mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 05:47:23 +00:00
Merge branch 'master' of https://cpubwin.visualstudio.com/_git/it-client into DHupdatesRS3
This commit is contained in:
commit
a0843bf4e7
@ -391,6 +391,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "windows/configuration/stop-employees-from-using-the-windows-store.md",
|
||||||
|
"redirect_url": "/windows/configuration/stop-employees-from-using-microsoft-store",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/configure-devices-without-mdm.md",
|
"source_path": "windows/manage/configure-devices-without-mdm.md",
|
||||||
"redirect_url": "/windows/configuration/provisioning-packages/provisioning-packages",
|
"redirect_url": "/windows/configuration/provisioning-packages/provisioning-packages",
|
||||||
"redirect_document_id": false
|
"redirect_document_id": false
|
||||||
@ -636,6 +641,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/app-inventory-management-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/app-inventory-management-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/application-development-for-windows-as-a-service.md",
|
"source_path": "windows/manage/application-development-for-windows-as-a-service.md",
|
||||||
"redirect_url": "https://msdn.microsoft.com/windows/uwp/get-started/application-development-for-windows-as-a-service",
|
"redirect_url": "https://msdn.microsoft.com/windows/uwp/get-started/application-development-for-windows-as-a-service",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -696,6 +706,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/app-inventory-managemement-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/app-inventory-managemement-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/uev-accessibility.md",
|
"source_path": "windows/manage/uev-accessibility.md",
|
||||||
"redirect_url": "/windows/configuration/ue-v/uev-for-windows",
|
"redirect_url": "/windows/configuration/ue-v/uev-for-windows",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -1171,6 +1186,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/windows-store-for-business-overview.md",
|
||||||
|
"redirect_url": "/microsoft-store/microsoft-store-for-business-overview",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/whats-new/windows-update-for-business.md",
|
"source_path": "windows/whats-new/windows-update-for-business.md",
|
||||||
"redirect_url": "/windows/whats-new/whats-new-windows-10-version-1507-and-1511",
|
"redirect_url": "/windows/whats-new/whats-new-windows-10-version-1507-and-1511",
|
||||||
"redirect_document_id": false
|
"redirect_document_id": false
|
||||||
@ -7071,6 +7091,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/acquire-apps-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/acquire-apps-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/add-unsigned-app-to-code-integrity-policy.md",
|
"source_path": "windows/manage/add-unsigned-app-to-code-integrity-policy.md",
|
||||||
"redirect_url": "/microsoft-store/add-unsigned-app-to-code-integrity-policy",
|
"redirect_url": "/microsoft-store/add-unsigned-app-to-code-integrity-policy",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7091,6 +7116,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/apps-in-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/apps-in-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/appv-about-appv.md",
|
"source_path": "windows/manage/appv-about-appv.md",
|
||||||
"redirect_url": "/windows/application-management/app-v/appv-about-appv",
|
"redirect_url": "/windows/application-management/app-v/appv-about-appv",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7601,6 +7631,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/configure-mdm-provider-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/configure-mdm-provider-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/connect-to-remote-aadj-pc.md",
|
"source_path": "windows/manage/connect-to-remote-aadj-pc.md",
|
||||||
"redirect_url": "/windows/client-management/connect-to-remote-aadj-pc",
|
"redirect_url": "/windows/client-management/connect-to-remote-aadj-pc",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7621,6 +7656,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/distribute-apps-to-your-employees-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/distribute-apps-with-management-tool.md",
|
"source_path": "windows/manage/distribute-apps-with-management-tool.md",
|
||||||
"redirect_url": "/microsoft-store/distribute-apps-with-management-tool",
|
"redirect_url": "/microsoft-store/distribute-apps-with-management-tool",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7656,6 +7696,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/manage-apps-windows-store-for-business-overview.md",
|
||||||
|
"redirect_url": "/microsoft-store/manage-apps-microsoft-store-for-business-overview",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/manage-corporate-devices.md",
|
"source_path": "windows/manage/manage-corporate-devices.md",
|
||||||
"redirect_url": "/windows/client-management/index",
|
"redirect_url": "/windows/client-management/index",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7666,6 +7711,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/manage-orders-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/manage-orders-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/manage-private-store-settings.md",
|
"source_path": "windows/manage/manage-private-store-settings.md",
|
||||||
"redirect_url": "/microsoft-store/manage-private-store-settings",
|
"redirect_url": "/microsoft-store/manage-private-store-settings",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7676,11 +7726,21 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/manage-settings-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/manage-settings-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/manage-users-and-groups-windows-store-for-business.md",
|
"source_path": "windows/manage/manage-users-and-groups-windows-store-for-business.md",
|
||||||
"redirect_url": "/microsoft-store/manage-users-and-groups-windows-store-for-business",
|
"redirect_url": "/microsoft-store/manage-users-and-groups-windows-store-for-business",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/manage-users-and-groups-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/manage-users-and-groups-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/manage-windows-10-in-your-organization-modern-management.md",
|
"source_path": "windows/manage/manage-windows-10-in-your-organization-modern-management.md",
|
||||||
"redirect_url": "/windows/client-management/manage-windows-10-in-your-organization-modern-management",
|
"redirect_url": "/windows/client-management/manage-windows-10-in-your-organization-modern-management",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7701,6 +7761,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/prerequisites-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/prerequisites-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/reset-a-windows-10-mobile-device.md",
|
"source_path": "windows/manage/reset-a-windows-10-mobile-device.md",
|
||||||
"redirect_url": "/windows/client-management/reset-a-windows-10-mobile-device",
|
"redirect_url": "/windows/client-management/reset-a-windows-10-mobile-device",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7711,11 +7776,21 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/roles-and-permissions-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/roles-and-permissions-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/settings-reference-windows-store-for-business.md",
|
"source_path": "windows/manage/settings-reference-windows-store-for-business.md",
|
||||||
"redirect_url": "/microsoft-store/settings-reference-windows-store-for-business",
|
"redirect_url": "/microsoft-store/settings-reference-windows-store-for-business",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/settings-reference-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/settings-reference-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/sign-code-integrity-policy-with-device-guard-signing.md",
|
"source_path": "windows/manage/sign-code-integrity-policy-with-device-guard-signing.md",
|
||||||
"redirect_url": "/microsoft-store/sign-code-integrity-policy-with-device-guard-signing",
|
"redirect_url": "/microsoft-store/sign-code-integrity-policy-with-device-guard-signing",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7726,16 +7801,31 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/sign-up-windows-store-for-business-overview.md",
|
||||||
|
"redirect_url": "/microsoft-store/sign-up-microsoft-store-for-business-overview",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/sign-up-windows-store-for-business.md",
|
"source_path": "windows/manage/sign-up-windows-store-for-business.md",
|
||||||
"redirect_url": "/microsoft-store/sign-up-windows-store-for-business",
|
"redirect_url": "/microsoft-store/sign-up-windows-store-for-business",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/sign-up-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/sign-up-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/troubleshoot-windows-store-for-business.md",
|
"source_path": "windows/manage/troubleshoot-windows-store-for-business.md",
|
||||||
"redirect_url": "/microsoft-store/troubleshoot-windows-store-for-business",
|
"redirect_url": "/microsoft-store/troubleshoot-windows-store-for-business",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/troubleshoot-windows-store-for-business.md",
|
||||||
|
"redirect_url": "/microsoft-store/troubleshoot-microsoft-store-for-business",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/uev-administering-uev-with-windows-powershell-and-wmi.md",
|
"source_path": "windows/manage/uev-administering-uev-with-windows-powershell-and-wmi.md",
|
||||||
"redirect_url": "/windows/configuration/ue-v/uev-administering-uev-with-windows-powershell-and-wmi",
|
"redirect_url": "/windows/configuration/ue-v/uev-administering-uev-with-windows-powershell-and-wmi",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
@ -7876,6 +7966,11 @@
|
|||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"source_path": "store-for-business/update-windows-store-for-business-account-settings.md",
|
||||||
|
"redirect_url": "/microsoft-store/update-microsoft-store-for-business-account-settings",
|
||||||
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
"source_path": "windows/manage/windows-10-mobile-and-mdm.md",
|
"source_path": "windows/manage/windows-10-mobile-and-mdm.md",
|
||||||
"redirect_url": "/windows/client-management/windows-10-mobile-and-mdm",
|
"redirect_url": "/windows/client-management/windows-10-mobile-and-mdm",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
|
@ -20,7 +20,7 @@ ms.localizationpriority: high
|
|||||||
|
|
||||||
Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge also introduces new features like Web Note, Reading View, and Cortana that you can use along with your normal web browsing abilities.
|
Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge also introduces new features like Web Note, Reading View, and Cortana that you can use along with your normal web browsing abilities.
|
||||||
|
|
||||||
Microsoft Edge lets you stay up-to-date through the Windows Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools.
|
Microsoft Edge lets you stay up-to-date through the Microsoft Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools.
|
||||||
|
|
||||||
>[!Note]
|
>[!Note]
|
||||||
>For more info about the potential impact of using Microsoft Edge in a large organization, you can download an infographic from here: [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/download/details.aspx?id=55956). For a detailed report that provides you with a framework to evaluate the potential financial impact of adopting Microsoft Edge within your organization, you can download the full study here: [Total Economic Impact of Microsoft Edge: Forrester Study](https://www.microsoft.com/download/details.aspx?id=55847).
|
>For more info about the potential impact of using Microsoft Edge in a large organization, you can download an infographic from here: [Total Economic Impact of Microsoft Edge: Infographic](https://www.microsoft.com/download/details.aspx?id=55956). For a detailed report that provides you with a framework to evaluate the potential financial impact of adopting Microsoft Edge within your organization, you can download the full study here: [Total Economic Impact of Microsoft Edge: Forrester Study](https://www.microsoft.com/download/details.aspx?id=55847).
|
||||||
@ -55,7 +55,7 @@ However, if you're running web apps that continue to use:
|
|||||||
|
|
||||||
* legacy document modes
|
* legacy document modes
|
||||||
|
|
||||||
You'll need to keep running them using IE11. If you don't have IE11 installed anymore, you can download it from the Windows Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). Alternatively, you can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md).
|
You'll need to keep running them using IE11. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956). Alternatively, you can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md).
|
||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
|
||||||
|
@ -20,7 +20,7 @@ ms.localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
|
|
||||||
## Enterprise guidance
|
## Enterprise guidance
|
||||||
Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Windows Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956).
|
Microsoft Edge is the default browser experience for Windows 10 and Windows 10 Mobile. However, if you're running web apps that need ActiveX controls, we recommend that you continue to use Internet Explorer 11 for them. If you don't have IE11 installed anymore, you can download it from the Microsoft Store or from the [Internet Explorer 11 download page](https://go.microsoft.com/fwlink/p/?linkid=290956).
|
||||||
|
|
||||||
We also recommend that you upgrade to IE11 if you're running any earlier versions of Internet Explorer. IE11 is supported on Windows 7, Windows 8.1, and Windows 10. So any legacy apps that work with IE11 will continue to work even as you migrate to Windows 10.
|
We also recommend that you upgrade to IE11 if you're running any earlier versions of Internet Explorer. IE11 is supported on Windows 7, Windows 8.1, and Windows 10. So any legacy apps that work with IE11 will continue to work even as you migrate to Windows 10.
|
||||||
|
|
||||||
|
@ -65,7 +65,7 @@ Internet Explorer 10 introduced Enhanced Protected Mode (EPM), based on the Wind
|
|||||||
Microsoft Edge takes the sandbox even farther, running its content processes in app containers not just by default, but all of the time. Because Microsoft Edge doesn’t support 3rd party binary extensions, there’s no reason for it to run outside of the containers, ensuring that Microsoft Edge is more secure.
|
Microsoft Edge takes the sandbox even farther, running its content processes in app containers not just by default, but all of the time. Because Microsoft Edge doesn’t support 3rd party binary extensions, there’s no reason for it to run outside of the containers, ensuring that Microsoft Edge is more secure.
|
||||||
|
|
||||||
#### Microsoft Edge is now a 64-bit app
|
#### Microsoft Edge is now a 64-bit app
|
||||||
The largest security change to Microsoft Edge is that it's designed like a Universal Windows app. By changing the browser to an app, it fundamentally changes the process model so that both the outer manager process and the assorted content processes all live within app container sandboxes; helping to provide the user and the platform with the [confidence](http://blogs.msdn.com/b/b8/archive/2012/05/17/delivering-reliable-and-trustworthy-metro-style-apps.aspx) provided by other Windows store apps.
|
The largest security change to Microsoft Edge is that it's designed like a Universal Windows app. By changing the browser to an app, it fundamentally changes the process model so that both the outer manager process and the assorted content processes all live within app container sandboxes; helping to provide the user and the platform with the [confidence](http://blogs.msdn.com/b/b8/archive/2012/05/17/delivering-reliable-and-trustworthy-metro-style-apps.aspx) provided by other Microsoft Store apps.
|
||||||
|
|
||||||
##### 64-bit processes and Address Space Layout Randomization (ASLR)
|
##### 64-bit processes and Address Space Layout Randomization (ASLR)
|
||||||
Microsoft Edge runs in 64-bit not just by default, but anytime it’s running on a 64-bit operating system. Because Microsoft Edge doesn’t support legacy ActiveX controls or 3rd-party binary extensions, there’s no longer a reason to run 32-bit processes on a 64-bit system.
|
Microsoft Edge runs in 64-bit not just by default, but anytime it’s running on a 64-bit operating system. Because Microsoft Edge doesn’t support legacy ActiveX controls or 3rd-party binary extensions, there’s no longer a reason to run 32-bit processes on a 64-bit system.
|
||||||
|
@ -14,7 +14,7 @@ ms.sitesec: library
|
|||||||
# Browser cache changes and roaming profiles
|
# Browser cache changes and roaming profiles
|
||||||
We’ve redesigned the browser cache to improve the performance, flexibility, reliability, and scalability of Internet Explorer and the apps that rely on the Windows Internet (WinINet) cache. Our new database design stops multiple clients from simultaneously accessing and using cached information, while also providing a higher level of data integrity.
|
We’ve redesigned the browser cache to improve the performance, flexibility, reliability, and scalability of Internet Explorer and the apps that rely on the Windows Internet (WinINet) cache. Our new database design stops multiple clients from simultaneously accessing and using cached information, while also providing a higher level of data integrity.
|
||||||
|
|
||||||
You won’t notice any changes to the management of your roaming profile data if you use our new database implementation in conjunction with the [roaming user profile guidelines](https://go.microsoft.com/fwlink/p/?LinkId=401544). This means that IE data that’s stored in the `AppData\Roaming` user profile folder is still be uploaded to your normal profile storage location after a user successfully logs off.<p>**Note**<br>Cookies in a roaming profile can only be set by Internet Explorer for the desktop, with Enhanced Protected Mode turned off. Cookies set by the immersive version of IE or by Windows Store apps, can’t be part of a roaming profile. For more information about persistent cookies and roaming, see [Persistent cookies are not roamed in Internet Explorer](https://go.microsoft.com/fwlink/p/?LinkId=401545).
|
You won’t notice any changes to the management of your roaming profile data if you use our new database implementation in conjunction with the [roaming user profile guidelines](https://go.microsoft.com/fwlink/p/?LinkId=401544). This means that IE data that’s stored in the `AppData\Roaming` user profile folder is still be uploaded to your normal profile storage location after a user successfully logs off.<p>**Note**<br>Cookies in a roaming profile can only be set by Internet Explorer for the desktop, with Enhanced Protected Mode turned off. Cookies set by the immersive version of IE or by Microsoft Store apps, can’t be part of a roaming profile. For more information about persistent cookies and roaming, see [Persistent cookies are not roamed in Internet Explorer](https://go.microsoft.com/fwlink/p/?LinkId=401545).
|
||||||
|
|
||||||
To get the best results while using roaming profiles, we strongly recommend the following:
|
To get the best results while using roaming profiles, we strongly recommend the following:
|
||||||
|
|
||||||
|
@ -59,7 +59,7 @@ After you turn each item back on, see if IE crashes or slows down. Doing it this
|
|||||||
If the **Use software rendering instead of GPU rendering** option is greyed out, it means that your current video card or video driver doesn't support GPU hardware acceleration. For more information, see [Windows 10 Support](https://go.microsoft.com/fwlink/?LinkId=746588).
|
If the **Use software rendering instead of GPU rendering** option is greyed out, it means that your current video card or video driver doesn't support GPU hardware acceleration. For more information, see [Windows 10 Support](https://go.microsoft.com/fwlink/?LinkId=746588).
|
||||||
|
|
||||||
## Adaptive streaming and DRM playback don’t work with Windows Server 2012 R2
|
## Adaptive streaming and DRM playback don’t work with Windows Server 2012 R2
|
||||||
IE11 in Windows Server 2012 R2 doesn’t include media features like adaptive streaming or Digital Rights Management (DRM) playback. To add these features, you’ll need to download and install the Media Feature Pack from the [Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=320789), as well as an app that uses PlayReady DRM from the Windows Store, such as the Xbox Music app or Xbox Video app. The app must be installed to specifically turn on DRM features, while all other media features are installed with the Media Feature Pack.
|
IE11 in Windows Server 2012 R2 doesn’t include media features like adaptive streaming or Digital Rights Management (DRM) playback. To add these features, you’ll need to download and install the Media Feature Pack from the [Microsoft Download Center](https://go.microsoft.com/fwlink/p/?LinkId=320789), as well as an app that uses PlayReady DRM from the Microsoft Store, such as the Xbox Music app or Xbox Video app. The app must be installed to specifically turn on DRM features, while all other media features are installed with the Media Feature Pack.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -140,7 +140,7 @@ Group Policy settings can be set to open either IE or Internet Explorer for the
|
|||||||
|
|
||||||
|Setting |Result |
|
|Setting |Result |
|
||||||
|--------|-------|
|
|--------|-------|
|
||||||
|Let IE decide |Links open in the same type of experience from where they're launched. For example, clicking a link from a Windows Store app, opens IE. However, clicking a link from a desktop app, opens Internet Explorer for the desktop. |
|
|Let IE decide |Links open in the same type of experience from where they're launched. For example, clicking a link from a Microsoft Store app, opens IE. However, clicking a link from a desktop app, opens Internet Explorer for the desktop. |
|
||||||
|Always in IE11 |Links always open in IE. |
|
|Always in IE11 |Links always open in IE. |
|
||||||
|Always in Internet Explorer for the desktop |Links always open in Internet Explorer for the desktop. |
|
|Always in Internet Explorer for the desktop |Links always open in Internet Explorer for the desktop. |
|
||||||
|
|
||||||
|
@ -37,15 +37,15 @@ You can also configure Surface Hub to receive updates from both Windows Update f
|
|||||||
|
|
||||||
## Surface Hub servicing model
|
## Surface Hub servicing model
|
||||||
|
|
||||||
Surface Hub uses the Windows 10 servicing model, referred to as Windows as a Service (WaaS). Traditionally, new features are added only in new versions of Windows that are released every few years. Each new version required lengthy and expensive processes to deploy in an organization. As a result, end users and organizations don't frequently enjoy the benefits of new innovation. The goal of Windows as a Service is to continually provide new capabilities while maintaining a high level of quality.
|
Surface Hub uses the Windows 10 servicing model, referred to as [Windows as a Service (WaaS)](https://docs.microsoft.com/windows/deployment/update/waas-overview). Traditionally, new features were added only in new versions of Windows that were released every few years. Each new version required lengthy and expensive processes to deploy in an organization. As a result, end users and organizations don't frequently enjoy the benefits of new innovation. The goal of Windows as a Service is to continually provide new capabilities while maintaining a high level of quality.
|
||||||
|
|
||||||
Microsoft publishes two types of Surface Hub releases broadly on an ongoing basis:
|
Microsoft publishes two types of Surface Hub releases broadly on an ongoing basis:
|
||||||
- **Feature updates** - Updates that install the latest new features, experiences, and capabilities. Microsoft expects to publish an average of two to three new feature upgrades per year.
|
- **Feature updates** - Updates that install the latest new features, experiences, and capabilities. Microsoft expects to publish two tnew feature updates per year.
|
||||||
- **Quality updates** - Updates that focus on the installation of security fixes, drivers, and other servicing updates. Microsoft expects to publish one cumulative quality update per month.
|
- **Quality updates** - Updates that focus on the installation of security fixes, drivers, and other servicing updates. Microsoft expects to publish one cumulative quality update per month.
|
||||||
|
|
||||||
In order to improve release quality and simplify deployments, all new releases that Microsoft publishes for Windows 10, including Surface Hub, will be cumulative. This means new feature updates and quality updates will contain the payloads of all previous releases (in an optimized form to reduce storage and networking requirements), and installing the release on a device will bring it completely up to date. Also, unlike earlier versions of Windows, you cannot install a subset of the contents of a Windows 10 quality update. For example, if a quality update contains fixes for three security vulnerabilities and one reliability issue, deploying the update will result in the installation of all four fixes.
|
In order to improve release quality and simplify deployments, all new releases that Microsoft publishes for Windows 10, including Surface Hub, will be cumulative. This means new feature updates and quality updates will contain the payloads of all previous releases (in an optimized form to reduce storage and networking requirements), and installing the release on a device will bring it completely up to date. Also, unlike earlier versions of Windows, you cannot install a subset of the contents of a Windows 10 quality update. For example, if a quality update contains fixes for three security vulnerabilities and one reliability issue, deploying the update will result in the installation of all four fixes.
|
||||||
|
|
||||||
The Surface Hub operating system is available on **Current Branch (CB)** and **Current Branch for Business (CBB)**. Like other editions of Windows 10, the servicing lifetime of CB or CBB is finite. You must install new feature updates on machines running these branches in order to continue receiving quality updates.
|
The Surface Hub operating system receives updates on the [Semi-Annual Channel](https://docs.microsoft.com/windows/deployment/update/waas-overview#naming-changes). Like other editions of Windows 10, the servicing lifetime ois finite. You must install new feature updates on machines running these branches in order to continue receiving quality updates.
|
||||||
|
|
||||||
For more information on Windows as a Service, see [Overview of Windows as a service](https://technet.microsoft.com/itpro/windows/manage/waas-overview).
|
For more information on Windows as a Service, see [Overview of Windows as a service](https://technet.microsoft.com/itpro/windows/manage/waas-overview).
|
||||||
|
|
||||||
@ -55,11 +55,9 @@ Surface Hubs, like all Windows 10 devices, include **Windows Update for Business
|
|||||||
|
|
||||||
**To set up Windows Update for Business:**
|
**To set up Windows Update for Business:**
|
||||||
1. [Group Surface Hub into deployment rings](#group-surface-hub-into-deployment-rings)
|
1. [Group Surface Hub into deployment rings](#group-surface-hub-into-deployment-rings)
|
||||||
2. [Configure Surface Hub to use Current Branch or Current Branch for Business](#configure-surface-hub-to-use-current-branch-or-current-branch-for-business).
|
|
||||||
2. [Configure when Surface Hub receives updates](#configure-when-surface-hub-receives-updates).
|
2. [Configure when Surface Hub receives updates](#configure-when-surface-hub-receives-updates).
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
|
|
||||||
> You can use Microsoft Intune, System Center Configuration Manager, or a supported third-party MDM provider to set up WUfB. [Walkthrough: use Microsoft Intune to configure Windows Update for Business.](https://technet.microsoft.com/itpro/windows/manage/waas-wufb-intune)
|
> You can use Microsoft Intune, System Center Configuration Manager, or a supported third-party MDM provider to set up WUfB. [Walkthrough: use Microsoft Intune to configure Windows Update for Business.](https://technet.microsoft.com/itpro/windows/manage/waas-wufb-intune)
|
||||||
|
|
||||||
|
|
||||||
@ -70,29 +68,22 @@ This table gives examples of deployment rings.
|
|||||||
|
|
||||||
| Deployment ring | Ring size | Servicing branch | Deferral for feature updates | Deferral for quality updates (security fixes, drivers, and other updates) | Validation step |
|
| Deployment ring | Ring size | Servicing branch | Deferral for feature updates | Deferral for quality updates (security fixes, drivers, and other updates) | Validation step |
|
||||||
| --------- | --------- | --------- | --------- | --------- | --------- |
|
| --------- | --------- | --------- | --------- | --------- | --------- |
|
||||||
| Preview (e.g. non-critical or test devices) | Small | Current Branch (CB) | None. Devices receive feature updates immediately after CB is released. | None. Devices receive quality updates immediately after CB is released. | Manually test and evaluate new functionality. Pause updates if there are issues. |
|
| Preview (e.g. non-critical or test devices) | Small | Semi-annual channel (Targeted) | None. | None. | Manually test and evaluate new functionality. Pause updates if there are issues. |
|
||||||
| Release (e.g. devices used by select teams) | Medium | Current Branch for Business (CBB) | None. Devices receive feature updates immediately once CBB is released. | None. Devices receive quality updates immediately after CBB is released. | Monitor device usage and user feedback. Pause updates if there are issues. |
|
| Release (e.g. devices used by select teams) | Medium | Semi-annual channel | None. | None. | Monitor device usage and user feedback. Pause updates if there are issues. |
|
||||||
| Broad deployment (e.g. most of the devices in your organization) | Large | Current Branch for Business (CBB) | 120 days after CBB is released. | 7-14 days after CBB is released. | Monitor device usage and user feedback. Pause updates if there are issues. |
|
| Broad deployment (e.g. most of the devices in your organization) | Large | Semi-annual channel | 120 days after release. | 7-14 days after release. | Monitor device usage and user feedback. Pause updates if there are issues. |
|
||||||
| Mission critical (e.g. devices in executive boardrooms) | Small | Current Branch for Business (CBB) | 180 days after CBB is released (maximum deferral for feature updates). | 30 days after CBB is released (maximum deferral for quality updates). | Monitor device usage and user feedback. |
|
| Mission critical (e.g. devices in executive boardrooms) | Small | Semi-annual channel | 180 days after release (maximum deferral for feature updates). | 30 days after release (maximum deferral for quality updates). | Monitor device usage and user feedback. |
|
||||||
|
|
||||||
|
|
||||||
### Configure Surface Hub to use Current Branch or Current Branch for Business
|
|
||||||
By default, Surface Hubs are configured to receive updates from Current Branch (CB). CB receives feature updates as soon as they are released by Microsoft. Current Branch for Business (CBB), on the other hand, receives feature updates at least four months after they have been initially offered to CB devices, and includes all of the quality updates that have been released in the interim. For more information on the differences between CB and CBB, see [Servicing branches](https://technet.microsoft.com/itpro/windows/manage/waas-overview#servicing-branches).
|
|
||||||
|
|
||||||
**To manually configure Surface Hub to use CB or CBB:**
|
|
||||||
1. Open **Settings** > **Update & Security** > **Windows Update**, and then select **Advanced Options**.
|
|
||||||
2. Select **Defer feature updates**.
|
|
||||||
|
|
||||||
To configure Surface Hub to use CB or CBB remotely using MDM, set an appropriate [Update/BranchReadinessLevel](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#Update_BranchReadinessLevel) policy.
|
|
||||||
|
|
||||||
|
|
||||||
### Configure when Surface Hub receives updates
|
### Configure when Surface Hub receives updates
|
||||||
Once you've determined deployment rings for your Surface Hubs, configure update deferral policies for each ring:
|
Once you've determined deployment rings for your Surface Hubs, configure update deferral policies for each ring:
|
||||||
- To defer feature updates, set an appropriate [Update/DeferFeatureUpdatesPeriodInDays](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#Update_DeferFeatureUpdatesPeriodInDays) policy for each ring.
|
- To defer feature updates, set an appropriate [Update/DeferFeatureUpdatesPeriodInDays](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-deferfeatureupdatesperiodindays) policy for each ring.
|
||||||
- To defer quality updates, set an appropriate [Update/DeferQualityUpdatesPeriodInDays](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#Update_DeferQualityUpdatesPeriodInDays) policy for each ring.
|
- To defer quality updates, set an appropriate [Update/DeferQualityUpdatesPeriodInDays](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-deferqualityupdatesperiodindays) policy for each ring.
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> If you encounter issues during the update rollout, you can pause updates using [Update/PauseFeatureUpdates](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#Update_PauseFeatureUpdates) and [Update/PauseQualityUpdates](https://msdn.microsoft.com/library/windows/hardware/dn904962.aspx#Update_PauseQualityUpdates).
|
> If you encounter issues during the update rollout, you can pause updates using [Update/PauseFeatureUpdates](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-pausefeatureupdates) and [Update/PauseQualityUpdates](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update#update-pausequalityupdates).
|
||||||
|
|
||||||
|
|
||||||
## Use Windows Server Update Services
|
## Use Windows Server Update Services
|
||||||
|
@ -46,7 +46,7 @@ Microsoft collects telemetry to help improve your Surface Hub experience. Add th
|
|||||||
|
|
||||||
### Proxy configuration
|
### Proxy configuration
|
||||||
|
|
||||||
If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Store for Business. Some of the Store for Business features use Windows Store app and Windows Store services. Devices using Store for Business – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy server to block traffic, your configuration needs to allow these URLs:
|
If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store for Business. Some of the Store for Business features use Microsoft Store app and Microsoft Store services. Devices using Store for Business – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy server to block traffic, your configuration needs to allow these URLs:
|
||||||
|
|
||||||
- login.live.com
|
- login.live.com
|
||||||
- login.windows.net
|
- login.windows.net
|
||||||
|
@ -47,7 +47,7 @@ For versions of Windows prior to Windows 10, version 1511 (including Windows 10
|
|||||||
|
|
||||||
## Deploy Surface app with Configuration Manager
|
## Deploy Surface app with Configuration Manager
|
||||||
|
|
||||||
With the release of Windows Store for Business, Surface app is no longer available as a driver and firmware download. Organizations that want to deploy Surface app to managed Surface devices or during deployment with the use of Configuration Manager, must acquire Surface app through Windows Store for Business and then deploy Surface app with PowerShell. You can find the PowerShell commands for deployment of Surface app, instructions to download Surface app, and prerequisite frameworks from Windows Store for Business in the [Deploy Surface app with Windows Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business) article in the TechNet Library.
|
With the release of Microsoft Store for Business, Surface app is no longer available as a driver and firmware download. Organizations that want to deploy Surface app to managed Surface devices or during deployment with the use of Configuration Manager, must acquire Surface app through Microsoft Store for Business and then deploy Surface app with PowerShell. You can find the PowerShell commands for deployment of Surface app, instructions to download Surface app, and prerequisite frameworks from Microsoft Store for Business in the [Deploy Surface app with Microsoft Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business) article in the TechNet Library.
|
||||||
|
|
||||||
## Use prestaged media with Surface clients
|
## Use prestaged media with Surface clients
|
||||||
|
|
||||||
|
@ -19,7 +19,7 @@ author: miladCA
|
|||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>The Surface app ships in Surface Studio.
|
>The Surface app ships in Surface Studio.
|
||||||
|
|
||||||
The Surface app is a lightweight Windows Store app that provides control of many Surface-specific settings and options, including:
|
The Surface app is a lightweight Microsoft Store app that provides control of many Surface-specific settings and options, including:
|
||||||
|
|
||||||
* Enable or disable the Windows button on the Surface device
|
* Enable or disable the Windows button on the Surface device
|
||||||
|
|
||||||
@ -31,11 +31,11 @@ The Surface app is a lightweight Windows Store app that provides control of many
|
|||||||
|
|
||||||
* Quick access to support documentation and information for your device
|
* Quick access to support documentation and information for your device
|
||||||
|
|
||||||
If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Windows Store or your Microsoft Store for Business.
|
If your organization is preparing images that will be deployed to your Surface devices, you may want to include the Surface app (formerly called the Surface Hub) in your imaging and deployment process instead of requiring users of each individual device to download and install the app from the Microsoft Store or your Microsoft Store for Business.
|
||||||
|
|
||||||
##Surface app overview
|
##Surface app overview
|
||||||
|
|
||||||
The Surface app is available as a free download from the [Windows Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Windows Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://technet.microsoft.com/windows/store-for-business) in the Windows TechCenter.
|
The Surface app is available as a free download from the [Microsoft Store](https://www.microsoft.com/store/apps/Surface/9WZDNCRFJB8P). Users can download and install it from the Microsoft Store, but if your organization uses Microsoft Store for Business instead, you will need to add it to your store’s inventory and possibly include the app as part of your Windows deployment process. These processes are discussed throughout this article. For more information about Microsoft Store for Business, see [Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/) in the Windows TechCenter.
|
||||||
|
|
||||||
##Add Surface app to a Microsoft Store for Business account
|
##Add Surface app to a Microsoft Store for Business account
|
||||||
|
|
||||||
@ -45,7 +45,7 @@ Before users can install or deploy an app from a company’s Microsoft Store for
|
|||||||
|
|
||||||
2. Log on to the portal.
|
2. Log on to the portal.
|
||||||
|
|
||||||
3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing_model).<br/> <br/>
|
3. Enable offline licensing: click **Manage->Store settings**, and then select the **Show offline licensed apps to people shopping in the store** checkbox, as shown in Figure 1. For more information about Microsoft Store for Business app licensing models, see [Apps in Microsoft Store for Business and Education](https://docs.microsoft.com/microsoft-store/).<br/> <br/>
|
||||||
<br/>
|
<br/>
|
||||||
*Figure 1. Enable apps for offline use*
|
*Figure 1. Enable apps for offline use*
|
||||||
|
|
||||||
@ -113,7 +113,7 @@ The following procedure provisions the Surface app onto your computer and makes
|
|||||||
Add-AppxProvisionedPackage –Online –PackagePath <DownloadPath>\ Microsoft.SurfaceHub_10.0.342.0_neutral_~_8wekyb3d8bbwe.AppxBundle –LicensePath <DownloadPath>\ Microsoft.SurfaceHub_8wekyb3d8bbwe_a53ef8ab-9dbd-dec1-46c5-7b664d4dd003.xml
|
Add-AppxProvisionedPackage –Online –PackagePath <DownloadPath>\ Microsoft.SurfaceHub_10.0.342.0_neutral_~_8wekyb3d8bbwe.AppxBundle –LicensePath <DownloadPath>\ Microsoft.SurfaceHub_8wekyb3d8bbwe_a53ef8ab-9dbd-dec1-46c5-7b664d4dd003.xml
|
||||||
```
|
```
|
||||||
|
|
||||||
Where `<DownloadPath>` is the folder where you downloaded the AppxBundle and license file from the Windows Store for Business account.
|
Where `<DownloadPath>` is the folder where you downloaded the AppxBundle and license file from the Microsoft Store for Business account.
|
||||||
|
|
||||||
For example, if you downloaded the files to c:\Temp, the command you run is:
|
For example, if you downloaded the files to c:\Temp, the command you run is:
|
||||||
````
|
````
|
||||||
|
@ -530,9 +530,9 @@ Now that the installation and configuration files are prepared, the application
|
|||||||
|
|
||||||
#### Import Surface app installer
|
#### Import Surface app installer
|
||||||
|
|
||||||
The Surface app is a Windows Store app that provides the user with greater control over specific Surface device functions and capabilities (for example, control over the sensitivity of the Surface Pen). It is a highly recommended app for Surface devices to provide end users with the best experience and greatest control over their device. Find out more about the Surface app at [Install and use the Surface app](https://www.microsoft.com/surface/support/apps-and-windows-store/surface-app?os=windows-10).
|
The Surface app is a Microsoft Store app that provides the user with greater control over specific Surface device functions and capabilities (for example, control over the sensitivity of the Surface Pen). It is a highly recommended app for Surface devices to provide end users with the best experience and greatest control over their device. Find out more about the Surface app at [Install and use the Surface app](https://www.microsoft.com/surface/support/apps-and-windows-store/surface-app?os=windows-10).
|
||||||
|
|
||||||
To perform a deployment of the Surface app, you will need to download the app files through Windows Store for Business. You can find detailed instructions on how to download the Surface app through Windows Store for Business at [Deploy Surface app with Windows Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business).
|
To perform a deployment of the Surface app, you will need to download the app files through Microsoft Store for Business. You can find detailed instructions on how to download the Surface app through Microsoft Store for Business at [Deploy Surface app with Microsoft Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business).
|
||||||
|
|
||||||
After you have downloaded the installation files for Surface app, including the AppxBundle and license files, you can import these files into the deployment share through the same process as a desktop application like Microsoft Office. Both the AppxBundle and license files must be together in the same folder for the import process to complete successfully. Use the following command on the **Command Details** page to install the Surface app:
|
After you have downloaded the installation files for Surface app, including the AppxBundle and license files, you can import these files into the deployment share through the same process as a desktop application like Microsoft Office. Both the AppxBundle and license files must be together in the same folder for the import process to complete successfully. Use the following command on the **Command Details** page to install the Surface app:
|
||||||
```
|
```
|
||||||
|
@ -24,7 +24,7 @@ For more information on planning for, deploying, and managing Surface devices in
|
|||||||
| [Deploy Surface devices](deploy.md) | Get deployment guidance for your Surface devices including information about MDT, OOBE customization, Ethernet adaptors, and Surface Deployment Accelerator. |
|
| [Deploy Surface devices](deploy.md) | Get deployment guidance for your Surface devices including information about MDT, OOBE customization, Ethernet adaptors, and Surface Deployment Accelerator. |
|
||||||
| [Surface firmware and driver updates](update.md) | Find out how to download and manage the latest firmware and driver updates for your Surface device. |
|
| [Surface firmware and driver updates](update.md) | Find out how to download and manage the latest firmware and driver updates for your Surface device. |
|
||||||
| [Considerations for Surface and System Center Configuration Manager](considerations-for-surface-and-system-center-configuration-manager.md) | Get guidance on how to deploy and manage Surface devices with System Center Configuration Manager. |
|
| [Considerations for Surface and System Center Configuration Manager](considerations-for-surface-and-system-center-configuration-manager.md) | Get guidance on how to deploy and manage Surface devices with System Center Configuration Manager. |
|
||||||
| [Deploy Surface app with Microsoft Store for Business](deploy-surface-app-with-windows-store-for-business.md) | Find out how to add and download Surface app with Windows Store for Business, as well as install Surface app with PowerShell and MDT. |
|
| [Deploy Surface app with Microsoft Store for Business](deploy-surface-app-with-windows-store-for-business.md) | Find out how to add and download Surface app with Microsoft Store for Business, as well as install Surface app with PowerShell and MDT. |
|
||||||
| [Enable PEAP, EAP-FAST, and Cisco LEAP on Surface devices](enable-peap-eap-fast-and-cisco-leap-on-surface-devices.md) | Find out how to enable support for PEAP, EAP-FAST, or Cisco LEAP protocols on your Surface device. |
|
| [Enable PEAP, EAP-FAST, and Cisco LEAP on Surface devices](enable-peap-eap-fast-and-cisco-leap-on-surface-devices.md) | Find out how to enable support for PEAP, EAP-FAST, or Cisco LEAP protocols on your Surface device. |
|
||||||
| [Manage Surface UEFI settings](manage-surface-uefi-settings.md) | Use Surface UEFI settings to enable or disable devices, configure security settings, and adjust Surface device boot settings. |
|
| [Manage Surface UEFI settings](manage-surface-uefi-settings.md) | Use Surface UEFI settings to enable or disable devices, configure security settings, and adjust Surface device boot settings. |
|
||||||
| [Surface Enterprise Management Mode](surface-enterprise-management-mode.md) | See how this feature of Surface devices with Surface UEFI allows you to secure and manage firmware settings within your organization. |
|
| [Surface Enterprise Management Mode](surface-enterprise-management-mode.md) | See how this feature of Surface devices with Surface UEFI allows you to secure and manage firmware settings within your organization. |
|
||||||
|
@ -38,7 +38,7 @@ The LTSB servicing option is designed for device types and scenarios where the k
|
|||||||
|
|
||||||
* Devices that run productivity software such as Microsoft Office
|
* Devices that run productivity software such as Microsoft Office
|
||||||
|
|
||||||
* Devices that use Windows Store applications
|
* Devices that use Microsoft Store applications
|
||||||
|
|
||||||
* Devices that are used for general Internet browsing (for example, research or access to social media)
|
* Devices that are used for general Internet browsing (for example, research or access to social media)
|
||||||
|
|
||||||
|
@ -94,7 +94,7 @@ In the import process example shown in the [Deploy Windows 10 to Surface devices
|
|||||||
|
|
||||||
Installation of applications in an upgrade deployment is not always necessary because the applications from the previous environment will remain on the device. (For example, in the [Deploy Windows 10 to Surface devices with MDT](deploy-windows-10-to-surface-devices-with-mdt.md) article, the deployment includes Office 365 which is not required in an upgrade deployment where the user is already using Office 365 on the device.)
|
Installation of applications in an upgrade deployment is not always necessary because the applications from the previous environment will remain on the device. (For example, in the [Deploy Windows 10 to Surface devices with MDT](deploy-windows-10-to-surface-devices-with-mdt.md) article, the deployment includes Office 365 which is not required in an upgrade deployment where the user is already using Office 365 on the device.)
|
||||||
|
|
||||||
There are still some circumstances where you will want to deploy an application, even during an upgrade deployment. For example, you may have Surface Pro 3 devices on which you would like to add the Surface app. To deploy the Surface app in an upgrade scenario use the same process as you would for a traditional deployment. See the [Deploy Surface app with Windows Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business) article for instructions on how to add the Surface app to an MDT task sequence.
|
There are still some circumstances where you will want to deploy an application, even during an upgrade deployment. For example, you may have Surface Pro 3 devices on which you would like to add the Surface app. To deploy the Surface app in an upgrade scenario use the same process as you would for a traditional deployment. See the [Deploy Surface app with Microsoft Store for Business](https://technet.microsoft.com/itpro/surface/deploy-surface-app-with-windows-store-for-business) article for instructions on how to add the Surface app to an MDT task sequence.
|
||||||
|
|
||||||
### Create the upgrade task sequence
|
### Create the upgrade task sequence
|
||||||
|
|
||||||
|
@ -29,7 +29,7 @@ One of the primary scenarios for use of SDA is as a Proof of Concept. A *Proof o
|
|||||||
|
|
||||||
Using SDA to prepare a PoC of Surface devices enables you to very quickly prepare a demonstration of Surface device or devices, which gives you more time for customization or preparation. The flexibility of SDA even lets you import resources, like applications and drivers, from existing MDT deployment infrastructure. See the [Work with existing deployment shares](#work-with-existing-deployment-shares) section later in this article for more information.
|
Using SDA to prepare a PoC of Surface devices enables you to very quickly prepare a demonstration of Surface device or devices, which gives you more time for customization or preparation. The flexibility of SDA even lets you import resources, like applications and drivers, from existing MDT deployment infrastructure. See the [Work with existing deployment shares](#work-with-existing-deployment-shares) section later in this article for more information.
|
||||||
|
|
||||||
SDA is also an excellent PoC of the capabilities of MDT. SDA demonstrates just how quickly an MDT deployment environment can be prepared and made ready for deployment to devices. It also shows just how flexible and customizable the MDT solution can be, with support for Windows 10 and Windows 8.1, for Windows Store and desktop applications, and several models of Surface devices.
|
SDA is also an excellent PoC of the capabilities of MDT. SDA demonstrates just how quickly an MDT deployment environment can be prepared and made ready for deployment to devices. It also shows just how flexible and customizable the MDT solution can be, with support for Windows 10 and Windows 8.1, for Microsoft Store and desktop applications, and several models of Surface devices.
|
||||||
|
|
||||||
Some recommendations for a successful PoC with SDA are:
|
Some recommendations for a successful PoC with SDA are:
|
||||||
|
|
||||||
|
@ -50,7 +50,7 @@ The Surface WOL driver conforms to the WOL standard, whereby the device is woken
|
|||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>To send a magic packet and wake up a device by using WOL, you must know the MAC address of the target device and Ethernet adapter. Because the magic packet does not use the IP network protocol, it is not possible to use the IP address or DNS name of the device.
|
>To send a magic packet and wake up a device by using WOL, you must know the MAC address of the target device and Ethernet adapter. Because the magic packet does not use the IP network protocol, it is not possible to use the IP address or DNS name of the device.
|
||||||
|
|
||||||
Many management solutions, such as System Center Configuration Manager, provide built-in support for WOL. There are also many solutions, including Windows Store apps, PowerShell modules, third-party applications, and third-party management solutions that allow you to send a magic packet to wake up a device. For example, you can use the [Wake On LAN PowerShell module](https://gallery.technet.microsoft.com/scriptcenter/Wake-On-Lan-815424c4) from the TechNet Script Center.
|
Many management solutions, such as System Center Configuration Manager, provide built-in support for WOL. There are also many solutions, including Microsoft Store apps, PowerShell modules, third-party applications, and third-party management solutions that allow you to send a magic packet to wake up a device. For example, you can use the [Wake On LAN PowerShell module](https://gallery.technet.microsoft.com/scriptcenter/Wake-On-Lan-815424c4) from the TechNet Script Center.
