6666| Item | +New or updated topic | Description |
|---|---|---|
New configuration service providers added in Windows 10, version 1511 |
-
|
-|
New and updated policies in Policy CSP |
-The following policies have been added to the [Policy CSP](policy-configuration-service-provider.md): + | |
| [Policy CSP](policy-configuration-service-provider.md) | +Added the following new policies in Windows 10, version 1903:
The following policies have been updated in the Policy CSP: -
The following policies have been deprecated in the Policy CSP: -
|
-|
Management tool for the Micosoft Store for Business |
-New topics. The Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. It enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates. |
-|
Custom header for generic alert |
-The MDM-GenericAlert is a new custom header that hosts one or more alert information provided in the http messages sent by the device to the server during an OMA DM session. The generic alert is sent if the session is triggered by the device due to one or more critical or fatal alerts. Here is alert format: -MDM-GenericAlert: <AlertType1><AlertType2>
-If present, the MDM-GenericAlert is presented in every the outgoing MDM message in the same OMA DM session. For more information about generic alerts, see section 8.7 in the OMA Device Management Protocol, Approved Version 1.2.1 in this [OMA website](https://go.microsoft.com/fwlink/p/?LinkId=267526). |
-|
Alert message for slow client response |
-When the MDM server sends a configuration request, sometimes it takes the client longer than the HTTP timeout to get all information together and then the session ends unexpectedly due to timeout. By default, the MDM client does not send an alert that a DM request is pending. -To work around the timeout, you can use EnableOmaDmKeepAliveMessage setting to keep the session alive by sending a heartbeat message back to the server. This is achieved by sending a SyncML message with a specific device alert element in the body until the client is able to respond back to the server with the requested information. For details, see EnableOmaDmKeepAliveMessage node in the [DMClient CSP](dmclient-csp.md). |
-|
New node in DMClient CSP |
-Added a new node EnableOmaDmKeepAliveMessage to the [DMClient CSP](dmclient-csp.md) and updated the ManagementServerAddress to indicate that it can contain a list of URLs. |
-|
New nodes in EnterpriseModernAppManagement CSP |
-Added the following nodes to the [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md): -
|
-|
New nodes in EnterpriseExt CSP |
-Added the following nodes to the [EnterpriseExt CSP](enterpriseext-csp.md): -
|
-|
New node in EnterpriseExtFileSystem CSP |
-Added OemProfile node to [EnterpriseExtFileSystem CSP](enterpriseextfilessystem-csp.md). |
-|
New nodes in PassportForWork CSP |
-Added the following nodes to [PassportForWork CSP](passportforwork-csp.md): -
|
-|
Updated EnterpriseAssignedAccess CSP |
-Here are the changes to the [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md): -
|
-|
New nodes in the DevDetail CSP |
-Here are the changes to the [DevDetail CSP](devdetail-csp.md): -
|
-|
Handling large objects |
-Added support for the client to handle uploading of large objects to the server. |
-
| Item | +New or updated topic | Description |
|---|---|---|
Sideloading of apps |
-Starting in Windows 10, version 1607, sideloading of apps is only allowed through [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md). Product keys (5x5) will no longer be supported to enable sideloading on Windows 10, version 1607 devices. |
-|
New value for [NodeCache CSP](nodecache-csp.md) |
-In [NodeCache CSP](nodecache-csp.md), the value of NodeCache root node starting in Windows 10, version 1607 is com.microsoft/1.0/MDM/NodeCache. |
-|
| [EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) | -New CSP. |
-|
| [Policy CSP](policy-configuration-service-provider.md) | -Removed the following policies: + | Added the following new policies in Windows 10, version 1809:
Added the WiFi/AllowManualWiFiConfiguration and WiFi/AllowWiFi policies for Windows 10, version 1607: -
Added the following new policies: -
Updated the Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts description to remove outdated information. -Updated DeliveryOptimization/DODownloadMode to add new values. -Updated Experience/AllowCortana description to clarify what each supported value does. -Updated Security/AntiTheftMode description to clarify what each supported value does. |
+
| [PassportForWork CSP](passportforwork-csp.md) | +Added new settings in Windows 10, version 1809. + | |
| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | +Added NonRemovable setting under AppManagement node in Windows 10, version 1809. + | |
