeout (plugged in)* +- GP name: *ACStandbyTimeOut_2* +- GP path: *System/Power Management/Sleep Settings* +- GP ADMX file name: *power.admx* + + + + **Printers/PointAndPrintRestrictions** @@ -15951,6 +16424,376 @@ ADMX Info: - 0 – Not allowed. - 1 (default) – Allowed. + + + +**Start/AllowPinnedFolderDocuments** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Documents shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderDownloads** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Downloads shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderFileExplorer** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the File Explorer shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderHomeGroup** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the HomeGroup shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderMusic** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Music shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderNetwork** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Network shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderPersonalFolder** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the PersonalFolder shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderPictures** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Pictures shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderSettings** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Settings shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + + + + +**Start/AllowPinnedFolderVideos** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. This policy controls the visibility of the Videos shortcut on the Start menu. + +
The following list shows the supported values: + +- 0 – The shortcut is hidden and disables the setting in the Settings app. +- 1 – The shortcut is visible and disables the setting in the Settings app. +- 65535 (default) - There is no enforced configuration and the setting can be changed by the user. + @@ -15999,6 +16842,29 @@ ADMX Info: **Start/HideAppList** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Change account settings" from appearing in the user tile. @@ -16042,6 +16931,29 @@ ADMX Info: **Start/HideFrequentlyUsedApps** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Hibernate" from appearing in the Power button. @@ -16088,6 +17023,29 @@ ADMX Info: **Start/HideLock** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Lock" from appearing in the user tile. @@ -16106,6 +17064,29 @@ ADMX Info: **Start/HidePowerButton** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Restart" and "Update and restart" from appearing in the Power button. @@ -16198,6 +17248,29 @@ ADMX Info: **Start/HideShutDown** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Shut down" and "Update and shut down" from appearing in the Power button. @@ -16216,6 +17289,29 @@ ADMX Info: **Start/HideSignOut** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Sign out" from appearing in the user tile. @@ -16234,6 +17330,29 @@ ADMX Info: **Start/HideSleep** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Sleep" from appearing in the Power button. @@ -16252,6 +17371,29 @@ ADMX Info: **Start/HideSwitchAccount** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure Start by hiding "Switch account" from appearing in the user tile. @@ -16270,6 +17412,29 @@ ADMX Info: **Start/HideUserTile** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ |
+
Added in Windows 10, version 1703. Allows IT Admins to configure the taskbar by disabling pinning and unpinning apps on the taskbar. @@ -17420,6 +18631,29 @@ ADMX Info: **TimeLanguageSettings/AllowSet24HourClock** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ |
+ |
+ |
+ |
+ 2 |
+ 2 |
+
Allows for the configuration of the default clock setting to be the 24 hour format. Selecting 'Set 24 hour Clock' enables this setting. Selecting 'Locale default setting' uses the default clock as prescribed by the current locale setting. @@ -17475,6 +18709,29 @@ ADMX Info: **Update/ActiveHoursMaxRange** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+  2 |
+
The default value is 8 (8 AM). + + + +**Update/AutoRestartDeadlinePeriodInDays** + + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ 2 |
+
Added in Windows 10, version 1703. This policy defines the deadline in days after which a reboot for updates will become mandatory. + +
Supported values are 2-30 days. + +
The default value is 7 days. + @@ -17716,6 +19008,29 @@ ADMX Info: **Update/AutoRestartNotificationSchedule** + +
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ 2 |
+ 2 |
+ 2 |
+ |
+ 2 |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +MobileEnterprise | +
|---|---|---|---|---|---|---|
|
+ 2 |
+ + | 2 |
+ 2 |
+ |
+ 2 |
+
Defines the root node.
+ +**IsActiveZeroExhaust** +Boolean value that indicates whether network traffic from the device to public IP addresses are not allowed unless directly intended by the user (zero exhaust). Default value is false. Some examples when zero exhaust is configured:
+ +| Service | Endpoint - |
| Connected User Experience and Telemetry component | v10.vortex-win.data.microsoft.com
- settings-win.data.microsoft.com - |
| Windows Error Reporting | watson.telemetry.microsoft.com - |
| Online Crash Analysis | oca.telemetry.microsoft.com - |