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>After a device has been woken up with a magic packet, the device will return to sleep if an application is not actively preventing sleep on the system or if the AllowSystemRequiredPowerRequests registry key is not configured to 1, which allows applications to prevent sleep. See the [WOL driver](#wol-driver) section of this article for more information about this registry key.
|
>After a device has been woken up with a magic packet, the device will return to sleep if an application is not actively preventing sleep on the system or if the AllowSystemRequiredPowerRequests registry key is not configured to 1, which allows applications to prevent sleep. See the [WOL driver](#wol-driver) section of this article for more information about this registry key.
|
||||||
|
@ -11,6 +11,7 @@
|
|||||||
### [Set up Take a Test on a single PC](take-a-test-single-pc.md)
|
### [Set up Take a Test on a single PC](take-a-test-single-pc.md)
|
||||||
### [Set up Take a Test on multiple PCs](take-a-test-multiple-pcs.md)
|
### [Set up Take a Test on multiple PCs](take-a-test-multiple-pcs.md)
|
||||||
### [Take a Test app technical reference](take-a-test-app-technical.md)
|
### [Take a Test app technical reference](take-a-test-app-technical.md)
|
||||||
|
## [Reset devices with Windows Automatic Redeployment](windows-automatic-redeployment.md)
|
||||||
## [Working with Microsoft Store for Education](education-scenarios-store-for-business.md)
|
## [Working with Microsoft Store for Education](education-scenarios-store-for-business.md)
|
||||||
## [Get Minecraft: Education Edition](get-minecraft-for-education.md)
|
## [Get Minecraft: Education Edition](get-minecraft-for-education.md)
|
||||||
### [For teachers: get Minecraft Education Edition](teacher-get-minecraft.md)
|
### [For teachers: get Minecraft Education Edition](teacher-get-minecraft.md)
|
||||||
|
@ -15,6 +15,13 @@ ms.date: 08/01/2017
|
|||||||
|
|
||||||
This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation.
|
This topic lists new and updated topics in the [Windows 10 for Education](index.md) documentation.
|
||||||
|
|
||||||
|
## RELEASE: Windows 10, version 1709 (Fall Creators Update)
|
||||||
|
|
||||||
|
| New or changed topic | Description |
|
||||||
|
| --- | ---- |
|
||||||
|
| [Reset devices with Windows Automatic Redeployment](windows-automatic-redeployment.md) | New. Learn how you can use this new feature to quickly reset student PCs from the lock screen and apply original settings and management enrollment (Azure Active Directory and device management) so the devices are ready to use and returned to a fully configured or known IT-approved state. |
|
||||||
|
| [Test Windows 10 S on existing Windows 10 education devices](test-windows10s-for-edu.md) | Updated the *Go back to your previous edition of Windows 10* section with new information on how to work around cases where Win32 apps are blocked after switching from Windows 10 S back to your previous Windows edition. |
|
||||||
|
|
||||||
## September 2017
|
## September 2017
|
||||||
|
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
@ -74,13 +81,13 @@ This topic lists new and updated topics in the [Windows 10 for Education](index.
|
|||||||
|
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
| [Upgrade Windows 10 Pro to Pro Education from Windows Store for Business] | New. Learn how to opt-in to a free upgrade to Windows 10 Pro Education. As of May 2017, this topic has been replaced with [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](switch-to-pro-education.md). |
|
| [Upgrade Windows 10 Pro to Pro Education from Microsoft Store for Business] | New. Learn how to opt-in to a free upgrade to Windows 10 Pro Education. As of May 2017, this topic has been replaced with [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](switch-to-pro-education.md). |
|
||||||
|
|
||||||
## November 2016
|
## November 2016
|
||||||
|
|
||||||
| New or changed topic | Description|
|
| New or changed topic | Description|
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
| [Working with Windows Store for Business – education scenarios](education-scenarios-store-for-business.md) | New. Learn about education scenarios for Windows Store for Business. |
|
| [Working with Microsoft Store for Business – education scenarios](education-scenarios-store-for-business.md) | New. Learn about education scenarios for Microsoft Store for Business. |
|
||||||
| [For teachers - get Minecraft: Education Edition](teacher-get-minecraft.md) | Updates. Subscription support for Minecraft: Education Edition. |
|
| [For teachers - get Minecraft: Education Edition](teacher-get-minecraft.md) | Updates. Subscription support for Minecraft: Education Edition. |
|
||||||
| [For IT administrators - get Minecraft: Education Edition](school-get-minecraft.md) | Updates. Subscription support for Minecraft: Education Edition. |
|
| [For IT administrators - get Minecraft: Education Edition](school-get-minecraft.md) | Updates. Subscription support for Minecraft: Education Edition. |
|
||||||
|
|
||||||
|
@ -84,11 +84,11 @@ Table 1. Google App replacements
|
|||||||
|
|
||||||
It may be that you will decide to replace Google Apps after you deploy Windows devices. For more information on making this decision, see the [Select cloud services migration strategy](#select-cs-migrationstrat) section of this guide.
|
It may be that you will decide to replace Google Apps after you deploy Windows devices. For more information on making this decision, see the [Select cloud services migration strategy](#select-cs-migrationstrat) section of this guide.
|
||||||
|
|
||||||
**Find the same or similar apps in the Windows Store**
|
**Find the same or similar apps in the Microsoft Store**
|
||||||
|
|
||||||
In many instances, software vendors will create a version of their app for multiple platforms. You can search the Windows Store to find the same or similar apps to any apps not identified in the [Select Google Apps replacements](#select-googleapps) section.
|
In many instances, software vendors will create a version of their app for multiple platforms. You can search the Microsoft Store to find the same or similar apps to any apps not identified in the [Select Google Apps replacements](#select-googleapps) section.
|
||||||
|
|
||||||
In other instances, the offline app does not have a version written for the Windows Store or is not a web app. In these cases, look for an app that provides similar functions. For example, you might have a graphing calculator offline Android app published on the Chrome OS, but the software publisher does not have a version for Windows devices. Search the Windows Store for a graphing calculator app that provides similar features and functionality. Use that Windows Store app as a replacement for the graphing calculator offline Android app published on the Chrome OS.
|
In other instances, the offline app does not have a version written for the Microsoft Store or is not a web app. In these cases, look for an app that provides similar functions. For example, you might have a graphing calculator offline Android app published on the Chrome OS, but the software publisher does not have a version for Windows devices. Search the Microsoft Store for a graphing calculator app that provides similar features and functionality. Use that Microsoft Store app as a replacement for the graphing calculator offline Android app published on the Chrome OS.
|
||||||
|
|
||||||
Record the Windows app that replaces the Chromebook app in your app portfolio.
|
Record the Windows app that replaces the Chromebook app in your app portfolio.
|
||||||
|
|
||||||
|
@ -55,7 +55,7 @@ This district configuration has the following characteristics:
|
|||||||
* The classrooms connect to each other through multiple subnets.
|
* The classrooms connect to each other through multiple subnets.
|
||||||
* All devices in each classroom connect to a single subnet.
|
* All devices in each classroom connect to a single subnet.
|
||||||
* All devices have high-speed, persistent connections to each other and to the Internet.
|
* All devices have high-speed, persistent connections to each other and to the Internet.
|
||||||
* All teachers and students have access to Windows Store or Windows Store for Business.
|
* All teachers and students have access to Microsoft Store or Microsoft Store for Business.
|
||||||
* You install a 64-bit version of Windows 10 on the admin device.
|
* You install a 64-bit version of Windows 10 on the admin device.
|
||||||
* You install the Windows Assessment and Deployment Kit (Windows ADK) on the admin device.
|
* You install the Windows Assessment and Deployment Kit (Windows ADK) on the admin device.
|
||||||
* You install the 64-bit version of the Microsoft Deployment Toolkit (MDT) 2013 Update 2 on the admin device.
|
* You install the 64-bit version of the Microsoft Deployment Toolkit (MDT) 2013 Update 2 on the admin device.
|
||||||
@ -125,7 +125,7 @@ The high-level process for deploying and configuring devices within individual c
|
|||||||
|
|
||||||
3. On the admin device, configure integration between on-premises AD DS and Azure AD (if you have an on premises AD DS configuration).
|
3. On the admin device, configure integration between on-premises AD DS and Azure AD (if you have an on premises AD DS configuration).
|
||||||
|
|
||||||
4. On the admin device, create and configure a Windows Store for Business portal.
|
4. On the admin device, create and configure a Microsoft Store for Business portal.
|
||||||
|
|
||||||
5. On the admin device, prepare for management of the Windows 10 devices after deployment.
|
5. On the admin device, prepare for management of the Windows 10 devices after deployment.
|
||||||
|
|
||||||
@ -149,7 +149,7 @@ In this district, you looked at the final configuration of your individual class
|
|||||||
|
|
||||||
## Select deployment and management methods
|
## Select deployment and management methods
|
||||||
|
|
||||||
Now that you know what a typical district looks like and how to configure the devices in your district, you need to make a few decisions. You must select the methods you’ll use to deploy Windows 10 to the faculty and student devices in your district. Next, you must select the method you’ll use to manage configuration settings for your users and devices. Finally, you must select the method you’ll use to manage Windows desktop apps, Windows Store apps, and software updates.
|
Now that you know what a typical district looks like and how to configure the devices in your district, you need to make a few decisions. You must select the methods you’ll use to deploy Windows 10 to the faculty and student devices in your district. Next, you must select the method you’ll use to manage configuration settings for your users and devices. Finally, you must select the method you’ll use to manage Windows desktop apps, Microsoft Store apps, and software updates.
|
||||||
|
|
||||||
### Typical deployment and management scenarios
|
### Typical deployment and management scenarios
|
||||||
|
|
||||||
@ -196,7 +196,7 @@ To deploy Windows 10 and your apps, you can use MDT by itself or System Center C
|
|||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">MDT</td>
|
<td valign="top">MDT</td>
|
||||||
<td><p>MDT is an on-premises solution that supports initial operating system deployment and upgrade. You can use MDT to deploy and upgrade Windows 10. In addition, you can initially deploy Windows desktop and Windows Store apps and software updates.<br/><br/>
|
<td><p>MDT is an on-premises solution that supports initial operating system deployment and upgrade. You can use MDT to deploy and upgrade Windows 10. In addition, you can initially deploy Windows desktop and Microsoft Store apps and software updates.<br/><br/>
|
||||||
Select this method when you:</p>
|
Select this method when you:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Want to deploy Windows 10 to institution-owned and personal devices. (Devices need not be domain joined.)</li>
|
<li>Want to deploy Windows 10 to institution-owned and personal devices. (Devices need not be domain joined.)</li>
|
||||||
@ -229,7 +229,7 @@ Select this method when you:</p>
|
|||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">System Center Configuration Manager</td>
|
<td valign="top">System Center Configuration Manager</td>
|
||||||
<td><p>System Center Configuration Manager is an on-premises solution that supports operating system management throughout the entire operating system life cycle. You can use System Center Configuration Manager to deploy and upgrade Windows 10. In addition, you can manage Windows desktop and Windows Store apps and software updates as well as provide antivirus and antimalware protection.<br/><br/>
|
<td><p>System Center Configuration Manager is an on-premises solution that supports operating system management throughout the entire operating system life cycle. You can use System Center Configuration Manager to deploy and upgrade Windows 10. In addition, you can manage Windows desktop and Microsoft Store apps and software updates as well as provide antivirus and antimalware protection.<br/><br/>
|
||||||
Select this method when you:</p>
|
Select this method when you:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Want to deploy Windows 10 to institution-owned devices that are domain joined (personal devices are typically not domain joined).</li>
|
<li>Want to deploy Windows 10 to institution-owned devices that are domain joined (personal devices are typically not domain joined).</li>
|
||||||
@ -240,7 +240,7 @@ Select this method when you:</p>
|
|||||||
<p>The advantages of this method are that:</p>
|
<p>The advantages of this method are that:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>You can deploy Windows 10 operating systems.</li>
|
<li>You can deploy Windows 10 operating systems.</li>
|
||||||
<li>You can manage (deploy) Windows desktop and Windows Store apps throughout entire application life cycle.</li>
|
<li>You can manage (deploy) Windows desktop and Microsoft Store apps throughout entire application life cycle.</li>
|
||||||
<li>You can manage software updates for Windows 10 and apps.</li>
|
<li>You can manage software updates for Windows 10 and apps.</li>
|
||||||
<li>You can manage antivirus and malware protection.</li>
|
<li>You can manage antivirus and malware protection.</li>
|
||||||
<li>It scales to large number of users and devices.</li>
|
<li>It scales to large number of users and devices.</li>
|
||||||
@ -381,7 +381,7 @@ Use the information in Table 6 to determine which combination of app and update
|
|||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">System Center Configuration Manager</td>
|
<td valign="top">System Center Configuration Manager</td>
|
||||||
<td><p>System Center Configuration Manager is an on-premises solution that allows you to specify configuration settings for Windows 10; previous versions of Windows; and other operating systems, such as iOS or Android, through integration with Intune.<br/><br/>System Center Configuration Manager supports application management throughout the entire application life cycle. You can deploy, upgrade, manage multiple versions, and retire applications by using System Center Configuration Manager. You can also manage Windows desktop and Windows Store applications.<br/><br/>Select this method when you:</p>
|
<td><p>System Center Configuration Manager is an on-premises solution that allows you to specify configuration settings for Windows 10; previous versions of Windows; and other operating systems, such as iOS or Android, through integration with Intune.<br/><br/>System Center Configuration Manager supports application management throughout the entire application life cycle. You can deploy, upgrade, manage multiple versions, and retire applications by using System Center Configuration Manager. You can also manage Windows desktop and Microsoft Store applications.<br/><br/>Select this method when you:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Selected System Center Configuration Manager to deploy Windows 10.</li>
|
<li>Selected System Center Configuration Manager to deploy Windows 10.</li>
|
||||||
<li>Want to manage institution-owned devices that are domain joined (personally owned devices are typically not domain joined).</li>
|
<li>Want to manage institution-owned devices that are domain joined (personally owned devices are typically not domain joined).</li>
|
||||||
@ -441,7 +441,7 @@ Select this method when you:</p>
|
|||||||
<tr>
|
<tr>
|
||||||
<td valign="top">System Center Configuration Manager and Intune (hybrid)</td>
|
<td valign="top">System Center Configuration Manager and Intune (hybrid)</td>
|
||||||
<td><p>System Center Configuration Manager and Intune together extend System Center Configuration Manager from an on-premises management system for domain-joined devices to a solution that can manage devices regardless of their location and connectivity options. This hybrid option provides the benefits of both System Center Configuration Manager and Intune.<br/><br/>
|
<td><p>System Center Configuration Manager and Intune together extend System Center Configuration Manager from an on-premises management system for domain-joined devices to a solution that can manage devices regardless of their location and connectivity options. This hybrid option provides the benefits of both System Center Configuration Manager and Intune.<br/><br/>
|
||||||
System Center Configuration Manager and Intune in the hybrid configuration allow you to support application management throughout the entire application life cycle. You can deploy, upgrade, manage multiple versions, and retire applications by using System Center Configuration Manager, and you can manage Windows desktop and Windows Store applications for both institution-owned and personal devices.<br/><br/>
|
System Center Configuration Manager and Intune in the hybrid configuration allow you to support application management throughout the entire application life cycle. You can deploy, upgrade, manage multiple versions, and retire applications by using System Center Configuration Manager, and you can manage Windows desktop and Microsoft Store applications for both institution-owned and personal devices.<br/><br/>
|
||||||
Select this method when you:</p>
|
Select this method when you:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Selected System Center Configuration Manager to deploy Windows 10.</li>
|
<li>Selected System Center Configuration Manager to deploy Windows 10.</li>
|
||||||
@ -488,7 +488,7 @@ Record the app and update management methods that you selected in Table 7.
|
|||||||
*Table 7. App and update management methods selected*
|
*Table 7. App and update management methods selected*
|
||||||
|
|
||||||
#### Summary
|
#### Summary
|
||||||
In this section, you selected the methods that you will use to deploy Windows 10 to the faculty and student devices in your district. You selected the methods that you will use to manage configuration settings. Finally, you selected the methods that you will use to manage Windows desktop apps, Windows Store apps, and software updates.
|
In this section, you selected the methods that you will use to deploy Windows 10 to the faculty and student devices in your district. You selected the methods that you will use to manage configuration settings. Finally, you selected the methods that you will use to manage Windows desktop apps, Microsoft Store apps, and software updates.
|
||||||
|
|
||||||
## Prepare the admin device
|
## Prepare the admin device
|
||||||
|
|
||||||
@ -526,7 +526,7 @@ For more information about how to create a deployment share, see [Step 3-1: Crea
|
|||||||
|
|
||||||
>**Note** If you selected System Center Configuration Manager to deploy Windows 10 or manage your devices (in the [Select the deployment methods](#select-the-deployment-methods) and [Select the configuration setting management methods](#select-the-configuration-setting-management-methods) sections, respectively), perform the steps in this section. Otherwise, skip this section and continue to the next.
|
>**Note** If you selected System Center Configuration Manager to deploy Windows 10 or manage your devices (in the [Select the deployment methods](#select-the-deployment-methods) and [Select the configuration setting management methods](#select-the-configuration-setting-management-methods) sections, respectively), perform the steps in this section. Otherwise, skip this section and continue to the next.
|
||||||
|
|
||||||
You can use System Center Configuration Manager to manage Windows 10 deployments, Windows desktop apps, Windows Store apps, and software updates. To manage System Center Configuration Manager, you use the Configuration Manager console. You must install the Configuration Manager console on every device you use to manage System Center Configuration Manager (specifically, the admin device). The Configuration Manager console is automatically installed when you install System Center Configuration Manager primary site servers.
|
You can use System Center Configuration Manager to manage Windows 10 deployments, Windows desktop apps, Microsoft Store apps, and software updates. To manage System Center Configuration Manager, you use the Configuration Manager console. You must install the Configuration Manager console on every device you use to manage System Center Configuration Manager (specifically, the admin device). The Configuration Manager console is automatically installed when you install System Center Configuration Manager primary site servers.
|
||||||
|
|
||||||
For more information about how to install the Configuration Manager console, see [Install System Center Configuration Manager consoles](https://technet.microsoft.com/en-us/library/mt590197.aspx#bkmk_InstallConsole).
|
For more information about how to install the Configuration Manager console, see [Install System Center Configuration Manager consoles](https://technet.microsoft.com/en-us/library/mt590197.aspx#bkmk_InstallConsole).
|
||||||
|
|
||||||
@ -908,62 +908,62 @@ If you enabled Azure AD Premium in the [Enable Azure AD Premium](#enable-azure-a
|
|||||||
|
|
||||||
For more information about assigning user licenses for Azure AD Premium, see [How to assign EMS/Azure AD Premium licenses to user accounts](https://channel9.msdn.com/Series/Azure-Active-Directory-Videos-Demos/How-to-assign-Azure-AD-Premium-Licenses-to-user-accounts).
|
For more information about assigning user licenses for Azure AD Premium, see [How to assign EMS/Azure AD Premium licenses to user accounts](https://channel9.msdn.com/Series/Azure-Active-Directory-Videos-Demos/How-to-assign-Azure-AD-Premium-Licenses-to-user-accounts).
|
||||||
|
|
||||||
## Create and configure a Windows Store for Business portal
|
## Create and configure a Microsoft Store for Business portal
|
||||||
|
|
||||||
Windows Store for Business allows you to create your own private portal to manage Windows Store apps in your institution. With Windows Store for Business, you can:
|
Microsoft Store for Business allows you to create your own private portal to manage Microsoft Store apps in your institution. With Microsoft Store for Business, you can:
|
||||||
|
|
||||||
* Find and acquire Windows Store apps.
|
* Find and acquire Microsoft Store apps.
|
||||||
* Manage apps, app licenses, and updates.
|
* Manage apps, app licenses, and updates.
|
||||||
* Distribute apps to your users.
|
* Distribute apps to your users.
|
||||||
|
|
||||||
|
|
||||||
For more information about Windows Store for Business, see [Windows Store for Business overview](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview).
|
For more information about Microsoft Store for Business, see [Microsoft Store for Business overview](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview).
|
||||||
|
|
||||||
This section shows you how to create a Windows Store for Business portal and configure it for your school.
|
This section shows you how to create a Microsoft Store for Business portal and configure it for your school.
|
||||||
|
|
||||||
### Create and configure your Windows Store for Business portal
|
### Create and configure your Microsoft Store for Business portal
|
||||||
|
|
||||||
To create and configure your Windows Store for Business portal, simply use the administrative account for your Office 365 subscription to sign in to Windows Store for Business. Windows Store for Business automatically creates a portal for your institution and uses your account as its administrator.
|
To create and configure your Microsoft Store for Business portal, simply use the administrative account for your Office 365 subscription to sign in to Microsoft Store for Business. Microsoft Store for Business automatically creates a portal for your institution and uses your account as its administrator.
|
||||||
|
|
||||||
#### To create and configure a Windows Store for Business portal
|
#### To create and configure a Microsoft Store for Business portal
|
||||||
|
|
||||||
1. In Microsoft Edge or Internet Explorer, type `http://microsoft.com/business-store` in the address bar.
|
1. In Microsoft Edge or Internet Explorer, type `http://microsoft.com/business-store` in the address bar.
|
||||||
|
|
||||||
2. On the **Windows Store for Business** page, click **Sign in with an organizational account**.
|
2. On the **Microsoft Store for Business** page, click **Sign in with an organizational account**.
|
||||||
|
|
||||||
3. On the Windows Store for Business sign-in page, use the administrative account for the Office 365 subscription you created in the [Create a new Office 365 Education subscription](#create-a-new-office-365-education-subscription) section to sign in.
|
3. On the Microsoft Store for Business sign-in page, use the administrative account for the Office 365 subscription you created in the [Create a new Office 365 Education subscription](#create-a-new-office-365-education-subscription) section to sign in.
|
||||||
|
|
||||||
4. On the **Windows Store for Business Services Agreement** page, review the agreement, select the **I accept this agreement and certify that I have the authority to bind my organization to its terms** check box, and then click **Accept**.
|
4. On the **Microsoft Store for Business Services Agreement** page, review the agreement, select the **I accept this agreement and certify that I have the authority to bind my organization to its terms** check box, and then click **Accept**.
|
||||||
|
|
||||||
5. In the **Welcome to the Windows Store for Business** dialog box, click **OK**.
|
5. In the **Welcome to the Microsoft Store for Business** dialog box, click **OK**.
|
||||||
|
|
||||||
After you create the Windows Store for Business portal, configure it by using the commands in the **Settings** menu listed in Table 14. Depending on your institution, you may (or may not) need to change these settings to further customize your portal.
|
After you create the Microsoft Store for Business portal, configure it by using the commands in the **Settings** menu listed in Table 14. Depending on your institution, you may (or may not) need to change these settings to further customize your portal.
|
||||||
|
|
||||||
|Menu selection|What can you do in this menu|
|
|Menu selection|What can you do in this menu|
|
||||||
|--------------|----------------------------|
|
|--------------|----------------------------|
|
||||||
|Account information |Displays information about your Windows Store for Business account (no settings can be changed). You make changes to this information in Office 365 or the Azure Management Portal. For more information, see [Update Windows Store for Business account settings](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings).|
|
|Account information |Displays information about your Microsoft Store for Business account (no settings can be changed). You make changes to this information in Office 365 or the Azure Management Portal. For more information, see [Update Microsoft Store for Business account settings](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings).|
|
||||||
|Device Guard signing |Allows you to upload and sign Device Guard catalog and policy files. For more information about Device Guard, see [Device Guard deployment guide](https://technet.microsoft.com/itpro/windows/keep-secure/device-guard-deployment-guide).|
|
|Device Guard signing |Allows you to upload and sign Device Guard catalog and policy files. For more information about Device Guard, see [Device Guard deployment guide](https://technet.microsoft.com/itpro/windows/keep-secure/device-guard-deployment-guide).|
|
||||||
|LOB publishers |Allows you to add line-of-business (LOB) publishers that can then publish apps to your private store. LOB publishers are usually internal developers or software vendors that are working with your institution. For more information, see [Working with line-of-business apps](https://technet.microsoft.com/itpro/windows/manage/working-with-line-of-business-apps).|
|
|LOB publishers |Allows you to add line-of-business (LOB) publishers that can then publish apps to your private store. LOB publishers are usually internal developers or software vendors that are working with your institution. For more information, see [Working with line-of-business apps](https://technet.microsoft.com/itpro/windows/manage/working-with-line-of-business-apps).|
|
||||||
|Management tools |Allows you to add tools that you can use to distribute (deploy) apps in your private store. For more information, see [Distribute apps with a management tool](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-with-management-tool).|
|
|Management tools |Allows you to add tools that you can use to distribute (deploy) apps in your private store. For more information, see [Distribute apps with a management tool](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-with-management-tool).|
|
||||||
|Offline licensing|Allows you to show (or not show) offline licensed apps to people shopping in your private store. For more information, see the “Licensing model: online and offline licenses” section in [Apps in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).|
|
|Offline licensing|Allows you to show (or not show) offline licensed apps to people shopping in your private store. For more information, see the “Licensing model: online and offline licenses” section in [Apps in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).|
|
||||||
|Permissions |Allows you to grant other users in your organization the ability to buy, manage, and administer your Windows Store for Business portal. You can also remove permissions you have previously granted. For more information, see [Roles and permissions in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business).|
|
|Permissions |Allows you to grant other users in your organization the ability to buy, manage, and administer your Microsoft Store for Business portal. You can also remove permissions you have previously granted. For more information, see [Roles and permissions in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business).|
|
||||||
|Private store |Allows you to change the organization name used in your Windows Store for Business portal. When you create your portal, the private store uses the organization name that you used to create your Office 365 subscription. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).|
|
|Private store |Allows you to change the organization name used in your Microsoft Store for Business portal. When you create your portal, the private store uses the organization name that you used to create your Office 365 subscription. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).|
|
||||||
|
|
||||||
*Table 14. Menu selections to configure Windows Store for Business settings*
|
*Table 14. Menu selections to configure Microsoft Store for Business settings*
|
||||||
|
|
||||||
### Find, acquire, and distribute apps in the portal
|
### Find, acquire, and distribute apps in the portal
|
||||||
|
|
||||||
Now that you have created your Windows Store for Business portal, you’re ready to find, acquire, and distribute apps that you will add to your portal. You do this from the **Inventory** page in Windows Store for Business.
|
Now that you have created your Microsoft Store for Business portal, you’re ready to find, acquire, and distribute apps that you will add to your portal. You do this from the **Inventory** page in Microsoft Store for Business.
|
||||||
|
|
||||||
>**Note** Your educational institution can now use a credit card or purchase order to pay for apps in Windows Store for Business.
|
>**Note** Your educational institution can now use a credit card or purchase order to pay for apps in Microsoft Store for Business.
|
||||||
|
|
||||||
You can deploy apps to individual users or make apps available to users through your private store. Deploying apps to individual users restricts the app to those specified users. Making apps available through your private store allows all your users to install the apps.
|
You can deploy apps to individual users or make apps available to users through your private store. Deploying apps to individual users restricts the app to those specified users. Making apps available through your private store allows all your users to install the apps.
|
||||||
|
|
||||||
For more information about how to find, acquire, and distribute apps in the portal, see [App inventory management for Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/app-inventory-managemement-windows-store-for-business).
|
For more information about how to find, acquire, and distribute apps in the portal, see [App inventory management for Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/app-inventory-managemement-windows-store-for-business).
|
||||||
|
|
||||||
#### Summary
|
#### Summary
|
||||||
|
|
||||||
At the end of this section, you should have a properly configured Windows Store for Business portal. You have also found and acquired your apps from Windows Store. Finally, you should have deployed all your Windows Store apps to your users. Now, you’re ready to deploy Windows Store apps to your users.
|
At the end of this section, you should have a properly configured Microsoft Store for Business portal. You have also found and acquired your apps from Microsoft Store. Finally, you should have deployed all your Microsoft Store apps to your users. Now, you’re ready to deploy Microsoft Store apps to your users.
|
||||||
|
|
||||||
## Plan for deployment
|
## Plan for deployment
|
||||||
|
|
||||||
@ -987,7 +987,7 @@ Depending on your school’s requirements, you may need any combination of the f
|
|||||||
* Upgrade institution-owned devices to Windows 10 Education.
|
* Upgrade institution-owned devices to Windows 10 Education.
|
||||||
* Deploy new instances of Windows 10 Education so that new devices have a known configuration.
|
* Deploy new instances of Windows 10 Education so that new devices have a known configuration.
|
||||||
|
|
||||||
>**Note** Although you can use Windows 10 Home on institution-owned devices, Microsoft recommends that you use Windows 10 Pro or Windows 10 Education, instead. Windows 10 Pro and Windows 10 Education provide support for MDM, policy-based management, and Windows Store for Business—features not available in Windows 10 Home. For more information about how to upgrade Windows 10 Home to Windows 10 Pro or Windows 10 Education, see [Windows 10 edition upgrade](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades).
|
>**Note** Although you can use Windows 10 Home on institution-owned devices, Microsoft recommends that you use Windows 10 Pro or Windows 10 Education, instead. Windows 10 Pro and Windows 10 Education provide support for MDM, policy-based management, and Microsoft Store for Business—features not available in Windows 10 Home. For more information about how to upgrade Windows 10 Home to Windows 10 Pro or Windows 10 Education, see [Windows 10 edition upgrade](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades).
|
||||||
|
|
||||||
For more information about the Windows 10 editions, see [Compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare).
|
For more information about the Windows 10 editions, see [Compare Windows 10 Editions](https://www.microsoft.com/en-us/WindowsForBusiness/Compare).
|
||||||
|
|
||||||
@ -1075,7 +1075,7 @@ At the end of this section, you should know the Windows 10 editions and processo
|
|||||||
|
|
||||||
## Prepare for deployment
|
## Prepare for deployment
|
||||||
|
|
||||||
Before you can deploy Windows 10 and your apps to devices, you need to prepare your MDT environment, Windows Deployment Services, and System Center Configuration Manager (if you selected it to do operating system deployment in the [Select the deployment methods](#select-the-deployment-methods) section). In this section, you ensure that the deployment methods you selected in the [Select the deployment methods](#select-the-deployment-methods) section have the necessary Windows 10 editions and versions, Windows desktop apps, Windows Store apps, and device drivers.
|
Before you can deploy Windows 10 and your apps to devices, you need to prepare your MDT environment, Windows Deployment Services, and System Center Configuration Manager (if you selected it to do operating system deployment in the [Select the deployment methods](#select-the-deployment-methods) section). In this section, you ensure that the deployment methods you selected in the [Select the deployment methods](#select-the-deployment-methods) section have the necessary Windows 10 editions and versions, Windows desktop apps, Microsoft Store apps, and device drivers.
|
||||||
|
|
||||||
### Configure the MDT deployment share
|
### Configure the MDT deployment share
|
||||||
|
|
||||||
@ -1110,18 +1110,18 @@ Import device drivers for each device in your institution. For more information
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">3. Create MDT applications for Windows Store apps</td>
|
<td valign="top">3. Create MDT applications for Microsoft Store apps</td>
|
||||||
<td>Create an MDT application for each Windows Store app you want to deploy. You can deploy Windows Store apps by using <i>sideloading</i>, which allows you to use the **Add-AppxPackage** Windows PowerShell cmdlet to deploy the .appx files associated with the app (called *provisioned apps*). Use this method to deploy up to 24 apps to Windows 10.<br/><br/>
|
<td>Create an MDT application for each Microsoft Store app you want to deploy. You can deploy Microsoft Store apps by using <i>sideloading</i>, which allows you to use the **Add-AppxPackage** Windows PowerShell cmdlet to deploy the .appx files associated with the app (called *provisioned apps*). Use this method to deploy up to 24 apps to Windows 10.<br/><br/>
|
||||||
<p>Prior to sideloading the .appx files, obtain the Windows Store .appx files that you will use to deploy (sideload) the apps in your provisioning package. For apps in Windows Store, you will need to obtain the .appx files by performing one of the following tasks:</p>
|
<p>Prior to sideloading the .appx files, obtain the Microsoft Store .appx files that you will use to deploy (sideload) the apps in your provisioning package. For apps in Microsoft Store, you will need to obtain the .appx files by performing one of the following tasks:</p>
|
||||||
<ul>
|
<ul>
|
||||||
<li>For offline-licensed apps, download the .appx files from the Windows Store for Business.</li>
|
<li>For offline-licensed apps, download the .appx files from the Microsoft Store for Business.</li>
|
||||||
<li>For apps that are not offline licensed, obtain the .appx files from the app software vendor directly.</li>
|
<li>For apps that are not offline licensed, obtain the .appx files from the app software vendor directly.</li>
|
||||||
</ul>
|
</ul>
|
||||||
<br/>If you are unable to obtain the .appx files from the app software vendor, then you or the students will need to install the apps on the student devices directly from Windows Store or Windows Store for Business.<br/><br/>
|
<br/>If you are unable to obtain the .appx files from the app software vendor, then you or the students will need to install the apps on the student devices directly from Microsoft Store or Microsoft Store for Business.<br/><br/>
|
||||||
If you have Intune or System Center Configuration Manager, you can deploy Windows Store apps after you deploy Windows 10, as described in the [Deploy and manage apps by using Intune](#deploy-and-manage-apps-by-using-intune) and [Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager) sections. This method provides granular deployment of Windows Store apps, and you can use it for ongoing management of Windows Store apps. This is the preferred method of deploying and managing Windows Store apps.<br/><br/>
|
If you have Intune or System Center Configuration Manager, you can deploy Microsoft Store apps after you deploy Windows 10, as described in the [Deploy and manage apps by using Intune](#deploy-and-manage-apps-by-using-intune) and [Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager) sections. This method provides granular deployment of Microsoft Store apps, and you can use it for ongoing management of Microsoft Store apps. This is the preferred method of deploying and managing Microsoft Store apps.<br/><br/>
|
||||||
In addition, you must prepare your environment for sideloading Windows Store apps. For more information about how to:<br/><br/>
|
In addition, you must prepare your environment for sideloading Microsoft Store apps. For more information about how to:<br/><br/>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Prepare your environment for sideloading, see [Try it out: sideload Windows Store apps](https://technet.microsoft.com/en-us/windows/jj874388.aspx).</li>
|
<li>Prepare your environment for sideloading, see [Try it out: sideload Microsoft Store apps](https://technet.microsoft.com/en-us/windows/jj874388.aspx).</li>
|
||||||
<li>Create an MDT application, see [Create a New Application in the Deployment Workbench](https://technet.microsoft.com/en-us/library/dn759415.aspx#CreateaNewApplicationintheDeploymentWorkbench).</li>
|
<li>Create an MDT application, see [Create a New Application in the Deployment Workbench](https://technet.microsoft.com/en-us/library/dn759415.aspx#CreateaNewApplicationintheDeploymentWorkbench).</li>
|
||||||
</ul>
|
</ul>
|
||||||
|
|
||||||
@ -1198,9 +1198,9 @@ Deploying a new System Center Configuration Manager infrastructure is beyond the
|
|||||||
Create a System Center Configuration Manager driver package for each device type in your district. For more information, see [Manage drivers in System Center Configuration Manager](https://technet.microsoft.com/en-us/library/mt627934.aspx).
|
Create a System Center Configuration Manager driver package for each device type in your district. For more information, see [Manage drivers in System Center Configuration Manager](https://technet.microsoft.com/en-us/library/mt627934.aspx).
|
||||||
4. Add Windows apps.
|
4. Add Windows apps.
|
||||||
|
|
||||||
Install the Windows apps (Windows desktop and Windows Store apps) that you want to deploy after the task sequence deploys your customized image (a thick, reference image that include Windows 10 and your core Windows desktop apps). These apps are in addition to the apps included in your reference image. You can only deploy Windows Store apps after you deploy Windows 10 because you cannot capture Windows Store apps in a reference image. Windows Store apps target users, not devices.
|
Install the Windows apps (Windows desktop and Microsoft Store apps) that you want to deploy after the task sequence deploys your customized image (a thick, reference image that include Windows 10 and your core Windows desktop apps). These apps are in addition to the apps included in your reference image. You can only deploy Microsoft Store apps after you deploy Windows 10 because you cannot capture Microsoft Store apps in a reference image. Microsoft Store apps target users, not devices.