| [Win32CompatibilityAppraiser CSP](win32compatibilityappraiser-csp.md) | +Added new configuration service provider in Windows 10, version 1809. + | |
| [WindowsLicensing CSP](windowslicensing-csp.md) | +Added S mode settings and SyncML examples in Windows 10, version 1809. + | |
| [SUPL CSP](supl-csp.md) | +Added 3 new certificate nodes in Windows 10, version 1809. + | |
| [Defender CSP](defender-csp.md) | +Added a new node Health/ProductStatus in Windows 10, version 1809. + | |
| [BitLocker CSP](bitlocker-csp.md) | +Added a new node AllowStandardUserEncryption in Windows 10, version 1809. Added support for Windows 10 Pro. + | |
| [DevDetail CSP](devdetail-csp.md) | +Added a new node SMBIOSSerialNumber in Windows 10, version 1809. + | |
| [Wifi CSP](wifi-csp.md) | +Added a new node WifiCost in Windows 10, version 1809. + | |
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | +Added new settings in Windows 10, version 1809. + | |
| [RemoteWipe CSP](remotewipe-csp.md) | +Added new settings in Windows 10, version 1809. + | |
| [TenantLockdown CSP](tenantlockdown-csp.md) | +Added new CSP in Windows 10, version 1809. + | |
| [Office CSP](office-csp.md) | +Added FinalStatus setting in Windows 10, version 1809. + |
| New or updated topic | +Description | ||
|---|---|---|---|
| [Policy CSP](policy-configuration-service-provider.md) | +Added the following new policies for Windows 10, version 1803: +
Security/RequireDeviceEncryption - updated to show it is supported in desktop. + | ||
| [BitLocker CSP](bitlocker-csp.md) | +Updated the description for AllowWarningForOtherDiskEncryption to describe changes added in Windows 10, version 1803. + | ||
| [DMClient CSP](dmclient-csp.md) | -Added the following settings: + | Added ./User/Vendor/MSFT/DMClient/Provider/[ProviderID]/FirstSyncStatus node. Also added the following nodes in Windows 10, version 1803:
Removed the EnrollmentID setting. |
-|
| [DeviceManageability CSP](devicemanageability-csp.md) | -New CSP. |
-||
| [DeviceStatus CSP](devicestatus-csp.md) | -Added the following new settings: + | [Defender CSP](defender-csp.md) | +Added new node (OfflineScan) in Windows 10, version 1803. + |
| [UEFI CSP](uefi-csp.md) | +Added a new CSP in Windows 10, version 1803. + | ||
| [Update CSP](update-csp.md) | +Added the following nodes in Windows 10, version 1803:
|
-||
| [AssignedAccess CSP](assignedaccess-csp.md) | -Added SyncML examples. |
-||
| [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) | -
|
-||
| [SecureAssessment CSP](secureassessment-csp.md) | -New CSP for Windows 10, version 1607 |
-||
| [DiagnosticLog CSP](diagnosticlog-csp.md)
- [DiagnosticLog DDF](diagnosticlog-ddf.md) |
-Added version 1.3 of the CSP with two new settings. Added the new 1.3 version of the DDF. Added the following new settings in Windows 10, version 1607. + | Added the following nodes in Windows 10, version 1803:
|
-|
| [Reboot CSP](reboot-csp.md) | -New CSP for Windows 10, version 1607 |
-||
| [CMPolicyEnterprise CSP](cmpolicyenterprise-csp.md) | -New CSP for Windows 10, version 1607 |
-||
| [VPNv2 CSP](vpnv2-csp.md) | -Added the following settings for Windows 10, version 1607 -
|
-||
| [Win32AppInventory CSP](win32appinventory-csp.md)
- [Win32AppInventory DDF](win32appinventory-ddf-file.md) |
-New CSP for Windows 10, version 1607. |
-||
| [SharedPC CSP](sharedpc-csp.md) | -New CSP for Windows 10, version 1607. |
-||
| [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) | -New CSP for Windows 10, version 1607. |
-||
| [MDM Bridge WMI Provider](https://msdn.microsoft.com/library/windows/hardware/dn905224) | -Added new classes for Windows 10, version 1607. |
-||
| [MDM enrollment of Windows devices](mdm-enrollment-of-windows-devices.md) | -Topic renamed from "Enrollment UI". -Completely updated enrollment procedures and screenshots. |
-||
| [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md)
- [UnifiedWriteFilter DDF File](unifiedwritefilter-ddf.md) |
-Added the following new setting for Windows 10, version 1607: -
|
-||
| [CertificateStore CSP](certificatestore-csp.md)
- [CertificateStore DDF file](certificatestore-ddf-file.md) |
-Added the following new settings in Windows 10, version 1607: -
|
-||
[WindowsLicensing CSP](windowslicensing-csp.md) |
-Added the following new node and settings in Windows 10, version 1607, but not documented: -
|
-||
| [MultiSIM CSP](multisim-csp.md) | +Added a new CSP in Windows 10, version 1803. + | ||
| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | +Added the following node in Windows 10, version 1803: +
| ||
| [eUICCs CSP](euiccs-csp.md) | +Added the following node in Windows 10, version 1803: +
| ||
| [DeviceStatus CSP](devicestatus-csp.md) | +Added the following node in Windows 10, version 1803: +
| ||
