From 9f3215d919c5be8740b5e08c1037142857a4a412 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 12 Jul 2017 22:07:03 +0000 Subject: [PATCH] Merged PR 2196: Merge maricia-12720884 to master --- .../mdm/enterpriseassignedaccess-csp.md | 71 ++++++++++++++++--- ...ew-in-windows-mdm-enrollment-management.md | 11 ++- 2 files changed, 70 insertions(+), 12 deletions(-) diff --git a/windows/client-management/mdm/enterpriseassignedaccess-csp.md b/windows/client-management/mdm/enterpriseassignedaccess-csp.md index 7d94f470b7..222f582e36 100644 --- a/windows/client-management/mdm/enterpriseassignedaccess-csp.md +++ b/windows/client-management/mdm/enterpriseassignedaccess-csp.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/19/2017 +ms.date: 07/12/2017 --- # EnterpriseAssignedAccess CSP @@ -26,7 +26,7 @@ The following diagram shows the EnterpriseAssignedAccess configuration service p The following list shows the characteristics and parameters. -**.Vendor/MSFT/EnterpriseAssignedAccess/** +**./Vendor/MSFT/EnterpriseAssignedAccess/** The root node for the EnterpriseAssignedAccess configuration service provider. Supported operations are Add, Delete, Get and Replace. **AssignedAccess/** @@ -39,10 +39,10 @@ Supported operations are Add, Delete, Get and Replace. The Apps and Settings sections of lockdown XML constitute an Allow list. Any app or setting that is not specified in AssignedAccessXML will not be available on the device to users. The following table describes the entries in lockdown XML. -> **Important**   -When using the AssignedAccessXml in the EnterpriseAssignedAccess CSP through an MDM, the XML must use escaped characters, such as < instead of < because it is embedded in an XML. The examples provided in the topic are formatted for readability. +> [!Important]    +> When using the AssignedAccessXml in the EnterpriseAssignedAccess CSP through an MDM, the XML must use escaped characters, such as \< instead of < because it is embedded in an XML. The examples provided in the topic are formatted for readability. -When using the AssignedAccessXml in a provisioning package using the Windows Imaging and Configuration Designer (ICD) tool, do not use escaped characters. +When using the AssignedAccessXml in a provisioning package using the Windows Configuration Designer tool, do not use escaped characters. Entry | Description ----------- | ------------ @@ -136,10 +136,7 @@ An application that belongs in the folder would add an optional attribute **Pare Entry | Description ----------- | ------------ -Settings | Starting in Windows 10, version 1511, you can specify the following settings pages in the lockdown XML file. - -> [!Important] -> Do not specify a group entry without a page entry because it will cause an undefined behavior. +Settings | Starting in Windows 10, version 1511, you can specify the following settings pages in the lockdown XML file. For Windows 10, version 1703, see the instructions below for the new way to specify the settings pages. +Entry | Description +----------- | ------------ +Settings | Starting in Windows 10, version 1703, you can specify the settings pages using the settings URI. + +For example, in place of SettingPageDisplay, you would use ms-settings:display. See [ms-settings: URI scheme reference](https://docs.microsoft.com/en-us/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference) to find the URI for each settings page. + +Here is an example for Windows 10, version 1703. + +``` syntax + + + + + + + + + +``` + **Quick action settings** Starting in Windows 10, version 1511, you can specify the following quick action settings in the lockdown XML file. The following list shows the quick action settings and settings page dependencies (group and page). > [!Note] -> Only Windows 10, versions 1511 and 1607, the dependent settings group and pages are automatically added when the quick action item is specified in the lockdown XML. This statement does not apply to Windows 10, version 1703. +> Only Windows 10, versions 1511 and 1607, the dependent settings group and pages are automatically added when the quick action item is specified in the lockdown XML. In Windows 10, version 1703, Quick action settings no longer require any dependencies from related group or page. +Starting in Windows 10, version 1703, Quick action settings no longer require any dependencis from related group or page. Here is the list: +- QuickActions_Launcher_AllSettings +- QuickActions_Launcher_DeviceDiscovery +- SystemSettings_BatterySaver_LandingPage_OverrideControl +- SystemSettings_Device_BluetoothQuickAction +- SystemSettings_Flashlight_Toggle +- SystemSettings_Launcher_QuickNote +- SystemSettings_Network_VPN_QuickAction +- SystemSettings_Privacy_LocationEnabledUserPhone +- SystemSettings_QuickAction_AirplaneMode +- SystemSettings_QuickAction_Camera +- SystemSettings_QuickAction_CellularData +- SystemSettings_QuickAction_InternetSharing +- SystemSettings_QuickAction_QuietHours +- SystemSettings_QuickAction_WiFi +- SystemSettings_System_Display_Internal_Rotation +- SystemSettings_System_Display_QuickAction_Brightness + + In this example, all settings pages and quick action settings are allowed. An empty \ node indicates that none of the settings are blocked. ``` syntax @@ -294,7 +330,7 @@ In this example, all settings pages and quick action settings are allowed. An em ``` -In this example, all System setting pages are enabled. Note that the System page group is added as well as all of the System subpage names. +In this example for Windows 10, version 1511, all System setting pages are enabled. Note that the System page group is added as well as all of the System subpage names. ``` syntax @@ -310,6 +346,19 @@ In this example, all System setting pages are enabled. Note that the System page ``` +Here is an example for Windows 10, version 1703. + +``` syntax + + + + + + + + + +``` Entry | Description ----------- | ------------ diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index d68cbceba1..fd602713a7 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -10,7 +10,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 07/11/2017 +ms.date: 07/12/2017 --- # What's new in MDM enrollment and management @@ -1306,12 +1306,21 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • WindowsDefenderSecurityCenter/URL
    • + [EnterpriseDesktopAppManagement CSP](enterprisedesktopappmanagement-csp.md) Added the following statement to [MSI/ProductID/DownloadInstall](enterprisedesktopappmanagement-csp.md#msi-productid-downloadinstall): + +[EnterpriseAssignedAccess CSP](enterpriseassignedaccess-csp.md) +Added the following information about the settings pages in AssigneAccessXML: + +