|
||||||
|
|
||||||
Create a System Center Configuration Manager application for each Windows desktop or Windows Store app that you want to deploy after you apply the reference image to a device. For more information, see [Deploy and manage applications with System Center Configuration Manager](https://technet.microsoft.com/en-us/library/mt627959.aspx).
|
Create a System Center Configuration Manager application for each Windows desktop or Microsoft Store app that you want to deploy after you apply the reference image to a device. For more information, see [Deploy and manage applications with System Center Configuration Manager](https://technet.microsoft.com/en-us/library/mt627959.aspx).
|
||||||
|
|
||||||
### Configure Window Deployment Services for MDT
|
### Configure Window Deployment Services for MDT
|
||||||
|
|
||||||
@ -1397,10 +1397,10 @@ Use the information in Table 17 to help you determine whether you need to config
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">Control Windows Store access</td>
|
<td valign="top">Control Microsoft Store access</td>
|
||||||
<td>You can control access to Windows Store and whether existing Windows Store apps receive updates. You can only disable the Windows Store app in Windows 10 Education and Windows 10 Enterprise.<br/><br/>
|
<td>You can control access to Microsoft Store and whether existing Microsoft Store apps receive updates. You can only disable the Microsoft Store app in Windows 10 Education and Windows 10 Enterprise.<br/><br/>
|
||||||
**Group Policy.** To disable the Windows Store app, use the **Turn off the Store Application** group policy setting. To prevent Windows Store apps from receiving updates, use the **Turn off Automatic Download and Install of updates** Group Policy setting. For more information about configuring these settings, see [Can I use Group Policy to control the Windows Store in my enterprise environment?](https://technet.microsoft.com/en-us/library/hh832040.aspx#BKMK_UseGP).<br/><br/>
|
**Group Policy.** To disable the Microsoft Store app, use the **Turn off the Store Application** group policy setting. To prevent Microsoft Store apps from receiving updates, use the **Turn off Automatic Download and Install of updates** Group Policy setting. For more information about configuring these settings, see [Can I use Group Policy to control the Microsoft Store in my enterprise environment?](https://technet.microsoft.com/en-us/library/hh832040.aspx#BKMK_UseGP).<br/><br/>
|
||||||
**Intune.** To enable or disable Windows Store access, use the **Allow application store** policy setting in the **Apps** section of a **Windows 10 General Configuration policy**.
|
**Intune.** To enable or disable Microsoft Store access, use the **Allow application store** policy setting in the **Apps** section of a **Windows 10 General Configuration policy**.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@ -1499,7 +1499,7 @@ For more information about Intune, see [Microsoft Intune Documentation](https://
|
|||||||
|
|
||||||
If you selected to deploy and manage apps by using System Center Configuration Manager and Intune in a hybrid configuration, then skip this section and continue to the [Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager) section.
|
If you selected to deploy and manage apps by using System Center Configuration Manager and Intune in a hybrid configuration, then skip this section and continue to the [Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager) section.
|
||||||
|
|
||||||
You can use Intune to deploy Windows Store and Windows desktop apps. Intune provides improved control over which users receive specific apps. In addition, Intune allows you to deploy apps to companion devices (such as Windows 10 Mobile, iOS, or Android devices). Finally, Intune helps you manage app security and features, such as mobile application management policies that let you manage apps on devices that are not enrolled in Intune or that another solution manages.
|
You can use Intune to deploy Microsoft Store and Windows desktop apps. Intune provides improved control over which users receive specific apps. In addition, Intune allows you to deploy apps to companion devices (such as Windows 10 Mobile, iOS, or Android devices). Finally, Intune helps you manage app security and features, such as mobile application management policies that let you manage apps on devices that are not enrolled in Intune or that another solution manages.
|
||||||
|
|
||||||
For more information about how to configure Intune to manage your apps, see the following resources:
|
For more information about how to configure Intune to manage your apps, see the following resources:
|
||||||
|
|
||||||
@ -1511,7 +1511,7 @@ For more information about how to configure Intune to manage your apps, see the
|
|||||||
|
|
||||||
### Deploy and manage apps by using System Center Configuration Manager
|
### Deploy and manage apps by using System Center Configuration Manager
|
||||||
|
|
||||||
You can use System Center Configuration Manager to deploy Windows Store and Windows desktop apps. System Center Configuration Manager allows you to create a System Center Configuration Manager application that you can use to deploy apps to different devices (such as Windows 10 desktop, Windows 10 Mobile, iOS, or Android devices) by using *deployment types*. You can think of a System Center Configuration Manager application as a box. You can think of deployment types as one or more sets of installation files and installation instructions within that box.
|
You can use System Center Configuration Manager to deploy Microsoft Store and Windows desktop apps. System Center Configuration Manager allows you to create a System Center Configuration Manager application that you can use to deploy apps to different devices (such as Windows 10 desktop, Windows 10 Mobile, iOS, or Android devices) by using *deployment types*. You can think of a System Center Configuration Manager application as a box. You can think of deployment types as one or more sets of installation files and installation instructions within that box.
|
||||||
|
|
||||||
For example, you could create a Skype application that contains a deployment type for Windows 10 desktop, Windows 10 Mobile, iOS, and Android. You can deploy the one application to multiple device types.
|
For example, you could create a Skype application that contains a deployment type for Windows 10 desktop, Windows 10 Mobile, iOS, and Android. You can deploy the one application to multiple device types.
|
||||||
|
|
||||||
@ -1560,7 +1560,7 @@ Prior to deployment of Windows 10, complete the tasks in Table 18. Most of these
|
|||||||
|----|----|
|
|----|----|
|
||||||
|1. |Ensure that the target devices have sufficient system resources to run Windows 10.|
|
|1. |Ensure that the target devices have sufficient system resources to run Windows 10.|
|
||||||
|2. |Identify the necessary devices drivers, and then import them into the MDT deployment share or System Center Configuration Manager.|
|
|2. |Identify the necessary devices drivers, and then import them into the MDT deployment share or System Center Configuration Manager.|
|
||||||
|3. |For each Windows Store and Windows desktop app, create an MDT application or System Center Configuration Manager application.|
|
|3. |For each Microsoft Store and Windows desktop app, create an MDT application or System Center Configuration Manager application.|
|
||||||
|4. |Notify the students and faculty about the deployment.|
|
|4. |Notify the students and faculty about the deployment.|
|
||||||
|
|
||||||
*Table 18. Deployment preparation checklist*
|
*Table 18. Deployment preparation checklist*
|
||||||
@ -1616,7 +1616,7 @@ As a final quality control step, verify the device configuration to ensure that
|
|||||||
* Windows Update is active and current with software updates.
|
* Windows Update is active and current with software updates.
|
||||||
* Windows Defender is active and current with malware signatures.
|
* Windows Defender is active and current with malware signatures.
|
||||||
* The SmartScreen Filter is active.
|
* The SmartScreen Filter is active.
|
||||||
* All Windows Store apps are properly installed and updated.
|
* All Microsoft Store apps are properly installed and updated.
|
||||||
* All Windows desktop apps are properly installed and updated.
|
* All Windows desktop apps are properly installed and updated.
|
||||||
* Printers are properly configured.
|
* Printers are properly configured.
|
||||||
|
|
||||||
@ -1735,9 +1735,9 @@ For more information, see:
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td>Install new or update existing Windows Store apps used in the curriculum.<br/><br/>
|
<td>Install new or update existing Microsoft Store apps used in the curriculum.<br/><br/>
|
||||||
Windows Store apps are automatically updated from Windows Store. The menu bar in the Windows Store app shows whether any Windows Store app updates are available for download.<br/><br/>
|
Microsoft Store apps are automatically updated from Microsoft Store. The menu bar in the Microsoft Store app shows whether any Microsoft Store app updates are available for download.<br/><br/>
|
||||||
You can also deploy Windows Store apps directly to devices by using Intune, System Center Configuration Manager, or both in a hybrid configuration. For more information, see:
|
You can also deploy Microsoft Store apps directly to devices by using Intune, System Center Configuration Manager, or both in a hybrid configuration. For more information, see:
|
||||||
<ul>
|
<ul>
|
||||||
<li>[Deploy and manage apps by using Intune](#deploy-and-manage-apps-by-using-intune)</li>
|
<li>[Deploy and manage apps by using Intune](#deploy-and-manage-apps-by-using-intune)</li>
|
||||||
<li>[Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager)</li>
|
<li>[Deploy and manage apps by using System Center Configuration Manager](#deploy-and-manage-apps-by-using-system-center-configuration-manager)</li>
|
||||||
@ -1853,4 +1853,4 @@ You have now identified the tasks you need to perform monthly, at the end of an
|
|||||||
* [Manage Windows 10 updates and upgrades in a school environment (video)](https://technet.microsoft.com/en-us/windows/mt723347)
|
* [Manage Windows 10 updates and upgrades in a school environment (video)](https://technet.microsoft.com/en-us/windows/mt723347)
|
||||||
* [Reprovision devices at the end of the school year (video)](https://technet.microsoft.com/en-us/windows/mt723344)
|
* [Reprovision devices at the end of the school year (video)](https://technet.microsoft.com/en-us/windows/mt723344)
|
||||||
* [Use MDT to deploy Windows 10 in a school (video)](https://technet.microsoft.com/en-us/windows/mt723343)
|
* [Use MDT to deploy Windows 10 in a school (video)](https://technet.microsoft.com/en-us/windows/mt723343)
|
||||||
* [Use Windows Store for Business in a school environment (video)](https://technet.microsoft.com/en-us/windows/mt723348)
|
* [Use Microsoft Store for Business in a school environment (video)](https://technet.microsoft.com/en-us/windows/mt723348)
|
||||||
|
@ -45,7 +45,7 @@ This school configuration has the following characteristics:
|
|||||||
- The classrooms connect to each other through multiple subnets.
|
- The classrooms connect to each other through multiple subnets.
|
||||||
- All devices in each classroom connect to a single subnet.
|
- All devices in each classroom connect to a single subnet.
|
||||||
- All devices have high-speed, persistent connections to each other and to the Internet.
|
- All devices have high-speed, persistent connections to each other and to the Internet.
|
||||||
- All teachers and students have access to Windows Store or Windows Store for Business.
|
- All teachers and students have access to Microsoft Store or Microsoft Store for Business.
|
||||||
- All devices receive software updates from Intune (or another device management system).
|
- All devices receive software updates from Intune (or another device management system).
|
||||||
- You install a 64-bit version of Windows 10 on the admin device.
|
- You install a 64-bit version of Windows 10 on the admin device.
|
||||||
- You install the Windows Assessment and Deployment Kit (Windows ADK) on the admin device.
|
- You install the Windows Assessment and Deployment Kit (Windows ADK) on the admin device.
|
||||||
@ -105,7 +105,7 @@ The high-level process for deploying and configuring devices within individual c
|
|||||||
1. Prepare the admin device for use, which includes installing the Windows ADK and MDT.
|
1. Prepare the admin device for use, which includes installing the Windows ADK and MDT.
|
||||||
2. On the admin device, create and configure the Office 365 Education subscription that you will use for each classroom in the school.
|
2. On the admin device, create and configure the Office 365 Education subscription that you will use for each classroom in the school.
|
||||||
3. On the admin device, configure integration between on-premises AD DS and Azure AD (if you have an on premises AD DS configuration).
|
3. On the admin device, configure integration between on-premises AD DS and Azure AD (if you have an on premises AD DS configuration).
|
||||||
4. On the admin device, create and configure a Windows Store for Business portal.
|
4. On the admin device, create and configure a Microsoft Store for Business portal.
|
||||||
5. On the admin device, prepare for management of the Windows 10 devices after deployment.
|
5. On the admin device, prepare for management of the Windows 10 devices after deployment.
|
||||||
6. On the student and faculty devices, deploy Windows 10 to new or existing devices, or upgrade eligible devices to Windows 10.
|
6. On the student and faculty devices, deploy Windows 10 to new or existing devices, or upgrade eligible devices to Windows 10.
|
||||||
7. On the admin device, manage the Windows 10 devices and apps, the Office 365 subscription, and the AD DS and Azure AD integration.
|
7. On the admin device, manage the Windows 10 devices and apps, the Office 365 subscription, and the AD DS and Azure AD integration.
|
||||||
@ -525,57 +525,57 @@ For more information about:
|
|||||||
- Azure AD editions, see [Azure Active Directory editions](https://azure.microsoft.com/en-us/documentation/articles/active-directory-editions/).
|
- Azure AD editions, see [Azure Active Directory editions](https://azure.microsoft.com/en-us/documentation/articles/active-directory-editions/).
|
||||||
- How to assign user licenses for Azure AD Premium, see [How to assign EMS/Azure AD Premium licenses to user accounts](https://channel9.msdn.com/Series/Azure-Active-Directory-Videos-Demos/How-to-assign-Azure-AD-Premium-Licenses-to-user-accounts).
|
- How to assign user licenses for Azure AD Premium, see [How to assign EMS/Azure AD Premium licenses to user accounts](https://channel9.msdn.com/Series/Azure-Active-Directory-Videos-Demos/How-to-assign-Azure-AD-Premium-Licenses-to-user-accounts).
|
||||||
|
|
||||||
## Create and configure a Windows Store for Business portal
|
## Create and configure a Microsoft Store for Business portal
|
||||||
|
|
||||||
Windows Store for Business allows you to create your own private portal to manage Windows Store apps in your institution. With Windows Store for Business, you can do the following:
|
Microsoft Store for Business allows you to create your own private portal to manage Microsoft Store apps in your institution. With Microsoft Store for Business, you can do the following:
|
||||||
|
|
||||||
- Find and acquire Windows Store apps.
|
- Find and acquire Microsoft Store apps.
|
||||||
- Manage apps, app licenses, and updates.
|
- Manage apps, app licenses, and updates.
|
||||||
- Distribute apps to your users.
|
- Distribute apps to your users.
|
||||||
|
|
||||||
For more information about Windows Store for Business, see [Windows Store for Business overview](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview).
|
For more information about Microsoft Store for Business, see [Microsoft Store for Business overview](https://technet.microsoft.com/itpro/windows/whats-new/windows-store-for-business-overview).
|
||||||
|
|
||||||
The following section shows you how to create a Windows Store for Business portal and configure it for your school.
|
The following section shows you how to create a Microsoft Store for Business portal and configure it for your school.
|
||||||
|
|
||||||
### Create and configure your Windows Store for Business portal
|
### Create and configure your Microsoft Store for Business portal
|
||||||
|
|
||||||
To create and configure your Windows Store for Business portal, simply use the administrative account for your Office 365 subscription to sign in to Windows Store for Business. Windows Store for Business automatically creates a portal for your institution and uses your account as its administrator.
|
To create and configure your Microsoft Store for Business portal, simply use the administrative account for your Office 365 subscription to sign in to Microsoft Store for Business. Microsoft Store for Business automatically creates a portal for your institution and uses your account as its administrator.
|
||||||
|
|
||||||
#### To create and configure a Windows Store for Business portal
|
#### To create and configure a Microsoft Store for Business portal
|
||||||
|
|
||||||
1. In Microsoft Edge or Internet Explorer, type `http://microsoft.com/business-store` in the address bar.
|
1. In Microsoft Edge or Internet Explorer, type `http://microsoft.com/business-store` in the address bar.
|
||||||
2. On the **Windows Store for Business** page, click **Sign in with an organizational account**.<p>**Note** If your institution has AD DS, then don’t create security accounts in Office 365. Instead, create the security groups in AD DS, and then use Azure AD integration to synchronize the security groups with your Office 365 tenant.
|
2. On the **Microsoft Store for Business** page, click **Sign in with an organizational account**.<p>**Note** If your institution has AD DS, then don’t create security accounts in Office 365. Instead, create the security groups in AD DS, and then use Azure AD integration to synchronize the security groups with your Office 365 tenant.
|
||||||
3. On the Windows Store for Business sign-in page, use the administrative account for the Office 365 subscription you created in the [Create a new Office 365 Education subscription](#create-a-new-office-365-education-subscription) section to sign in.
|
3. On the Microsoft Store for Business sign-in page, use the administrative account for the Office 365 subscription you created in the [Create a new Office 365 Education subscription](#create-a-new-office-365-education-subscription) section to sign in.
|
||||||
4. On the **Windows Store for Business Services Agreement** page, review the agreement, select the **I accept this agreement and certify that I have the authority to bind my organization to its terms** check box, and then click **Accept**
|
4. On the **Microsoft Store for Business Services Agreement** page, review the agreement, select the **I accept this agreement and certify that I have the authority to bind my organization to its terms** check box, and then click **Accept**
|
||||||
5. In the **Welcome to the Windows Store for Business** dialog box, click **OK**.
|
5. In the **Welcome to the Microsoft Store for Business** dialog box, click **OK**.
|
||||||
|
|
||||||
After you create the Windows Store for Business portal, configure it by using the commands in the settings menu listed in Table 7. Depending on your institution, you may (or may not) need to change these settings to further customize your portal.
|
After you create the Microsoft Store for Business portal, configure it by using the commands in the settings menu listed in Table 7. Depending on your institution, you may (or may not) need to change these settings to further customize your portal.
|
||||||
|
|
||||||
*Table 7. Menu selections to configure Windows Store for Business settings*
|
*Table 7. Menu selections to configure Microsoft Store for Business settings*
|
||||||
|
|
||||||
| Menu selection | What you can do in this menu |
|
| Menu selection | What you can do in this menu |
|
||||||
|---------------| -------------------|
|
|---------------| -------------------|
|
||||||
|Account information|Displays information about your Windows Store for Business account (no settings can be changed). You make changes to this information in Office 365 or the Azure Portal. For more information, see [Update Windows Store for Business account settings](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings).|
|
|Account information|Displays information about your Microsoft Store for Business account (no settings can be changed). You make changes to this information in Office 365 or the Azure Portal. For more information, see [Update Microsoft Store for Business account settings](https://technet.microsoft.com/itpro/windows/manage/update-windows-store-for-business-account-settings).|
|
||||||
|Device Guard signing|Allows you to upload and sign Device Guard catalog and policy files. For more information about Device Guard, see [Device Guard deployment guide](https://technet.microsoft.com/itpro/windows/keep-secure/device-guard-deployment-guide).|
|
|Device Guard signing|Allows you to upload and sign Device Guard catalog and policy files. For more information about Device Guard, see [Device Guard deployment guide](https://technet.microsoft.com/itpro/windows/keep-secure/device-guard-deployment-guide).|
|
||||||
|LOB publishers| Allows you to add line-of-business (LOB) publishers that can then publish apps to your private store. LOB publishers are usually internal developers or software vendors that are working with your institution. For more information, see [Working with line-of-business apps](https://technet.microsoft.com/itpro/windows/manage/working-with-line-of-business-apps).|
|
|LOB publishers| Allows you to add line-of-business (LOB) publishers that can then publish apps to your private store. LOB publishers are usually internal developers or software vendors that are working with your institution. For more information, see [Working with line-of-business apps](https://technet.microsoft.com/itpro/windows/manage/working-with-line-of-business-apps).|
|
||||||
|Management tools| Allows you to add tools that you can use to distribute (deploy) apps in your private store. For more information, see [Distribute apps with a management tool](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-with-management-tool).|
|
|Management tools| Allows you to add tools that you can use to distribute (deploy) apps in your private store. For more information, see [Distribute apps with a management tool](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-with-management-tool).|
|
||||||
|Offline licensing|Allows you to show (or not show) offline licensed apps to people shopping in your private store. For more information, see [Licensing model: online and offline licenses](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).|
|
|Offline licensing|Allows you to show (or not show) offline licensed apps to people shopping in your private store. For more information, see [Licensing model: online and offline licenses](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).|
|
||||||
|Permissions|Allows you to grant other users in your organization the ability to buy, manage, and administer your Windows Store for Business portal. You can also remove permissions you have previously granted. For more information, see [Roles and permissions in Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business).|
|
|Permissions|Allows you to grant other users in your organization the ability to buy, manage, and administer your Microsoft Store for Business portal. You can also remove permissions you have previously granted. For more information, see [Roles and permissions in Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/roles-and-permissions-windows-store-for-business).|
|
||||||
|Private store|Allows you to change the organization name used in your Windows Store for Business portal. When you create your portal, the private store uses the organization name that you used to create your Office 365 subscription. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).|
|
|Private store|Allows you to change the organization name used in your Microsoft Store for Business portal. When you create your portal, the private store uses the organization name that you used to create your Office 365 subscription. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).|
|
||||||
<p>
|
<p>
|
||||||
### Find, acquire, and distribute apps in the portal
|
### Find, acquire, and distribute apps in the portal
|
||||||
|
|
||||||
Now that you have created your Windows Store for Business portal, you’re ready to find, acquire, and distribute apps that you will add to your portal. You do this by using the Inventory page in Windows Store for Business.
|
Now that you have created your Microsoft Store for Business portal, you’re ready to find, acquire, and distribute apps that you will add to your portal. You do this by using the Inventory page in Microsoft Store for Business.
|
||||||
|
|
||||||
**Note** Your educational institution can now use a credit card to pay for apps in Windows Store for Business.
|
**Note** Your educational institution can now use a credit card to pay for apps in Microsoft Store for Business.
|
||||||
|
|
||||||
You can deploy apps to individual users or make apps available to users through your private store. Deploying apps to individual users restricts the app to those specified users. Making apps available through your private store allows all your users.
|
You can deploy apps to individual users or make apps available to users through your private store. Deploying apps to individual users restricts the app to those specified users. Making apps available through your private store allows all your users.
|
||||||
|
|
||||||
For more information about how to find, acquire, and distribute apps in the portal, see [App inventory management for Windows Store for Business](https://technet.microsoft.com/itpro/windows/manage/app-inventory-managemement-windows-store-for-business).
|
For more information about how to find, acquire, and distribute apps in the portal, see [App inventory management for Microsoft Store for Business](https://technet.microsoft.com/itpro/windows/manage/app-inventory-managemement-windows-store-for-business).
|
||||||
|
|
||||||
### Summary
|
### Summary
|
||||||
|
|
||||||
At the end of this section, you should have a properly configured Windows Store for Business portal. You have also found and acquired your apps from Windows Store. Finally, you should have deployed all your Windows Store apps to your users. Now, you’re ready to deploy Windows Store apps to your users.
|
At the end of this section, you should have a properly configured Microsoft Store for Business portal. You have also found and acquired your apps from Microsoft Store. Finally, you should have deployed all your Microsoft Store apps to your users. Now, you’re ready to deploy Microsoft Store apps to your users.
|
||||||
|
|
||||||
## Plan for deployment
|
## Plan for deployment
|
||||||
|
|
||||||
@ -598,7 +598,7 @@ Depending on your school’s requirements, you may need any combination of the f
|
|||||||
- Upgrade institution-owned devices to Windows 10 Education.
|
- Upgrade institution-owned devices to Windows 10 Education.
|
||||||
- Deploy new instances of Windows 10 Education so that new devices have a known configuration.
|
- Deploy new instances of Windows 10 Education so that new devices have a known configuration.
|
||||||
|
|
||||||
**Note** Although you can use Windows 10 Home on institution-owned devices, Microsoft recommends that you use Windows 10 Pro or Windows 10 Education, instead. Windows 10 Pro and Windows 10 Education provide support for MDM, policy-based management, and Windows Store for Business. These features are not available in Windows 10 Home.
|
**Note** Although you can use Windows 10 Home on institution-owned devices, Microsoft recommends that you use Windows 10 Pro or Windows 10 Education, instead. Windows 10 Pro and Windows 10 Education provide support for MDM, policy-based management, and Microsoft Store for Business. These features are not available in Windows 10 Home.
|
||||||
|
|
||||||
One other consideration is the mix of processor architectures you will support. If you can, support only 64-bit versions of Windows 10. If you have devices that can run only 32 bit versions of Windows 10, you will need to import both 64-bit and 32-bit versions of the Windows 10 editions listed above.
|
One other consideration is the mix of processor architectures you will support. If you can, support only 64-bit versions of Windows 10. If you have devices that can run only 32 bit versions of Windows 10, you will need to import both 64-bit and 32-bit versions of the Windows 10 editions listed above.
|
||||||
|
|
||||||
@ -716,14 +716,14 @@ Import device drivers for each device in your institution. For more information
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">3. Create MDT applications for Windows Store apps</td>
|
<td valign="top">3. Create MDT applications for Microsoft Store apps</td>
|
||||||
<td>Create an MDT application for each Windows Store app you want to deploy. You can deploy Windows Store apps by using *sideloading*, which allows you to use the **Add-AppxPackage** Windows PowerShell cmdlet to deploy the .appx files associated with the app (called *provisioned apps*). Use this method to deploy up to 24 apps to Windows 10.<br/><br/>
|
<td>Create an MDT application for each Microsoft Store app you want to deploy. You can deploy Microsoft Store apps by using *sideloading*, which allows you to use the **Add-AppxPackage** Windows PowerShell cmdlet to deploy the .appx files associated with the app (called *provisioned apps*). Use this method to deploy up to 24 apps to Windows 10.<br/><br/>
|
||||||
|
|
||||||
Prior to sideloading the .appx files, obtain the Windows Store .appx files that you will use to deploy (sideload) the apps in your provisioning package. For apps in Windows Store, you will need to obtain the .appx files from the app software vendor directly. If you are unable to obtain the .appx files from the app software vendor, then you or the students will need to install the apps on the student devices directly from Windows Store or Windows Store for Business.<br/><br/>
|
Prior to sideloading the .appx files, obtain the Microsoft Store .appx files that you will use to deploy (sideload) the apps in your provisioning package. For apps in Microsoft Store, you will need to obtain the .appx files from the app software vendor directly. If you are unable to obtain the .appx files from the app software vendor, then you or the students will need to install the apps on the student devices directly from Microsoft Store or Microsoft Store for Business.<br/><br/>
|
||||||
|
|
||||||
If you have Intune, you can deploy Windows Store apps after you deploy Windows 10, as described in the [Deploy apps by using Intune](#deploy-apps-by-using-intune) section. This method provides granular deployment of Windows Store apps, and you can use it for ongoing management of Windows Store apps. This is the preferred method of deploying and managing Windows Store apps.<br/><br/>
|
If you have Intune, you can deploy Microsoft Store apps after you deploy Windows 10, as described in the [Deploy apps by using Intune](#deploy-apps-by-using-intune) section. This method provides granular deployment of Microsoft Store apps, and you can use it for ongoing management of Microsoft Store apps. This is the preferred method of deploying and managing Microsoft Store apps.<br/><br/>
|
||||||
|
|
||||||
In addition, you must prepare your environment for sideloading (deploying) Windows Store apps. For more information about how to:<br/><br/>
|
In addition, you must prepare your environment for sideloading (deploying) Microsoft Store apps. For more information about how to:<br/><br/>
|
||||||
<ul>
|
<ul>
|
||||||
<li>Prepare your environment for sideloading, see [Sideload LOB apps in Windows 10](https://technet.microsoft.com/en-us/itpro/windows/deploy/sideload-apps-in-windows-10).</li>
|
<li>Prepare your environment for sideloading, see [Sideload LOB apps in Windows 10](https://technet.microsoft.com/en-us/itpro/windows/deploy/sideload-apps-in-windows-10).</li>
|
||||||
<li>Create an MDT application, see [Create a New Application in the Deployment Workbench](https://technet.microsoft.com/en-us/library/dn759415.aspx#CreateaNewApplicationintheDeploymentWorkbench).</li>
|
<li>Create an MDT application, see [Create a New Application in the Deployment Workbench](https://technet.microsoft.com/en-us/library/dn759415.aspx#CreateaNewApplicationintheDeploymentWorkbench).</li>
|
||||||
@ -930,9 +930,9 @@ Microsoft has several recommended settings for educational institutions. Table 1
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td valign="top">Control Windows Store access</td>
|
<td valign="top">Control Microsoft Store access</td>
|
||||||
<td>You can control access to Windows Store and whether existing Windows Store apps receive updates. You can only disable the Windows Store app in Windows 10 Education and Windows 10 Enterprise.<br/><br/>
|
<td>You can control access to Microsoft Store and whether existing Microsoft Store apps receive updates. You can only disable the Microsoft Store app in Windows 10 Education and Windows 10 Enterprise.<br/><br/>
|
||||||
**Group Policy**. You can disable the Windows Store app by using the **Turn off the Store Application** Group Policy setting. You can prevent Windows Store apps from receiving updates by using the **Turn off Automatic Download and Install of updates** Group Policy setting. For more information about configuring these settings, see [Can I use Group Policy to control the Windows Store in my enterprise environment?](https://technet.microsoft.com/en-us/library/hh832040.aspx#BKMK_UseGP).<br/><br/>
|
**Group Policy**. You can disable the Microsoft Store app by using the **Turn off the Store Application** Group Policy setting. You can prevent Microsoft Store apps from receiving updates by using the **Turn off Automatic Download and Install of updates** Group Policy setting. For more information about configuring these settings, see [Can I use Group Policy to control the Microsoft Store in my enterprise environment?](https://technet.microsoft.com/en-us/library/hh832040.aspx#BKMK_UseGP).<br/><br/>
|
||||||
**Intune**. You can enable or disable the camera by using the **Allow application store** policy setting in the **Apps** section of a **Windows 10 General Configuration** policy.
|
**Intune**. You can enable or disable the camera by using the **Allow application store** policy setting in the **Apps** section of a **Windows 10 General Configuration** policy.
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@ -1015,7 +1015,7 @@ For more information about Intune, see [Documentation for Microsoft Intune](http
|
|||||||
|
|
||||||
### Deploy apps by using Intune
|
### Deploy apps by using Intune
|
||||||
|
|
||||||
You can use Intune to deploy Windows Store and Windows desktop apps. Intune provides improved control over which users receive specific apps. In addition, Intune allows you deploy apps to companion devices (such as Windows 10 Mobile, iOS, or Android devices) Finally, Intune helps you manage app security and features, such as mobile application management policies that let you manage apps on devices that are not enrolled in Intune or are managed by another solution.
|
You can use Intune to deploy Microsoft Store and Windows desktop apps. Intune provides improved control over which users receive specific apps. In addition, Intune allows you deploy apps to companion devices (such as Windows 10 Mobile, iOS, or Android devices) Finally, Intune helps you manage app security and features, such as mobile application management policies that let you manage apps on devices that are not enrolled in Intune or are managed by another solution.
|
||||||
|
|
||||||
For more information about how to configure Intune to manage your apps, see [Deploy and configure apps with Microsoft Intune](https://docs.microsoft.com/en-us/intune/).
|
For more information about how to configure Intune to manage your apps, see [Deploy and configure apps with Microsoft Intune](https://docs.microsoft.com/en-us/intune/).
|
||||||
|
|
||||||
@ -1037,7 +1037,7 @@ Prior to deployment of Windows 10, ensure that you complete the tasks listed in
|
|||||||
| ---| --- |
|
| ---| --- |
|
||||||
| |The target devices have sufficient system resources to run Windows 10. |
|
| |The target devices have sufficient system resources to run Windows 10. |
|
||||||
| | Identify the necessary devices drivers, and import them to the MDT deployment share.|
|
| | Identify the necessary devices drivers, and import them to the MDT deployment share.|
|
||||||
| | Create an MDT application for each Windows Store and Windows desktop app.|
|
| | Create an MDT application for each Microsoft Store and Windows desktop app.|
|
||||||
| | Notify the students and faculty about the deployment.|
|
| | Notify the students and faculty about the deployment.|
|
||||||
<p>
|
<p>
|
||||||
### Perform the deployment
|
### Perform the deployment
|
||||||
@ -1078,7 +1078,7 @@ As a final quality control step, verify the device configuration to ensure that
|
|||||||
- Windows Update is active and current with software updates.
|
- Windows Update is active and current with software updates.
|
||||||
- Windows Defender is active and current with malware signatures.
|
- Windows Defender is active and current with malware signatures.
|
||||||
- The SmartScreen Filter is active.
|
- The SmartScreen Filter is active.
|
||||||
- All Windows Store apps are properly installed and updated.
|
- All Microsoft Store apps are properly installed and updated.
|
||||||
- All Windows desktop apps are properly installed and updated.
|
- All Windows desktop apps are properly installed and updated.
|
||||||
- Printers are properly configured.
|
- Printers are properly configured.
|
||||||
|
|
||||||
@ -1179,9 +1179,9 @@ For more information, see the [Deploy apps by using Intune](#deploy-apps-by-usin
|
|||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
<tr>
|
<tr>
|
||||||
<td>Install new or update existing Windows Store apps that are used in the curriculum.<br/><br/>
|
<td>Install new or update existing Microsoft Store apps that are used in the curriculum.<br/><br/>
|
||||||
Windows Store apps are automatically updated from Windows Store. The menu bar in the Windows Store app shows whether any Windows Store app updates are available for download.<br/><br/>
|
Microsoft Store apps are automatically updated from Microsoft Store. The menu bar in the Microsoft Store app shows whether any Microsoft Store app updates are available for download.<br/><br/>
|
||||||
You can also deploy Windows Store apps directly to devices by using Intune. For more information, see the [Deploy apps by using Intune](#deploy-apps-by-using-intune) section.
|
You can also deploy Microsoft Store apps directly to devices by using Intune. For more information, see the [Deploy apps by using Intune](#deploy-apps-by-using-intune) section.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td></td>
|
<td></td>
|
||||||
|
@ -26,7 +26,7 @@ We want all students to have the chance to use the apps they need for success in
|
|||||||
Keep these best practices in mind when deploying any edition of Windows 10 in schools or districts:
|
Keep these best practices in mind when deploying any edition of Windows 10 in schools or districts:
|
||||||
* A Microsoft account is only intended for consumer services. Enterprises and educational institutions should use enterprise versions where possible, such as Skype for Business, OneDrive for Business, and so on. For schools, consider using mobile device management (MDM) or Group Policy to block students from adding a Microsoft account as a secondary account.
|
* A Microsoft account is only intended for consumer services. Enterprises and educational institutions should use enterprise versions where possible, such as Skype for Business, OneDrive for Business, and so on. For schools, consider using mobile device management (MDM) or Group Policy to block students from adding a Microsoft account as a secondary account.
|
||||||
* If schools allow the use of personal accounts by their students to access personal services, schools should be aware that these accounts belong to individuals, not the school.
|
* If schools allow the use of personal accounts by their students to access personal services, schools should be aware that these accounts belong to individuals, not the school.
|
||||||
* IT administrators, school officials, and teachers should also consider ratings when picking apps from the Windows Store.
|
* IT administrators, school officials, and teachers should also consider ratings when picking apps from the Microsoft Store.
|
||||||
* If you have students or school personnel who rely on assistive technology apps that are not available in the Microsoft Store for Education, and who are using a Windows 10 S device, configure their device to Windows 10 Pro Education to allow the download and use of non-Microsoft Store assistive technology apps. See [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](switch-to-pro-education.md) for more info.
|
* If you have students or school personnel who rely on assistive technology apps that are not available in the Microsoft Store for Education, and who are using a Windows 10 S device, configure their device to Windows 10 Pro Education to allow the download and use of non-Microsoft Store assistive technology apps. See [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](switch-to-pro-education.md) for more info.
|
||||||
|
|
||||||
## Windows 10 Contacts privacy settings
|
## Windows 10 Contacts privacy settings
|
||||||
|
@ -146,7 +146,7 @@ For info on how to distribute **Minecraft: Education Edition**, see [For teacher
|
|||||||
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
||||||
4. Type the email address, or name for the student that you're assigning the app to, and click **Assign**.
|
4. Type the email address, or name for the student that you're assigning the app to, and click **Assign**.
|
||||||
|
|
||||||
Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**.
|
Employees will receive an email with a link that will install the app on their device. Click the link to start the Microsoft Store app, and then click **Install**. Also, in the Microsoft Store app, they can find the app under **My Library**.
|
||||||
|
|
||||||
### Purchase additional licenses
|
### Purchase additional licenses
|
||||||
Applies to: IT admins and teachers
|
Applies to: IT admins and teachers
|
||||||
|
Binary file not shown.
After Width: | Height: | Size: 19 KiB |
Binary file not shown.
After Width: | Height: | Size: 528 KiB |
Binary file not shown.