| [AccountManagement CSP](accountmanagement-csp.md) | +Added a new CSP in Windows 10, version 1803. + | ||
| [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | +Added the following node in Windows 10, version 1803: +
| ||
| [NetworkProxy CSP](\networkproxy--csp.md) | +Added the following node in Windows 10, version 1803: +
| ||
| [Accounts CSP](accounts-csp.md) | +Added a new CSP in Windows 10, version 1803. + | ||
| [MDM Migration Analysis Too (MMAT)](https://aka.ms/mmat) | +Updated version available. MMAT is a tool you can use to determine which Group Policies are set on a target user/computer and cross-reference them against the list of supported MDM policies. + | ||
| [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download) | +Added the DDF download of Windows 10, version 1803 configuration service providers. + |
| Item | +Description | +
|---|---|
| The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/library/mt221945.aspx) | +The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message: +
For examples, see section 4.3.1 RequestSecurityToken of the MS-MDE2 protocol documentation. + |
| [Firewall CSP](firewall-csp.md) | +Added new CSP in Windows 10, version 1709. + |
| [eUICCs CSP](euiccs-csp.md) | +Added new CSP in Windows 10, version 1709. + |
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | +New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md). | +
| [CM_ProxyEntries CSP](cm-proxyentries-csp.md) and [CMPolicy CSP](cmpolicy-csp.md) | +In Windows 10, version 1709, support for desktop SKUs were added to these CSPs. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. | +
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | +New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md). | +
| [VPNv2 CSP](vpnv2-csp.md) | +Added DeviceTunnel and RegisterDNS settings in Windows 10, version 1709. + |
| [DeviceStatus CSP](devicestatus-csp.md) | +Added the following settings in Windows 10, version 1709: +
|
| [AssignedAccess CSP](assignedaccess-csp.md) | +Added the following setting in Windows 10, version 1709. +
Starting in Windows 10, version 1709, AssignedAccess CSP is supported in Windows 10 Pro. + |
| [DeviceManageability CSP](devicemanageability-csp.md) | +Added the following settings in Windows 10, version 1709: +
|
| [Office CSP](office-csp.md) | +Added the following setting in Windows 10, version 1709: +
|
| [DMClient CSP](dmclient-csp.md) | +Added new nodes to the DMClient CSP in Windows 10, version 1709. Updated the CSP and DDF topics. + |
| [Bitlocker CSP](bitlocker-csp.md) | +Changed the minimum personal identification number (PIN) length to 4 digits in SystemDrivesRequireStartupAuthentication and SystemDrivesMinimumPINLength in Windows 10, version 1709. + |
| [ADMX-backed policies in Policy CSP](policy-configuration-service-provider.md#admx-backed-policies) | +Added new policies. + |
| Microsoft Store for Business and Microsoft Store | +Windows Store for Business name changed to Microsoft Store for Business. Windows Store name changed to Microsoft Store. + | [MDM enrollment of Windows-based devices](mdm-enrollment-of-windows-devices.md) | +New features in the Settings app: +
For details, see [Managing connection](mdm-enrollment-of-windows-devices.md#managing-connections) and [Collecting diagnostic logs](mdm-enrollment-of-windows-devices.md#collecting-diagnostic-logs) + |
+
| [Enroll a Windows 10 device automatically using Group Policy](enroll-a-windows-10-device-automatically-using-group-policy.md) | +Added new topic to introduce a new Group Policy for automatic MDM enrollment. + |
| [Policy CSP](policy-configuration-service-provider.md) | +Added the following new policies for Windows 10, version 1709: +
|
| The [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/library/mt221945.aspx) | -The Windows 10 enrollment protocol was updated. The following elements were added to the RequestSecurityToken message: -
For examples, see section 4.3.1 RequestSecurityToken of the MS-MDE2 protocol documentation. - | ||
| [Firewall CSP](firewall-csp.md) | -Added new CSP in Windows 10, version 1709. - | ||
| [eUICCs CSP](euiccs-csp.md) | -Added new CSP in Windows 10, version 1709. - | ||
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | -New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md). | +Sideloading of apps |
+Starting in Windows 10, version 1607, sideloading of apps is only allowed through [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md). Product keys (5x5) will no longer be supported to enable sideloading on Windows 10, version 1607 devices. |
| [CM_ProxyEntries CSP](cm-proxyentries-csp.md) and [CMPolicy CSP](cmpolicy-csp.md) | -In Windows 10, version 1709, support for desktop SKUs were added to these CSPs. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. | +New value for [NodeCache CSP](nodecache-csp.md) |
