From 99d93d53e7832c46e78b4a4f26f97b7fca54fdff Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 6 Jul 2017 21:05:37 +0000 Subject: [PATCH] Merged PR 2080: Merge maricia-july6 to master --- .../client-management/mdm/bitlocker-csp.md | 28 +++--- ...ew-in-windows-mdm-enrollment-management.md | 90 ++++++++++++++++++- 2 files changed, 102 insertions(+), 16 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 24db3c3c45..1c96dd8f84 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 07/05/2017 +ms.date: 07/06/2017 --- # BitLocker CSP @@ -106,12 +106,11 @@ The following diagram shows the BitLocker configuration service provider in tree

EncryptionMethodWithXtsRdvDropDown_Name = Select the encryption method for removable data drives.

The possible values for 'xx' are:

- + +- 3 = AES-CBC 128 +- 4 = AES-CBC 256 +- 6 = XTS-AES 128 +- 7 = XTS-AES 256 > [!Note] > When you enable EncryptionMethodByDriveType, you must specify values for all three drives (operating system, fixed data, and removable data), otherwise it will fail (500 return status). For example, if you only set the encrytion method for the OS and removable drives, you will get a 500 return status. @@ -251,14 +250,13 @@ The following diagram shows the BitLocker configuration service provider in tree ```

The possible values for 'xx' are:

-
    -
  • 0 = Empty
    • -
  • 1 = Use default recovery message and URL.
    • -
  • 2 = Custom recovery message is set.
    • -
  • 3 = Custom recovery URL is set.
    • -
  • 'yy' = string of max length 900.
    • -
  • 'zz' = string of max length 500.
    • -
+ +- 0 = Empty +- 1 = Use default recovery message and URL. +- 2 = Custom recovery message is set. +- 3 = Custom recovery URL is set. +- 'yy' = string of max length 900. +- 'zz' = string of max length 500. > [!Note] > When you enable SystemDrivesRecoveryMessage, you must specify values for all three settings (pre-boot recovery screen, recovery message, and recovery URL), otherwise it will fail (500 return status). For example, if you only specify values for message and URL, you will get a 500 return status. diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 6ae7b4c759..8db538cc05 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/28/2017 +ms.date: 07/06/2017 --- # What's new in MDM enrollment and management @@ -27,6 +27,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s - [What's new in Windows 10, version 1511](#whatsnew) - [What's new in Windows 10, version 1607](#whatsnew1607) - [What's new in Windows 10, version 1703](#whatsnew10) +- [What's new in Windows 10, version 1709](#whatsnew1709) - [Breaking changes and known issues](#breaking-changes-and-known-issues) - [Get command inside an atomic command is not supported](#getcommand) - [Notification channel URI not preserved during upgrade from Windows 8.1 to Windows 10](#notification) @@ -913,6 +914,67 @@ For details about Microsoft mobile device management protocols for Windows 10 s   +## What's new in Windows 10, version 1709 + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + +
ItemDescription
[Firewall CSP](firewall-csp.md)

Added new CSP in Windows 10, version 1709.

+
[WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md)New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md).
[CM_ProxyEntries CSP](cm-proxyentries-csp.md) and [CMPolicy CSP](cmpolicy-csp.md)In Windows 10, version 1709, support for desktop SKUs were added to these CSPs. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated.
[WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md)New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md).
[Policy CSP](policy-configuration-service-provider.md)

Added the following new policies for Windows 10, version 1709:

+
    +
  • CredentialProviders/EnableWindowsAutoPilotResetCredentials
    • +
  • DeviceGuard/EnableVirtualizationBasedSecurity
    • +
  • DeviceGuard/RequirePlatformSecurityFeatures
    • +
  • DeviceGuard/LsaCfgFlags
    • +
  • Power/DisplayOffTimeoutOnBattery
    • +
  • Power/DisplayOffTimeoutPluggedIn
    • +
  • Power/HibernateTimeoutOnBattery
    • +
  • Power/HibernateTimeoutPluggedIn
    • +
  • Power/StandbyTimeoutOnBattery
    • +
  • Power/StandbyTimeoutPluggedIn
    • +
  • Defender/AttackSurfaceReductionOnlyExclusions
    • +
  • Defender/AttackSurfaceReductionRules
    • +
  • Defender/CloudBlockLevel
    • +
  • Defender/CloudExtendedTimeout
    • +
  • Defender/EnableGuardMyFolders
    • +
  • Defender/EnableNetworkProtection
    • +
  • Defender/GuardedFoldersAllowedApplications
    • +
  • Defender/GuardedFoldersList
    • +
  • Update/ScheduledInstallEveryWeek
    • +
  • Update/ScheduledInstallFirstWeek
    • +
  • Update/ScheduledInstallFourthWeek
    • +
  • Update/ScheduledInstallSecondWeek
    • +
  • Update/ScheduledInstallThirdWeek
    • +
+
## Breaking changes and known issues @@ -1179,6 +1241,32 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware ## Change history in MDM documentation +### July 2017 + + ++++ + + + + + + + + + + + + +
New or updated topicDescription
[BitLocker CSP](bitlocker-csp.md)Added the following statements:. +
    +
  • When you enable EncryptionMethodByDriveType, you must specify values for all three drives (operating system, fixed data, and removable data), otherwise it will fail (500 return status). For example, if you only set the encrytion method for the OS and removable drives, you will get a 500 return status.
    • +
  • When you enable SystemDrivesRecoveryMessage, you must specify values for all three settings (pre-boot recovery screen, recovery message, and recovery URL), otherwise it will fail (500 return status). For example, if you only specify values for message and URL, you will get a 500 return status.
    • +
+
+ ### June 2017