After Width: | Height: | Size: 26 KiB |
BIN
education/windows/images/windows_glyph.png
Normal file
BIN
education/windows/images/windows_glyph.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 537 B |
@ -59,7 +59,7 @@ Follow these links to find step-by-step guidance on how to deploy Windows 8.1 in
|
|||||||
<p><b><a href="https://technet.microsoft.com/library/dn645510.aspx" target="_blank">BYOD</a></b><br />Explore Bring Your Own Device (BYOD) considerations, including device types, infrastructure, and deployment models.</p>
|
<p><b><a href="https://technet.microsoft.com/library/dn645510.aspx" target="_blank">BYOD</a></b><br />Explore Bring Your Own Device (BYOD) considerations, including device types, infrastructure, and deployment models.</p>
|
||||||
<p><b><a href="https://technet.microsoft.com/library/dn645488.aspx" target="_blank">Deploying Windows RT 8.1</a></b><br />Get step-by-step instructions on how to configure and deploy Windows RT devices (like Surface and other tablets) in educational environments.</p>
|
<p><b><a href="https://technet.microsoft.com/library/dn645488.aspx" target="_blank">Deploying Windows RT 8.1</a></b><br />Get step-by-step instructions on how to configure and deploy Windows RT devices (like Surface and other tablets) in educational environments.</p>
|
||||||
<p><b><a href="https://technet.microsoft.com/library/dn645483.aspx" target="_blank">Virtual Desktop Infrastructure</a></b><br />Learn how to address challenges related to BYOD scenarios using Virtual Desktop Infrastructure (VDI).</p>
|
<p><b><a href="https://technet.microsoft.com/library/dn645483.aspx" target="_blank">Virtual Desktop Infrastructure</a></b><br />Learn how to address challenges related to BYOD scenarios using Virtual Desktop Infrastructure (VDI).</p>
|
||||||
<p><b><a href="https://technet.microsoft.com/library/dn645532.aspx" target="_blank">Windows Store apps</a></b><br />Explore Windows Store app deployment strategies and considerations for educational institutions running Windows 8.1.</p>
|
<p><b><a href="https://technet.microsoft.com/library/dn645532.aspx" target="_blank">Microsoft Store apps</a></b><br />Explore Microsoft Store app deployment strategies and considerations for educational institutions running Windows 8.1.</p>
|
||||||
<p><b><a href="https://technet.microsoft.com/library/dn645486.aspx" target="_blank">Windows To Go</a></b><br />Learn about the benefits, limitations, and processes involved in deploying Windows To Go.</p>
|
<p><b><a href="https://technet.microsoft.com/library/dn645486.aspx" target="_blank">Windows To Go</a></b><br />Learn about the benefits, limitations, and processes involved in deploying Windows To Go.</p>
|
||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
@ -23,7 +23,7 @@ When you sign up for a [Minecraft: Education Edition](http://education.minecraft
|
|||||||
>[!Note]
|
>[!Note]
|
||||||
>If you don't have an Azure AD or Office 365 tenant, you can set up a free Office 365 Education subscription when you request Minecraft: Education Edition. For more information see [Office 365 Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans).
|
>If you don't have an Azure AD or Office 365 tenant, you can set up a free Office 365 Education subscription when you request Minecraft: Education Edition. For more information see [Office 365 Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans).
|
||||||
|
|
||||||
## Add Minecraft to your Windows Store for Education
|
## Add Minecraft to your Microsoft Store for Education
|
||||||
|
|
||||||
You can start with the Minecraft: Education Edition trial to get individual copies of the app. For more information, see [Minecraft: Education Edition - direct purchase](#individual-copies).
|
You can start with the Minecraft: Education Edition trial to get individual copies of the app. For more information, see [Minecraft: Education Edition - direct purchase](#individual-copies).
|
||||||
|
|
||||||
@ -60,7 +60,7 @@ Qualified education institutions can purchase Minecraft: Education Edition licen
|
|||||||
|
|
||||||
- Your channel partner will submit and process your volume license order, your licenses will be shown on [Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx), and the licenses will be available in your [Microsoft Store for Education](https://www.microsoft.com/business-store) inventory.
|
- Your channel partner will submit and process your volume license order, your licenses will be shown on [Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx), and the licenses will be available in your [Microsoft Store for Education](https://www.microsoft.com/business-store) inventory.
|
||||||
- You’ll receive an email with a link to Microsoft Store for Education.
|
- You’ll receive an email with a link to Microsoft Store for Education.
|
||||||
- Sign in to [Windows Store for Education](https://educationstore.microsoft.com) to distribute and manage the Minecraft: Education Edition licenses. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft)
|
- Sign in to [Microsoft Store for Education](https://educationstore.microsoft.com) to distribute and manage the Minecraft: Education Edition licenses. For more information on distribution options, see [Distribute Minecraft](#distribute-minecraft)
|
||||||
|
|
||||||
## Minecraft: Education Edition payment options
|
## Minecraft: Education Edition payment options
|
||||||
You can pay for Minecraft: Education Edition with a debit or credit card, or with an invoice.
|
You can pay for Minecraft: Education Edition with a debit or credit card, or with an invoice.
|
||||||
@ -114,7 +114,7 @@ After Minecraft: Education Edition is added to your Microsoft Store for Educatio
|
|||||||
Admins can also add Minecraft: Education Edition to the private store. This allows people in your organization to install the app from the private store. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).
|
Admins can also add Minecraft: Education Edition to the private store. This allows people in your organization to install the app from the private store. For more information, see [Distribute apps using your private store](https://technet.microsoft.com/itpro/windows/manage/distribute-apps-from-your-private-store).
|
||||||
|
|
||||||
<!---
|
<!---
|
||||||
Here's the page you'll see for Minecraft: Education Edition licenses purchased directly through the Windows Store for Business.
|
Here's the page you'll see for Minecraft: Education Edition licenses purchased directly through the Microsoft Store for Business.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -178,14 +178,14 @@ Enter email addresses for your students, and each student will get an email with
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. Click **Get the app** to start the app install in Windows Store app.
|
2. Click **Get the app** to start the app install in Microsoft Store app.
|
||||||
3. In Windows Store app, click **Install**.
|
3. In Microsoft Store app, click **Install**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
After installing the app, students can find Minecraft: Education Edition in Windows Store app under **My Library**. Windows Store app is preinstalled with Windows 10.
|
After installing the app, students can find Minecraft: Education Edition in Microsoft Store app under **My Library**. Microsoft Store app is preinstalled with Windows 10.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
When students click **My Library** they'll find apps assigned to them.
|
When students click **My Library** they'll find apps assigned to them.
|
||||||
|
|
||||||
@ -202,17 +202,17 @@ Download for others allows teachers or IT admins to download an app that they ca
|
|||||||
- Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition.
|
- Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition.
|
||||||
|
|
||||||
**Check for updates**</br>
|
**Check for updates**</br>
|
||||||
Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Windows Store apps.
|
Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Microsoft Store apps.
|
||||||
|
|
||||||
**To check for app updates**
|
**To check for app updates**
|
||||||
1. Start Windows Store app on the PC (click **Start**, and type **Store**).
|
1. Start Microsoft Store app on the PC (click **Start**, and type **Store**).
|
||||||
2. Click the account button, and then click **Downloads and updates**.
|
2. Click the account button, and then click **Downloads and updates**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. Click **Check for updates**, and install all available updates.
|
3. Click **Check for updates**, and install all available updates.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
4. Restart the computer before installing Minecraft: Education Edition.
|
4. Restart the computer before installing Minecraft: Education Edition.
|
||||||
|
|
||||||
@ -221,7 +221,7 @@ You'll download a .zip file, extract the files, and then use one of the files to
|
|||||||
|
|
||||||
1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**.
|
1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**.
|
2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**.
|
||||||
3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC.
|
3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC.
|
||||||
@ -235,14 +235,14 @@ You'll download a .zip file, extract the files, and then use one of the files to
|
|||||||
<!--- ### Access to Microsoft Store for Business
|
<!--- ### Access to Microsoft Store for Business
|
||||||
By default, when a teacher with a work or school account acquires Minecraft: Education Edition, they are automatically signed up for Window Store for Business, and the **Basic Purchaser** role is assigned to them. **Basic Purchaser** role allows teachers to acquire Minecraft: Education Edition and to distribute it to students.
|
By default, when a teacher with a work or school account acquires Minecraft: Education Edition, they are automatically signed up for Window Store for Business, and the **Basic Purchaser** role is assigned to them. **Basic Purchaser** role allows teachers to acquire Minecraft: Education Edition and to distribute it to students.
|
||||||
|
|
||||||
However, tenant admins can control whether or not teachers automatically sign up for Windows Store for Business, and get the **Basic Purchaser** role. You can configure this with the **Allow educators in my organization to sign up for the Windows Store for Business.** You'll find this on the **Permissions** page.
|
However, tenant admins can control whether or not teachers automatically sign up for Microsoft Store for Business, and get the **Basic Purchaser** role. You can configure this with the **Allow educators in my organization to sign up for the Microsoft Store for Business.** You'll find this on the **Permissions** page.
|
||||||
|
|
||||||
To prevent educators from automatically signing up for Windows Store for Business
|
To prevent educators from automatically signing up for Microsoft Store for Business
|
||||||
1. In Windows Store for Business, click **Settings**, and then click **Permissions**.
|
1. In Microsoft Store for Business, click **Settings**, and then click **Permissions**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. Click **Allow educators in my organization to sign up for the Windows Store for Business.**
|
2. Click **Allow educators in my organization to sign up for the Microsoft Store for Business.**
|
||||||
|
|
||||||
-->
|
-->
|
||||||
|
|
||||||
@ -263,21 +263,21 @@ Minecraft: Education Edition adds a new role for teachers: **Basic Purchaser**.
|
|||||||
|
|
||||||
2. Click **Settings**, and then choose **Permissions**.
|
2. Click **Settings**, and then choose **Permissions**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. Click **Add people**, type a name, select the correct person, choose the role you want to assign, and click **Save**.
|
3. Click **Add people**, type a name, select the correct person, choose the role you want to assign, and click **Save**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
Windows Store for Business updates the list of people and permissions.
|
Microsoft Store for Business updates the list of people and permissions.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!--- ## <a href="" id="private-store"></a>Private store
|
<!--- ## <a href="" id="private-store"></a>Private store
|
||||||
|
|
||||||
When you create you Windows Store for Business account, you'll have a set of apps included for free in your private store. Apps in your private store are available for all people in your organization to install and use.
|
When you create you Microsoft Store for Business account, you'll have a set of apps included for free in your private store. Apps in your private store are available for all people in your organization to install and use.
|
||||||
|
|
||||||
These apps will automatically be in your private store:
|
These apps will automatically be in your private store:
|
||||||
- Word mobile
|
- Word mobile
|
||||||
@ -291,7 +291,7 @@ These apps will automatically be in your private store:
|
|||||||
As an admin, you can remove any of these apps from the private store if you'd prefer to control how apps are distributed. -->
|
As an admin, you can remove any of these apps from the private store if you'd prefer to control how apps are distributed. -->
|
||||||
|
|
||||||
<!--- ## Need more copies of Minecraft: Education Edition?
|
<!--- ## Need more copies of Minecraft: Education Edition?
|
||||||
You can purchase more licenses by working with your channel partner. Licenses are available at a lower rate than the price for individual copies that are available through Windows Store for Business. Individual copies are also available through Windows Store for Business.
|
You can purchase more licenses by working with your channel partner. Licenses are available at a lower rate than the price for individual copies that are available through Microsoft Store for Business. Individual copies are also available through Microsoft Store for Business.
|
||||||
|
|
||||||
If you’ve purchased a volume license, be sure to let other basic purchasers in your organization know about the volume license. That should help prevent unnecessary purchases of individual copies. -->
|
If you’ve purchased a volume license, be sure to let other basic purchasers in your organization know about the volume license. That should help prevent unnecessary purchases of individual copies. -->
|
||||||
|
|
||||||
|
@ -136,7 +136,7 @@ The Set up School PCs app produces a specialized provisioning package that makes
|
|||||||
- By default, saving content locally to the PC is blocked, but you can choose to enable it. This prevents data loss by forcing students to save to the cloud.
|
- By default, saving content locally to the PC is blocked, but you can choose to enable it. This prevents data loss by forcing students to save to the cloud.
|
||||||
- A custom Start layout, taskbar layout, and lock screen image are set.
|
- A custom Start layout, taskbar layout, and lock screen image are set.
|
||||||
- Prohibits unlocking the PC to developer mode.
|
- Prohibits unlocking the PC to developer mode.
|
||||||
- Prohibits untrusted Windows Store apps from being installed.
|
- Prohibits untrusted Microsoft Store apps from being installed.
|
||||||
- Prohibits students from removing MDM.
|
- Prohibits students from removing MDM.
|
||||||
- Prohibits students from adding new provisioning packages.
|
- Prohibits students from adding new provisioning packages.
|
||||||
- Prohibits student from removing existing provisioning packages (including the one set by Set up School PCs).
|
- Prohibits student from removing existing provisioning packages (including the one set by Set up School PCs).
|
||||||
|
@ -80,25 +80,25 @@ Use the Windows Imaging and Configuration Designer (ICD) tool included in the Wi
|
|||||||
|
|
||||||
## Add a universal app to your package
|
## Add a universal app to your package
|
||||||
|
|
||||||
Universal apps that you can distribute in the provisioning package can be line-of-business (LOB) apps developed by your organization, Windows Store for Business apps that you acquire with [offline licensing](https://technet.microsoft.com/itpro/windows/manage/acquire-apps-windows-store-for-business), or third-party apps. This procedure will assume you are distributing apps from the Windows Store for Business. For other apps, obtain the necessary information (such as the package family name) from the app developer.
|
Universal apps that you can distribute in the provisioning package can be line-of-business (LOB) apps developed by your organization, Microsoft Store for Business apps that you acquire with [offline licensing](https://technet.microsoft.com/itpro/windows/manage/acquire-apps-windows-store-for-business), or third-party apps. This procedure will assume you are distributing apps from the Microsoft Store for Business. For other apps, obtain the necessary information (such as the package family name) from the app developer.
|
||||||
|
|
||||||
1. In the **Available customizations** pane, go to **Runtime settings** > **UniversalAppInstall**.
|
1. In the **Available customizations** pane, go to **Runtime settings** > **UniversalAppInstall**.
|
||||||
|
|
||||||
2. For **DeviceContextApp**, specify the **PackageFamilyName** for the app. In Windows Store for Business, the package family name is listed in the **Package details** section of the download page.
|
2. For **DeviceContextApp**, specify the **PackageFamilyName** for the app. In Microsoft Store for Business, the package family name is listed in the **Package details** section of the download page.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. For **ApplicationFile**, click **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
3. For **ApplicationFile**, click **Browse** to find and select the target app (either an \*.appx or \*.appxbundle).
|
||||||
|
|
||||||
4. For **DependencyAppxFiles**, click **Browse** to find and add any dependencies for the app. In Windows Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
4. For **DependencyAppxFiles**, click **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
5. For **DeviceContextAppLicense**, enter the **LicenseProductID**. In Windows Store for Business, you generate the license for the app on the app's download page.
|
5. For **DeviceContextAppLicense**, enter the **LicenseProductID**. In Microsoft Store for Business, you generate the license for the app on the app's download page.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
[Learn more about distributing offline apps from the Windows Store for Business.](https://technet.microsoft.com/itpro/windows/manage/distribute-offline-apps)
|
[Learn more about distributing offline apps from the Microsoft Store for Business.](https://technet.microsoft.com/itpro/windows/manage/distribute-offline-apps)
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Removing a provisioning package will not remove any apps installed by device context in that provisioning package.
|
> Removing a provisioning package will not remove any apps installed by device context in that provisioning package.
|
||||||
|
@ -45,7 +45,7 @@ When Take a Test is running, the following MDM policies are applied to lock down
|
|||||||
| Policy | Description | Value |
|
| Policy | Description | Value |
|
||||||
|---|---|---|
|
|---|---|---|
|
||||||
| AllowToasts | Disables toast notifications from being shown | 0 |
|
| AllowToasts | Disables toast notifications from being shown | 0 |
|
||||||
| AllowAppStoreAutoUpdate | Disables automatic updates for Windows Store apps that are installed on the PC | 0 |
|
| AllowAppStoreAutoUpdate | Disables automatic updates for Microsoft Store apps that are installed on the PC | 0 |
|
||||||
| AllowDeviceDiscovery | Disables UI for screen sharing | 0 |
|
| AllowDeviceDiscovery | Disables UI for screen sharing | 0 |
|
||||||
| AllowInput Panel | Disables the onscreen keyboard which will disable auto-fill | 0 |
|
| AllowInput Panel | Disables the onscreen keyboard which will disable auto-fill | 0 |
|
||||||
| AllowCortana | Disables Cortana functionality | 0 |
|
| AllowCortana | Disables Cortana functionality | 0 |
|
||||||
|
@ -89,14 +89,14 @@ Students will receive an email with a link that will install the app on their PC
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
1. Click **Get the app** to start the app install in Windows Store app.
|
1. Click **Get the app** to start the app install in Microsoft Store app.
|
||||||
2. In Windows Store app, click **Install**.
|
2. In Microsoft Store app, click **Install**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
After installing the app, students can find Minecraft: Education Edition in Windows Store app under **My Library**.
|
After installing the app, students can find Minecraft: Education Edition in Microsoft Store app under **My Library**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
When students click **My Library** they'll find apps assigned to them.
|
When students click **My Library** they'll find apps assigned to them.
|
||||||
|
|
||||||
@ -113,17 +113,17 @@ Download for others allows teachers or IT admins to download a packages that the
|
|||||||
- Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition.
|
- Windows 10 (at least version 1511) is required for PCs running Minecraft: Education Edition.
|
||||||
|
|
||||||
#### Check for updates
|
#### Check for updates
|
||||||
Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Windows Store apps.
|
Minecraft: Education Edition will not install if there are updates pending for other apps on the PC. Before installing Minecraft, check to see if there are pending updates for Microsoft Store apps.
|
||||||
|
|
||||||
**To check for app updates**
|
**To check for app updates**
|
||||||
1. Start Windows Store app on the PC (click **Start**, and type **Store**).
|
1. Start Microsoft Store app on the PC (click **Start**, and type **Store**).
|
||||||
2. Click the account button, and then click **Downloads and updates**.
|
2. Click the account button, and then click **Downloads and updates**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. Click **Check for updates**, and install all available updates.
|
3. Click **Check for updates**, and install all available updates.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
4. Restart the computer before installing Minecraft: Education Edition.
|
4. Restart the computer before installing Minecraft: Education Edition.
|
||||||
|
|
||||||
@ -132,7 +132,7 @@ You'll download a .zip file, extract the files, and then use one of the files to
|
|||||||
|
|
||||||
1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**.
|
1. **Download Minecraft Education Edition.zip**. From the **Minecraft: Education Edition** page, click **Download for others** tab, and then click **Download**.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**.
|
2. **Extract files**. Find the .zip file that you downloaded and extract the files. This is usually your **Downloads** folder, unless you chose to save the .zip file to a different location. Right-click the file and choose **Extract all**.
|
||||||
3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC.
|
3. **Save to USB drive**. After you've extracted the files, save the Minecraft: Education Edition folder to a USB drive, or to a network location that you can access from each PC.
|
||||||
|
@ -9,7 +9,7 @@ ms.sitesec: library
|
|||||||
ms.localizationpriority: high
|
ms.localizationpriority: high
|
||||||
author: CelesteDG
|
author: CelesteDG
|
||||||
ms.author: celested
|
ms.author: celested
|
||||||
ms.date: 08/30/2017
|
ms.date: 10/17/2017
|
||||||
---
|
---
|
||||||
|
|
||||||
# Test Windows 10 S on existing Windows 10 education devices
|
# Test Windows 10 S on existing Windows 10 education devices
|
||||||
@ -21,11 +21,11 @@ The Windows 10 S self-installer will allow you to test Windows 10 S on a variety
|
|||||||
|
|
||||||
Windows 10 S is built to give schools the familiar, robust, and productive experiences you count on from Windows in an experience that's been streamlined for security and performance in the classroom, and built to work with Microsoft Education<sup>[2](#footnote2)</sup>.
|
Windows 10 S is built to give schools the familiar, robust, and productive experiences you count on from Windows in an experience that's been streamlined for security and performance in the classroom, and built to work with Microsoft Education<sup>[2](#footnote2)</sup>.
|
||||||
|
|
||||||
Windows 10 S is different from other editions of Windows 10 as everything that runs on the device is verfied by Microsoft for security and performance. Therefore, Windows 10 S works exclusively with apps from the Windows Store. Some accessories and apps compatible with Windows 10 may not work and performance may vary. Certain default settings, features, and apps cannot be changed. When you install Windows 10 S, your existing applications and settings will be deleted and you will only be able to install apps from the Windows Store.
|
Windows 10 S is different from other editions of Windows 10 as everything that runs on the device is verfied by Microsoft for security and performance. Therefore, Windows 10 S works exclusively with apps from the Microsoft Store. Some accessories and apps compatible with Windows 10 may not work and performance may vary. Certain default settings, features, and apps cannot be changed. When you install Windows 10 S, your existing applications and settings will be deleted and you will only be able to install apps from the Microsoft Store.
|
||||||
|
|
||||||
**Configuring Windows 10 S for school use is easy:** Education customers must configure **SetEduPolicies** for use in K-12 schools. For more information on how to do these, see [Use the Set up School PCs app](use-set-up-school-pcs-app.md) and [Windows 10 configuration recommendations for education customers](configure-windows-for-education.md).
|
**Configuring Windows 10 S for school use is easy:** Education customers must configure **SetEduPolicies** for use in K-12 schools. For more information on how to do these, see [Use the Set up School PCs app](use-set-up-school-pcs-app.md) and [Windows 10 configuration recommendations for education customers](configure-windows-for-education.md).
|
||||||
|
|
||||||
**Installing Office 365 for Windows 10 S (Education preview)**: To install the Office applications in a school environment, you must use the free Set up School PCs app, which is available on the Microsoft Store for Education and from the Windows Store.
|
**Installing Office 365 for Windows 10 S (Education preview)**: To install the Office applications in a school environment, you must use the free Set up School PCs app, which is available on the Microsoft Store for Education and from the Microsoft Store.
|
||||||
|
|
||||||
As we finalize development of Office 365 for Windows 10 S (Education preview), the applications will be updated automatically. You must have an Office license to activate the applications once they are installed.To learn more about Office 365 for Education plans, see [FAQ: Office on Windows 10 S](https://support.office.com/article/717193b5-ff9f-4388-84c0-277ddf07fe3f).
|
As we finalize development of Office 365 for Windows 10 S (Education preview), the applications will be updated automatically. You must have an Office license to activate the applications once they are installed.To learn more about Office 365 for Education plans, see [FAQ: Office on Windows 10 S](https://support.office.com/article/717193b5-ff9f-4388-84c0-277ddf07fe3f).
|
||||||
|
|
||||||
@ -33,7 +33,7 @@ As we finalize development of Office 365 for Windows 10 S (Education preview), t
|
|||||||
|
|
||||||
### Important information
|
### Important information
|
||||||
|
|
||||||
Before you install Windows 10 S, be aware that non-Windows Store apps will not work, peripherals that require custom drivers may not work, and other errors may occur. In particular, this release of Windows 10 S:
|
Before you install Windows 10 S, be aware that non-Microsoft Store apps will not work, peripherals that require custom drivers may not work, and other errors may occur. In particular, this release of Windows 10 S:
|
||||||
* Is intended for education customers to test compatibility with existing hardware
|
* Is intended for education customers to test compatibility with existing hardware
|
||||||
* May not work with some device drivers, which may not yet be ready for Windows 10 S and may cause some loss in functionality
|
* May not work with some device drivers, which may not yet be ready for Windows 10 S and may cause some loss in functionality
|
||||||
* May not be compatible with all peripherals that require custom drivers and, even if compatible, may cause aspects of the peripheral to not function
|
* May not be compatible with all peripherals that require custom drivers and, even if compatible, may cause aspects of the peripheral to not function
|
||||||
@ -161,6 +161,21 @@ If going back is not available:
|
|||||||
* Check if you can restore your PC to factory settings. This will reinstall the version of Windows that came with your PC and remove personal files, apps, and drivers you installed and any changes you made to **Settings**. Go to **Settings > Update & security > Recovery > Reset this PC > Get started** and look for **Restore factory settings**.
|
* Check if you can restore your PC to factory settings. This will reinstall the version of Windows that came with your PC and remove personal files, apps, and drivers you installed and any changes you made to **Settings**. Go to **Settings > Update & security > Recovery > Reset this PC > Get started** and look for **Restore factory settings**.
|
||||||
* If you have a product key for your previous version of Windows, use the media creation tool to create installation media of your previous Windows 10 edition and use it to do a clean install.
|
* If you have a product key for your previous version of Windows, use the media creation tool to create installation media of your previous Windows 10 edition and use it to do a clean install.
|
||||||
|
|
||||||
|
After going back to your previous edition of Windows 10, you may receive the following message when launching Win32 apps:
|
||||||
|
|
||||||
|
> For security and performance, this mode of Windows only runs verified apps from the Store.
|
||||||
|
|
||||||
|
If you see this message, follow these steps to stop receiving the message:
|
||||||
|
|
||||||
|
1. Restart your PC and enter UEFI/BIOS. Depending on your PC, you may need to press **Delete**, **F1**, or **F2** as soon as the PC begins to power on.
|
||||||
|
2. Once you've accessed the UEFI/BIOS, look for the menu item labeled **Security** or **Security Settings** and navigate to it.
|
||||||
|
3. Look for an option called **Secure boot configuration**, **Secure boot**, or **UEFI Boot** and disable this option.
|
||||||
|
4. Save your settings and then exit UEFI/BIOS. This will restart your PC.
|
||||||
|
5. After Windows is done booting up, confirm that you no longer see the message.
|
||||||
|
|
||||||
|
> [!NOTE]
|
||||||
|
> We recommend following these steps again to re-enable the **Secure boot configuration**, **Secure boot**, or **UEFI Boot** option, which you disabled in step 3.
|
||||||
|
|
||||||
### Use installation media to reinstall Windows 10
|
### Use installation media to reinstall Windows 10
|
||||||
|
|
||||||
> [!WARNING]
|
> [!WARNING]
|
||||||
@ -179,7 +194,7 @@ To use an installation media to reinstall Windows 10, follow these steps.
|
|||||||
If you're not seeing the setup screen, your PC might not be set up to boot from a drive. Check your PC manufacturer's website for information on how to change your PC's boot order, and then try again.
|
If you're not seeing the setup screen, your PC might not be set up to boot from a drive. Check your PC manufacturer's website for information on how to change your PC's boot order, and then try again.
|
||||||
|
|
||||||
8. Select **Install now**.
|
8. Select **Install now**.
|
||||||
9. On the **Enter the product key to active Windows** page, enter a product key if you have one. If you upgraded to Windows 10 for free, or bought and activated Windows 10 from the Windows Store, select **Skip** and Windows will automatically activate later. For more information, see [Activation in Windows 10](https://support.microsoft.com/en-us/help/12440/windows-10-activation).
|
9. On the **Enter the product key to active Windows** page, enter a product key if you have one. If you upgraded to Windows 10 for free, or bought and activated Windows 10 from the Microsoft Store, select **Skip** and Windows will automatically activate later. For more information, see [Activation in Windows 10](https://support.microsoft.com/en-us/help/12440/windows-10-activation).
|
||||||
10. On the **License terms** page, select **I accept the license terms** if you agree, and then select **Next**.
|
10. On the **License terms** page, select **I accept the license terms** if you agree, and then select **Next**.
|
||||||
11. On the **Which type of installation do you want?** page, select **Custom**.
|
11. On the **Which type of installation do you want?** page, select **Custom**.
|
||||||
12. On the **where do you want to install Windows?** page, select a partition, select a formatting option (if necessary), and then follow the instructions.
|
12. On the **where do you want to install Windows?** page, select a partition, select a formatting option (if necessary), and then follow the instructions.
|
||||||
|
@ -42,9 +42,7 @@ Set up School PCs makes it easy to set up Windows 10 PCs with Microsoft's recomm
|
|||||||
You can watch the video to see how to use the Set up School PCs app, or follow the step-by-step guide. </br>
|
You can watch the video to see how to use the Set up School PCs app, or follow the step-by-step guide. </br>
|
||||||
|
|
||||||
<center><iframe src="https://www.youtube.com/embed/2ZLup_-PhkA" width="960" height="540" allowFullScreen frameBorder="0"></iframe></center>
|
<center><iframe src="https://www.youtube.com/embed/2ZLup_-PhkA" width="960" height="540" allowFullScreen frameBorder="0"></iframe></center>
|
||||||
<!--
|
|
||||||
<div style="position:relative;height:0;padding-bottom:56.25%"><iframe src="https://www.youtube.com/embed/2ZLup_-PhkA?ecver=2" width="640" height="360" frameborder="0" style="position:absolute;width:100%;height:100%;left:0" allowfullscreen></iframe></div>
|
|
||||||
-->
|
|
||||||
You can watch the descriptive audio version here: [Microsoft Education: Use the Set up School PCs app (DA)](https://www.youtube.com/watch?v=qqe_T2LkGsI)
|
You can watch the descriptive audio version here: [Microsoft Education: Use the Set up School PCs app (DA)](https://www.youtube.com/watch?v=qqe_T2LkGsI)
|
||||||
|
|
||||||
## Tips for success
|
## Tips for success
|
||||||
@ -102,6 +100,9 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the
|
|||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
|
||||||
- [Download the latest Set up School PCs app from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4ls40).
|
- [Download the latest Set up School PCs app from the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4ls40).
|
||||||
|
|
||||||
|
The app supports these languages: Chinese (Simplified), Chinese (Traditional), Danish, Dutch, English (United Kingdom), English (United States), French, German, Italian, Japanese, Korean, Norwegian, Polish, Portuguese (Brazil), Russian, Spanish (Spain), Spanish (Mexico), Swedish, and Turkish.
|
||||||
|
|
||||||
- Install the app on your work PC and make sure you're connected to your school's network.
|
- Install the app on your work PC and make sure you're connected to your school's network.
|
||||||
- You must have Office 365 and Azure Active Directory.
|
- You must have Office 365 and Azure Active Directory.
|
||||||
- You must have the Microsoft Store for Education configured.
|
- You must have the Microsoft Store for Education configured.
|
||||||
|
88
education/windows/windows-automatic-redeployment.md
Normal file
88
education/windows/windows-automatic-redeployment.md
Normal file
@ -0,0 +1,88 @@
|
|||||||
|
---
|
||||||
|
title: Reset devices with Windows Automatic Redeployment
|
||||||
|
description: Gives an overview of Windows Automatic Redeployment and how you can enable and use it in your schools.
|
||||||
|
keywords: Windows Automatic Redeployment, Windows 10, education
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: deploy
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.pagetype: edu
|
||||||
|
ms.localizationpriority: high
|
||||||
|
author: CelesteDG
|
||||||
|
ms.author: celested
|
||||||
|
ms.date: 10/17/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
# Reset devices with Windows Automatic Redeployment
|
||||||
|
**Applies to:**
|
||||||
|
|
||||||
|
- Windows 10, version 1709
|
||||||
|
|
||||||
|
IT admins or technical teachers can use Windows Automatic Redeployment to quickly remove personal files, apps, and settings, and reset Windows 10 devices from the lock screen any time and apply original settings and management enrollment (Azure Active Directory and device management) so the devices are ready to use. With Windows Automatic Redeployment, devices are returned to a fully configured or known IT-approved state.
|
||||||
|
|
||||||
|
To enable Windows Automatic Redeployment in Windows 10, version 1709 (Fall Creators Update), you must:
|
||||||
|
|
||||||
|
1. [Enable the policy for the feature](#enable-windows-automatic-redeployment)
|
||||||
|
2. [Trigger a reset for each device](#trigger-windows-automatic-redeployment)
|
||||||
|
|
||||||
|
## Enable Windows Automatic Redeployment
|
||||||
|
**DisableAutomaticReDeploymentCredentials** is a policy that enables or disables the visibility of the credentials for Windows Automatic Redeployment. It is a policy node in the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders), **CredentialProviders/DisableAutomaticReDeploymentCredentials**. By default, this policy is set to 1 (True). This ensures that Windows Automatic Redeployment isn't triggered by accident.
|
||||||
|
|
||||||
|
You can set the policy using one of these methods:
|
||||||
|
|
||||||
|
- MDM provider
|
||||||
|
|
||||||
|
- Windows Automatic Redeployment in Intune for Education is coming soon. In a future update of Intune for Education, new tenants will automatically have the Windows Automatic Redeployment setting enabled by default on the **All devices** group as part of initial tenant configuration. You will also be able to manage this setting to target different groups in the admin console.
|
||||||
|
- If you're using an MDM provider other than Intune for Education, check your MDM provider documentation on how to set this policy. If your MDM provider doesn't explicitly support this policy, you can manually set this policy if your MDM provider allows specific OMA-URIs to be manually set.
|
||||||
|
|
||||||
|
For example, in Intune, create a new configuration policy and add an OMA-URI.
|
||||||
|
- OMA-URI: ./Vendor/MSFT/Policy/Config/CredentialProviders/DisableAutomaticReDeploymentCredentials
|
||||||
|
- Data type: Boolean
|
||||||
|
- Value: 1
|
||||||
|
|
||||||
|
- Windows Configuration Designer
|
||||||
|
|
||||||
|
You can [use Windows Configuration Designer](https://docs.microsoft.com/windows/configuration/provisioning-packages/provisioning-create-package) to set the **Runtime settings > Policies > CredentialProviders > DisableAutomaticReDeploymentCredentials** setting and create a provisioning package.
|
||||||
|
|
||||||
|
- Set up School PCs app
|
||||||
|
|
||||||
|
Windows Automatic Redeployment in the Set up School PCs app is coming soon. We'll update the documentation once the feature is available on the app. In the meantime, you'll want to make sure you are running Windows 10, version 1709 on the student PCs if you want to use Windows Automatic Redeployment through the Set up School PCs app. You can check the version several ways:
|
||||||
|
- Reach out to your device manufacturer.
|
||||||
|
- If you manage your PCs using Intune or Intune for Education, you can check the OS version by checking the **OS version** info for the device. If you are using another MDM provider, check the documentation for the MDM provider to confirm the OS version.
|
||||||
|
- Log into the PCs, go to the **Settings > System > About** page, look in the **Windows specifications** section and confirm **Version** is set to 1709.
|
||||||
|
|
||||||
|
## Trigger Windows Automatic Redeployment
|
||||||
|
Windows Automatic Redeployment is a two-step process: trigger it and then authenticate. Once you've done these two steps, you can let the process execute and once it's done, the device is again ready for use.
|
||||||
|
|
||||||
|
**To trigger Windows Automatic Redeployment**
|
||||||
|
|
||||||
|
1. From the Windows device lock screen, enter the keystroke: **CTRL +  + R**.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
This will open up a custom login screen for Windows Automatic Redeployment. The screen serves two purposes:
|
||||||
|
1. Confirm/verify that the end user has the right to trigger Windows Automatic Redeployment
|
||||||
|
2. Notify the user in case a provisioning package, created using Windows Configuration Designer or Set up School PCs, will be used as part of the process.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
2. Sign in with the admin account credentials. If you created a provisioning package, plug in the USB drive and trigger Windows Automatic Redeployment.
|
||||||
|
|
||||||
|
Once Windows Automatic Redeployment is triggered, the reset process starts.
|
||||||
|
|
||||||
|
After reset, the device:
|
||||||
|
- Sets the region, language, and keyboard
|
||||||
|
- Connects to Wi-files
|
||||||
|
- Applies the provisioning package, if you created one, and repplies this to the device. This includes re-installing any apps that are part of the provisioning package.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
Once provisioning is complete, the device is again ready for use.
|
||||||
|
|
||||||
|
## Related topics
|
||||||
|
|
||||||
|
[Set up Windows devices for education](set-up-windows-10.md)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -25,7 +25,7 @@ Windows 10, version 1607 introduces two editions designed for the unique needs o
|
|||||||
|
|
||||||
## Windows 10 Pro Education
|
## Windows 10 Pro Education
|
||||||
|
|
||||||
Windows 10 Pro Education builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools. Windows 10 Pro Education is effectively a variant of Windows 10 Pro that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Windows Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](https://go.microsoft.com/fwlink/?LinkId=822627).
|
Windows 10 Pro Education builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools. Windows 10 Pro Education is effectively a variant of Windows 10 Pro that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Microsoft Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](https://go.microsoft.com/fwlink/?LinkId=822627).
|
||||||
|
|
||||||
For Cortana<sup>[1](#footnote1)</sup>,
|
For Cortana<sup>[1](#footnote1)</sup>,
|
||||||
- If you're using version 1607, Cortana is removed.
|
- If you're using version 1607, Cortana is removed.
|
||||||
@ -44,7 +44,7 @@ Customers who deploy Windows 10 Pro are able to configure the product to have si
|
|||||||
|
|
||||||
## Windows 10 Education
|
## Windows 10 Education
|
||||||
|
|
||||||
Windows 10 Education builds on Windows 10 Enterprise and provides the enterprise-grade manageability and security desired by many schools. Windows 10 Education is effectively a variant of Windows 10 Enterprise that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Windows Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](https://go.microsoft.com/fwlink/?LinkId=822627).
|
Windows 10 Education builds on Windows 10 Enterprise and provides the enterprise-grade manageability and security desired by many schools. Windows 10 Education is effectively a variant of Windows 10 Enterprise that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Microsoft Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](https://go.microsoft.com/fwlink/?LinkId=822627).
|
||||||
|
|
||||||
For Cortana<sup>1</sup>,
|
For Cortana<sup>1</sup>,
|
||||||
- If you're using version 1607, Cortana<sup>1</sup> is removed.
|
- If you're using version 1607, Cortana<sup>1</sup> is removed.
|
||||||
|
@ -18,14 +18,14 @@ author: CelesteDG
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Office 365 Business Premium, Azure AD Premium, Intune, Windows Store for Business, Windows 10
|
- Office 365 Business Premium, Azure AD Premium, Intune, Microsoft Store for Business, Windows 10
|
||||||
|
|
||||||
Are you ready to move your business to the cloud or wondering what it takes to make this happen with Microsoft cloud services and tools?
|
Are you ready to move your business to the cloud or wondering what it takes to make this happen with Microsoft cloud services and tools?
|
||||||
|
|
||||||
In this walkthrough, we'll show you how to deploy and manage a full cloud IT solution for your small to medium business using Office 365 Business Premium, Microsoft Azure AD, Intune, Windows Store for Business, and Windows 10. We'll show you the basics on how to:
|
In this walkthrough, we'll show you how to deploy and manage a full cloud IT solution for your small to medium business using Office 365 Business Premium, Microsoft Azure AD, Intune, Microsoft Store for Business, and Windows 10. We'll show you the basics on how to:
|
||||||
- Acquire an Office 365 business domain
|
- Acquire an Office 365 business domain
|
||||||
- Add Microsoft Intune and Azure Active Directory (AD) Premium licenses to your business tenant
|
- Add Microsoft Intune and Azure Active Directory (AD) Premium licenses to your business tenant
|
||||||
- Set up Windows Store for Business and manage app deployment and sync with Intune
|
- Set up Microsoft Store for Business and manage app deployment and sync with Intune
|
||||||
- Add users and groups in Azure AD and Intune
|
- Add users and groups in Azure AD and Intune
|
||||||
- Create policies and app deployment rules
|
- Create policies and app deployment rules
|
||||||
- Log in as a user and start using your Windows device
|
- Log in as a user and start using your Windows device
|
||||||
@ -165,7 +165,7 @@ Microsoft Intune provides mobile device management, app management, and PC manag
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
Intune should now be added to your tenant. We'll come back to Intune later when we [Configure Windows Store for Business for app distribution](#17-configure-windows-store-for-business-for-app-distribution).
|
Intune should now be added to your tenant. We'll come back to Intune later when we [Configure Microsoft Store for Business for app distribution](#17-configure-windows-store-for-business-for-app-distribution).
|
||||||
|
|
||||||
### 1.4 Add Azure AD to your domain
|
### 1.4 Add Azure AD to your domain
|
||||||
Microsoft Azure is an open and flexible cloud platform that enables you to quickly build, deploy, and manage apps across a global network of Microsoft-managed datacenters. In this walkthrough, we won't be using the full power of Azure and we'll primarily use it to create groups that we then use for provisioning through Intune.
|
Microsoft Azure is an open and flexible cloud platform that enables you to quickly build, deploy, and manage apps across a global network of Microsoft-managed datacenters. In this walkthrough, we won't be using the full power of Azure and we'll primarily use it to create groups that we then use for provisioning through Intune.
|
||||||
@ -287,10 +287,10 @@ You can read <a href="https://blogs.technet.microsoft.com/enterprisemobility/201
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
### 1.7 Configure Windows Store for Business for app distribution
|
### 1.7 Configure Microsoft Store for Business for app distribution
|
||||||
Next, you'll need to configure Windows Store for Business to distribute apps with a management tool such as Intune.
|
Next, you'll need to configure Microsoft Store for Business to distribute apps with a management tool such as Intune.
|
||||||
|
|
||||||
In this part of the walkthrough, we'll be working on the <a href="https://manage.microsoft.com/" target="_blank">Microsoft Intune management portal</a> and <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Windows Store for Business</a>.
|
In this part of the walkthrough, we'll be working on the <a href="https://manage.microsoft.com/" target="_blank">Microsoft Intune management portal</a> and <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Microsoft Store for Business</a>.
|
||||||
|
|
||||||
**To associate your Store account with Intune and configure synchronization**
|
**To associate your Store account with Intune and configure synchronization**
|
||||||
|
|
||||||
@ -301,33 +301,33 @@ In this part of the walkthrough, we'll be working on the <a href="https://manage
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
3. Sign into <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Windows Store for Business</a> using the same tenant account that you used to sign into Intune.
|
3. Sign into <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Microsoft Store for Business</a> using the same tenant account that you used to sign into Intune.
|
||||||
4. Accept the EULA.
|
4. Accept the EULA.
|
||||||
5. In the Store portal, select **Settings > Management tools** to go to the management tools page.
|
5. In the Store portal, select **Settings > Management tools** to go to the management tools page.
|
||||||
6. In the **Management tools** page, find **Microsoft Intune** on the list and click **Activate** to get Intune ready to use with Windows Store for Business.
|
6. In the **Management tools** page, find **Microsoft Intune** on the list and click **Activate** to get Intune ready to use with Microsoft Store for Business.
|
||||||
|
|
||||||
**Figure 25** - Activate Intune as the Store management tool
|
**Figure 25** - Activate Intune as the Store management tool
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
7. Go back to the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Admin > Mobile Device Management**, expand **Windows**, and then choose **Store for Business**.
|
7. Go back to the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Admin > Mobile Device Management**, expand **Windows**, and then choose **Store for Business**.
|
||||||
8. In the **Windows Store for Business** page, select **Configure Sync** to sync your Store for Business volume-purchased apps with Intune.
|
8. In the **Microsoft Store for Business** page, select **Configure Sync** to sync your Store for Business volume-purchased apps with Intune.
|
||||||
|
|
||||||
**Figure 26** - Configure Store for Business sync in Intune
|
**Figure 26** - Configure Store for Business sync in Intune
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
9. In the **Configure Windows Store for Business app sync** dialog box, check **Enable Windows Store for Business sync**. In the **Language** dropdown list, choose the language in which you want apps from the Store to be displayed in the Intune console and then click **OK**.
|
9. In the **Configure Microsoft Store for Business app sync** dialog box, check **Enable Microsoft Store for Business sync**. In the **Language** dropdown list, choose the language in which you want apps from the Store to be displayed in the Intune console and then click **OK**.
|
||||||
|
|
||||||
**Figure 27** - Enable Windows Store for Business sync in Intune
|
**Figure 27** - Enable Microsoft Store for Business sync in Intune
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
The **Windows Store for Business** page will refresh and it will show the details from the sync.
|
The **Microsoft Store for Business** page will refresh and it will show the details from the sync.
|
||||||
|
|
||||||
**To buy apps from the Store**
|
**To buy apps from the Store**
|
||||||
|
|
||||||
In your <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Windows Store for Business</a> portal, you can see the list of apps that you own by going to **Manage > Inventory**. You should see the following apps in your inventory:
|
In your <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Microsoft Store for Business</a> portal, you can see the list of apps that you own by going to **Manage > Inventory**. You should see the following apps in your inventory:
|
||||||
- Sway
|
- Sway
|
||||||
- OneNote
|
- OneNote
|
||||||
- PowerPoint Mobile
|
- PowerPoint Mobile
|
||||||
@ -336,11 +336,11 @@ In your <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_
|
|||||||
|
|
||||||
In the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Apps > Apps > Volume-Purchased Apps** and verify that you can see the same list of apps appear on Intune.
|
In the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Apps > Apps > Volume-Purchased Apps** and verify that you can see the same list of apps appear on Intune.
|
||||||
|
|
||||||
In the following example, we'll show you how to buy apps through the Windows Store for Business and then make sure the apps appear on Intune.