+In [NodeCache CSP](nodecache-csp.md), the value of NodeCache root node starting in Windows 10, version 1607 is com.microsoft/1.0/MDM/NodeCache. |
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | -New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md). | +[EnterpriseDataProtection CSP](enterprisedataprotection-csp.md) | +New CSP. |
| [VPNv2 CSP](vpnv2-csp.md) | -Added DeviceTunnel and RegisterDNS settings in Windows 10, version 1709. - | [Policy CSP](policy-configuration-service-provider.md) | +Removed the following policies: +
Added the WiFi/AllowManualWiFiConfiguration and WiFi/AllowWiFi policies for Windows 10, version 1607: +
Added the following new policies: +
Updated the Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts description to remove outdated information. +Updated DeliveryOptimization/DODownloadMode to add new values. +Updated Experience/AllowCortana description to clarify what each supported value does. +Updated Security/AntiTheftMode description to clarify what each supported value does. |
+
| [DeviceStatus CSP](devicestatus-csp.md) | -Added the following settings in Windows 10, version 1709: + | [DMClient CSP](dmclient-csp.md) | +Added the following settings:
|
| [AssignedAccess CSP](assignedaccess-csp.md) | -Added the following setting in Windows 10, version 1709. -
Starting in Windows 10, version 1709, AssignedAccess CSP is supported in Windows 10 Pro. - | ||
| [DeviceManageability CSP](devicemanageability-csp.md) | -Added the following settings in Windows 10, version 1709: -
| ||
| [Office CSP](office-csp.md) | -Added the following setting in Windows 10, version 1709: -
| ||
| [DMClient CSP](dmclient-csp.md) | -Added new nodes to the DMClient CSP in Windows 10, version 1709. Updated the CSP and DDF topics. - | ||
| [Bitlocker CSP](bitlocker-csp.md) | -Changed the minimum personal identification number (PIN) length to 4 digits in SystemDrivesRequireStartupAuthentication and SystemDrivesMinimumPINLength in Windows 10, version 1709. - | ||
| [ADMX-backed policies in Policy CSP](policy-configuration-service-provider.md#admx-backed-policies) | -Added new policies. - | ||
| Microsoft Store for Business and Microsoft Store | -Windows Store for Business name changed to Microsoft Store for Business. Windows Store name changed to Microsoft Store. - | [MDM enrollment of Windows-based devices](mdm-enrollment-of-windows-devices.md) | -New features in the Settings app: -
For details, see [Managing connection](mdm-enrollment-of-windows-devices.md#managing-connections) and [Collecting diagnostic logs](mdm-enrollment-of-windows-devices.md#collecting-diagnostic-logs) - |
-
| [Enroll a Windows 10 device automatically using Group Policy](enroll-a-windows-10-device-automatically-using-group-policy.md) | -Added new topic to introduce a new Group Policy for automatic MDM enrollment. - | ||
| [Policy CSP](policy-configuration-service-provider.md) | -Added the following new policies for Windows 10, version 1709: -
|
| New or updated topic | -Description | +New CSP. |
|
|---|---|---|---|
| [Policy CSP](policy-configuration-service-provider.md) | -Added the following new policies for Windows 10, version 1803: + | ||
| [DeviceStatus CSP](devicestatus-csp.md) | +Added the following new settings:
Security/RequireDeviceEncryption - updated to show it is supported in desktop. + |
||
| [BitLocker CSP](bitlocker-csp.md) | -Updated the description for AllowWarningForOtherDiskEncryption to describe changes added in Windows 10, version 1803. - | ||
| [DMClient CSP](dmclient-csp.md) | -Added ./User/Vendor/MSFT/DMClient/Provider/[ProviderID]/FirstSyncStatus node. Also added the following nodes in Windows 10, version 1803: -
| ||
| [Defender CSP](defender-csp.md) | -Added new node (OfflineScan) in Windows 10, version 1803. - | ||
| [UEFI CSP](uefi-csp.md) | -Added a new CSP in Windows 10, version 1803. - | ||
| [Update CSP](update-csp.md) | -Added the following nodes in Windows 10, version 1803: -
| ||
| [AssignedAccess CSP](assignedaccess-csp.md) | -Added the following nodes in Windows 10, version 1803: -
Updated the AssigneAccessConfiguration schema. Starting in Windows 10, version 1803 AssignedAccess CSP is supported in Windows Holographic for Business edition. Added example for Windows Holographic for Business edition. - | Added SyncML examples. |
+
+|
| [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) | +
|
+||
| [MultiSIM CSP](multisim-csp.md) | -Added a new CSP in Windows 10, version 1803. - | [SecureAssessment CSP](secureassessment-csp.md) | +New CSP for Windows 10, version 1607 |
+
+
| [DiagnosticLog CSP](diagnosticlog-csp.md)
+ [DiagnosticLog DDF](diagnosticlog-ddf.md) |
+Added version 1.3 of the CSP with two new settings. Added the new 1.3 version of the DDF. Added the following new settings in Windows 10, version 1607. +
|
+||
| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | -Added the following node in Windows 10, version 1803: + | [Reboot CSP](reboot-csp.md) | +New CSP for Windows 10, version 1607 |
+
| [CMPolicyEnterprise CSP](cmpolicyenterprise-csp.md) | +New CSP for Windows 10, version 1607 |
+||
| [VPNv2 CSP](vpnv2-csp.md) | +Added the following settings for Windows 10, version 1607
| ||
| [eUICCs CSP](euiccs-csp.md) | -Added the following node in Windows 10, version 1803: + |
+||
| [Win32AppInventory CSP](win32appinventory-csp.md)
+ [Win32AppInventory DDF](win32appinventory-ddf-file.md) |
+New CSP for Windows 10, version 1607. |
+||
| [SharedPC CSP](sharedpc-csp.md) | +New CSP for Windows 10, version 1607. |
+||
| [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) | +New CSP for Windows 10, version 1607. |
+||
| [MDM Bridge WMI Provider](https://msdn.microsoft.com/library/windows/hardware/dn905224) | +Added new classes for Windows 10, version 1607. |
+||
| [MDM enrollment of Windows devices](mdm-enrollment-of-windows-devices.md) | +Topic renamed from "Enrollment UI". +Completely updated enrollment procedures and screenshots. |
+||
| [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md)
+ [UnifiedWriteFilter DDF File](unifiedwritefilter-ddf.md) |
+Added the following new setting for Windows 10, version 1607:
| ||
| [DeviceStatus CSP](devicestatus-csp.md) | -Added the following node in Windows 10, version 1803: + |
+||
| [CertificateStore CSP](certificatestore-csp.md)
+ [CertificateStore DDF file](certificatestore-ddf-file.md) |
+Added the following new settings in Windows 10, version 1607:
| ||
| [AccountManagement CSP](accountmanagement-csp.md) | -Added a new CSP in Windows 10, version 1803. - | ||
| [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | -Added the following node in Windows 10, version 1803: + |
+||
[WindowsLicensing CSP](windowslicensing-csp.md) |
+Added the following new node and settings in Windows 10, version 1607, but not documented:
| ||
| [NetworkProxy CSP](\networkproxy--csp.md) | -Added the following node in Windows 10, version 1803: -
| ||
| [Accounts CSP](accounts-csp.md) | -Added a new CSP in Windows 10, version 1803. - | ||
| [MDM Migration Analysis Too (MMAT)](https://aka.ms/mmat) | -Updated version available. MMAT is a tool you can use to determine which Group Policies are set on a target user/computer and cross-reference them against the list of supported MDM policies. - | ||
| [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download) | -Added the DDF download of Windows 10, version 1803 configuration service providers. - |
| New or updated topic | +Item | Description |
|---|---|---|
| [Policy CSP](policy-configuration-service-provider.md) | -Added the following new policies in Windows 10, version 1809: + | |
New configuration service providers added in Windows 10, version 1511 |
+
|
+|
New and updated policies in Policy CSP |
+The following policies have been added to the [Policy CSP](policy-configuration-service-provider.md):
| |
| [PassportForWork CSP](passportforwork-csp.md) | -Added new settings in Windows 10, version 1809. - | |
| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | -Added NonRemovable setting under AppManagement node in Windows 10, version 1809. - | |
| [Win32CompatibilityAppraiser CSP](win32compatibilityappraiser-csp.md) | -Added new configuration service provider in Windows 10, version 1809. - | |
| [WindowsLicensing CSP](windowslicensing-csp.md) | -Added S mode settings and SyncML examples in Windows 10, version 1809. - | |
| [SUPL CSP](supl-csp.md) | -Added 3 new certificate nodes in Windows 10, version 1809. - | |
| [Defender CSP](defender-csp.md) | -Added a new node Health/ProductStatus in Windows 10, version 1809. - | |
| [BitLocker CSP](bitlocker-csp.md) | -Added a new node AllowStandardUserEncryption in Windows 10, version 1809. Added support for Windows 10 Pro. - | |
| [DevDetail CSP](devdetail-csp.md) | -Added a new node SMBIOSSerialNumber in Windows 10, version 1809. - | |
| [Wifi CSP](wifi-csp.md) | -Added a new node WifiCost in Windows 10, version 1809. - | |
| [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) | -Added new settings in Windows 10, version 1809. - | |
| [RemoteWipe CSP](remotewipe-csp.md) | -Added new settings in Windows 10, version 1809. - | |
| [TenantLockdown CSP](tenantlockdown-csp.md) | -Added new CSP in Windows 10, version 1809. - | |
| [Office CSP](office-csp.md) | -Added FinalStatus setting in Windows 10, version 1809. - | |
Management tool for the Micosoft Store for Business |