|
In the following example, we'll show you how to buy apps through the Microsoft Store for Business and then make sure the apps appear on Intune.
|
||||||
|
|
||||||
**Example 1 - Add other apps like Reader and InstaNote**
|
**Example 1 - Add other apps like Reader and InstaNote**
|
||||||
|
|
||||||
1. In the <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Windows Store for Business</a> portal, click **Shop**, scroll down to the **Made by Microsoft** category, and click **Show all** to see all the Microsoft apps in the list.
|
1. In the <a href="https://businessstore.microsoft.com/en-us/Store/Apps" target="_blank">Microsoft Store for Business</a> portal, click **Shop**, scroll down to the **Made by Microsoft** category, and click **Show all** to see all the Microsoft apps in the list.
|
||||||
|
|
||||||
**Figure 28** - Shop for Store apps
|
**Figure 28** - Shop for Store apps
|
||||||
|
|
||||||
@ -364,7 +364,7 @@ In the following example, we'll show you how to buy apps through the Windows Sto
|
|||||||
If you need to sync your most recently purchased apps and have it appear in your catalog, you can do this by forcing a sync.
|
If you need to sync your most recently purchased apps and have it appear in your catalog, you can do this by forcing a sync.
|
||||||
|
|
||||||
1. In the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Admin > Mobile Device Management > Windows > Store for Business**.
|
1. In the <a href="https://manage.microsoft.com/" target="_blank">Intune management portal</a>, select **Admin > Mobile Device Management > Windows > Store for Business**.
|
||||||
2. In the **Windows Store for Business** page, click **Sync now** to force a sync.
|
2. In the **Microsoft Store for Business** page, click **Sync now** to force a sync.
|
||||||
|
|
||||||
**Figure 30** - Force a sync in Intune
|
**Figure 30** - Force a sync in Intune
|
||||||
|
|
||||||
@ -569,7 +569,7 @@ To learn more about the services and tools mentioned in this walkthrough, and le
|
|||||||
- Common admin tasks in Office 365 including email and OneDrive in <a href="https://support.office.com/en-us/article/Common-management-tasks-for-Office-365-46c667f7-5073-47b9-a75f-05a60cf77d91" target="_blank">Manage Office 365</a>
|
- Common admin tasks in Office 365 including email and OneDrive in <a href="https://support.office.com/en-us/article/Common-management-tasks-for-Office-365-46c667f7-5073-47b9-a75f-05a60cf77d91" target="_blank">Manage Office 365</a>
|
||||||
- More info about managing devices, apps, data, troubleshooting, and more in <a href="https://docs.microsoft.com/en-us/intune/" target="_blank">Intune documentation</a>
|
- More info about managing devices, apps, data, troubleshooting, and more in <a href="https://docs.microsoft.com/en-us/intune/" target="_blank">Intune documentation</a>
|
||||||
- Learn more about Windows 10 in <a href="http://technet.microsoft.com/windows/windows10.aspx" target="_blank">Windows 10 guide for IT pros</a>
|
- Learn more about Windows 10 in <a href="http://technet.microsoft.com/windows/windows10.aspx" target="_blank">Windows 10 guide for IT pros</a>
|
||||||
- Info about distributing apps to your employees, managing apps, managing settings, and more in <a href="https://technet.microsoft.com/en-us/itpro/windows/manage/windows-store-for-business" target="_blank">Windows Store for Business</a>
|
- Info about distributing apps to your employees, managing apps, managing settings, and more in <a href="https://technet.microsoft.com/en-us/itpro/windows/manage/windows-store-for-business" target="_blank">Microsoft Store for Business</a>
|
||||||
|
|
||||||
### For information workers
|
### For information workers
|
||||||
Whether it's in the classroom, getting the most out of your devices, or learning some of the cool things you can do, we've got teachers covered. Follow these links for more info:
|
Whether it's in the classroom, getting the most out of your devices, or learning some of the cool things you can do, we've got teachers covered. Follow these links for more info:
|
||||||
|
@ -1,35 +1,35 @@
|
|||||||
# [Microsoft Store for Business](index.md)
|
# [Microsoft Store for Business](index.md)
|
||||||
## [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md)
|
## [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md)
|
||||||
## [Sign up and get started](sign-up-windows-store-for-business-overview.md)
|
## [Sign up and get started](sign-up-microsoft-store-for-business-overview.md)
|
||||||
###[Microsoft Store for Business and Microsoft Store for Education overview](windows-store-for-business-overview.md)
|
###[Microsoft Store for Business and Microsoft Store for Education overview](microsoft-store-for-business-overview.md)
|
||||||
### [Prerequisites for Microsoft Store for Business and Education](prerequisites-windows-store-for-business.md)
|
### [Prerequisites for Microsoft Store for Business and Education](prerequisites-microsoft-store-for-business.md)
|
||||||
### [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-windows-store-for-business.md)
|
### [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-microsoft-store-for-business.md)
|
||||||
### [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md)
|
### [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-microsoft-store-for-business.md)
|
||||||
### [Settings reference: Microsoft Store for Business and Education](settings-reference-windows-store-for-business.md)
|
### [Settings reference: Microsoft Store for Business and Education](settings-reference-microsoft-store-for-business.md)
|
||||||
## [Find and acquire apps](find-and-acquire-apps-overview.md)
|
## [Find and acquire apps](find-and-acquire-apps-overview.md)
|
||||||
### [Apps in the Microsoft Store for Business and Education](apps-in-windows-store-for-business.md)
|
### [Apps in the Microsoft Store for Business and Education](apps-in-microsoft-store-for-business.md)
|
||||||
### [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-windows-store-for-business.md)
|
### [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-microsoft-store-for-business.md)
|
||||||
### [Working with line-of-business apps](working-with-line-of-business-apps.md)
|
### [Working with line-of-business apps](working-with-line-of-business-apps.md)
|
||||||
## [Distribute apps to your employees from the Microsoft Store for Business and Education](distribute-apps-to-your-employees-windows-store-for-business.md)
|
## [Distribute apps to your employees from the Microsoft Store for Business and Education](distribute-apps-to-your-employees-microsoft-store-for-business.md)
|
||||||
### [Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
### [Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
||||||
### [Assign apps to employees](assign-apps-to-employees.md)
|
### [Assign apps to employees](assign-apps-to-employees.md)
|
||||||
### [Distribute apps with a management tool](distribute-apps-with-management-tool.md)
|
### [Distribute apps with a management tool](distribute-apps-with-management-tool.md)
|
||||||
### [Distribute offline apps](distribute-offline-apps.md)
|
### [Distribute offline apps](distribute-offline-apps.md)
|
||||||
## [Manage apps and devices](manage-apps-windows-store-for-business-overview.md)
|
## [Manage apps and devices](manage-apps-microsoft-store-for-business-overview.md)
|
||||||
### [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-windows-store-for-business.md)
|
### [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-microsoft-store-for-business.md)
|
||||||
### [Manage app orders in Microsoft Store for Business and Education](manage-orders-windows-store-for-business.md)
|
### [Manage app orders in Microsoft Store for Business and Education](manage-orders-microsoft-store-for-business.md)
|
||||||
### [Manage access to private store](manage-access-to-private-store.md)
|
### [Manage access to private store](manage-access-to-private-store.md)
|
||||||
### [Manage private store settings](manage-private-store-settings.md)
|
### [Manage private store settings](manage-private-store-settings.md)
|
||||||
### [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md)
|
### [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md)
|
||||||
### [Manage Windows device deployment with Windows AutoPilot Deployment](add-profile-to-devices.md)
|
### [Manage Windows device deployment with Windows AutoPilot Deployment](add-profile-to-devices.md)
|
||||||
### [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md)
|
### [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md)
|
||||||
## [Device Guard signing portal](device-guard-signing-portal.md)
|
## [Device Guard signing portal](device-guard-signing-portal.md)
|
||||||
### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md)
|
### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md)
|
||||||
### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md)
|
### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md)
|
||||||
## [Manage settings in the Microsoft Store for Business and Education](manage-settings-windows-store-for-business.md)
|
## [Manage settings in the Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md)
|
||||||
### [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-windows-store-for-business-account-settings.md)
|
### [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-microsoft-store-for-business-account-settings.md)
|
||||||
### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md)
|
### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-microsoft-store-for-business.md)
|
||||||
## [Troubleshoot Microsoft Store for Business](troubleshoot-windows-store-for-business.md)
|
## [Troubleshoot Microsoft Store for Business](troubleshoot-microsoft-store-for-business.md)
|
||||||
## [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md)
|
## [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md)
|
||||||
## [Change history for Microsoft Store for Business and Education](sfb-change-history.md)
|
## [Change history for Microsoft Store for Business and Education](sfb-change-history.md)
|
||||||
|
|
||||||
|
@ -47,14 +47,14 @@ There are a couple of ways to find specific apps, or groups of apps in your inve
|
|||||||
|
|
||||||
**Search** - Use the Search box to search for an app.<br>
|
**Search** - Use the Search box to search for an app.<br>
|
||||||
**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
|
**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
|
||||||
- **License type** - Online or offline licenses. For more info, see [Apps in Microsoft Store for Business](apps-in-windows-store-for-business.md#licensing-model).
|
- **License type** - Online or offline licenses. For more info, see [Apps in Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
|
||||||
- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
|
- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
|
||||||
- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
|
- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
|
||||||
- **Product type** - Product categories, such as app, or game.
|
- **Product type** - Product categories, such as app, or game.
|
||||||
- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
|
- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
|
||||||
|
|
||||||
## Manage apps in your inventory
|
## Manage apps in your inventory
|
||||||
Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Microsoft Store for Business](apps-in-windows-store-for-business.md#licensing-model). There are different actions you can take depending on the app license type. They're summarized in this table.
|
Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model). There are different actions you can take depending on the app license type. They're summarized in this table.
|
||||||
|
|
||||||
| Action | Online-licensed app | Offline-licensed app |
|
| Action | Online-licensed app | Offline-licensed app |
|
||||||
| ------ | ------------------- | -------------------- |
|
| ------ | ------------------- | -------------------- |
|
||||||
@ -79,7 +79,7 @@ Once an app is in your private store, people in your org can install the app on
|
|||||||
|
|
||||||
**To make an app in Apps & software available in your private store**
|
**To make an app in Apps & software available in your private store**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, and then choose **Apps & software**.
|
2. Click **Manage**, and then choose **Apps & software**.
|
||||||
3. Use **Refine results** to search for online-licensed apps under **License type**.
|
3. Use **Refine results** to search for online-licensed apps under **License type**.
|
||||||
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
|
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
|
||||||
@ -89,7 +89,7 @@ Employees can claim apps that admins added to the private store by doing the fol
|
|||||||
|
|
||||||
**To claim an app from the private store**
|
**To claim an app from the private store**
|
||||||
|
|
||||||
1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app.
|
1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Microsoft Store app.
|
||||||
2. Click the private store tab.
|
2. Click the private store tab.
|
||||||
3. Click the app you want to install, and then click **Install**.
|
3. Click the app you want to install, and then click **Install**.
|
||||||
|
|
||||||
@ -112,7 +112,7 @@ The app will still be in your inventory, but your employees will not have access
|
|||||||
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
|
||||||
4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
|
4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
|
||||||
|
|
||||||
Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**.
|
Employees will receive an email with a link that will install the app on their device. Click the link to start the Microsoft Store app, and then click **Install**. Also, in the Microsoft Store app, they can find the app under **My Library**.
|
||||||
|
|
||||||
## Manage app licenses
|
## Manage app licenses
|
||||||
|
|
||||||
@ -165,7 +165,7 @@ You can download offline-licensed apps from your inventory. You'll need to downl
|
|||||||
- App license
|
- App license
|
||||||
- App framework
|
- App framework
|
||||||
|
|
||||||
For more information about online and offline licenses, see [Apps in the Microsoft Store for Business](apps-in-windows-store-for-business.md#licensing-model).
|
For more information about online and offline licenses, see [Apps in the Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
|
||||||
|
|
||||||
For more information about downloading offline-licensed apps, see [Download offline apps](distribute-offline-apps.md).
|
For more information about downloading offline-licensed apps, see [Download offline apps](distribute-offline-apps.md).
|
||||||
|
|
@ -40,7 +40,7 @@ Apps that you acquire from Microsoft Store only work on Windows 10-based device
|
|||||||
|
|
||||||
Some apps are free, and some apps charge a price. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time.
|
Some apps are free, and some apps charge a price. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time.
|
||||||
|
|
||||||
Some apps which are available to consumers in the Windows Store might not be available to organizations in Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing).
|
Some apps which are available to consumers in Microsoft Store might not be available to organizations in Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing).
|
||||||
|
|
||||||
Line-of-business (LOB) apps are also supported using Microsoft Store. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to Microsoft Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
Line-of-business (LOB) apps are also supported using Microsoft Store. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to Microsoft Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
||||||
|
|
||||||
@ -55,7 +55,7 @@ If an employee makes an in-app purchase, they'll make it with their personal Mic
|
|||||||
Microsoft Store supports two options to license apps: online and offline.
|
Microsoft Store supports two options to license apps: online and offline.
|
||||||
|
|
||||||
### Online licensing
|
### Online licensing
|
||||||
Online licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require customers and devices to connect to Microsoft Store service to acquire an app and its license. License management is enforced based on the user’s Azure AD identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update.
|
Online licensing is the default licensing model and is similar to the model used by Microsoft Store. Online licensed apps require customers and devices to connect to Microsoft Store service to acquire an app and its license. License management is enforced based on the user’s Azure AD identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update.
|
||||||
|
|
||||||
Distribution options for online-licensed apps include the ability to:
|
Distribution options for online-licensed apps include the ability to:
|
||||||
|
|
@ -29,7 +29,7 @@ Admins, Purchasers, and Basic Purchasers can assign online-licensed apps to empl
|
|||||||
Click the app, and then click **Assign User**.
|
Click the app, and then click **Assign User**.
|
||||||
4. Type the email address for the person you're assigning the app to, and click **Assign**.
|
4. Type the email address for the person you're assigning the app to, and click **Assign**.
|
||||||
|
|
||||||
Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**.
|
Employees will receive an email with a link that will install the app on their device. Click the link to start Microsoft Store app, and then click **Install**. Also, in Microsoft Store app, they can find the app under **My Library**.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -18,7 +18,7 @@ ms.localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.
|
The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Micrsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.
|
||||||
|
|
||||||
You can make an app available in your private store when you acquire the app, or you can do it later from your inventory. Once the app is in your private store, employees can claim and install the app.
|
You can make an app available in your private store when you acquire the app, or you can do it later from your inventory. Once the app is in your private store, employees can claim and install the app.
|
||||||
|
|
||||||
@ -50,13 +50,13 @@ Employees can claim apps that admins added to the private store by doing the fol
|
|||||||
|
|
||||||
**To claim an app from the private store**
|
**To claim an app from the private store**
|
||||||
|
|
||||||
1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app.
|
1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start Microsoft Store app.
|
||||||
2. Click the **private store** tab.
|
2. Click the **private store** tab.
|
||||||
3. Click the app you want to install, and then click **Install**.
|
3. Click the app you want to install, and then click **Install**.
|
||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
- [Manage access to private store](manage-access-to-private-store.md)
|
- [Manage access to private store](manage-access-to-private-store.md)
|
||||||
- [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
- [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -22,29 +22,24 @@ You can configure a mobile device management (MDM) tool to synchronize your Micr
|
|||||||
|
|
||||||
Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Microsoft Store.
|
Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Microsoft Store.
|
||||||
|
|
||||||
In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) and [Manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune).
|
In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md) and [Manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune).
|
||||||
|
|
||||||
Microsoft Store services provide:
|
Microsoft Store services provide:
|
||||||
|
|
||||||
- Services for third-party MDM tools.
|
- Services for third-party MDM tools.
|
||||||
|
|
||||||
- Synchronize app purchases and updates.
|
- Synchronize app purchases and updates.
|
||||||
|
|
||||||
- Synchronize metadata. For offline-licensed apps, also synchronize offline app package and offline licenses.
|
- Synchronize metadata. For offline-licensed apps, also synchronize offline app package and offline licenses.
|
||||||
|
|
||||||
- The ability to download offline-licensed apps from Store for Business.
|
- The ability to download offline-licensed apps from Store for Business.
|
||||||
|
|
||||||
MDM tool requirements:
|
MDM tool requirements:
|
||||||
|
|
||||||
- Must be an Azure Active Directory (AD) application to authenticate against the Store for Business services.
|
- Must be an Azure Active Directory (AD) application to authenticate against the Store for Business services.
|
||||||
|
|
||||||
- Must be configured in Azure AD, and Microsoft Store.
|
- Must be configured in Azure AD, and Microsoft Store.
|
||||||
|
|
||||||
- Azure AD identity is required to authorize Microsoft Store services.
|
- Azure AD identity is required to authorize Microsoft Store services.
|
||||||
|
|
||||||
## Distribute offline-licensed apps
|
## Distribute offline-licensed apps
|
||||||
|
|
||||||
If your vendor doesn’t support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Microsoft Store for Business.](apps-in-windows-store-for-business.md#licensing-model)
|
If your vendor doesn’t support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/apps-in-windows-store-for-business#a-href-idlicensing-modelalicensing-model-online-and-offline-licenses).
|
||||||
|
|
||||||
This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices.
|
This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices.
|
||||||
|
|
||||||
@ -58,5 +53,5 @@ This diagram shows how you can use a management tool to distribute an online-lic
|
|||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
|
||||||
[Configure MDM Provider](configure-mdm-provider-windows-store-for-business.md)
|
[Configure MDM Provider](configure-mdm-provider-microsoft-store-for-business.md)
|
||||||
[Manage apps you purchased from the Microsoft Store for Business and Education with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx)
|
[Manage apps you purchased from the Microsoft Store for Business and Education with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx)
|
@ -24,7 +24,7 @@ Offline licensing is a new licensing option for Windows 10 with Microsoft Store
|
|||||||
|
|
||||||
Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps:
|
Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps:
|
||||||
|
|
||||||
- **You don't have access to Windows Store services** - If your employees don't have access to the internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps.
|
- **You don't have access to Microsoft Store services** - If your employees don't have access to the internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps.
|
||||||
|
|
||||||
- **You use imaging to manage devices in your organization** - Offline-licensed apps can be added to images and deployed with Deployment Image Servicing and Management (DISM), or Windows Imaging and Configuration Designer (ICD).
|
- **You use imaging to manage devices in your organization** - Offline-licensed apps can be added to images and deployed with Deployment Image Servicing and Management (DISM), or Windows Imaging and Configuration Designer (ICD).
|
||||||
|
|
||||||
|
@ -19,13 +19,13 @@ author: TrudyHa
|
|||||||
|
|
||||||
You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
|
You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
|
||||||
|
|
||||||
You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in Windows Store. Using the private store with the Microsoft Store for Business and Education, admins can curate the set of apps that are available.
|
You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in Microsoft Store. Using the private store with the Microsoft Store for Business and Education, admins can curate the set of apps that are available.
|
||||||
|
|
||||||
The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this:
|
The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Microsoft Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this:
|
||||||
|
|
||||||
<!---  -->
|

|
||||||
|
|
||||||
Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store.
|
Organizations can use either an MDM policy, or Group Policy to show only their private store in Microsoft Store.
|
||||||
|
|
||||||
## Show private store only using MDM policy
|
## Show private store only using MDM policy
|
||||||
|
|
||||||
@ -41,36 +41,27 @@ For more information on configuring an MDM provider, see [Configure an MDM provi
|
|||||||
|
|
||||||
## Show private store only using Group Policy
|
## Show private store only using Group Policy
|
||||||
|
|
||||||
If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
|
If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Microsoft Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store.
|
||||||
|
|
||||||
**Only display the private store within Windows Store app** group policy is supported on the following Windows 10 editions:
|
**Only display the private store within Microsoft Store app** group policy is supported on the following Windows 10 editions:
|
||||||
- Enterprise
|
- Enterprise
|
||||||
- Education
|
- Education
|
||||||
|
|
||||||
**To show private store only in Windows Store app**
|
**To show private store only in Microsoft Store app**
|
||||||
|
|
||||||
1. Type **gpedit** in the search bar, and then select **Edit group policy (Control panel)** to find and start Group Policy Editor.
|
1. Type **gpedit** in the search bar, and then select **Edit group policy (Control panel)** to find and start Group Policy Editor.
|
||||||
|
|
||||||
2. In the console tree of the snap-in, go to **User Configuration** or **Computer Configuration** > **Administrative Templates** > **Windows Components**, and then click **Store**.
|
2. In the console tree of the snap-in, go to **User Configuration** or **Computer Configuration** > **Administrative Templates** > **Windows Components**, and then click **Store**.
|
||||||
|
|
||||||
3. Right-click **Only display the private store within Windows Store app** in the right pane, and click **Edit**.
|
3. Right-click **Only display the private store within Microsoft Store app** in the right pane, and click **Edit**.
|
||||||
|
|
||||||
This opens the **Only display the private store within the Windows Store app** policy settings.
|
This opens the **Only display the private store within the Microsoft Store app** policy settings.
|
||||||
|
|
||||||
4. On the **Only display the private store within the Windows Store app** setting page, click **Enabled**, and then click **OK**.
|
4. On the **Only display the private store within the Microsoft Store app** setting page, click **Enabled**, and then click **OK**.
|
||||||
|
|
||||||
You can also prevent employees from using Windows Store. For more information, see [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store).
|
You can also prevent employees from using Microsoft Store. For more information, see [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store).
|
||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
|
||||||
[Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
[Distribute apps using your private store](distribute-apps-from-your-private-store.md)
|
||||||
[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
[Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -19,9 +19,9 @@ ms.localizationpriority: high
|
|||||||
|
|
||||||
The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
|
The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
|
||||||
|
|
||||||
The name of your private store is shown on a tab in Windows Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com).
|
The name of your private store is shown on a tab in Microsoft Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com).
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
You can change the name of your private store in Microsoft Store.
|
You can change the name of your private store in Microsoft Store.
|
||||||
|
|
||||||
|
@ -17,47 +17,45 @@ ms.localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
Designed for organizations, Microsoft Store for Business and Microsoft Store for Education gives IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Windows Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Windows Store, or connect with management solutions for more options.
|
Designed for organizations, Microsoft Store for Business and Microsoft Store for Education give IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Microsoft Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Microsoft Store, or connect with management solutions for more options.
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
Organizations of any size can benefit from using the Microsoft Store:
|
Organizations or schools of any size can benefit from using Microsoft Store for Business or Microsoft Store for Education:
|
||||||
|
|
||||||
- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate the Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts.
|
- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate Microsoft Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts.
|
||||||
- **Bulk app acquisition** - Acquire apps in volume from the Store for Business.
|
- **Bulk app acquisition** - Acquire apps in volume from Microsoft Store for Business.
|
||||||
- **Centralized management** – Microsoft Store provides centralized management for inventory, billing, permissions, and order history. You can use Microsoft Store to view, manage and distribute items purchased from:
|
- **Centralized management** – Microsoft Store provides centralized management for inventory, billing, permissions, and order history. You can use Microsoft Store to view, manage and distribute items purchased from:
|
||||||
- **Microsoft Store for Business** – Apps and subscriptions
|
- **Microsoft Store for Business** – Apps and subscriptions
|
||||||
- **Microsoft Store for Education** – Apps and subscriptions
|
- **Microsoft Store for Education** – Apps and subscriptions
|
||||||
- **Office 365** – Subscriptions
|
- **Office 365** – Subscriptions
|
||||||
- **Volume licensing** - Apps purchased with volume licensing
|
- **Volume licensing** - Apps purchased with volume licensing
|
||||||
- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. Your private store is available from Windows Store app, or with a browser on the Web. People in your organization can download apps from the private store on Windows 10 devices.
|
- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. Your private store is available from Microsoft Store on Windows 10, or with a browser on the Web. People in your organization can download apps from your organization's private store on Windows 10 devices.
|
||||||
- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices:
|
- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices:
|
||||||
- Distribute through Store for Business services. You can assign apps to individual employees, or make apps available to all employees in your private store.
|
- Distribute through Microsoft Store services. You can assign apps to individual employees, or make apps available to all employees in your private store.
|
||||||
- Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images.
|
- Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images.
|
||||||
- Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images.
|
- Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images.
|
||||||
- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options.
|
- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options.
|
||||||
- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps.
|
- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps.
|
||||||
- **Up-to-date apps** - Microsoft Store manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees.
|
- **Up-to-date apps** - Microsoft Store manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees.
|
||||||
- **Office app launcher** Office apps while working with Store for Business.
|
- **Office app launcher** Office apps while working with Microsoft Store for Business.
|
||||||
- **Find a partner** – Microsoft Store allows businesses to search and find a Microsoft Partner who can assist you with Microsoft solutions for your business.
|
- **Find a partner** – Search and find a Microsoft Partner who can assist you with Microsoft solutions for your business.
|
||||||
|
|
||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
|
||||||
You'll need this software to work with the Store for Business.
|
You'll need this software to work with Store for Business and Education.
|
||||||
|
|
||||||
### Required
|
### Required
|
||||||
|
|
||||||
- Admins working with Microsoft Store for Business and Education need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled.
|
- Admins working with Store for Business and Education need a browser compatible with Microsoft Store running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled.
|
||||||
|
- Employees using apps from Store for Business and Education need at least Windows 10, version 1511 running on a PC or mobile device.
|
||||||
- Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device.
|
|
||||||
|
|
||||||
Microsoft Azure Active Directory (AD) accounts for your employees:
|
Microsoft Azure Active Directory (AD) accounts for your employees:
|
||||||
|
|
||||||
- Admins need Azure AD accounts to sign up for the Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses.
|
- Admins need Azure AD accounts to sign up for Store for Business and Education, and then to sign in, get apps, distribute apps, and manage app licenses. You can sign up for Azure AD accounts as part of signing up for Store for Business and Education.
|
||||||
- Employees need Azure AD account when they access Store for Business content from Windows devices.
|
- Employees need Azure AD account when they access Store for Business content from Windows devices.
|
||||||
- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account
|
- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account
|
||||||
- For offline-licensed apps, Azure AD accounts are not required for employees.
|
- For offline-licensed apps, Azure AD accounts are not required for employees.
|
||||||
- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Microsoft Store for Business and Education.
|
- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Store for Business and Education.
|
||||||
|
|
||||||
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
|
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
|
||||||
|
|
||||||
@ -66,20 +64,19 @@ For more information on Azure AD, see [About Office 365 and Azure Active Directo
|
|||||||
While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools:
|
While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools:
|
||||||
|
|
||||||
- Need to integrate with Windows 10 management framework and Azure AD.
|
- Need to integrate with Windows 10 management framework and Azure AD.
|
||||||
|
|
||||||
- Need to sync with the Store for Business inventory to distribute apps.
|
- Need to sync with the Store for Business inventory to distribute apps.
|
||||||
|
|
||||||
## How does the Store for Business work?
|
## How does the Store for Business and Education work?
|
||||||
|
|
||||||
## Sign up!
|
## Sign up!
|
||||||
|
|
||||||
The first step for getting your organization started with the Store for Business is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we’ll quickly create an account for you. You must be a Global Administrator for your organization.
|
The first step for getting your organization started with Store for Business and Education is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we’ll quickly create an account for you. You must be a Global Administrator for your organization.
|
||||||
|
|
||||||
For more information, see [Sign up for the Store for Business](sign-up-windows-store-for-business.md).
|
For more information, see [Sign up for Store for Business and Education](sign-up-microsoft-store-for-business.md).
|
||||||
|
|
||||||
## Set up
|
## Set up
|
||||||
|
|
||||||
After your admin signs up for the Store for Business, they can assign roles to other employees in your company. The admin needs Azure AD User Admin permissions to assign Microsoft Store for Business and Education roles. These are the roles and their permissions.
|
After your admin signs up for the Store for Business and Education, they can assign roles to other employees in your company or school. The admin needs Azure AD User Admin permissions to assign Microsoft Store for Business and Education roles. These are the roles and their permissions.
|
||||||
|
|
||||||
| Permission | Account settings | Acquire apps | Distribute apps | Device Guard signing |
|
| Permission | Account settings | Acquire apps | Distribute apps | Device Guard signing |
|
||||||
| ---------- | ---------------- | ------------ | --------------- | -------------------- |
|
| ---------- | ---------------- | ------------ | --------------- | -------------------- |
|
||||||
@ -89,51 +86,49 @@ After your admin signs up for the Store for Business, they can assign roles to o
|
|||||||
| Basic purchaser | | X | X | |
|
| Basic purchaser | | X | X | |
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see
|
> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see [Microsoft Store for Education permissions](https://docs.microsoft.com/education/windows/education-scenarios-store-for-business?toc=/microsoft-store/education/toc.json#manage-domain-settings).
|
||||||
|
|
||||||
In some cases, admins will need to add Azure Active Directory (AD) accounts for their employees. For more information, see [Manage user accounts and groups](manage-users-and-groups-windows-store-for-business.md).
|
In some cases, admins will need to add Azure Active Directory (AD) accounts for their employees. For more information, see [Manage user accounts and groups](manage-users-and-groups-windows-store-for-business.md).
|
||||||
|
|
||||||
Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with the Store for Business.
|
Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with Store for Business and Education.
|
||||||
|
|
||||||
## Get apps and content
|
## Get apps and content
|
||||||
|
|
||||||
Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time.
|
Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business and Education catalog. Some apps are free,and some apps charge a price. We're continuing to add more paid apps to the Store for Business and Education. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time.
|
||||||
|
|
||||||
**App types** -- These app types are supported in the Microsoft Store for Business:
|
**App types** - These app types are supported in the Store for Business and Education:
|
||||||
|
|
||||||
- Universal Windows Platform apps
|
- Universal Windows Platform apps
|
||||||
- Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens
|
- Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens
|
||||||
|
|
||||||
Apps purchased from the Store for Business only work on Windows 10 devices.
|
Apps purchased from the Store for Business and Education only work on Windows 10 devices.
|
||||||
|
|
||||||
Line-of-business (LOB) apps are also supported via the Business store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization. These apps can be distributed using the distribution methods discussed in this topic. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
Line-of-business (LOB) apps are also supported through Microsoft Store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization through Store for Business and Education. These apps can be distributed using the distribution methods discussed in this topic. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
||||||
|
|
||||||
**App licensing model**
|
**App licensing model**
|
||||||
|
|
||||||
The Business store supports two options to license apps: online and offline. **Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center.
|
Store for Business and Education supports two license options for apps: online and offline. **Online** licensing is the default licensing model and is similar to the licensing model for Microsoft Store. Online licensed apps require users and devices to connect to Microsoft Store services to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt in their apps for offline licensing when they submit them to the developer center.
|
||||||
|
|
||||||
For more information, see [Apps in the Store for Business](apps-in-windows-store-for-business.md#licensing-model).
|
For more information, see [Apps in Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
|
||||||
|
|
||||||
## Distribute apps and content
|
## Distribute apps and content
|
||||||
|
|
||||||
App distribution is handled through two channels, either through the Store for Business, or using a management tool. You can use either or both distribution methods in your organization.
|
App distribution is handled through two channels, either through the Microsoft Store for Business, or using a management tool. You can use either, or both distribution methods in your organization.
|
||||||
|
|
||||||
**Using the Store for Business** – Distribution options for the Store for Business:
|
**Distribute with Store for Business and Education**:
|
||||||
|
- Email link – After purchasing an app, Admins can send employees a link in an email message. Employees can click the link to install the app.
|
||||||
- Email link – After purchasing an app, admins can send employees a link in an email message. Employees can click the link to install the app.
|
- Curate private store for all employees – A private store can include content you’ve purchased from Microsoft Store for Business, and your line-of-business apps that you’ve submitted to Microsoft Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed.
|
||||||
- Curate private store for all employees – A private store can include content you’ve purchased from the Store, and your line-of-business apps that you’ve submitted to the Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed.
|
|
||||||
- To use the options above users must be signed in with an Azure AD account on a Windows 10 device. Licenses are assigned as individuals install apps.
|
- To use the options above users must be signed in with an Azure AD account on a Windows 10 device. Licenses are assigned as individuals install apps.
|
||||||
|
|
||||||
**Using a management tool** – For larger organizations that might want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options:
|
**Using a management tool** – For larger organizations that want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options:
|
||||||
|
|
||||||
- Scoped content distribution – Ability to scope content distribution to specific groups of employees.
|
- Scoped content distribution – Ability to scope content distribution to specific groups of employees.
|
||||||
- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees.
|
- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees.
|
||||||
|
|
||||||
Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps.
|
Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps.
|
||||||
|
|
||||||
For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md).
|
For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md).
|
||||||
|
|
||||||
## Manage Store for Business settings and content
|
## Manage Microsoft Store for Business settings and content
|
||||||
|
|
||||||
Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory.
|
Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory.
|
||||||
|
|
||||||
@ -151,11 +146,11 @@ Once you are signed up with the Business store and have purchased apps, Admins c
|
|||||||
- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server.
|
- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server.
|
||||||
- Download apps for offline installs
|
- Download apps for offline installs
|
||||||
|
|
||||||
For more information, see [Manage settings in the Store for Business](manage-settings-windows-store-for-business.md) and [Manage apps](manage-apps-windows-store-for-business-overview.md).
|
For more information, see [Manage settings in the Store for Business](manage-settings-microsoft-store-for-business.md) and [Manage apps](manage-apps-windows-store-for-business-overview.md).
|
||||||
|
|
||||||
## Supported markets
|
## Supported markets
|
||||||
|
|
||||||
Microsoft Store for Business and Education is currently available in these markets.
|
Store for Business and Education is currently available in these markets.
|
||||||
|
|
||||||
### Support for free and paid products
|
### Support for free and paid products
|
||||||
<table>
|
<table>
|
||||||
@ -377,24 +372,24 @@ This table summarize what customers can purchase, depending on which Microsoft S
|
|||||||
|
|
||||||
## Privacy notice
|
## Privacy notice
|
||||||
|
|
||||||
Microsoft Store for Business services get names and email addresses of people in your organization from Azure Active Directory. This information is needed for these admin functions:
|
Store for Business and Education services get names and email addresses of people in your organization from Azure Active Directory. This information is needed for these admin functions:
|
||||||
- Granting and managing permissions
|
- Granting and managing permissions
|
||||||
- Managing app licenses
|
- Managing app licenses
|
||||||
- Distributing apps to people (names appear in a list that admins can select from)
|
- Distributing apps to people (names appear in a list that admins can select from)
|
||||||
|
|
||||||
Microsoft Store for Business and Education does not save names, or email addresses.
|
Store for Business and Education does not save names, or email addresses.
|
||||||
|
|
||||||
Your use of Microsoft Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement).
|
Your use of Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement).
|
||||||
|
|
||||||
Information sent to Microsoft Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/).
|
Information sent to Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/).
|
||||||
|
|
||||||
## <a href="" id="isv-wsfb"></a>ISVs and the Store for Business
|
## <a href="" id="isv-wsfb"></a>ISVs and Store for Business and Education
|
||||||
|
|
||||||
Developers in your organization, or ISVs can create content specific to your organization. In the Store for Business, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this:
|
Developers in your organization, or ISVs can create content specific to your organization. In Store for Business and Education, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this:
|
||||||
- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs.
|
- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs.
|
||||||
- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization.
|
- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization.
|
||||||
- Admin adds the app to Store for Business inventory.
|
- Admin adds the app to Microsoft Store for Business or Microsoft Store for Education inventory.
|
||||||
|
|
||||||
Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in the Store for Business. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in the Store for Business will work only on Windows 10.
|
Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in Store for Business and Education. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in Store for Business and Education will work only on Windows 10.
|
||||||
|
|
||||||
For more information on line-of-business apps, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
For more information on line-of-business apps, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
|
@ -21,7 +21,6 @@ There are a few prerequisites for using Microsoft Store for Business or Microsof
|
|||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
|
||||||
|
|
||||||
You'll need this software to work with Microsoft Store for Business or Education.
|
You'll need this software to work with Microsoft Store for Business or Education.
|
||||||
|
|
||||||
### Required
|
### Required
|
||||||
@ -45,7 +44,7 @@ While not required, you can use a management tool to distribute and manage apps.
|
|||||||
|
|
||||||
## Proxy configuration
|
## Proxy configuration
|
||||||
|
|
||||||
If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Windows Store app and Microsoft Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy sever to block traffic, your configuration needs to allow these URLs:
|
If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy sever to block traffic, your configuration needs to allow these URLs:
|
||||||
|
|
||||||
- login.live.com
|
- login.live.com
|
||||||
- login.windows.net
|
- login.windows.net
|
@ -22,14 +22,14 @@ The Microsoft Store for Business and Education has a group of settings that admi
|
|||||||
|
|
||||||
| Setting | Description | Location under **Manage** |
|
| Setting | Description | Location under **Manage** |
|
||||||
| ------- | ----------- | ------------------------------ |
|
| ------- | ----------- | ------------------------------ |
|
||||||
| Account information | Manage organization information. For more information, see [Manage settings for the Microsoft Store for Business and Education](update-windows-store-for-business-account-settings.md).| **Billing - Account profile** |
|
| Account information | Manage organization information. For more information, see [Manage settings for the Microsoft Store for Business and Education](update-microsoft-store-for-business-account-settings.md).| **Billing - Account profile** |
|
||||||
| Payment options | Manage payment options. For more information, see [Manage settings for the Microsoft Store for Business and Education](update-windows-store-for-business-account-settings.md#payment-options).| **Billing - Payment methods** |
|
| Payment options | Manage payment options. For more information, see [Manage settings for the Microsoft Store for Business and Education](update-microsoft-store-for-business-account-settings.md#payment-options).| **Billing - Payment methods** |
|
||||||
| Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). | **Settings - Distribute** |
|
| Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). | **Settings - Distribute** |
|
||||||
| Offline licensing | Configure whether or not to make offline-licensed apps available in the Microsoft Store for Business and Education. For more information, see [Distribute offline apps](distribute-offline-apps.md). | **Settings - Shop** |
|
| Offline licensing | Configure whether or not to make offline-licensed apps available in the Microsoft Store for Business and Education. For more information, see [Distribute offline apps](distribute-offline-apps.md). | **Settings - Shop** |
|
||||||
| App request | Configure whether or not people in your organization can request apps for admins to purchase. For more information, see [Distribute offline apps](acquire-apps-windows-store-for-business.md). | **Settings - Distribute** |
|
| App request | Configure whether or not people in your organization can request apps for admins to purchase. For more information, see [Distribute offline apps](acquire-apps-microsoft-store-for-business.md). | **Settings - Distribute** |
|
||||||
| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md). | **Settings - Distribute** |
|
| Management tools | Management tools that are synced with Azure AD are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md). | **Settings - Distribute** |
|
||||||
| Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | **Settings - Devices** |
|
| Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | **Settings - Devices** |
|
||||||
| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md). | **Permissions - Roles** and **Permissions - Blocked basic purchasers** |
|
| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-microsoft-store-for-business.md). | **Permissions - Roles** and **Permissions - Blocked basic purchasers** |
|
||||||
| Line-of-business (LOB) publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | **Permissions - Line-of-business apps** |
|
| Line-of-business (LOB) publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | **Permissions - Line-of-business apps** |
|
||||||
|
|
||||||
|
|
@ -18,12 +18,20 @@ ms.localizationpriority: high
|
|||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows 10 Mobile
|
- Windows 10 Mobile
|
||||||
|
|
||||||
|
## September 2017
|
||||||
|
|
||||||
|
| New or changed topic | Description |
|
||||||
|
| --- | --- |
|
||||||
|
| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | New |
|
||||||
|
| [App requests](https://docs.microsoft.com/microsoft-store/acquire-apps-windows-store-for-business#request-apps) | New |
|
||||||
|
| [Settings reference: Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md) </br> and </br> [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-windows-store-for-business-account-settings.md) | Updates for UI changes in **Settings**. |
|
||||||
|
|
||||||
## July 2017
|
## July 2017
|
||||||
|
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
| [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) | New |
|
| [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) | New |
|
||||||
|
| [Microsoft Store for Business and Education overview - supported markets](https://docs.microsoft.com/en-us/microsoft-store/windows-store-for-business-overview#supported-markets) | Updates for added market support. |
|
||||||
|
|
||||||
## June 2017
|
## June 2017
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
|
@ -20,13 +20,13 @@ ms.localizationpriority: high
|
|||||||
Troubleshooting topics for Microsoft Store for Business.
|
Troubleshooting topics for Microsoft Store for Business.
|
||||||
|
|
||||||
## Can't find apps in private store
|
## Can't find apps in private store
|
||||||
The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
|
The private store for your organization is a page in Microsoft Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
|
||||||
- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back.