+New topics. The Store for Business has a new web service designed for the enterprise to acquire, manage, and distribute applications in bulk. It enables several capabilities that are required for the enterprise to manage the lifecycle of applications from acquisition to updates. |
+|
Custom header for generic alert |
+The MDM-GenericAlert is a new custom header that hosts one or more alert information provided in the http messages sent by the device to the server during an OMA DM session. The generic alert is sent if the session is triggered by the device due to one or more critical or fatal alerts. Here is alert format: +MDM-GenericAlert: <AlertType1><AlertType2>
+If present, the MDM-GenericAlert is presented in every the outgoing MDM message in the same OMA DM session. For more information about generic alerts, see section 8.7 in the OMA Device Management Protocol, Approved Version 1.2.1 in this [OMA website](https://go.microsoft.com/fwlink/p/?LinkId=267526). |
+|
Alert message for slow client response |
+When the MDM server sends a configuration request, sometimes it takes the client longer than the HTTP timeout to get all information together and then the session ends unexpectedly due to timeout. By default, the MDM client does not send an alert that a DM request is pending. +To work around the timeout, you can use EnableOmaDmKeepAliveMessage setting to keep the session alive by sending a heartbeat message back to the server. This is achieved by sending a SyncML message with a specific device alert element in the body until the client is able to respond back to the server with the requested information. For details, see EnableOmaDmKeepAliveMessage node in the [DMClient CSP](dmclient-csp.md). |
+|
New node in DMClient CSP |
+Added a new node EnableOmaDmKeepAliveMessage to the [DMClient CSP](dmclient-csp.md) and updated the ManagementServerAddress to indicate that it can contain a list of URLs. |
+|
New nodes in EnterpriseModernAppManagement CSP |
+Added the following nodes to the [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md): +
|
+|
New nodes in EnterpriseExt CSP |
+Added the following nodes to the [EnterpriseExt CSP](enterpriseext-csp.md): +
|
+|
New node in EnterpriseExtFileSystem CSP |
+Added OemProfile node to [EnterpriseExtFileSystem CSP](enterpriseextfilessystem-csp.md). |
+|
New nodes in PassportForWork CSP |
+Added the following nodes to [PassportForWork CSP](passportforwork-csp.md): +
|
+|
Updated EnterpriseAssignedAccess CSP |
+Here are the changes to the [EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md): +
|
+|
New nodes in the DevDetail CSP |
+Here are the changes to the [DevDetail CSP](devdetail-csp.md): +
|
+|
Handling large objects |
+Added support for the client to handle uploading of large objects to the server. |
+
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +Mobile Enterprise | +
|---|---|---|---|---|---|---|
|
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ + | + |
| Home | +Pro | +Business | +Enterprise | +Education | +Mobile | +Mobile Enterprise | +
|---|---|---|---|---|---|---|
|
+ 6 |
+ 6 |
+ 6 |
+ 6 |
+ + | + |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 10240.18210 May 14, 2019 KB4498353 | Acknowledged | May 16, 2019 01:57 PM PT |
| Certain operations performed on a Cluster Shared Volume may fail Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\". See details > | OS Build 10240.18094 January 08, 2019 KB4480962 | Mitigated | April 25, 2019 02:00 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 10240.18210 May 14, 2019 KB4498353 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 14393.2969 May 14, 2019 KB4494440 | Acknowledged | May 16, 2019 01:57 PM PT |
| Cluster service may fail if the minimum password length is set to greater than 14 The cluster service may fail to start with the error “2245 (NERR_PasswordTooShort)” if the Group Policy “Minimum Password Length” is configured with greater than 14 characters. See details > | OS Build 14393.2639 November 27, 2018 KB4467684 | Mitigated | April 25, 2019 02:00 PM PT |
| Issue using PXE to start a device from WDS There may be issues using the Preboot Execution Environment (PXE) to start a device from a Windows Deployment Services (WDS) server configured to use Variable Window Extension. See details > | OS Build 14393.2848 March 12, 2019 KB4489882 | Mitigated | April 25, 2019 02:00 PM PT |
| SCVMM cannot enumerate and manage logical switches deployed on the host For hosts managed by System Center Virtual Machine Manager (VMM), VMM cannot enumerate and manage logical switches deployed on the host. See details > | OS Build 14393.2639 November 27, 2018 KB4467684 | Mitigated | April 25, 2019 02:00 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 14393.2969 May 14, 2019 KB4494440 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | OS Build 14393.2941 April 25, 2019 KB4493473 | Resolved KB4494440 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 15063.1805 May 14, 2019 KB4499181 | Acknowledged | May 16, 2019 01:57 PM PT |