|
- **No apps in the private store** - The private store page is only available in Microsoft Store on Windows 10 if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Microsoft Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on **Product & services - Apps**. If the status under **Private store** is **Add in progress**, wait and check back.
|
||||||
- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
|
- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
|
||||||
|
|
||||||
**To sign in with organization account in Windows Store app**
|
**To sign in with organization account in Microsoft Store app**
|
||||||
|
|
||||||
1. Click the people icon in Windows Store app, and click **Sign in**.
|
1. Click the people icon in Microsoft Store app, and click **Sign in**.
|
||||||
|
|
||||||

|

|
||||||
|
|
@ -28,10 +28,10 @@ Before purchasing apps that have a fee, you need to add or update your organizat
|
|||||||
|
|
||||||
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase.
|
We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase.
|
||||||
|
|
||||||
We need an email address in case we need to contact you about your Microsoft Store for Business and Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store.
|
We need an email address in case we need to contact you about your Microsoft Store for Business and for Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store.
|
||||||
|
|
||||||
**To update Organization information**
|
**To update Organization information**
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
|
1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
|
||||||
2. Click **Manage**, click **Billing**, **Account profile**, and then click **Edit**.
|
2. Click **Manage**, click **Billing**, **Account profile**, and then click **Edit**.
|
||||||
|
|
||||||
## Organization tax information
|
## Organization tax information
|
||||||
@ -86,7 +86,7 @@ These countries can provide their VAT number or local equivalent in **Payments &
|
|||||||
If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
|
If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
|
||||||
|
|
||||||
**To start a service request**
|
**To start a service request**
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, click **Support**, and then under **Store settings & configuration** click **Create technical support ticket**.
|
2. Click **Manage**, click **Support**, and then under **Store settings & configuration** click **Create technical support ticket**.
|
||||||
|
|
||||||
You’ll need this documentation:
|
You’ll need this documentation:
|
||||||
@ -119,14 +119,14 @@ You can purchase apps from Microsoft Store for Business using your credit card.
|
|||||||
5. Japan Commercial Bureau (JCB)
|
5. Japan Commercial Bureau (JCB)
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Not all cards available in all countries. When you add a payment option, Store for Business shows which cards are available in your region.
|
> Not all cards available in all countries. When you add a payment option, Microsoft Store for Business shows which cards are available in your region.
|
||||||
|
|
||||||
**To add a new payment option**
|
**To add a new payment option**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, click **Billing**, and then click **Payments methods**.
|
2. Click **Manage**, click **Billing**, and then click **Payments methods**.
|
||||||
3. Click **Add a payment options**, and then select the type of credit card that you want to add.
|
3. Click **Add a payment options**, and then select the type of credit card that you want to add.
|
||||||
4. Add information to any required fields, and then click **Next**.
|
4. Add information to required fields, and then click **Next**.
|
||||||
|
|
||||||
Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
|
Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
|
||||||
|
|
||||||
@ -135,7 +135,7 @@ Once you click Next, the information you provided will be validated with a tes
|
|||||||
|
|
||||||
**To update a payment option**
|
**To update a payment option**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, click **Billing**, and then click **Payments methods**.
|
2. Click **Manage**, click **Billing**, and then click **Payments methods**.
|
||||||
3. Select the payment option that you want to update, and then click **Update**.
|
3. Select the payment option that you want to update, and then click **Update**.
|
||||||
4. Enter any updated information in the appropriate fields, and then click **Next**.
|
4. Enter any updated information in the appropriate fields, and then click **Next**.
|
||||||
@ -146,17 +146,17 @@ Once you click **Next**, the information you provided will be validated with a
|
|||||||
|
|
||||||
## Offline licensing
|
## Offline licensing
|
||||||
|
|
||||||
Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on the Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).
|
Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Microsoft Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on Microsoft Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model).
|
||||||
|
|
||||||
Admins can decide whether or not offline licenses are shown for apps in Microsoft Store.
|
Admins can decide whether or not offline licenses are shown for apps in Microsoft Store.
|
||||||
|
|
||||||
**To set offline license visibility**
|
**To set offline license visibility**
|
||||||
|
|
||||||
1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
|
1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
|
||||||
2. Click **Manage**, and then click **Settings - Shop**.
|
2. Click **Manage**, and then click **Settings - Shop**.
|
||||||
3. Under **Shopping experience** turn on or turn off **Show offline apps**,to show availability for offline-licensed apps.
|
3. Under **Shopping experience** turn on or turn off **Show offline apps**,to show availability for offline-licensed apps.
|
||||||
|
|
||||||
You have the following distribution options for offline-licensed apps:
|
You have the following distribution options for offline-licensed apps:
|
||||||
- Include the app in a provisioning package, and then use it as part of imaging a device.
|
- Include the app in a provisioning package, and then use it as part of imaging a device.
|
||||||
- Distribute the app through a management tool.
|
- Distribute the app through a management tool.
|
||||||
For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-with-management-tool.md).
|
For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-with-management-tool.md).
|
@ -19,29 +19,23 @@ ms.localizationpriority: high
|
|||||||
|
|
||||||
Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your school or organization – they might be internal apps, or apps specific to your school, business, or industry.
|
Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your school or organization – they might be internal apps, or apps specific to your school, business, or industry.
|
||||||
|
|
||||||
Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in the Store, and then can be managed or deployed using the same process as any other app that has been acquired through the Store.
|
Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in Microsoft Store, and then can be managed or deployed using the same process as any other app that has been acquired through Microsoft Store.
|
||||||
|
|
||||||
One advantage of making apps available through Microsoft Store is that the app has been signed by the Store, and uses the standard Store policies. For organizations that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported in Windows 10.
|
One advantage of making apps available through Microsoft Store for Business is that the app has been signed by Microsoft Store, and uses the standard Microsoft Store policies. For organizations that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported on Windows 10.
|
||||||
|
|
||||||
## <a href="" id="adding-lob-apps"></a>Adding LOB apps to your private store
|
## <a href="" id="adding-lob-apps"></a>Adding LOB apps to your private store
|
||||||
|
|
||||||
Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use the Store for Business portal; ISVs or devs use the Windows Dev center on MSDN.
|
Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use Microsoft Store for Business or Microsoft Store for Education portal; ISVs or devs use the Windows Dev center on MSDN.
|
||||||
|
|
||||||
Here’s what’s involved:
|
Here’s what’s involved:
|
||||||
|
- Microsoft Store for Business admin invites a developer or ISV to become an LOB publisher for your company.
|
||||||
- The Store for Business admin invites a developer or ISV to become an LOB publisher for your company.
|
- LOB publisher develops and submits app to Microsoft Store, tagging the app so it is only available to your company.
|
||||||
|
- Microsoft Store for Business admin accepts the app and can distribute the app to employees in your company.
|
||||||
- LOB publisher develops and submits app to the Store, tagging the app so it is only available to your company.
|
|
||||||
|
|
||||||
- The Store for Business admin accepts the app and can distribute the app to employees in your company.
|
|
||||||
|
|
||||||
You'll need to set up:
|
You'll need to set up:
|
||||||
|
|
||||||
- Your company needs to be signed up with Microsoft Store for Business or Microsoft Store for Education.
|
- Your company needs to be signed up with Microsoft Store for Business or Microsoft Store for Education.
|
||||||
|
|
||||||
- LOB publishers need to have an active developer account. To learn more about account options, see [Ready to sign up](https://go.microsoft.com/fwlink/p/?LinkId=623432).
|
- LOB publishers need to have an active developer account. To learn more about account options, see [Ready to sign up](https://go.microsoft.com/fwlink/p/?LinkId=623432).
|
||||||
|
- LOB publishers need to have an app in Microsoft Store, or have an app ready to submit to the Store.
|
||||||
- LOB publishers need to have an app in the Store, or have an app ready to submit to the Store.
|
|
||||||
|
|
||||||
## <a href="" id="add-lob-publisher"></a>Add an LOB publisher (Admin)
|
## <a href="" id="add-lob-publisher"></a>Add an LOB publisher (Admin)
|
||||||
|
|
||||||
@ -49,7 +43,7 @@ Admins need to invite developer or ISVs to become an LOB publisher.
|
|||||||
|
|
||||||
**To invite a developer to become an LOB publisher**
|
**To invite a developer to become an LOB publisher**
|
||||||
|
|
||||||
1. Sign in to the [Microsoft Store for Business]( https://go.microsoft.com/fwlink/p/?LinkId=623531).
|
1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**.
|
2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**.
|
||||||
3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer.
|
3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer.
|
||||||
>[!Note]
|
>[!Note]
|
||||||
@ -92,18 +86,14 @@ After an ISV submits the LOB app for your company or school, someone with Micros
|
|||||||
|
|
||||||
**To add the LOB app to your inventory**
|
**To add the LOB app to your inventory**
|
||||||
|
|
||||||
1. Sign in to the Store for Business.
|
1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com).
|
||||||
2. Click **Manage**, click **Apps & Software**, and then choose **New LOB apps**.
|
2. Click **Manage**, click **Products & services**, and then choose **New LOB apps**.
|
||||||
3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **Add to inventory**.
|
3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **Add to inventory**.
|
||||||
|
|
||||||
After you add the app to your inventory, you can choose how to distribute the app. For more information, see:
|
After you add the app to your inventory, you can choose how to distribute the app. For more information, see:
|
||||||
|
|
||||||
- [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md)
|
- [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md)
|
||||||
|
|
||||||
- [Distribute apps from your private store](distribute-apps-from-your-private-store.md)
|
- [Distribute apps from your private store](distribute-apps-from-your-private-store.md)
|
||||||
|
|
||||||
- [Assign apps to employees](assign-apps-to-employees.md)
|
- [Assign apps to employees](assign-apps-to-employees.md)
|
||||||
|
|
||||||
- [Distribute offline apps](distribute-offline-apps.md)
|
- [Distribute offline apps](distribute-offline-apps.md)
|
||||||
|
|
||||||
|
|
||||||
|
@ -69,7 +69,7 @@
|
|||||||
### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md)
|
### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md)
|
||||||
|
|
||||||
## [Windows Firewall with Advanced Security](windows-firewall/windows-firewall-with-advanced-security.md)
|
## [Windows Firewall with Advanced Security](windows-firewall/windows-firewall-with-advanced-security.md)
|
||||||
### [Isolating Windows Store Apps on Your Network](windows-firewall/isolating-apps-on-your-network.md)
|
### [Isolating Microsoft Store Apps on Your Network](windows-firewall/isolating-apps-on-your-network.md)
|
||||||
### [Securing End-to-End IPsec Connections by Using IKEv2 in Windows Server 2012](windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md)
|
### [Securing End-to-End IPsec Connections by Using IKEv2 in Windows Server 2012](windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md)
|
||||||
### [Windows Firewall with Advanced Security Administration with Windows PowerShell](windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md)
|
### [Windows Firewall with Advanced Security Administration with Windows PowerShell](windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md)
|
||||||
### [Windows Firewall with Advanced Security Design Guide](windows-firewall/windows-firewall-with-advanced-security-design-guide.md)
|
### [Windows Firewall with Advanced Security Design Guide](windows-firewall/windows-firewall-with-advanced-security-design-guide.md)
|
||||||
|
@ -20,7 +20,7 @@ When a user signs in with a Microsoft account, the device is connected to cloud
|
|||||||
|
|
||||||
## <a href="" id="bkmk-benefits"></a>How a Microsoft account works
|
## <a href="" id="bkmk-benefits"></a>How a Microsoft account works
|
||||||
|
|
||||||
The Microsoft account allows users to sign in to websites that support this service by using a single set of credentials. Users' credentials are validated by a Microsoft account authentication server that is associated with a website. The Windows Store is an example of this association. When new users sign in to websites that are enabled to use Microsoft accounts, they are redirected to the nearest authentication server, which asks for a user name and password. Windows uses the Schannel Security Support Provider to open a Transport Level Security/Secure Sockets Layer (TLS/SSL) connection for this function. Users then have the option to use Credential Manager to store their credentials.
|
The Microsoft account allows users to sign in to websites that support this service by using a single set of credentials. Users' credentials are validated by a Microsoft account authentication server that is associated with a website. The Microsoft Store is an example of this association. When new users sign in to websites that are enabled to use Microsoft accounts, they are redirected to the nearest authentication server, which asks for a user name and password. Windows uses the Schannel Security Support Provider to open a Transport Level Security/Secure Sockets Layer (TLS/SSL) connection for this function. Users then have the option to use Credential Manager to store their credentials.
|
||||||
|
|
||||||
When users sign in to websites that are enabled to use a Microsoft account, a time-limited cookie is installed on their computers, which includes a triple DES encrypted ID tag. This encrypted ID tag has been agreed upon between the authentication server and the website. This ID tag is sent to the website, and the website plants another time-limited encrypted HTTP cookie on the user’s computer. When these cookies are valid, users are not required to supply a user name and password. If a user actively signs out of their Microsoft account, these cookies are removed.
|
When users sign in to websites that are enabled to use a Microsoft account, a time-limited cookie is installed on their computers, which includes a triple DES encrypted ID tag. This encrypted ID tag has been agreed upon between the authentication server and the website. This ID tag is sent to the website, and the website plants another time-limited encrypted HTTP cookie on the user’s computer. When these cookies are valid, users are not required to supply a user name and password. If a user actively signs out of their Microsoft account, these cookies are removed.
|
||||||
|
|
||||||
@ -70,13 +70,13 @@ Users can add security information to their Microsoft accounts through the **Acc
|
|||||||
|
|
||||||
Although the Microsoft account was designed to serve consumers, you might find situations where your domain users can benefit by using their personal Microsoft account in your enterprise. The following list describes some advantages.
|
Although the Microsoft account was designed to serve consumers, you might find situations where your domain users can benefit by using their personal Microsoft account in your enterprise. The following list describes some advantages.
|
||||||
|
|
||||||
- **Download Windows Store apps**:
|
- **Download Microsoft Store apps**:
|
||||||
|
|
||||||
If your enterprise chooses to distribute software through the Windows Store, your users can use their Microsoft accounts to download and use them on up to five devices running any version of Windows 10, Windows 8.1, Windows 8, or Windows RT.
|
If your enterprise chooses to distribute software through the Microsoft Store, your users can use their Microsoft accounts to download and use them on up to five devices running any version of Windows 10, Windows 8.1, Windows 8, or Windows RT.
|
||||||
|
|
||||||
- **Single sign-on**:
|
- **Single sign-on**:
|
||||||
|
|
||||||
Your users can use Microsoft account credentials to sign in to devices running Windows 10, Windows 8.1, Windows 8 or Windows RT. When they do this, Windows works with your Windows Store app to provide authenticated experiences for them. Users can associate a Microsoft account with their sign-in credentials for Windows Store apps or websites, so that these credentials roam across any devices running these supported versions.
|
Your users can use Microsoft account credentials to sign in to devices running Windows 10, Windows 8.1, Windows 8 or Windows RT. When they do this, Windows works with your Microsoft Store app to provide authenticated experiences for them. Users can associate a Microsoft account with their sign-in credentials for Microsoft Store apps or websites, so that these credentials roam across any devices running these supported versions.
|
||||||
|
|
||||||
- **Personalized settings synchronization**:
|
- **Personalized settings synchronization**:
|
||||||
|
|
||||||
@ -84,7 +84,7 @@ Although the Microsoft account was designed to serve consumers, you might find s
|
|||||||
|
|
||||||
- **App synchronization**:
|
- **App synchronization**:
|
||||||
|
|
||||||
Windows Store apps can store user-specific settings so that these settings are available to any device. As with operating system settings, these user-specific app settings are available whenever the user signs in with the same Microsoft account on any device that is running a supported version of Windows and is connected to the cloud. After the user signs in, that device automatically downloads the settings from the cloud and applies them when the app is installed.
|
Microsoft Store apps can store user-specific settings so that these settings are available to any device. As with operating system settings, these user-specific app settings are available whenever the user signs in with the same Microsoft account on any device that is running a supported version of Windows and is connected to the cloud. After the user signs in, that device automatically downloads the settings from the cloud and applies them when the app is installed.
|
||||||
|
|
||||||
- **Integrated social media services**:
|
- **Integrated social media services**:
|
||||||
|
|
||||||
|
@ -71,7 +71,7 @@ Whenever possible, Microsoft recommends the use of TPM hardware. The TPM protect
|
|||||||
|
|
||||||
When a user wants to access protected key material, the authentication process begins with the user entering a PIN or biometric gesture to unlock the device, a process sometimes called releasing the key. Think of it like using a physical key to unlock a door: before you can unlock the door, you need to remove the key from your pocket or purse. The user's PIN unlocks the protector key for the container on the device. When that container is unlocked, applications (and thus the user) can use whatever IDP keys reside inside the container.
|
When a user wants to access protected key material, the authentication process begins with the user entering a PIN or biometric gesture to unlock the device, a process sometimes called releasing the key. Think of it like using a physical key to unlock a door: before you can unlock the door, you need to remove the key from your pocket or purse. The user's PIN unlocks the protector key for the container on the device. When that container is unlocked, applications (and thus the user) can use whatever IDP keys reside inside the container.
|
||||||
|
|
||||||
These keys are used to sign requests that are sent to the IDP, requesting access to specified resources. It’s important to understand that although the keys are unlocked, applications cannot use them at will. Applications can use specific APIs to request operations that require key material for particular actions (for example, decrypt an email message or sign in to a website). Access through these APIs doesn’t require explicit validation through a user gesture, and the key material isn’t exposed to the requesting application. Rather, the application asks for authentication, encryption, or decryption, and the Windows Hello layer handles the actual work and returns the results. Where appropriate, an application can request a forced authentication even on an unlocked device. Windows prompts the user to reenter the PIN or perform an authentication gesture, which adds an extra level of protection for sensitive data or actions. For example, you can configure the Windows Store to require reauthentication any time a user purchases an application, even though the same account and PIN or gesture were already used to unlock the device.
|
These keys are used to sign requests that are sent to the IDP, requesting access to specified resources. It’s important to understand that although the keys are unlocked, applications cannot use them at will. Applications can use specific APIs to request operations that require key material for particular actions (for example, decrypt an email message or sign in to a website). Access through these APIs doesn’t require explicit validation through a user gesture, and the key material isn’t exposed to the requesting application. Rather, the application asks for authentication, encryption, or decryption, and the Windows Hello layer handles the actual work and returns the results. Where appropriate, an application can request a forced authentication even on an unlocked device. Windows prompts the user to reenter the PIN or perform an authentication gesture, which adds an extra level of protection for sensitive data or actions. For example, you can configure the Microsoft Store to require reauthentication any time a user purchases an application, even though the same account and PIN or gesture were already used to unlock the device.
|
||||||
|
|
||||||
For example, the authentication process for Azure Active Directory works like this:
|
For example, the authentication process for Azure Active Directory works like this:
|
||||||
|
|
||||||
|
@ -68,7 +68,7 @@ To verify authorship of data, a user can sign it by using a private key that is
|
|||||||
|
|
||||||
## New and changed functionality as of Windows 8.1
|
## New and changed functionality as of Windows 8.1
|
||||||
|
|
||||||
Enhancements in Windows 8.1 enabled developers to build Windows Store apps to create and manage virtual smart cards.
|
Enhancements in Windows 8.1 enabled developers to build Microsoft Store apps to create and manage virtual smart cards.
|
||||||
|
|
||||||
The DCOM Interfaces for Trusted Platform Module (TPM) Virtual Smart Card device management protocol provides a Distributed Component Object Model (DCOM) Remote Protocol interface used for creating and destroying virtual smart cards. A virtual smart card is a device that presents a device interface complying with the PC/SC specification for PC-connected interface devices to its host operating system (OS) platform. This protocol does not assume anything about the underlying implementation of virtual smart card devices. In particular, while it is primarily intended for the management of virtual smart cards based on TPMs, it can also be used to manage other types of virtual smart cards.
|
The DCOM Interfaces for Trusted Platform Module (TPM) Virtual Smart Card device management protocol provides a Distributed Component Object Model (DCOM) Remote Protocol interface used for creating and destroying virtual smart cards. A virtual smart card is a device that presents a device interface complying with the PC/SC specification for PC-connected interface devices to its host operating system (OS) platform. This protocol does not assume anything about the underlying implementation of virtual smart card devices. In particular, while it is primarily intended for the management of virtual smart cards based on TPMs, it can also be used to manage other types of virtual smart cards.
|
||||||
|
|
||||||
@ -92,9 +92,9 @@ Starting with Windows 8.1, application developers can build into their apps the
|
|||||||
|
|
||||||
**What works differently?**
|
**What works differently?**
|
||||||
|
|
||||||
Starting with Windows 8.1, Windows Store app developers are able to build apps that have the capability to prompt the user to reset or unblock and change a virtual smart card PIN. This places more responsibility on the user to maintain their virtual smart card but it can also provide a more consistent user experience and administration experience in your organization.
|
Starting with Windows 8.1, Microsoft Store app developers are able to build apps that have the capability to prompt the user to reset or unblock and change a virtual smart card PIN. This places more responsibility on the user to maintain their virtual smart card but it can also provide a more consistent user experience and administration experience in your organization.
|
||||||
|
|
||||||
For more information about developing Windows Store apps with these capabilities, see [Trusted Platform Module Virtual Smart Card Management Protocol](https://msdn.microsoft.com/library/hh880895.aspx).
|
For more information about developing Microsoft Store apps with these capabilities, see [Trusted Platform Module Virtual Smart Card Management Protocol](https://msdn.microsoft.com/library/hh880895.aspx).
|
||||||
|
|
||||||
For more information about managing these capabilities in virtual smart cards, see [Understanding and Evaluating Virtual Smart Cards](virtual-smart-card-understanding-and-evaluating.md).
|
For more information about managing these capabilities in virtual smart cards, see [Understanding and Evaluating Virtual Smart Cards](virtual-smart-card-understanding-and-evaluating.md).
|
||||||
|
|
||||||
|
@ -40,9 +40,9 @@ Virtual smart cards can also be created and deleted by using APIs. For more info
|
|||||||
|
|
||||||
- [ITPMVirtualSmartCardManagerStatusCallBack](https://msdn.microsoft.com/library/windows/desktop/hh707161(v=vs.85).aspx)
|
- [ITPMVirtualSmartCardManagerStatusCallBack](https://msdn.microsoft.com/library/windows/desktop/hh707161(v=vs.85).aspx)
|
||||||
|
|
||||||
You can use APIs that were introduced in the Windows.Device.SmartCards namespace in Windows Server 2012 R2 and Windows 8.1 to build Windows Store apps to manage the full lifecycle of virtual smart cards. For information about how to build an app to do this, see [Strong Authentication: Building Apps That Leverage Virtual Smart Cards in Enterprise, BYOD, and Consumer Environments | Build 2013 | Channel 9](http://channel9.msdn.com/events/build/2013/2-041).
|
You can use APIs that were introduced in the Windows.Device.SmartCards namespace in Windows Server 2012 R2 and Windows 8.1 to build Microsoft Store apps to manage the full lifecycle of virtual smart cards. For information about how to build an app to do this, see [Strong Authentication: Building Apps That Leverage Virtual Smart Cards in Enterprise, BYOD, and Consumer Environments | Build 2013 | Channel 9](http://channel9.msdn.com/events/build/2013/2-041).
|
||||||
|
|
||||||
The following table describes the features that can be developed in a Windows Store app:
|
The following table describes the features that can be developed in a Microsoft Store app:
|
||||||
|
|
||||||
| Feature | Physical Smart Card | Virtual Smart Card |
|
| Feature | Physical Smart Card | Virtual Smart Card |
|
||||||
|----------------------------------------------|---------------------|--------------------|
|
|----------------------------------------------|---------------------|--------------------|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Isolating Windows Store Apps on Your Network (Windows 10)
|
title: Isolating Microsoft Store Apps on Your Network (Windows 10)
|
||||||
description: Isolating Windows Store Apps on Your Network
|
description: Isolating Microsoft Store Apps on Your Network
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: deploy
|
ms.mktglfcycl: deploy
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
@ -8,19 +8,19 @@ ms.pagetype: security
|
|||||||
author: brianlic-msft
|
author: brianlic-msft
|
||||||
---
|
---
|
||||||
|
|
||||||
# Isolating Windows Store Apps on Your Network
|
# Isolating Microsoft Store Apps on Your Network
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
- Windows 10
|
||||||
- Windows Server 2016
|
- Windows Server 2016
|
||||||
|
|
||||||
When you add new devices to your network, you may want to customize your Windows Defender Firewall with Advanced Security configuration to isolate the network access of the new Windows Store apps that run on them. Developers who build Windows Store apps can declare certain app capabilities that enable different classes of network access. A developer can decide what kind of network access the app requires and configure this capability for the app. When the app is installed on a device, appropriate firewall rules are automatically created to enable access. You can then customize the firewall configuration to further fine-tune this access if they desire more control over the network access for the app.
|
When you add new devices to your network, you may want to customize your Windows Defender Firewall with Advanced Security configuration to isolate the network access of the new Microsoft Store apps that run on them. Developers who build Microsoft Store apps can declare certain app capabilities that enable different classes of network access. A developer can decide what kind of network access the app requires and configure this capability for the app. When the app is installed on a device, appropriate firewall rules are automatically created to enable access. You can then customize the firewall configuration to further fine-tune this access if they desire more control over the network access for the app.
|
||||||
|
|
||||||
For example, a developer can decide that their app should only connect to trusted local networks (such as at home or work), and not to the Internet. In this way, developers can define the scope of network access for their app. This network isolation prevents an app from accessing a network and a connection type (inbound or outbound) if the connection has not been configured for the app. Then the network administrator can customize the firewall to further restrict the resources that the app can access.
|
For example, a developer can decide that their app should only connect to trusted local networks (such as at home or work), and not to the Internet. In this way, developers can define the scope of network access for their app. This network isolation prevents an app from accessing a network and a connection type (inbound or outbound) if the connection has not been configured for the app. Then the network administrator can customize the firewall to further restrict the resources that the app can access.
|
||||||
|
|
||||||
The ability to set and enforce these network boundaries ensures that apps that get compromised can only access networks where they have been explicitly granted access. This significantly reduces the scope of their impact on other apps, the device, and the network. In addition, apps can be isolated and protected from malicious access from the network.
|
The ability to set and enforce these network boundaries ensures that apps that get compromised can only access networks where they have been explicitly granted access. This significantly reduces the scope of their impact on other apps, the device, and the network. In addition, apps can be isolated and protected from malicious access from the network.
|
||||||
|
|
||||||
When creating new Windows Store apps, a developer can define the following network capabilities for their app:
|
When creating new Microsoft Store apps, a developer can define the following network capabilities for their app:
|
||||||
|
|
||||||
- **Home\\Work Networking**
|
- **Home\\Work Networking**
|
||||||
|
|
||||||
@ -40,7 +40,7 @@ When creating new Windows Store apps, a developer can define the following netwo
|
|||||||
|
|
||||||
**In this topic**
|
**In this topic**
|
||||||
|
|
||||||
To isolate Windows Store apps on your network, you need to use Group Policy to define your network isolation settings and create custom Windows Store app firewall rules.
|
To isolate Microsoft Store apps on your network, you need to use Group Policy to define your network isolation settings and create custom Microsoft Store app firewall rules.
|
||||||
|
|
||||||
- [Prerequisites](#prerequisites)
|
- [Prerequisites](#prerequisites)
|
||||||
|
|
||||||
@ -52,16 +52,16 @@ To isolate Windows Store apps on your network, you need to use Group Policy to d
|
|||||||
|
|
||||||
- A domain controller is installed on your network, and your devices are joined to the Windows domain.
|
- A domain controller is installed on your network, and your devices are joined to the Windows domain.
|
||||||
|
|
||||||
- Your Windows Store app is installed on the client device.
|
- Your Microsoft Store app is installed on the client device.
|
||||||
|
|
||||||
- The Remote Server Administration Tools (RSAT) are installed on your client device. When you perform the following steps from your client device, you can select your Windows Store app when you create Windows Defender Firewall rules.
|
- The Remote Server Administration Tools (RSAT) are installed on your client device. When you perform the following steps from your client device, you can select your Microsoft Store app when you create Windows Defender Firewall rules.
|
||||||
|
|
||||||
>**Note:** You can install the RSAT on your device running Windows 10 from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=45520).
|
>**Note:** You can install the RSAT on your device running Windows 10 from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=45520).
|
||||||
|
|
||||||
|
|
||||||
## Step 1: Define your network
|
## Step 1: Define your network
|
||||||
|
|
||||||
The **Home\\Work Networking** capability enables access to intranet resources. Administrators can use Group Policy settings to define the scope of the intranet. This ensures that Windows Store apps can access intranet resources appropriately.
|
The **Home\\Work Networking** capability enables access to intranet resources. Administrators can use Group Policy settings to define the scope of the intranet. This ensures that Microsoft Store apps can access intranet resources appropriately.
|
||||||
|
|
||||||
A network endpoint is considered part of the **Home\\Work Network** if:
|
A network endpoint is considered part of the **Home\\Work Network** if:
|
||||||
|
|
||||||
@ -111,7 +111,7 @@ All other endpoints that do not meet the previously stated criteria are consider
|
|||||||
|
|
||||||
## Step 2: Create custom firewall rules
|
## Step 2: Create custom firewall rules
|
||||||
|
|
||||||
Windows Store apps can declare many capabilities in addition to the network capabilities discussed previously. For example, apps can declare capabilities to access user identity, the local file system, and certain hardware devices.
|
Microsoft Store apps can declare many capabilities in addition to the network capabilities discussed previously. For example, apps can declare capabilities to access user identity, the local file system, and certain hardware devices.
|
||||||
|
|
||||||
The following table provides a complete list of the possible app capabilities.
|
The following table provides a complete list of the possible app capabilities.
|
||||||
|
|
||||||
@ -134,7 +134,7 @@ The following table provides a complete list of the possible app capabilities.
|
|||||||
| **Webcam** | webcam| Provides access to the webcam's video feed.|
|
| **Webcam** | webcam| Provides access to the webcam's video feed.|
|
||||||
| **Other devices (represented by GUIDs)** | <GUID>| Includes specialized devices and Windows Portable Devices.|
|
| **Other devices (represented by GUIDs)** | <GUID>| Includes specialized devices and Windows Portable Devices.|
|
||||||
|
|
||||||
You can create a Windows Defender Firewall policy that is scoped to a set of apps that use a specified capability or scoped to a specific Windows Store app.
|
You can create a Windows Defender Firewall policy that is scoped to a set of apps that use a specified capability or scoped to a specific Microsoft Store app.
|
||||||
|
|
||||||
For example, you could create a Windows Defender Firewall policy to block Internet access for any apps on your network that have the Documents Library capability.
|
For example, you could create a Windows Defender Firewall policy to block Internet access for any apps on your network that have the Documents Library capability.
|
||||||
|
|
||||||
@ -180,7 +180,7 @@ For example, you could create a Windows Defender Firewall policy to block Intern
|
|||||||
|
|
||||||
19. Click **Apply to application packages only**, and then click **OK**.
|
19. Click **Apply to application packages only**, and then click **OK**.
|
||||||
|
|
||||||
>**Important:** You must do this to ensure that the rule applies only to Windows Store apps and not to other apps. Desktop apps declare all capabilities by default, and this rule would apply to them if you do not configure it this way.
|
>**Important:** You must do this to ensure that the rule applies only to Microsoft Store apps and not to other apps. Desktop apps declare all capabilities by default, and this rule would apply to them if you do not configure it this way.
|
||||||
|
|
||||||
20. Click **OK** to close the **Properties** dialog box.
|
20. Click **OK** to close the **Properties** dialog box.
|
||||||
|
|
||||||
|
@ -36,7 +36,7 @@ To help address your organizational network security challenges, Windows Defende
|
|||||||
|
|
||||||
| Topic | Description
|
| Topic | Description
|
||||||
| - | - |
|
| - | - |
|
||||||
| [Isolating Windows Store Apps on Your Network](isolating-apps-on-your-network.md) | You can customize your Windows Defender Firewall configuration to isolate the network access of Windows Store apps that run on devices. |
|
| [Isolating Microsoft Store Apps on Your Network](isolating-apps-on-your-network.md) | You can customize your Windows Defender Firewall configuration to isolate the network access of Microsoft Store apps that run on devices. |
|
||||||
| [Securing End-to-End IPsec Connections by Using IKEv2 in Windows Server 2012](securing-end-to-end-ipsec-connections-by-using-ikev2.md) | You can use IKEv2 to help secure your end-to-end IPSec connections. |
|
| [Securing End-to-End IPsec Connections by Using IKEv2 in Windows Server 2012](securing-end-to-end-ipsec-connections-by-using-ikev2.md) | You can use IKEv2 to help secure your end-to-end IPSec connections. |
|
||||||
| [Windows Defender Firewall with Advanced Security Administration with Windows PowerShell](windows-firewall-with-advanced-security-administration-with-windows-powershell.md) | Learn more about using Windows PowerShell to manage the Windows Defender Firewall. |
|
| [Windows Defender Firewall with Advanced Security Administration with Windows PowerShell](windows-firewall-with-advanced-security-administration-with-windows-powershell.md) | Learn more about using Windows PowerShell to manage the Windows Defender Firewall. |
|
||||||
| [Windows Defender Firewall with Advanced Security Design Guide](windows-firewall-with-advanced-security-design-guide.md) | Learn how to create a design for deploying Windows Defender Firewall with Advanced Security. |
|
| [Windows Defender Firewall with Advanced Security Design Guide](windows-firewall-with-advanced-security-design-guide.md) | Learn how to create a design for deploying Windows Defender Firewall with Advanced Security. |
|
||||||
|
@ -1,6 +1,7 @@
|
|||||||
# [Manage applications in Windows 10](index.md)
|
# [Manage applications in Windows 10](index.md)
|
||||||
## [Sideload apps](sideload-apps-in-windows-10.md)
|
## [Sideload apps](sideload-apps-in-windows-10.md)
|
||||||
## [Remove background task resource restrictions](enterprise-background-activity-controls.md)
|
## [Remove background task resource restrictions](enterprise-background-activity-controls.md)
|
||||||
|
## [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md)
|
||||||
## [Application Virtualization (App-V) for Windows](app-v/appv-for-windows.md)
|
## [Application Virtualization (App-V) for Windows](app-v/appv-for-windows.md)
|
||||||
### [Getting Started with App-V](app-v/appv-getting-started.md)
|
### [Getting Started with App-V](app-v/appv-getting-started.md)
|
||||||
#### [What's new in App-V for Windows 10, version 1703 and earlier](app-v/appv-about-appv.md)
|
#### [What's new in App-V for Windows 10, version 1703 and earlier](app-v/appv-about-appv.md)
|
||||||
|
@ -1,20 +1,26 @@
|
|||||||
---
|
---
|
||||||
title: Change history for Configure Windows 10 (Windows 10)
|
title: Change history for Application management in Windows 10 (Windows 10)
|
||||||
description: This topic lists changes to documentation for configuring Windows 10.
|
description: This topic lists changes to documentation for configuring Windows 10.
|
||||||
keywords:
|
keywords:
|
||||||
ms.prod: w10
|
ms.prod: w10
|
||||||
ms.mktglfcycl: manage
|
ms.mktglfcycl: manage
|
||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
ms.localizationpriority: high
|
ms.localizationpriority: medium
|
||||||
author: jdeckerms
|
author: jdeckerms
|
||||||
ms.date: 09/15/2017
|
ms.date: 10/17/2017
|
||||||
---
|
---
|
||||||
|
|
||||||
# Change history for Configure Windows 10
|
# Change history for Application management in Windows 10
|
||||||
|
|
||||||
This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile.
|
This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile.
|
||||||
|
|
||||||
|
## RELEASE: Windows 10, version 1709
|
||||||
|
|
||||||
|
The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). The following new topic has been added:
|
||||||
|
|
||||||
|
- [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md)
|
||||||
|
|
||||||
## September 2017
|
## September 2017
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
|
@ -21,6 +21,7 @@ Learn about managing applications in Windows 10 and Windows 10 Mobile clients.
|
|||||||
|---|---|
|
|---|---|
|
||||||
|[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients|
|
|[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients|
|
||||||
| [Remove background task resource restrictions](enterprise-background-activity-controls.md) | Windows provides controls to manage which experiences may run in the background. |
|
| [Remove background task resource restrictions](enterprise-background-activity-controls.md) | Windows provides controls to manage which experiences may run in the background. |
|
||||||
|
| [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md) | Learn how to enable or block Windows Mixed Reality apps. |
|
||||||
|[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications|
|
|[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications|
|
||||||
| [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10 |
|
| [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10 |
|
||||||
|[Per User services in Windows 10](sideload-apps-in-windows-10.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016|
|
|[Per User services in Windows 10](sideload-apps-in-windows-10.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016|
|
||||||
|
@ -0,0 +1,87 @@
|
|||||||
|
---
|
||||||
|
title: Enable or block Windows Mixed Reality apps in the enterprise (Windows 10)
|
||||||
|
description: Learn how to enable or block Windows Mixed Reality apps.
|
||||||
|
keyboards: ["mr", "mr portal", "mixed reality portal", "mixed reality"]
|
||||||
|
ms.prod: w10
|
||||||
|
ms.mktglfcycl: manage
|
||||||
|
ms.sitesec: library
|
||||||
|
ms.localizationpriority: medium
|
||||||
|
author: jdeckerms
|
||||||
|
ms.author: jdecker
|
||||||
|
ms.date: 10/17/2017
|
||||||
|
---
|
||||||
|
|
||||||
|
# Enable or block Windows Mixed Reality apps in the enterprise
|
||||||
|
|
||||||
|
**Applies to**
|
||||||
|
|
||||||
|
- Windows 10
|
||||||
|
|
||||||
|
Windows 10, version 1709 (also known as the Fall Creators Update), introduces [Windows Mixed Reality](https://blogs.windows.com/windowsexperience/2017/10/03/the-era-of-windows-mixed-reality-begins-october-17/). Organizations that use Windows Server Update Services (WSUS) must take action to [enable Windows Mixed Reality](#enable). Any organization that wants to prohibit use of Windows Mixed Reality can [block the installation of the Mixed Reality Portal](#block).
|
||||||
|
|
||||||
|
|
||||||
|
<span id="enable" />
|
||||||
|
## Enable Windows Mixed Reality in WSUS
|
||||||
|
|
||||||
|
To enable users to download the Windows Mixed Reality software, enterprises using WSUS can approve Windows Mixed Reality package by unblocking the following KBs:
|
||||||
|
|
||||||
|
- KB4016509
|
||||||
|
- KB3180030
|
||||||
|
- KB3197985
|
||||||
|
|
||||||
|
Enterprises will not be able to install Windows Mixed Reality Feature on Demand (FOD) directly from WSUS. Instead, use one of the following options to install Windows Mixed Reality software:
|
||||||
|
|
||||||
|
- Manually install the Mixed Reality software
|
||||||
|
- IT admin can create [Side by side feature store (shared folder)](https://technet.microsoft.com/library/jj127275.aspx)
|
||||||
|
|
||||||
|
|
||||||
|
<span id="block" />
|
||||||
|
## Block the Mixed Reality Portal
|
||||||
|
|
||||||
|
You can use the [AppLocker configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp) to block the Mixed Reality software.
|
||||||
|
|
||||||
|
In the following example, the **Id** can be any generated GUID and the **Name** can be any name you choose. Note that `BinaryName="*"` allows you to block any app executable in the Mixed Reality Portal package. **Binary/VersionRange**, as shown in the example, will block all versions of the Mixed Reality Portal app.
|
||||||
|
|
||||||
|
```xml
|
||||||
|
<SyncML xmlns="SYNCML:SYNCML1.2">
|
||||||
|
<SyncBody>
|
||||||
|
<Add>
|
||||||
|
<CmdID>$CmdID$</CmdID>
|
||||||
|
<Item>
|
||||||
|
<Target>
|
||||||
|
<LocURI>./Vendor/MSFT/PolicyManager/My/ApplicationManagement/ApplicationRestrictions</LocURI>
|
||||||
|
</Target>
|
||||||
|
<Meta>
|
||||||
|
<Format xmlns="syncml:metinf">chr</Format>
|
||||||
|
<Type xmlns="syncml:metinf">text/plain</Type>
|
||||||
|
</Meta>
|
||||||
|
<Data>
|
||||||
|
<RuleCollection Type="Appx" EnforcementMode="Enabled">
|
||||||
|
<FilePublisherRule Id="a9e18c21-ff8f-43cf-b9fc-db40eed693ba" Name="(Default Rule) All signed packaged apps" Description="Allows members of the Everyone group to run packaged apps that are signed." UserOrGroupSid="S-1-1-0" Action="Allow">
|
||||||
|
<Conditions>
|
||||||
|
<FilePublisherCondition PublisherName="*" ProductName="*" BinaryName="*">
|
||||||
|
<BinaryVersionRange LowSection="0.0.0.0" HighSection="*" />
|
||||||
|
</FilePublisherCondition>
|
||||||
|
</Conditions>
|
||||||
|
</FilePublisherRule>
|
||||||
|
<FilePublisherRule Id="d26da4e7-0b01-484d-a8d3-d5b5341b2d55" Name="Block Mixed Reality Portal" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
|
||||||
|
<Conditions>
|
||||||
|
<FilePublisherCondition PublisherName="CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="Microsoft.Windows.HolographicFirstRun" BinaryName="*">
|
||||||
|
<BinaryVersionRange LowSection="*" HighSection="*" />
|
||||||
|
</FilePublisherCondition>
|
||||||
|
</Conditions>
|
||||||
|
</FilePublisherRule>
|
||||||
|
</RuleCollection>>
|
||||||
|
</Data>
|
||||||
|
</Item>
|
||||||
|
</Add>
|
||||||
|
<Final/>
|
||||||
|
</SyncBody>
|
||||||
|
</SyncML>
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
## Related topics
|
||||||
|
|
||||||
|
- [Mixed reality](https://developer.microsoft.com/windows/mixed-reality/mixed_reality)
|
BIN
windows/application-management/media/user-service-flag.png
Normal file
BIN
windows/application-management/media/user-service-flag.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 65 KiB |
@ -19,10 +19,10 @@ Per-user services are services that are created when a user signs into Windows o
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Per-user services are only in available in Windows Server if you have installed the Desktop Experience. If you are running a Server Core or Nano Server installation, you won't see these services.
|
> Per-user services are only in available in Windows Server if you have installed the Desktop Experience. If you are running a Server Core or Nano Server installation, you won't see these services.
|
||||||
|
|
||||||
You can configure the template service to create per-user services in a stopped and disabled state by setting the template service's **Startup Type** to **Disabled**.
|
You can set the template service's **Startup Type** to **Disabled** to create per-user services in a stopped and disabled state.
|
||||||
|
|
||||||
> [!IMPORTANT]
|
> [!IMPORTANT]
|
||||||
> Carefully test any changes to the template service's Startup Type before deploying in production.
|
> Carefully test any changes to the template service's Startup Type before deploying to a production environment.
|
||||||
|
|
||||||
Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates.
|
Use the following information to understand per-user services, change the template service Startup Type, and manage per-user services through Group Policy and security templates.
|
||||||
For more information about disabling system services for Windows Server, see [Guidance on disabling system services on Windows Server with Desktop Experience](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server).
|
For more information about disabling system services for Windows Server, see [Guidance on disabling system services on Windows Server with Desktop Experience](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server).
|
||||||
@ -131,13 +131,17 @@ REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t RE
|
|||||||
|
|
||||||
### Managing Template Services with regedit.exe
|
### Managing Template Services with regedit.exe
|
||||||
|
|
||||||
If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the Template Services change the Startup Type for each service to 4 (disabled), as shown in the following example:
|
If you cannot use Group Policy preferences to manage the per-user services, you can edit the registry with regedit.exe. To disable the template services, change the Startup Type for each service to 4 (disabled):
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
> [!CAUTION]
|
> [!CAUTION]
|
||||||
> We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution.
|
> We recommend that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the Registry Editor or by the Windows operating system before they are applied. As a result, incorrect values can be stored, and this can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use Group Policy or other Windows tools such as the Microsoft Management Console (MMC) to accomplish tasks. If you must edit the registry, use extreme caution.
|
||||||
|
|
||||||
|
Beginning with Windows 10, version 1709 and Windows Server, version 1709, you can prevent the per-user service from being created by setting **UserServiceFlags** to 0 under the same service configuration in the registry:
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
### Manage template services by modifying the Windows image
|
### Manage template services by modifying the Windows image
|
||||||
|
|
||||||
If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process.
|
If you're using custom images to deploy Windows, you can modify the Startup Type for the template services as part of the normal imaging process.
|
||||||
|
@ -16,6 +16,11 @@ ms.date: 06/13/2017
|
|||||||
|
|
||||||
This topic lists new and updated topics in the [Client management](index.md) documentation for Windows 10 and Windows 10 Mobile.
|
This topic lists new and updated topics in the [Client management](index.md) documentation for Windows 10 and Windows 10 Mobile.
|
||||||
|
|
||||||
|
## RELEASE: Windows 10, version 1709
|
||||||
|
|
||||||
|
The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update).
|
||||||
|
|
||||||
|
|
||||||
## July 2017
|
## July 2017
|
||||||
|
|
||||||
| New or changed topic | Description |
|
| New or changed topic | Description |
|
||||||
|
@ -8,6 +8,8 @@ ms.sitesec: library
|
|||||||
ms.pagetype: devices
|
ms.pagetype: devices
|
||||||
author: jdeckerms
|
author: jdeckerms
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
|
ms.author: jdecker
|
||||||
|
ms.date: 10/17/2017
|
||||||
---
|
---
|
||||||
|
|
||||||
# Connect to remote Azure Active Directory-joined PC
|
# Connect to remote Azure Active Directory-joined PC
|
||||||
@ -33,7 +35,13 @@ From its release, Windows 10 has supported remote connections to PCs that are jo
|
|||||||
|
|
||||||
3. If the user who joined the PC to Azure AD is the only one who is going to connect remotely, no additional configuration is needed. To allow additional users to connect to the PC, you must allow remote connections for the local **Authenticated Users** group. Click **Select Users**.
|
3. If the user who joined the PC to Azure AD is the only one who is going to connect remotely, no additional configuration is needed. To allow additional users to connect to the PC, you must allow remote connections for the local **Authenticated Users** group. Click **Select Users**.
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>You cannot specify individual Azure AD accounts for remote connections.
|
>You can specify individual Azure AD accounts for remote connections by having the user sign in to the remote device at least once and then running the following PowerShell cmdlet:
|
||||||
|
>
|
||||||
|
>`net localgroup "Remote Desktop Users" /add "AzureAD\FirstnameLastname"`
|
||||||
|
>
|
||||||
|
>In Windows 10, version 1709, the user does not have to sign in to the remote device first.
|
||||||
|
>
|
||||||
|
>In Windows 10, version 1709, you can add other Azure AD users to the **Administrators** group on a device in **Settings** and restrict remote credentials to **Administrators**. If there is a problem connecting remotely, make sure that both devices are joined to Azure AD and that TPM is functioning properly on both devices.
|
||||||
|
|
||||||
4. Enter **Authenticated Users**, then click **Check Names**. If the **Name Not Found** window opens, click **Locations** and select this PC.
|
4. Enter **Authenticated Users**, then click **Check Names**. If the **Name Not Found** window opens, click **Locations** and select this PC.
|
||||||
|
|
||||||
|
@ -27,7 +27,7 @@ In Windows 10, version 1607, the following Group Policy settings apply only to W
|
|||||||
| **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) |
|
| **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) |
|
||||||
| **Start layout** | User Configuration\Administrative Templates\Start Menu and Taskbar | In Windows 10, version 1703, this policy setting can be applied to Windows 10 Pro. For more info, see [Manage Windows 10 Start layout options and policies](/windows/configuration/windows-10-start-layout-options-and-policies) |
|
| **Start layout** | User Configuration\Administrative Templates\Start Menu and Taskbar | In Windows 10, version 1703, this policy setting can be applied to Windows 10 Pro. For more info, see [Manage Windows 10 Start layout options and policies](/windows/configuration/windows-10-start-layout-options-and-policies) |
|
||||||
| **Turn off the Store application** | Computer Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application<br><br>User Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application | For more info, see [Knowledge Base article# 3135657](https://support.microsoft.com/kb/3135657). |
|
| **Turn off the Store application** | Computer Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application<br><br>User Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application | For more info, see [Knowledge Base article# 3135657](https://support.microsoft.com/kb/3135657). |
|
||||||
| **Only display the private store within the Windows Store app** | Computer Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app<br><br>User Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app | For more info, see [Manage access to private store](/microsoft-store/manage-access-to-private-store) |
|
| **Only display the private store within the Microsoft Store app** | Computer Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Microsoft Store app<br><br>User Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Microsoft Store app | For more info, see [Manage access to private store](/microsoft-store/manage-access-to-private-store) |
|
||||||
| **Don't search the web or display web results** | Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results | For more info, see [Cortana integration in your enterprise](/windows/configuration/cortana-at-work/cortana-at-work-overview) |
|
| **Don't search the web or display web results** | Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results | For more info, see [Cortana integration in your enterprise](/windows/configuration/cortana-at-work/cortana-at-work-overview) |
|
||||||
|
|
||||||
|
|
||||||
|
@ -34,7 +34,7 @@ When a device running Windows 10 Mobile is joined to Azure AD, the device can e
|
|||||||
|
|
||||||
- Enable enterprise roaming of settings. (Not currently supported but on roadmap)
|
- Enable enterprise roaming of settings. (Not currently supported but on roadmap)
|
||||||
|
|
||||||
- Use Windows Store for Business to target applications to users.
|
- Use Microsoft Store for Business to target applications to users.
|
||||||
|
|
||||||
## <a href="" id="bkmk-upgrade"></a>Are you upgrading current devices to Windows 10 Mobile?
|
## <a href="" id="bkmk-upgrade"></a>Are you upgrading current devices to Windows 10 Mobile?
|
||||||
|
|
||||||
@ -58,7 +58,7 @@ Even though Azure AD Join on Windows 10 Mobile provides the best overall experi
|
|||||||
|
|
||||||
- You can add access to Azure AD-backed resources on the device without resetting the device.
|
- You can add access to Azure AD-backed resources on the device without resetting the device.
|
||||||
|
|
||||||
However, neither of these methods provides SSO in the Windows Store or SSO to resources on-premises, and does not provide the ability to roam settings based on the Azure AD account using enterprise roaming. [Learn about enterprise state roaming in Azure AD.](https://go.microsoft.com/fwlink/p/?LinkId=734996)
|
However, neither of these methods provides SSO in the Microsoft Store or SSO to resources on-premises, and does not provide the ability to roam settings based on the Azure AD account using enterprise roaming. [Learn about enterprise state roaming in Azure AD.](https://go.microsoft.com/fwlink/p/?LinkId=734996)
|
||||||
|
|
||||||
Using **Settings** > **Accounts** > **Your email and accounts** > **Add work or school account**, users can add their Azure AD account to the device. Alternatively, a work account can be added when the user signs in to an application like Mail, Word, etc. If you [enable auto-enrollment in your MDM settings](https://go.microsoft.com/fwlink/p/?LinkID=691615), the device will automatically be enrolled in MDM.
|
Using **Settings** > **Accounts** > **Your email and accounts** > **Add work or school account**, users can add their Azure AD account to the device. Alternatively, a work account can be added when the user signs in to an application like Mail, Word, etc. If you [enable auto-enrollment in your MDM settings](https://go.microsoft.com/fwlink/p/?LinkID=691615), the device will automatically be enrolled in MDM.
|
||||||
|
|
||||||
@ -188,10 +188,10 @@ To see the Notebooks that your Azure AD account has access to, tap **More Notebo
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
## Use Windows Store for Business
|
## Use Microsoft Store for Business
|
||||||
|
|
||||||
|
|
||||||
[Microsoft Store for Business](/microsoft-store/index) allows you to specify applications to be available to your users in the Windows Store application. These applications show up on a tab titled for your company. Applications approved in the Microsoft Store for Business portal can be installed by users.
|
[Microsoft Store for Business](/microsoft-store/index) allows you to specify applications to be available to your users in the Microsoft Store application. These applications show up on a tab titled for your company. Applications approved in the Microsoft Store for Business portal can be installed by users.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
|
@ -27,7 +27,7 @@ You can use the same management tools to manage all device types running Windows
|
|||||||
| --- | --- |
|
| --- | --- |
|
||||||
| [Manage Windows 10 in your organization - transitioning to modern management](manage-windows-10-in-your-organization-modern-management.md) | Strategies for deploying and managing Windows 10, including deploying Windows 10 in a mixed environment |
|
| [Manage Windows 10 in your organization - transitioning to modern management](manage-windows-10-in-your-organization-modern-management.md) | Strategies for deploying and managing Windows 10, including deploying Windows 10 in a mixed environment |
|
||||||
| [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) | How to use Remote Desktop Connection to connect to an Azure AD-joined PC |
|
| [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) | How to use Remote Desktop Connection to connect to an Azure AD-joined PC |
|
||||||
| [Manage Windows 10 and Windows Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions) | Options to manage user experiences to provide a consistent and predictable experience for employees |
|
| [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions) | Options to manage user experiences to provide a consistent and predictable experience for employees |
|
||||||
| [New policies for Windows 10](new-policies-for-windows-10.md) | New Group Policy settings added in Windows 10 |
|
| [New policies for Windows 10](new-policies-for-windows-10.md) | New Group Policy settings added in Windows 10 |
|
||||||
| [Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education](group-policies-for-enterprise-and-education-editions.md) | Group Policy settings that apply only to Windows 10 Enterprise and Windows 10 Education |
|
| [Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education](group-policies-for-enterprise-and-education-editions.md) | Group Policy settings that apply only to Windows 10 Enterprise and Windows 10 Education |
|
||||||
| [Changes to Group Policy settings for Start in Windows 10](/windows/configuration/changes-to-start-policies-in-windows-10) | Changes to the Group Policy settings that you use to manage Start |
|
| [Changes to Group Policy settings for Start in Windows 10](/windows/configuration/changes-to-start-policies-in-windows-10) | Changes to the Group Policy settings that you use to manage Start |
|
||||||
|
@ -38,7 +38,7 @@ Windows 10 offers a range of management options, as shown in the following diagr
|
|||||||
|
|
||||||
<img src="images/windows-10-management-range-of-options.png" alt="The path to modern IT" width="766" height="654" />
|
<img src="images/windows-10-management-range-of-options.png" alt="The path to modern IT" width="766" height="654" />
|
||||||
|
|
||||||
As indicated in the diagram, Microsoft continues to provide support for deep manageability and security through technologies like Group Policy, Active Directory, and System Center Configuration Manager. It also delivers a “mobile-first, cloud-first” approach of simplified, modern management using cloud-based device management solutions such as Microsoft Enterprise Mobility + Security (EMS). Future Windows innovations, delivered through Windows as a Service, are complemented by cloud services like Microsoft Intune, Azure Active Directory, Azure Information Protection, Office 365, and the Windows Store for Business.
|
As indicated in the diagram, Microsoft continues to provide support for deep manageability and security through technologies like Group Policy, Active Directory, and System Center Configuration Manager. It also delivers a “mobile-first, cloud-first” approach of simplified, modern management using cloud-based device management solutions such as Microsoft Enterprise Mobility + Security (EMS). Future Windows innovations, delivered through Windows as a Service, are complemented by cloud services like Microsoft Intune, Azure Active Directory, Azure Information Protection, Office 365, and the Microsoft Store for Business.
|
||||||
|
|
||||||
## Deployment and Provisioning
|
## Deployment and Provisioning
|
||||||
|
|
||||||
|
@ -33,7 +33,7 @@ Defines the root node for the AppLocker configuration service provider.
|
|||||||
<a href="" id="applicationlaunchrestrictions"></a>**ApplicationLaunchRestrictions**
|
<a href="" id="applicationlaunchrestrictions"></a>**ApplicationLaunchRestrictions**
|
||||||
Defines restrictions for applications.
|
Defines restrictions for applications.
|
||||||
|
|
||||||
> **Note**
|
> [!NOTE]
|
||||||
> When you create a list of allowed apps, all [inbox apps](#inboxappsandcomponents) are also blocked, and you must include them in your list of allowed apps. Don't forget to add the inbox apps for Phone, Messaging, Settings, Start, Email and accounts, Work and school, and other apps that you need.
|
> When you create a list of allowed apps, all [inbox apps](#inboxappsandcomponents) are also blocked, and you must include them in your list of allowed apps. Don't forget to add the inbox apps for Phone, Messaging, Settings, Start, Email and accounts, Work and school, and other apps that you need.
|
||||||
>
|
>
|
||||||
> In Windows 10 Mobile, when you create a list of allowed apps, the [settings app that rely on splash apps](#settingssplashapps) are blocked. To unblock these apps, you must include them in your list of allowed apps.
|
> In Windows 10 Mobile, when you create a list of allowed apps, the [settings app that rely on splash apps](#settingssplashapps) are blocked. To unblock these apps, you must include them in your list of allowed apps.
|
||||||
@ -120,7 +120,7 @@ In addition, each **Grouping** node contains one or more of the following nodes:
|
|||||||
</tr>
|
</tr>
|
||||||
<tr class="even">
|
<tr class="even">
|
||||||
<td><p><strong>StoreApps</strong></p></td>
|
<td><p><strong>StoreApps</strong></p></td>
|
||||||
<td><p>Defines restrictions for running apps from the Windows Store.</p>
|
<td><p>Defines restrictions for running apps from the Microsoft Store.</p>
|
||||||
<p>Supported operations are Get, Add, Delete, and Replace.</p></td>
|
<p>Supported operations are Get, Add, Delete, and Replace.</p></td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr class="odd">
|
<tr class="odd">
|
||||||
@ -571,6 +571,10 @@ The following list shows the apps that may be included in the inbox.
|
|||||||
<td>906beeda-b7e6-4ddc-ba8d-ad5031223ef9</td>
|
<td>906beeda-b7e6-4ddc-ba8d-ad5031223ef9</td>
|
||||||
<td>906beeda-b7e6-4ddc-ba8d-ad5031223ef9</td>
|
<td>906beeda-b7e6-4ddc-ba8d-ad5031223ef9</td>
|
||||||
</tr>
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>Mixed Reality Portal</td>
|
||||||
|
<td></td>
|
||||||
|
<td>Microsoft.Windows.HolographicFirstRun</td>
|
||||||
<tr class="even">
|
<tr class="even">
|
||||||
<td>Money</td>
|
<td>Money</td>
|
||||||
<td>1e0440f1-7abf-4b9a-863d-177970eefb5e</td>
|
<td>1e0440f1-7abf-4b9a-863d-177970eefb5e</td>
|
||||||
@ -856,6 +860,47 @@ The following example blocks the usage of the map application.
|
|||||||
</SyncML>
|
</SyncML>
|
||||||
```
|
```
|
||||||
|
|
||||||
|
The following example disables the Mixed Reality Portal. In the example, the **Id** can be any generated GUID and the **Name** can be any name you choose. Note that `BinaryName="*"` allows you to block any app executable in the Mixed Reality Portal package. **Binary/VersionRange**, as shown in the example, will block all versions of the Mixed Reality Portal app.
|
||||||
|
|
||||||
|
```xml
|
||||||
|
<SyncML xmlns="SYNCML:SYNCML1.2">
|
||||||
|
<SyncBody>
|
||||||
|
<Add>
|
||||||
|
<CmdID>$CmdID$</CmdID>
|
||||||
|
<Item>
|
||||||
|
<Target>
|
||||||
|
<LocURI>./Vendor/MSFT/PolicyManager/My/ApplicationManagement/ApplicationRestrictions</LocURI>
|
||||||
|
</Target>
|
||||||
|
<Meta>
|
||||||
|
<Format xmlns="syncml:metinf">chr</Format>
|
||||||
|
<Type xmlns="syncml:metinf">text/plain</Type>
|
||||||
|
</Meta>
|
||||||
|
<Data>
|
||||||
|
<RuleCollection Type="Appx" EnforcementMode="Enabled">
|
||||||
|
<FilePublisherRule Id="a9e18c21-ff8f-43cf-b9fc-db40eed693ba" Name="(Default Rule) All signed packaged apps" Description="Allows members of the Everyone group to run packaged apps that are signed." UserOrGroupSid="S-1-1-0" Action="Allow">
|
||||||
|
<Conditions>
|
||||||
|
<FilePublisherCondition PublisherName="*" ProductName="*" BinaryName="*">
|
||||||
|
<BinaryVersionRange LowSection="0.0.0.0" HighSection="*" />
|
||||||
|
</FilePublisherCondition>
|
||||||
|
</Conditions>
|
||||||
|
</FilePublisherRule>
|
||||||
|
<FilePublisherRule Id="d26da4e7-0b01-484d-a8d3-d5b5341b2d55" Name="Block Mixed Reality Portal" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
|
||||||
|
<Conditions>
|
||||||
|
<FilePublisherCondition PublisherName="CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="Microsoft.Windows.HolographicFirstRun" BinaryName="*">
|
||||||
|
<BinaryVersionRange LowSection="*" HighSection="*" />
|
||||||
|
</FilePublisherCondition>
|
||||||
|
</Conditions>
|
||||||
|
</FilePublisherRule>
|
||||||
|
</RuleCollection>>
|
||||||
|
</Data>
|
||||||
|
</Item>
|
||||||
|
</Add>
|
||||||
|
<Final/>
|
||||||
|
</SyncBody>
|
||||||
|
</SyncML>
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
The following example for Windows 10 Mobile denies all apps and allows the following apps:
|
The following example for Windows 10 Mobile denies all apps and allows the following apps:
|
||||||
|
|
||||||
- [settings app that rely on splash apps](#settingssplashapps)
|
- [settings app that rely on splash apps](#settingssplashapps)
|
||||||
|
@ -230,11 +230,11 @@ The following diagram shows the Update policies in a tree format.
|
|||||||
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise
|
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise
|
||||||
|
|
||||||
|
|
||||||
<p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Windows Store.
|
<p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft.
|
||||||
|
|
||||||
<p style="margin-left: 20px">Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Windows Store
|
<p style="margin-left: 20px">Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft
|
||||||
|
|
||||||
<p style="margin-left: 20px">Enabling this policy will disable that functionality, and may cause connection to public services such as the Windows Store to stop working.
|
<p style="margin-left: 20px">Enabling this policy will disable that functionality, and may cause connection to public services such as the Microsoft to stop working.
|
||||||
|
|
||||||
<p style="margin-left: 20px">The following list shows the supported values:
|
<p style="margin-left: 20px">The following list shows the supported values:
|
||||||
|
|
||||||
|
@ -31,8 +31,8 @@ Windows 10 offers the ability for management servers to:
|
|||||||
|
|
||||||
Windows 10 lets you inventory all apps deployed to a user and all apps for all users of a device on Windows 10 for desktop editions. The [EnterpriseModernAppManagement](enterprisemodernappmanagement-csp.md) configuration service provider (CSP) inventories packaged apps and does not include traditional Win32 apps installed via MSI or executables. When the apps are inventoried they are separated based on the following app classifications:
|
Windows 10 lets you inventory all apps deployed to a user and all apps for all users of a device on Windows 10 for desktop editions. The [EnterpriseModernAppManagement](enterprisemodernappmanagement-csp.md) configuration service provider (CSP) inventories packaged apps and does not include traditional Win32 apps installed via MSI or executables. When the apps are inventoried they are separated based on the following app classifications:
|
||||||
|
|
||||||
- Store - Apps that are from the Windows Store. Apps can be directly installed from the Store or delivered with the enterprise from the Store for Business
|
- Store - Apps that are from the Microsoft Store. Apps can be directly installed from the Store or delivered with the enterprise from the Store for Business
|
||||||
- nonStore - Apps that were not acquired from the Windows Store.
|
- nonStore - Apps that were not acquired from the Microsoft Store.
|
||||||
- System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried.
|
- System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried.
|
||||||
|
|
||||||
These classifications are represented as nodes in the EnterpriseModernAppManagement CSP.
|
These classifications are represented as nodes in the EnterpriseModernAppManagement CSP.
|
||||||
@ -151,9 +151,9 @@ There are two basic types of apps you can deploy: Store apps and enterprise sign
|
|||||||
|
|
||||||
### Unlock the device for non-Store apps
|
### Unlock the device for non-Store apps
|
||||||
|
|
||||||
To deploy app that are not from the Windows Store, you must configure the ApplicationManagement/AllowAllTrustedApps policy. This policy allows the installation of non-Store apps on the device provided that there is a chain to a certificate on the device. The app can be signed with a root certificate on the device (such as Symantec Enterprise), an enterprise owned root certificate, or a peer trust certificate deployed on the device. For more information about deploying user license, see [Deploy an offline license to a user](#deploy-an-offline-license-to-a-user).
|
To deploy app that are not from the Microsoft Store, you must configure the ApplicationManagement/AllowAllTrustedApps policy. This policy allows the installation of non-Store apps on the device provided that there is a chain to a certificate on the device. The app can be signed with a root certificate on the device (such as Symantec Enterprise), an enterprise owned root certificate, or a peer trust certificate deployed on the device. For more information about deploying user license, see [Deploy an offline license to a user](#deploy-an-offline-license-to-a-user).
|
||||||
|
|
||||||
The AllowAllTrustedApps policy enables the installation apps that are trusted by a certificate in the Trusted People on the device or a root certificate in the Trusted Root of the device. The policy is not configured by default, which means only apps from the Windows Store can be installed. If the management server implicitly sets the value to off, the setting is disabled in the settings panel on the device.
|
The AllowAllTrustedApps policy enables the installation apps that are trusted by a certificate in the Trusted People on the device or a root certificate in the Trusted Root of the device. The policy is not configured by default, which means only apps from the Microsoft Store can be installed. If the management server implicitly sets the value to off, the setting is disabled in the settings panel on the device.
|
||||||
|
|
||||||
For more information about the AllowAllTrustedApps policy, see [Policy CSP](policy-configuration-service-provider.md).
|
For more information about the AllowAllTrustedApps policy, see [Policy CSP](policy-configuration-service-provider.md).
|
||||||
|
|
||||||
@ -189,7 +189,7 @@ Here are some examples.
|
|||||||
|
|
||||||
Development of apps on Windows 10 no longer requires a special license. You can enable debugging and deployment of non-packaged apps using ApplicationManagement/AllowDeveloperUnlock policy in Policy CSP.
|
Development of apps on Windows 10 no longer requires a special license. You can enable debugging and deployment of non-packaged apps using ApplicationManagement/AllowDeveloperUnlock policy in Policy CSP.
|
||||||
|
|
||||||
AllowDeveloperUnlock policy enables the development mode on the device. The AllowDeveloperUnlock is not configured by default, which means only Windows Store apps can be installed. If the management server explicitly sets the value to off, the setting is disabled in the settings panel on the device.
|
AllowDeveloperUnlock policy enables the development mode on the device. The AllowDeveloperUnlock is not configured by default, which means only Microsoft Store apps can be installed. If the management server explicitly sets the value to off, the setting is disabled in the settings panel on the device.
|
||||||
|
|
||||||
Deployment of apps to Windows 10 for desktop editions requires that there is a chain to a certificate on the device. The app can be signed with a root certificate on the device (such as Symantec Enterprise), an enterprise owned root certificate, or a peer trust certificate deployed on the device. Deployment to Windows 10 Mobile does not validate whether the non-Store apps have a valid root of trust on the device.
|
Deployment of apps to Windows 10 for desktop editions requires that there is a chain to a certificate on the device. The app can be signed with a root certificate on the device (such as Symantec Enterprise), an enterprise owned root certificate, or a peer trust certificate deployed on the device. Deployment to Windows 10 Mobile does not validate whether the non-Store apps have a valid root of trust on the device.
|
||||||
|
|
||||||
@ -225,19 +225,19 @@ Here is an example.
|
|||||||
|
|
||||||
## Install your apps
|
## Install your apps
|
||||||
|
|
||||||
You can install apps to a specific user or to all users of a device. Apps are installed directly from the Windows Store or in some cases from a host location, such as a local disk, UNC path, or HTTPS location. Use the AppInstallation node of the [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) to install apps.
|
You can install apps to a specific user or to all users of a device. Apps are installed directly from the Microsoft Store or in some cases from a host location, such as a local disk, UNC path, or HTTPS location. Use the AppInstallation node of the [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) to install apps.
|
||||||
|
|
||||||
### Deploy apps to user from the Store
|
### Deploy apps to user from the Store
|
||||||
|
|
||||||
To deploy an app to a user directly from the Windows Store, the management server performs an Add and Exec commands on the AppInstallation node of the EnterpriseModernAppManagement CSP. This is only supported in the user context and not supported in the device context.
|
To deploy an app to a user directly from the Microsoft Store, the management server performs an Add and Exec commands on the AppInstallation node of the EnterpriseModernAppManagement CSP. This is only supported in the user context and not supported in the device context.
|
||||||
|
|
||||||
If you purchased an app from the Store for Business and the app is specified for an online license, the app and license must be acquired directly from the Windows Store.
|
If you purchased an app from the Store for Business and the app is specified for an online license, the app and license must be acquired directly from the Microsoft Store.
|
||||||
|
|
||||||
Here are the requirements for this scenario:
|
Here are the requirements for this scenario:
|
||||||
|
|
||||||
- The app is assigned to a user Azure Active Directory (AAD) identity in the Store for Business. You can do this directly in the Store for Business or through a management server.
|
- The app is assigned to a user Azure Active Directory (AAD) identity in the Store for Business. You can do this directly in the Store for Business or through a management server.
|
||||||
- The device requires connectivity to the Windows Store.
|
- The device requires connectivity to the Microsoft Store.
|
||||||
- Windows Store services must be enabled on the device. Note that the UI for the Windows Store can be disabled by the enterprise admin.
|
- Microsoft Store services must be enabled on the device. Note that the UI for the Microsoft Store can be disabled by the enterprise admin.
|
||||||
- The user must be signed in with their AAD identity.
|
- The user must be signed in with their AAD identity.
|
||||||
|
|
||||||
Here are some examples.
|
Here are some examples.
|
||||||
@ -303,7 +303,7 @@ Here are the requirements for this scenario:
|
|||||||
|
|
||||||
- The location of the app can be a local files system (C:\\StagedApps\\app1.appx), a UNC path (\\\\server\\share\\app1.apx), or an HTTPS location (https://contoso.com/app1.appx\_
|
- The location of the app can be a local files system (C:\\StagedApps\\app1.appx), a UNC path (\\\\server\\share\\app1.apx), or an HTTPS location (https://contoso.com/app1.appx\_
|
||||||
- The user must have permission to access the content location. For HTTPs, you can use server authentication or certificate authentication using a certificate associated with the enrollment. HTTP locations are supported, but not recommended because of lack of authentication requirements.
|
- The user must have permission to access the content location. For HTTPs, you can use server authentication or certificate authentication using a certificate associated with the enrollment. HTTP locations are supported, but not recommended because of lack of authentication requirements.
|
||||||
- The device does not need to have connectivity to the Windows Store, store services, or the have the Windows Store UI be enabled.
|
- The device does not need to have connectivity to the Microsoft Store, store services, or the have the Microsoft Store UI be enabled.
|
||||||
- The user must be logged in, but association with AAD identity is not required.
|
- The user must be logged in, but association with AAD identity is not required.
|
||||||
|
|
||||||
> **Note** You must unlock the device to deploy nonStore apps or you must deploy the app license before deploying the offline apps. For details, see [Deploy an offline license to a user](#deploy-an-offline-license-to-a-user).
|
> **Note** You must unlock the device to deploy nonStore apps or you must deploy the app license before deploying the offline apps. For details, see [Deploy an offline license to a user](#deploy-an-offline-license-to-a-user).
|
||||||
@ -420,7 +420,7 @@ Here are the requirements for this scenario:
|
|||||||
|
|
||||||
- The location of the app can be the local files system (C:\\StagedApps\\app1.appx), a UNC path (\\\\server\\share\\app1.apx), or an HTTPS location (https://contoso.com/app1.appx\_
|
- The location of the app can be the local files system (C:\\StagedApps\\app1.appx), a UNC path (\\\\server\\share\\app1.apx), or an HTTPS location (https://contoso.com/app1.appx\_
|
||||||
- The user must have permission to access the content location. For HTTPs, you can use server authentication or certificate authentication using a certificate associated with the enrollment. HTTP locations are supported, but not recommended because of lack of authentication requirements.
|
- The user must have permission to access the content location. For HTTPs, you can use server authentication or certificate authentication using a certificate associated with the enrollment. HTTP locations are supported, but not recommended because of lack of authentication requirements.
|
||||||
- The device does not need to have connectivity to the Windows Store, or store services enabled.
|
- The device does not need to have connectivity to the Microsoft Store, or store services enabled.
|
||||||
- The device does not need any AAD identity or domain membership.
|
- The device does not need any AAD identity or domain membership.
|
||||||
- For nonStore app, your device must be unlocked.
|
- For nonStore app, your device must be unlocked.
|
||||||
- For Store offline apps, the required licenses must be deployed prior to deploying the apps.
|
- For Store offline apps, the required licenses must be deployed prior to deploying the apps.
|
||||||
@ -584,8 +584,8 @@ The Data field value of 0 (zero) indicates sucess, otherwise it is an error code
|
|||||||
|
|
||||||
You can uninstall apps from users from Windows 10 devices. To uninstall an app, you delete it from the AppManagement node of the CSP. Within the AppManagement node, packages are organized based on their origin according to the following nodes:
|
You can uninstall apps from users from Windows 10 devices. To uninstall an app, you delete it from the AppManagement node of the CSP. Within the AppManagement node, packages are organized based on their origin according to the following nodes:
|
||||||
|
|
||||||
- AppStore - These apps are for the Windows Store. Apps can be directly installed from the store or delivered to the enterprise from the Store for Business.
|
- AppStore - These apps are for the Microsoft Store. Apps can be directly installed from the store or delivered to the enterprise from the Store for Business.
|
||||||
- nonStore - These apps that were not acquired from the Windows Store.
|
- nonStore - These apps that were not acquired from the Microsoft Store.
|
||||||
- System - These apps are part of the OS. You cannot uninstall these apps.
|
- System - These apps are part of the OS. You cannot uninstall these apps.
|
||||||
|
|
||||||
To uninstall an app, you delete it under the origin node, package family name, and package full name. To uninstall a XAP, use the product ID in place of the package family nane and package full name.
|
To uninstall an app, you delete it under the origin node, package family name, and package full name. To uninstall a XAP, use the product ID in place of the package family nane and package full name.
|
||||||
@ -717,7 +717,7 @@ Apps installed on a device can be updated using the management server. Apps can
|
|||||||
|
|
||||||
### Update apps directly from the store
|
### Update apps directly from the store
|
||||||
|
|
||||||
To update an app from Windows Store, the device requires contact with the store services.
|
To update an app from Microsoft Store, the device requires contact with the store services.
|
||||||
|
|
||||||
Here is an example of an update scan.
|
Here is an example of an update scan.
|
||||||
|
|
||||||
@ -760,7 +760,7 @@ A provisioned app automatically updates when an app update is sent to the user.
|
|||||||
|
|
||||||
You can prevent specific apps from being automatically updated. This allows you to turn on auto-updates for apps, with specific apps excluded as defined by the IT admin.
|
You can prevent specific apps from being automatically updated. This allows you to turn on auto-updates for apps, with specific apps excluded as defined by the IT admin.
|
||||||
|
|
||||||
Turning off updates only applies to updates from the Windows Store at the device level. This feature is not available at a user level. You can still update an app if the offline packages is pushed from hosted install location.
|
Turning off updates only applies to updates from the Microsoft Store at the device level. This feature is not available at a user level. You can still update an app if the offline packages is pushed from hosted install location.
|
||||||
|
|
||||||
Here is an example.
|
Here is an example.
|
||||||
|
|
||||||
@ -821,7 +821,7 @@ Here is an example.
|
|||||||
|
|
||||||
### Restrict AppData to the system volume
|
### Restrict AppData to the system volume
|
||||||
|
|
||||||
In Windows 10 Mobile IT administrators can set a policy to restrict user application data for a Windows Store app to the system volume, regardless of where the package is installed or moved.
|
In Windows 10 Mobile IT administrators can set a policy to restrict user application data for a Microsoft Store app to the system volume, regardless of where the package is installed or moved.
|
||||||
|
|
||||||
> **Note** The feature is only for Windows 10 Mobile.
|
> **Note** The feature is only for Windows 10 Mobile.
|
||||||
|
|
||||||
|
@ -68,8 +68,8 @@ The following image shows the EnterpriseModernAppManagement configuration servic
|
|||||||
- PackageDetails - returns all inventory attributes of the package. This includes all information from PackageNames parameter, but does not validate RequiresReinstall.
|
- PackageDetails - returns all inventory attributes of the package. This includes all information from PackageNames parameter, but does not validate RequiresReinstall.
|
||||||
- RequiredReinstall - Validates the app status of the apps in the inventory query to determine if they require a reinstallation. This attribute may impact system performance depending on the number of apps installed. Requiring reinstall occurs when resource package updates or when the app is in a tampered state.
|
- RequiredReinstall - Validates the app status of the apps in the inventory query to determine if they require a reinstallation. This attribute may impact system performance depending on the number of apps installed. Requiring reinstall occurs when resource package updates or when the app is in a tampered state.
|
||||||
- Source - specifies the app classification that aligns to the existing inventory nodes. You can use a specific filter or if no filter is specified then all sources will be returned. If no value is specified, all classifications are returned. Valid values are:
|
- Source - specifies the app classification that aligns to the existing inventory nodes. You can use a specific filter or if no filter is specified then all sources will be returned. If no value is specified, all classifications are returned. Valid values are:
|
||||||
- AppStore - This classification is for apps that were acquired from Windows Store. These were apps directly installed from Windows Store or enterprise apps from Microsoft Store for Business.
|
- AppStore - This classification is for apps that were acquired from Microsoft Store. These were apps directly installed from Microsoft Store or enterprise apps from Microsoft Store for Business.
|
||||||
- nonStore - This classification is for apps that were not acquired from the Windows Store.
|
- nonStore - This classification is for apps that were not acquired from the Microsoft Store.
|
||||||
- System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried.
|
- System - Apps that are part of the OS. You cannot uninstall these apps. This classification is read-only and can only be inventoried.
|
||||||
- PackageTypeFilter - Specifies one or multiple types of packages you can use to query the user or device. Multiple values must be separated by |. Valid values are:
|
- PackageTypeFilter - Specifies one or multiple types of packages you can use to query the user or device. Multiple values must be separated by |. Valid values are:
|
||||||
|
|
||||||
@ -163,7 +163,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic
|
|||||||
````
|
````
|
||||||
|
|
||||||
<a href="" id="appmanagement-nonstore"></a>**AppManagement/nonStore**
|
<a href="" id="appmanagement-nonstore"></a>**AppManagement/nonStore**
|
||||||
<p style="margin-left: 20px">Used to manage enterprise apps or developer apps that were not acquired from the Windows Store.
|
<p style="margin-left: 20px">Used to manage enterprise apps or developer apps that were not acquired from the Microsoft Store.
|
||||||
|
|
||||||
<p style="margin-left: 20px">Supported operation is Get.
|
<p style="margin-left: 20px">Supported operation is Get.
|
||||||
|
|
||||||
@ -173,7 +173,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic
|
|||||||
<p style="margin-left: 20px">Supported operation is Get.
|
<p style="margin-left: 20px">Supported operation is Get.
|
||||||
|
|
||||||
<a href="" id="appmanagement-appstore"></a>**AppManagement/AppStore**
|
<a href="" id="appmanagement-appstore"></a>**AppManagement/AppStore**
|
||||||
<p style="margin-left: 20px">Required. Used for managing apps from the Windows Store.
|
<p style="margin-left: 20px">Required. Used for managing apps from the Microsoft Store.
|
||||||
|
|
||||||
<p style="margin-left: 20px">Supported operations are Get and Delete.
|
<p style="margin-left: 20px">Supported operations are Get and Delete.
|
||||||
|
|
||||||
@ -372,7 +372,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic
|
|||||||
|
|
||||||
|
|
||||||
<a href="" id="appinstallation-packagefamilyname-storeinstall"></a>**AppInstallation/*PackageFamilyName*/StoreInstall**
|
<a href="" id="appinstallation-packagefamilyname-storeinstall"></a>**AppInstallation/*PackageFamilyName*/StoreInstall**
|
||||||
<p style="margin-left: 20px">Required. Command to perform an install of an app and a license from the Windows Store.
|
<p style="margin-left: 20px">Required. Command to perform an install of an app and a license from the Microsoft Store.
|
||||||
|
|
||||||
<p style="margin-left: 20px">Supported operation is Execute, Add, Delete, and Get.
|
<p style="margin-left: 20px">Supported operation is Execute, Add, Delete, and Get.