| Certain operations performed on a Cluster Shared Volume may fail Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\". See details > | OS Build 15063.1563 January 08, 2019 KB4480973 | Mitigated | April 25, 2019 02:00 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. See details > | OS Build 15063.1784 April 25, 2019 KB4493436 | Resolved KB4499181 | May 15, 2019 05:55 PM PT |
| Custom URI schemes may not start corresponding application Custom URI schemes for application protocol handlers may not start the corresponding application for local intranet and trusted sites in Internet Explorer. See details > | OS Build 15063.1689 March 12, 2019 KB4489871 | Resolved KB4493436 | April 25, 2019 02:00 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 15063.1805 May 14, 2019 KB4499181 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | OS Build 15063.1784 April 25, 2019 KB4493436 | Resolved KB4499181 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 16299.1143 May 14, 2019 KB4498946 | Acknowledged | May 16, 2019 01:57 PM PT |
| Certain operations performed on a Cluster Shared Volume may fail Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\". See details > | OS Build 16299.904 January 08, 2019 KB4480978 | Mitigated | April 25, 2019 02:00 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. See details > | OS Build 16299.1127 April 25, 2019 KB4493440 | Resolved KB4499179 | May 15, 2019 05:55 PM PT |
| Zone transfers over TCP may fail Zone transfers between primary and secondary DNS servers over the Transmission Control Protocol (TCP) may fail. See details > | OS Build 16299.1127 April 25, 2019 KB4493440 | Resolved KB4499179 | May 14, 2019 01:18 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 16299.1143 May 14, 2019 KB4498946 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | OS Build 16299.1127 April 25, 2019 KB4493440 | Resolved KB4499179 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 17134.765 May 14, 2019 KB4499167 | Acknowledged | May 16, 2019 01:57 PM PT |
| Issue using PXE to start a device from WDS Using PXE to start a device from a WDS server configured to use Variable Window Extension may cause the connection to the WDS server to terminate prematurely. See details > | OS Build 17134.648 March 12, 2019 KB4489868 | Mitigated | April 25, 2019 02:00 PM PT |
| Certain operations performed on a Cluster Shared Volume may fail Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, \"STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)\". See details > | OS Build 17134.523 January 08, 2019 KB4480966 | Mitigated | April 25, 2019 02:00 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. See details > | OS Build 17134.753 April 25, 2019 KB4493437 | Resolved KB4499167 | May 15, 2019 05:55 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 17134.765 May 14, 2019 KB4499167 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | OS Build 17134.753 April 25, 2019 KB4493437 | Resolved KB4499167 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | OS Build 17763.502 May 14, 2019 KB4494441 | Acknowledged | May 16, 2019 01:57 PM PT |
| Devices with some Asian language packs installed may receive an error After installing the KB4493509 devices with some Asian language packs installed may receive the error, \"0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_F See details > | OS Build 17763.437 April 09, 2019 KB4493509 | Mitigated | May 03, 2019 10:59 AM PT |
| Printing from Microsoft Edge or other UWP apps, you may receive the error 0x80070007 Attempting to print from Microsoft Edge or other Universal Windows Platform (UWP) applications, you may receive an error. See details > | OS Build 17763.379 March 12, 2019 KB4489899 | Mitigated | May 02, 2019 04:47 PM PT |
| Issue using PXE to start a device from WDS Using PXE to start a device from a WDS server configured to use Variable Window Extension may cause the connection to the WDS server to terminate prematurely. See details > | OS Build 17763.379 March 12, 2019 KB4489899 | Mitigated | April 09, 2019 10:00 AM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | OS Build 17763.502 May 14, 2019 KB4494441 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Devices with some Asian language packs installed may receive an error After installing the April 2019 Cumulative Update (KB4493509), devices with some Asian language packs installed may receive the error, \"0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_FOUND.\" Affected platforms:
Workaround:
Note: If reinstalling the language pack does not mitigate the issue, reset your PC as follows:
Next steps: Microsoft is working on a resolution and will provide an update in an upcoming release. Back to top | OS Build 17763.437 April 09, 2019 KB4493509 | Mitigated | Last updated: May 03, 2019 10:59 AM PT Opened: May 02, 2019 04:36 PM PT |
| Printing from Microsoft Edge or other UWP apps, you may receive the error 0x80070007 When attempting to print from Microsoft Edge or other Universal Windows Platform (UWP) applications you may receive the error, \"Your printer has experienced an unexpected configuration problem. 0x80070007e.\" Affected platforms:
Workaround: You can use another browser, such as Internet Explorer to print your documents. Next steps: Microsoft is working on a resolution and will provide an update in an upcoming release. Back to top | OS Build 17763.379 March 12, 2019 KB4489899 | Mitigated | Last updated: May 02, 2019 04:47 PM PT Opened: May 02, 2019 04:47 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | OS Build 17763.475 May 03, 2019 KB4495667 | Resolved KB4494441 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | May 14, 2019 KB4499164 | Acknowledged | May 16, 2019 01:57 PM PT |
| System may be unresponsive after restart with certain McAfee antivirus products Devices with McAfee Endpoint Security Threat Prevention 10.x, Host Intrusion Prevention 8.0, or VirusScan Enterprise 8.8 may be slow or unresponsive at startup. See details > | April 09, 2019 KB4493472 | Mitigated | April 25, 2019 02:00 PM PT |
| System may be unresponsive after restart if ArcaBit antivirus software installed Devices with ArcaBit antivirus software installed may become unresponsive upon restart. See details > | April 09, 2019 KB4493472 | Resolved | May 14, 2019 01:23 PM PT |
| System unresponsive after restart if Sophos Endpoint Protection installed Devices with Sophos Endpoint Protection installed and managed by Sophos Central or Sophos Enterprise Console (SEC) may become unresponsive upon restart. See details > | April 09, 2019 KB4493472 | Resolved | May 14, 2019 01:22 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | May 14, 2019 KB4499164 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Summary | Originating update | Status | Last updated |
| Unable to access some gov.uk websites Access to gov.uk websites that don’t support of “HSTS” may be inoperative See details > | May 14, 2019 KB4499151 | Acknowledged | May 16, 2019 01:57 PM PT |
| Japanese IME doesn't show the new Japanese Era name as a text input option If previous dictionary updates are installed, the Japanese input method editor (IME) doesn't show the new Japanese Era name as a text input option. See details > | April 25, 2019 KB4493443 | Mitigated | May 15, 2019 05:53 PM PT |
| Issue using PXE to start a device from WDS There may be issues using the Preboot Execution Environment (PXE) to start a device from a Windows Deployment Services (WDS) server configured to use Variable Window Extension. See details > | March 12, 2019 KB4489881 | Mitigated | April 25, 2019 02:00 PM PT |
| Certain operations performed on a Cluster Shared Volume may fail Certain operations, such as rename, performed on files or folders on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. See details > | January 08, 2019 KB4480963 | Mitigated | April 25, 2019 02:00 PM PT |
| Details | Originating update | Status | History |
| Unable to access some gov.uk websites After installing the May 14, 2019 update, some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge. Affected platforms:
Next Steps: Microsoft is working on a resolution and will provide an update as quickly as possible. Back to top | May 14, 2019 KB4499151 | Acknowledged | Last updated: May 16, 2019 01:57 PM PT Opened: May 16, 2019 01:57 PM PT |
| Japanese IME doesn't show the new Japanese Era name as a text input option If previous dictionary updates are installed, the Japanese input method editor (IME) doesn't show the new Japanese Era name as a text input option. Affected platforms:
Workaround: If you see any of the previous dictionary updates listed below, uninstall it from Programs and features > Uninstall or change a program. New words that were in previous dictionary updates are also in this update.
Back to top | April 25, 2019 KB4493443 | Mitigated | Last updated: May 15, 2019 05:53 PM PT Opened: May 15, 2019 05:53 PM PT |
| Layout and cell size of Excel sheets may change when using MS UI Gothic When using the MS UI Gothic or MS PGothic fonts, the text, layout, or cell size may become narrower or wider than expected in Microsoft Excel. For example, the layout and cell size of Microsoft Excel sheets may change when using MS UI Gothic. Affected platforms:
Resolution: This issue has been resolved. Back to top | April 25, 2019 KB4493443 | Resolved KB4499151 | Resolved: May 14, 2019 10:00 AM PT Opened: May 10, 2019 10:35 AM PT |