|
||||||
|
|
||||||
@ -438,7 +438,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic
|
|||||||
<p style="margin-left: 20px">Added in Windows 10, version 1511. Required. Category of license that is used to classify various license sources. Valid value:
|
<p style="margin-left: 20px">Added in Windows 10, version 1511. Required. Category of license that is used to classify various license sources. Valid value:
|
||||||
|
|
||||||
- Unknown - unknown license category
|
- Unknown - unknown license category
|
||||||
- Retail - license sold through retail channels, typically from the Windows Store
|
- Retail - license sold through retail channels, typically from the Microsoft Store
|
||||||
- Enterprise - license sold through the enterprise sales channel, typically from the Store for Business
|
- Enterprise - license sold through the enterprise sales channel, typically from the Store for Business
|
||||||
- OEM - license issued to an OEM
|
- OEM - license issued to an OEM
|
||||||
- Developer - developer license, typically installed during the app development or side-loading scernarios.
|
- Developer - developer license, typically installed during the app development or side-loading scernarios.
|
||||||
|
@ -193,7 +193,7 @@ The following diagram shows the Firewall configuration service provider in tree
|
|||||||
<p style="margin-left: 20px">Supported operation is Get.</p>
|
<p style="margin-left: 20px">Supported operation is Get.</p>
|
||||||
|
|
||||||
<a href="" id="packagefamilyname"></a>**FirewallRules/_FirewallRuleName_/App/PackageFamilyName**
|
<a href="" id="packagefamilyname"></a>**FirewallRules/_FirewallRuleName_/App/PackageFamilyName**
|
||||||
<p style="margin-left: 20px">This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Windows Store application.</p>
|
<p style="margin-left: 20px">This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Microsoft Store application.</p>
|
||||||
<p style="margin-left: 20px">Value type is string. Supported operations are Add, Get, Replace, and Delete.</p>
|
<p style="margin-left: 20px">Value type is string. Supported operations are Add, Get, Replace, and Delete.</p>
|
||||||
|
|
||||||
<a href="" id="filepath"></a>**FirewallRules/_FirewallRuleName_/App/FilePath**
|
<a href="" id="filepath"></a>**FirewallRules/_FirewallRuleName_/App/FilePath**
|
||||||
|
@ -1341,7 +1341,7 @@ ServiceName</Description>
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>PackageFamilyName - This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Windows Store application.</Description>
|
<Description>PackageFamilyName - This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Microsoft Store application.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr />
|
<chr />
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
|
@ -21,8 +21,8 @@ Here's the list of the available capabilities:
|
|||||||
|
|
||||||
- Support for enterprise identities – Enables end users within an organization to use the identity that has been provided to them within the organization. This enables an organization to retain control of the application and eliminates the need for an organization to maintain another set of identities for their users.
|
- Support for enterprise identities – Enables end users within an organization to use the identity that has been provided to them within the organization. This enables an organization to retain control of the application and eliminates the need for an organization to maintain another set of identities for their users.
|
||||||
- Bulk acquisition support of applications – Enables an IT administrator to acquire applications in bulk. IT departments can now take control over the procurement and distribution of applications. Previously, users acquire applications manually.
|
- Bulk acquisition support of applications – Enables an IT administrator to acquire applications in bulk. IT departments can now take control over the procurement and distribution of applications. Previously, users acquire applications manually.
|
||||||
- License reclaim and re-use – Enables an enterprise to retain value in their purchases by allowing the ability to un-assign access to an application, and then reassign the application to another user. In Windows Store today, when a user with a Microsoft account leaves the organization he retains ownership of the application.
|
- License reclaim and re-use – Enables an enterprise to retain value in their purchases by allowing the ability to un-assign access to an application, and then reassign the application to another user. In Microsoft Store today, when a user with a Microsoft account leaves the organization he retains ownership of the application.
|
||||||
- Flexible distribution models for Windows Store apps – Allows the enterprise to integrate with an organization's infrastructure the processes to distribute applications to devices that are connected to Store for Business services and to devices without connectivity to the Store for Business services.
|
- Flexible distribution models for Microsoft Store apps – Allows the enterprise to integrate with an organization's infrastructure the processes to distribute applications to devices that are connected to Store for Business services and to devices without connectivity to the Store for Business services.
|
||||||
- Custom Line of Business app support –Enables management and distribution of enterprise applications through the Store for Business.
|
- Custom Line of Business app support –Enables management and distribution of enterprise applications through the Store for Business.
|
||||||
- Support for Windows desktop and mobile devices - The Store for Business supports both desktop and mobile devices.
|
- Support for Windows desktop and mobile devices - The Store for Business supports both desktop and mobile devices.
|
||||||
|
|
||||||
@ -45,7 +45,7 @@ The Store for Business provides services that enable a management tool to synchr
|
|||||||
<tr class="even">
|
<tr class="even">
|
||||||
<td style="vertical-align:top"><p>Licensing models</p></td>
|
<td style="vertical-align:top"><p>Licensing models</p></td>
|
||||||
<td style="vertical-align:top"><p><strong>Offline vs. Online</strong></p>
|
<td style="vertical-align:top"><p><strong>Offline vs. Online</strong></p>
|
||||||
<p>Online-licensed applications require connectivity to the Windows Store. Users require an Azure Active Directory identity and rely on the store services on the device to be able to acquire an application from the store. It is similar to how applications are acquired from the Windows Store using a Microsoft account. Assigning or reclaiming seats for an application require a call to the Store for Business services.</p>
|
<p>Online-licensed applications require connectivity to the Microsoft Store. Users require an Azure Active Directory identity and rely on the store services on the device to be able to acquire an application from the store. It is similar to how applications are acquired from the Microsoft Store using a Microsoft account. Assigning or reclaiming seats for an application require a call to the Store for Business services.</p>
|
||||||
<p>Offline-licensed applications enable an organization to use the application for imaging and for devices that may not have connectivity to the store or may not have Azure Active Directory. Offline-licensed application do not require connectivity to the store, however it can be updated directly from the store if the device has connectivity and the app update policies allow updates to be distributed via the store.</p></td>
|
<p>Offline-licensed applications enable an organization to use the application for imaging and for devices that may not have connectivity to the store or may not have Azure Active Directory. Offline-licensed application do not require connectivity to the store, however it can be updated directly from the store if the device has connectivity and the app update policies allow updates to be distributed via the store.</p></td>
|
||||||
</tr>
|
</tr>
|
||||||
</tbody>
|
</tbody>
|
||||||
|
@ -1162,7 +1162,7 @@ The software version information from **DevDetail/SwV** does not match the versi
|
|||||||
|
|
||||||
To workaround this issue, remove the Windows Phone 8.1 publisher rule and add the specific product ID for each Silverlight app you want to allow to the allowed app list.
|
To workaround this issue, remove the Windows Phone 8.1 publisher rule and add the specific product ID for each Silverlight app you want to allow to the allowed app list.
|
||||||
|
|
||||||
- Some apps (specifically those that are published in Windows Store as AppX Bundles) are blocked from installing even when they are included in the app list.
|
- Some apps (specifically those that are published in Microsoft Store as AppX Bundles) are blocked from installing even when they are included in the app list.
|
||||||
|
|
||||||
No workaround is available at this time. An OS update to fix this issue is coming soon.
|
No workaround is available at this time. An OS update to fix this issue is coming soon.
|
||||||
|
|
||||||
|
@ -92,7 +92,7 @@ ms.date: 09/29/2017
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Specifies whether non Windows Store apps are allowed.
|
<p style="margin-left: 20px">Specifies whether non Microsoft Store apps are allowed.
|
||||||
|
|
||||||
<p style="margin-left: 20px">The following list shows the supported values:
|
<p style="margin-left: 20px">The following list shows the supported values:
|
||||||
|
|
||||||
@ -141,7 +141,7 @@ ms.date: 09/29/2017
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Specifies whether automatic update of apps from Windows Store are allowed.
|
<p style="margin-left: 20px">Specifies whether automatic update of apps from Microsoft Store are allowed.
|
||||||
|
|
||||||
<p style="margin-left: 20px">The following list shows the supported values:
|
<p style="margin-left: 20px">The following list shows the supported values:
|
||||||
|
|
||||||
@ -448,7 +448,7 @@ ms.date: 09/29/2017
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. Boolean value that disables the launch of all apps from Windows Store that came pre-installed or were downloaded.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. Boolean value that disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded.
|
||||||
|
|
||||||
<p style="margin-left: 20px">The following list shows the supported values:
|
<p style="margin-left: 20px">The following list shows the supported values:
|
||||||
|
|
||||||
|
@ -1050,7 +1050,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1091,7 +1091,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1132,7 +1132,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1222,7 +1222,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1263,7 +1263,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1304,7 +1304,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1394,7 +1394,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1435,7 +1435,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1476,7 +1476,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1566,7 +1566,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1607,7 +1607,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1648,7 +1648,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1738,7 +1738,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1779,7 +1779,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1820,7 +1820,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1910,7 +1910,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1951,7 +1951,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -1992,7 +1992,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2082,7 +2082,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2123,7 +2123,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2164,7 +2164,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2254,7 +2254,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2295,7 +2295,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2336,7 +2336,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2426,7 +2426,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2467,7 +2467,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2508,7 +2508,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2598,7 +2598,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2639,7 +2639,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2680,7 +2680,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2762,7 +2762,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2803,7 +2803,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2844,7 +2844,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2934,7 +2934,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -2975,7 +2975,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3016,7 +3016,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3106,7 +3106,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3147,7 +3147,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3188,7 +3188,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'get diagnostic info' privacy setting for the listed apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'get diagnostic info' privacy setting for the listed apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3280,7 +3280,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are able to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are able to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3321,7 +3321,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied the ability to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the ability to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3362,7 +3362,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the background apps privacy setting for the listed apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the background apps privacy setting for the listed apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3452,7 +3452,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3493,7 +3493,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
@ -3534,7 +3534,7 @@ The following list shows the supported values:
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'sync with devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
<p style="margin-left: 20px">Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'sync with devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.
|
||||||
|
|
||||||
<!--EndDescription-->
|
<!--EndDescription-->
|
||||||
<!--EndPolicy-->
|
<!--EndPolicy-->
|
||||||
|
@ -633,7 +633,7 @@ ADMX Info:
|
|||||||
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows IT Admins to prevent apps and features from working with files on OneDrive. If you enable this policy setting:
|
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows IT Admins to prevent apps and features from working with files on OneDrive. If you enable this policy setting:
|
||||||
|
|
||||||
* Users cannot access OneDrive from the OneDrive app or file picker.
|
* Users cannot access OneDrive from the OneDrive app or file picker.
|
||||||
* Windows Store apps cannot access OneDrive using the WinRT API.
|
* Microsoft Store apps cannot access OneDrive using the WinRT API.
|
||||||
* OneDrive does not appear in the navigation pane in File Explorer.
|
* OneDrive does not appear in the navigation pane in File Explorer.
|
||||||
* OneDrive files are not kept in sync with the cloud.
|
* OneDrive files are not kept in sync with the cloud.
|
||||||
* Users cannot automatically upload photos and videos from the camera roll folder.
|
* Users cannot automatically upload photos and videos from the camera roll folder.
|
||||||
|
@ -537,11 +537,11 @@ This policy is accessible through the Update setting in the user interface or Gr
|
|||||||
|
|
||||||
<!--EndScope-->
|
<!--EndScope-->
|
||||||
<!--StartDescription-->
|
<!--StartDescription-->
|
||||||
<p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Windows Store.
|
<p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store.
|
||||||
|
|
||||||
<p style="margin-left: 20px">Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Windows Store
|
<p style="margin-left: 20px">Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store
|
||||||
|
|
||||||
<p style="margin-left: 20px">Enabling this policy will disable that functionality, and may cause connection to public services such as the Windows Store to stop working.
|
<p style="margin-left: 20px">Enabling this policy will disable that functionality, and may cause connection to public services such as the Microsoft Store to stop working.
|
||||||
|
|
||||||
<p style="margin-left: 20px">The following list shows the supported values:
|
<p style="margin-left: 20px">The following list shows the supported values:
|
||||||
|
|
||||||
|
@ -19470,7 +19470,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -19494,7 +19494,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -19518,7 +19518,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the cellular data access setting for the listed apps. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the cellular data access setting for the listed apps. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31512,7 +31512,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31536,7 +31536,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31560,7 +31560,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31608,7 +31608,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31632,7 +31632,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31656,7 +31656,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31704,7 +31704,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31728,7 +31728,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31752,7 +31752,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31800,7 +31800,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31824,7 +31824,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31848,7 +31848,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31896,7 +31896,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31920,7 +31920,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31944,7 +31944,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -31992,7 +31992,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32016,7 +32016,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32040,7 +32040,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32088,7 +32088,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32112,7 +32112,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32136,7 +32136,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32184,7 +32184,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32208,7 +32208,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32232,7 +32232,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32280,7 +32280,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32304,7 +32304,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32328,7 +32328,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32376,7 +32376,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32400,7 +32400,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32424,7 +32424,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32472,7 +32472,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32496,7 +32496,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32520,7 +32520,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32568,7 +32568,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32592,7 +32592,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32616,7 +32616,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32856,7 +32856,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32880,7 +32880,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -32904,7 +32904,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -35902,7 +35902,7 @@ The options are:
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Windows Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.</Description>
|
<Description>This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Microsoft Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<int/>
|
<int/>
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -41148,7 +41148,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -41172,7 +41172,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to cellular data. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -41196,7 +41196,7 @@ Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the cellular data access setting for the listed apps. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the cellular data access setting for the listed apps. This setting overrides the default LetAppsAccessCellularData policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -53941,7 +53941,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -53965,7 +53965,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -53989,7 +53989,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54036,7 +54036,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54060,7 +54060,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54084,7 +54084,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54131,7 +54131,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54155,7 +54155,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54179,7 +54179,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54226,7 +54226,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54250,7 +54250,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54274,7 +54274,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54321,7 +54321,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54345,7 +54345,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54369,7 +54369,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54416,7 +54416,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54440,7 +54440,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54464,7 +54464,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54511,7 +54511,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54535,7 +54535,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54559,7 +54559,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54606,7 +54606,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54630,7 +54630,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54654,7 +54654,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54701,7 +54701,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54725,7 +54725,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54749,7 +54749,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54796,7 +54796,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54820,7 +54820,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54844,7 +54844,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54891,7 +54891,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54915,7 +54915,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54939,7 +54939,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -54986,7 +54986,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -55010,7 +55010,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -55034,7 +55034,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -55271,7 +55271,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -55295,7 +55295,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -55319,7 +55319,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
<Description>List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.</Description>
|
||||||
<DefaultValue></DefaultValue>
|
<DefaultValue></DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<chr/>
|
<chr/>
|
||||||
@ -58356,7 +58356,7 @@ The options are:
|
|||||||
<AccessType>
|
<AccessType>
|
||||||
<Get />
|
<Get />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<Description>This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Windows Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.</Description>
|
<Description>This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Microsoft Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.</Description>
|
||||||
<DefaultValue>0</DefaultValue>
|
<DefaultValue>0</DefaultValue>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<int/>
|
<int/>
|
||||||
|
@ -46,7 +46,7 @@ Note the following restrictions related to push notifications and WNS:
|
|||||||
|
|
||||||
## Get WNS credentials and PFN for MDM push notification
|
## Get WNS credentials and PFN for MDM push notification
|
||||||
|
|
||||||
To get a PFN and WNS credentials, you must create an Windows Store app.
|
To get a PFN and WNS credentials, you must create an Microsoft Store app.
|
||||||
|
|
||||||
1. Go to the Windows [Dashboard](https://dev.windows.com/en-US/dashboard) and sign in with your developer account.
|
1. Go to the Windows [Dashboard](https://dev.windows.com/en-US/dashboard) and sign in with your developer account.
|
||||||
|
|
||||||
@ -69,7 +69,7 @@ To get a PFN and WNS credentials, you must create an Windows Store app.
|
|||||||
7. In the **Application Registration Portal** page, you will see the properties for the app that you created, such as:
|
7. In the **Application Registration Portal** page, you will see the properties for the app that you created, such as:
|
||||||
- Application Id
|
- Application Id
|
||||||
- Application Secrets
|
- Application Secrets
|
||||||
- Windows Store Package SID, Application Identity, and Publisher.
|
- Microsoft Store Package SID, Application Identity, and Publisher.
|
||||||
|
|
||||||

|

|
||||||
8. Click **Save**.
|
8. Click **Save**.
|
||||||
|
@ -64,7 +64,7 @@ App identity, which is either an app’s package family name or file path. The t
|
|||||||
<a href="" id="vpnv2-profilename-apptriggerlist-apptriggerrowid-app-type"></a>**VPNv2/***ProfileName***/AppTriggerList/***appTriggerRowId***/App/Type**
|
<a href="" id="vpnv2-profilename-apptriggerlist-apptriggerrowid-app-type"></a>**VPNv2/***ProfileName***/AppTriggerList/***appTriggerRowId***/App/Type**
|
||||||
Returns the type of **App/Id**. This value can be either of the following:
|
Returns the type of **App/Id**. This value can be either of the following:
|
||||||
|
|
||||||
- PackageFamilyName - When this is returned, the App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of the Windows Store application.
|
- PackageFamilyName - When this is returned, the App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of the Microsoft Store application.
|
||||||
- FilePath - When this is returned, the App/Id value represents the full file path of the app. For example, `C:\Windows\System\Notepad.exe`.
|
- FilePath - When this is returned, the App/Id value represents the full file path of the app. For example, `C:\Windows\System\Notepad.exe`.
|
||||||
|
|
||||||
Value type is chr. Supported operation is Get.
|
Value type is chr. Supported operation is Get.
|
||||||
@ -183,7 +183,7 @@ App identity for the app-based traffic filter.
|
|||||||
|
|
||||||
The value for this node can be one of the following:
|
The value for this node can be one of the following:
|
||||||
|
|
||||||
- PackageFamilyName - This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Windows Store application.
|
- PackageFamilyName - This App/Id value represents the PackageFamilyName of the app. The PackageFamilyName is the unique name of a Microsoft Store application.
|
||||||
- FilePath - This App/Id value represents the full file path of the app. For example, `C:\Windows\System\Notepad.exe`.
|
- FilePath - This App/Id value represents the full file path of the app. For example, `C:\Windows\System\Notepad.exe`.
|
||||||
- SYSTEM – This value enables Kernel Drivers to send traffic through VPN (for example, PING or SMB).
|
- SYSTEM – This value enables Kernel Drivers to send traffic through VPN (for example, PING or SMB).
|
||||||
|
|
||||||
@ -393,7 +393,7 @@ Added in Windows 10, version 1607. Comma Separated list of EKUs for the VPN Cli
|
|||||||
Value type is chr. Supported operations include Get, Add, Replace, and Delete.
|
Value type is chr. Supported operations include Get, Add, Replace, and Delete.
|
||||||
|
|
||||||
<a href="" id="vpnv2-profilename-pluginprofile"></a>**VPNv2/***ProfileName***/PluginProfile**
|
<a href="" id="vpnv2-profilename-pluginprofile"></a>**VPNv2/***ProfileName***/PluginProfile**
|
||||||
Nodes under the PluginProfile are required when using a Windows Store based VPN plugin.
|
Nodes under the PluginProfile are required when using a Microsoft Store based VPN plugin.
|
||||||
|
|
||||||
<a href="" id="vpnv2-profilename-pluginprofile-serverurllist"></a>**VPNv2/***ProfileName***/PluginProfile/ServerUrlList**
|
<a href="" id="vpnv2-profilename-pluginprofile-serverurllist"></a>**VPNv2/***ProfileName***/PluginProfile/ServerUrlList**
|
||||||
Required for plug-in profiles. Comma separated list of servers in URL, hostname, or IP format.
|
Required for plug-in profiles. Comma separated list of servers in URL, hostname, or IP format.
|
||||||
|
@ -40,7 +40,7 @@ Windows 10 includes comprehensive MDM capabilities that can be managed by Micros
|
|||||||
The built-in MDM client is common to all editions of the Windows 10 operating system, including desktop, mobile, and Internet of Things (IoT). The client provides a single interface through which you can manage any device that runs Windows 10. The client has two important roles: device enrollment in an MDM system and device management.
|
The built-in MDM client is common to all editions of the Windows 10 operating system, including desktop, mobile, and Internet of Things (IoT). The client provides a single interface through which you can manage any device that runs Windows 10. The client has two important roles: device enrollment in an MDM system and device management.
|
||||||
|
|
||||||
Organizations typically have two scenarios to consider when it comes to device deployment: Bring Your Own (BYO) personal devices and Choose Your Own (CYO) company-owned devices. In both cases, the device must be enrolled in an MDM system, which would configure it with settings appropriate for the organization and the employee.
|
Organizations typically have two scenarios to consider when it comes to device deployment: Bring Your Own (BYO) personal devices and Choose Your Own (CYO) company-owned devices. In both cases, the device must be enrolled in an MDM system, which would configure it with settings appropriate for the organization and the employee.
|
||||||
Windows 10 Mobile device management capabilities support both personal devices used in the BYO scenario and corporate devices used in the CYO scenario. The operating system offers a flexible approach to registering devices with directory services and MDM systems. IT organizations can provision comprehensive device-configuration profiles based on their business needs to control and protect mobile business data. Apps can be provisioned easily to personal or corporate devices through the Windows Store for Business, or by using their MDM system, which can also work with the Windows Store for Business for public store apps.
|
Windows 10 Mobile device management capabilities support both personal devices used in the BYO scenario and corporate devices used in the CYO scenario. The operating system offers a flexible approach to registering devices with directory services and MDM systems. IT organizations can provision comprehensive device-configuration profiles based on their business needs to control and protect mobile business data. Apps can be provisioned easily to personal or corporate devices through the Microsoft Store for Business, or by using their MDM system, which can also work with the Microsoft Store for Business for public store apps.
|
||||||
Knowing who owns the device and what the employee will use it for are the major factors in determining your management strategy and which controls your organization should put in place. Whether personal devices, corporate devices, or a mixture of the two, deployment processes and configuration policies may differ.
|
Knowing who owns the device and what the employee will use it for are the major factors in determining your management strategy and which controls your organization should put in place. Whether personal devices, corporate devices, or a mixture of the two, deployment processes and configuration policies may differ.
|
||||||
|
|
||||||
For **personal devices**, companies need to be able to manage corporate apps and data on the device without impeding the employee’s ability to personalize it to meet their individual needs. The employee owns the device and corporate policy allows them to use it for both business and personal purposes, with the ability to add personal apps at their discretion. The main concern with personal devices is how organizations can prevent corporate data from being compromised, while still keeping personal data private and under the sole control of the employee. This requires that the device be able to support separation of apps and data with strict control of business and personal data traffic.
|
For **personal devices**, companies need to be able to manage corporate apps and data on the device without impeding the employee’s ability to personalize it to meet their individual needs. The employee owns the device and corporate policy allows them to use it for both business and personal purposes, with the ability to add personal apps at their discretion. The main concern with personal devices is how organizations can prevent corporate data from being compromised, while still keeping personal data private and under the sole control of the employee. This requires that the device be able to support separation of apps and data with strict control of business and personal data traffic.
|
||||||
@ -200,8 +200,8 @@ For more information about health attestation in Windows 10 Mobile, see the [Win
|
|||||||
**Windows Update for Business**
|
**Windows Update for Business**
|
||||||
Microsoft designed Windows Update for Business to provide IT administrators with additional Windows Update-centric management capabilities, such as the ability to deploy updates to groups of devices and to define maintenance windows for installing updates.
|
Microsoft designed Windows Update for Business to provide IT administrators with additional Windows Update-centric management capabilities, such as the ability to deploy updates to groups of devices and to define maintenance windows for installing updates.
|
||||||
|
|
||||||
**Windows Store for Business**
|
**Microsoft Store for Business**
|
||||||
The Windows Store for Business is the place where IT administrators can find, acquire, manage, and distribute apps to Windows 10 devices. This includes both internal line-of-business (LOB) apps, as well as commercially available third-party apps.
|
The Microsoft Store for Business is the place where IT administrators can find, acquire, manage, and distribute apps to Windows 10 devices. This includes both internal line-of-business (LOB) apps, as well as commercially available third-party apps.
|
||||||
|
|
||||||
## Configure
|
## Configure
|
||||||
|
|
||||||
@ -216,7 +216,7 @@ Not all MDM systems support every setting described in this guide. Some support
|
|||||||
|
|
||||||
Enforcing what accounts employees can use on a corporate device is important for avoiding data leaks and protecting privacy. Limiting the device to just one account controlled by the organization will reduce the risk of a data breach. However, you can choose to allow employees to add a personal Microsoft Account or other consumer email accounts.
|
Enforcing what accounts employees can use on a corporate device is important for avoiding data leaks and protecting privacy. Limiting the device to just one account controlled by the organization will reduce the risk of a data breach. However, you can choose to allow employees to add a personal Microsoft Account or other consumer email accounts.
|
||||||
|
|
||||||
- **Allow Microsoft Account** Specifies whether users are allowed to add a Microsoft Account to the device and use this account to authenticate to cloud services, such as purchasing apps in Windows Store, Xbox, or Groove.
|
- **Allow Microsoft Account** Specifies whether users are allowed to add a Microsoft Account to the device and use this account to authenticate to cloud services, such as purchasing apps in Microsoft Store, Xbox, or Groove.
|
||||||
- **Allow Adding Non-Microsoft Accounts** Specifies whether users are allowed to add email accounts other than Microsoft accounts.
|
- **Allow Adding Non-Microsoft Accounts** Specifies whether users are allowed to add email accounts other than Microsoft accounts.
|
||||||
|
|
||||||
### <a href="" id="email-account"></a>Email accounts
|
### <a href="" id="email-account"></a>Email accounts
|
||||||
@ -304,7 +304,7 @@ In addition to SCEP certificate management, Windows 10 Mobile supports deploymen
|
|||||||
Get more detailed information about MDM certificate management in the [Client Certificate Install CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](/windows/access-protection/installing-digital-certificates-on-windows-10-mobile).
|
Get more detailed information about MDM certificate management in the [Client Certificate Install CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](/windows/access-protection/installing-digital-certificates-on-windows-10-mobile).
|
||||||
Use the Allow Manual Root Certificate Installation setting to prevent users from manually installing root and intermediate CA certificates intentionally or accidently.
|
Use the Allow Manual Root Certificate Installation setting to prevent users from manually installing root and intermediate CA certificates intentionally or accidently.
|
||||||
|
|
||||||
>**Note:** To diagnose certificate-related issues on Windows 10 Mobile devices, use the free Certificates app in Windows Store. This Windows 10 Mobile app can help you:
|
>**Note:** To diagnose certificate-related issues on Windows 10 Mobile devices, use the free Certificates app in Microsoft Store. This Windows 10 Mobile app can help you:
|
||||||
- View a summary of all personal certificates
|
- View a summary of all personal certificates
|
||||||
- View the details of individual certificates
|
- View the details of individual certificates
|
||||||
- View the certificates used for VPN, Wi-Fi, and email authentication
|
- View the certificates used for VPN, Wi-Fi, and email authentication
|
||||||
@ -403,7 +403,7 @@ For more details on proxy settings, see [CM_ProxyEntries CSP](https://msdn.micro
|
|||||||
|
|
||||||
*Applies to: Corporate and personal devices*
|
*Applies to: Corporate and personal devices*
|
||||||
|
|
||||||
Organizations often use a VPN to control access to apps and resources on their company’s intranet. In addition to native Microsoft Point to Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Internet Key Exchange Protocol version 2 (IKEv2) VPNs, Windows 10 Mobile supports SSL VPN connections, which require a downloadable plugin from the Windows Store and are specific to the VPN vendor of your choice. These plugins work like apps and can be installed directly from the Windows Store using your MDM system (see App Management).
|
Organizations often use a VPN to control access to apps and resources on their company’s intranet. In addition to native Microsoft Point to Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Internet Key Exchange Protocol version 2 (IKEv2) VPNs, Windows 10 Mobile supports SSL VPN connections, which require a downloadable plugin from the Microsoft Store and are specific to the VPN vendor of your choice. These plugins work like apps and can be installed directly from the Microsoft Store using your MDM system (see App Management).
|
||||||
|
|
||||||
You can create and provision multiple VPN connection profiles and then deploy them to managed devices that run Windows 10 Mobile.
|
You can create and provision multiple VPN connection profiles and then deploy them to managed devices that run Windows 10 Mobile.
|
||||||
To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such as IKEv2, PPTP, or L2TP), you can use the following settings:
|
To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such as IKEv2, PPTP, or L2TP), you can use the following settings:
|
||||||
@ -421,11 +421,11 @@ To create a VPN profile that uses native Windows 10 Mobile VPN protocols (such a
|
|||||||
|
|
||||||
>**Note:** The easiest way to create a profile for a single sign-on experience with an EAP configuration XML is through the rasphone tool on a Windows 10 PC. Once you run the rasphone.exe, the configuration wizard will walk you through the necessary steps. For step-by-step instructions on creating the EAP configuration XML blob, see EAP configuration. You can use the resulting XML blob in the MDM system to create the VPN profile on Windows 10 Mobile phone. If you have multiple certificates on the devices, you may want to configure filtering conditions for automatic certificate selection, so the employee does not need to select an authentication certificate every time the VPN is turned on. See this article for details. Windows 10 for PCs and Windows 10 Mobile have the same VPN client.
|
>**Note:** The easiest way to create a profile for a single sign-on experience with an EAP configuration XML is through the rasphone tool on a Windows 10 PC. Once you run the rasphone.exe, the configuration wizard will walk you through the necessary steps. For step-by-step instructions on creating the EAP configuration XML blob, see EAP configuration. You can use the resulting XML blob in the MDM system to create the VPN profile on Windows 10 Mobile phone. If you have multiple certificates on the devices, you may want to configure filtering conditions for automatic certificate selection, so the employee does not need to select an authentication certificate every time the VPN is turned on. See this article for details. Windows 10 for PCs and Windows 10 Mobile have the same VPN client.
|
||||||
|
|
||||||
Windows Store–based VPN plugins for the VPN connection allow you to create a VPN plugin profile with the following attributes:
|
Microsoft Store–based VPN plugins for the VPN connection allow you to create a VPN plugin profile with the following attributes:
|
||||||
|
|
||||||
- **VPN server** A comma-separated list of VPN servers; you can specify the servers with a URL, fully qualified host name, or IP address
|
- **VPN server** A comma-separated list of VPN servers; you can specify the servers with a URL, fully qualified host name, or IP address
|
||||||
- **Custom configuration** An HTML-encoded XML blob for SSL–VPN plugin–specific configuration information (e.g., authentication information) that the plugin provider requires
|
- **Custom configuration** An HTML-encoded XML blob for SSL–VPN plugin–specific configuration information (e.g., authentication information) that the plugin provider requires
|
||||||
- **Windows Store VPN plugin family name** Specifies the Windows Store package family name for the Windows Store–based VPN plugin
|
- **Microsoft Store VPN plugin family name** Specifies the Microsoft Store package family name for the Microsoft Store–based VPN plugin
|
||||||
|
|
||||||
In addition, you can specify per VPN Profile:
|
In addition, you can specify per VPN Profile:
|
||||||
|
|
||||||
@ -491,36 +491,36 @@ Windows 10 makes it possible to develop apps that work seamlessly across multipl
|
|||||||
|
|
||||||
For compatibility with existing apps, Windows Phone 8.1 apps still run on Windows 10 Mobile devices, easing the migration to the newest platform. Microsoft recommend migrating your apps to UWP to take full advantage of the improvements in Windows 10 Mobile. In addition, bridges have been developed to easily and quickly update existing Windows Phone 8.1 (Silverlight) and iOS apps to the UWP.
|
For compatibility with existing apps, Windows Phone 8.1 apps still run on Windows 10 Mobile devices, easing the migration to the newest platform. Microsoft recommend migrating your apps to UWP to take full advantage of the improvements in Windows 10 Mobile. In addition, bridges have been developed to easily and quickly update existing Windows Phone 8.1 (Silverlight) and iOS apps to the UWP.
|
||||||
|
|
||||||
Microsoft also made it easier for organizations to license and purchase UWP apps via Windows Store for Business and deploy them to employee devices using the Windows Store, or an MDM system, that can be integrated with the Windows Store for Business. Putting apps into the hands of mobile workers is critical, but you also need an efficient way to ensure those apps comply with corporate policies for data security.
|
Microsoft also made it easier for organizations to license and purchase UWP apps via Microsoft Store for Business and deploy them to employee devices using the Microsoft Store, or an MDM system, that can be integrated with the Microsoft Store for Business. Putting apps into the hands of mobile workers is critical, but you also need an efficient way to ensure those apps comply with corporate policies for data security.
|
||||||
|
|
||||||
To learn more about Universal Windows apps, see the [Guide to Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/en-us/library/windows/apps/dn894631.aspx) for additional information, or take this [Quick Start Challenge: Universal Windows Apps in Visual Studio](https://mva.microsoft.com/en-US/training-courses/quick-start-challenge-universal-windows-apps-in-visual-studio-14477?l=Be2FMfgmB_505192797). Also, see [Porting apps to Windows 10](https://msdn.microsoft.com/en-us/windows/uwp/porting/index).
|
To learn more about Universal Windows apps, see the [Guide to Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/en-us/library/windows/apps/dn894631.aspx) for additional information, or take this [Quick Start Challenge: Universal Windows Apps in Visual Studio](https://mva.microsoft.com/en-US/training-courses/quick-start-challenge-universal-windows-apps-in-visual-studio-14477?l=Be2FMfgmB_505192797). Also, see [Porting apps to Windows 10](https://msdn.microsoft.com/en-us/windows/uwp/porting/index).
|
||||||
|
|
||||||
### <a href="" id="windows-store-for-business"></a>Windows Store for Business: Sourcing the right app
|
### <a href="" id="windows-store-for-business"></a>Microsoft Store for Business: Sourcing the right app
|
||||||
|
|
||||||
*Applies to: Corporate and personal devices*
|
*Applies to: Corporate and personal devices*
|
||||||
|
|
||||||
The first step in app management is to obtain the apps your users need. You can develop your own apps or source your apps from the Windows Store. With Windows Phone 8.1, an MSA was needed to acquire and install apps from the Windows Store. With the Windows Store for Business, Microsoft enables organizations to acquire apps for employees from a private store with the Windows Store, without the need for MSAs on Windows 10 devices.
|
The first step in app management is to obtain the apps your users need. You can develop your own apps or source your apps from the Microsoft Store. With Windows Phone 8.1, an MSA was needed to acquire and install apps from the Microsoft Store. With the Microsoft Store for Business, Microsoft enables organizations to acquire apps for employees from a private store with the Microsoft Store, without the need for MSAs on Windows 10 devices.
|
||||||
|
|
||||||
Windows Store for Business is a web portal that allows IT administrators to find, acquire, manage, and distribute apps to Windows 10 devices.
|
Microsoft Store for Business is a web portal that allows IT administrators to find, acquire, manage, and distribute apps to Windows 10 devices.
|
||||||
|
|
||||||
Azure AD authenticated managers have access to Windows Store for Business functionality and settings, and store managers can create a private category of apps that are specific and private to their organization. (You can get more details about what specific Azure AD accounts have access to Windows Store for Business here). Windows Store for Business enables organizations to purchase app licenses for their organization and make apps available to their employees. In addition to commercially available apps, your developers can publish line-of-business (LOB) apps to Windows Store for Business by request. You can also integrate their Windows Store for Business subscriptions with their MDM systems, so the MDM system can distribute and manage apps from Windows Store for Business.
|
Azure AD authenticated managers have access to Microsoft Store for Business functionality and settings, and store managers can create a private category of apps that are specific and private to their organization. (You can get more details about what specific Azure AD accounts have access to Microsoft Store for Business here). Microsoft Store for Business enables organizations to purchase app licenses for their organization and make apps available to their employees. In addition to commercially available apps, your developers can publish line-of-business (LOB) apps to Microsoft Store for Business by request. You can also integrate their Microsoft Store for Business subscriptions with their MDM systems, so the MDM system can distribute and manage apps from Microsoft Store for Business.
|
||||||
|
|
||||||
Windows Store for Business supports app distribution under two licensing models: online and offline.
|
Microsoft Store for Business supports app distribution under two licensing models: online and offline.
|
||||||
|
|
||||||
The online model (store-managed) is the recommended method, and supports both personal device and corporate device management scenarios. To install online apps, the device must have Internet access at the time of installation. On corporate devices, an employee can be authenticated with an Azure AD account to install online apps. On personal devices, an employee must register their device with Azure AD to be able to install corporate licensed online apps.
|
The online model (store-managed) is the recommended method, and supports both personal device and corporate device management scenarios. To install online apps, the device must have Internet access at the time of installation. On corporate devices, an employee can be authenticated with an Azure AD account to install online apps. On personal devices, an employee must register their device with Azure AD to be able to install corporate licensed online apps.
|
||||||
Corporate device users will find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system app catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention.
|
Corporate device users will find company licensed apps in the Store app on their phone in a private catalog. When an MDM system is associated with the Store for Business, IT administrators can present Store apps within the MDM system app catalog where users can find and install their desired apps. IT administrators can also push required apps directly to employee devices without the employee’s intervention.
|
||||||
|
|
||||||
Employees with personal devices can install apps licensed by their organization using the Store app on their device. They can use either the Azure AD account or Microsoft Account within the Store app if they wish to purchase personal apps. If you allow employees with corporate devices to add a secondary Microsoft Account (MSA), the Store app on the device provides a unified method for installing personal and corporate apps.
|
Employees with personal devices can install apps licensed by their organization using the Store app on their device. They can use either the Azure AD account or Microsoft Account within the Store app if they wish to purchase personal apps. If you allow employees with corporate devices to add a secondary Microsoft Account (MSA), the Store app on the device provides a unified method for installing personal and corporate apps.
|
||||||
|
|
||||||
Online licensed apps do not need to be transferred or downloaded from the Windows Store to the MDM system to be distributed and managed. When an employee chooses a company-owned app, it will automatically be installed from the cloud. Also, apps will be automatically updated when a new version is available or can be removed if needed. When an app is removed from a device by the MDM system or the user, Windows Store for Business reclaims the license so it can be used for another user or on another device.
|
Online licensed apps do not need to be transferred or downloaded from the Microsoft Store to the MDM system to be distributed and managed. When an employee chooses a company-owned app, it will automatically be installed from the cloud. Also, apps will be automatically updated when a new version is available or can be removed if needed. When an app is removed from a device by the MDM system or the user, Microsoft Store for Business reclaims the license so it can be used for another user or on another device.
|
||||||
|
|
||||||
To distribute an app offline (organization-managed), the app must be downloaded from the Windows Store for Business. This can be accomplished in the Windows Store for Business portal by an authorized administrator. Offline licensing requires the app developer to opt-in to the licensing model, as the Windows Store is no longer able to track licenses for the developer. If the app developer doesn’t allow download of the app from Windows Store, then you must obtain the files directly from the developer or use the online licensing method.
|
To distribute an app offline (organization-managed), the app must be downloaded from the Microsoft Store for Business. This can be accomplished in the Microsoft Store for Business portal by an authorized administrator. Offline licensing requires the app developer to opt-in to the licensing model, as the Microsoft Store is no longer able to track licenses for the developer. If the app developer doesn’t allow download of the app from Microsoft Store, then you must obtain the files directly from the developer or use the online licensing method.
|
||||||
|
|
||||||
To install acquired Windows Store or LOB apps offline on a Windows 10 Mobile device, IT administrators can use an MDM system. The MDM system distributes the app packages that you downloaded from Windows Store (also called sideloading) to Windows 10 Mobile devices. Support for offline app distribution depends on the MDM system you are using, so consult your MDM vendor documentation for details. You can fully automate the app deployment process so that no user intervention is required.
|
To install acquired Microsoft Store or LOB apps offline on a Windows 10 Mobile device, IT administrators can use an MDM system. The MDM system distributes the app packages that you downloaded from Microsoft Store (also called sideloading) to Windows 10 Mobile devices. Support for offline app distribution depends on the MDM system you are using, so consult your MDM vendor documentation for details. You can fully automate the app deployment process so that no user intervention is required.
|
||||||
|
|
||||||
Windows Store apps or LOB apps that have been uploaded to the Windows Store for Business are automatically trusted on all Windows devices, as they are cryptographically signed with Windows Store certificates. LOB apps that are uploaded to the Windows Store for Business are private to your organization and are never visible to other companies or consumers. If you do not want to upload your LOB apps, you have to establish trust for the app on your devices. To establish this trust, you’ll need to generate a signing certificate with your Public Key Infrastructure and add your chain of trust to the trusted certificates on the device (see the certificates section). You can install up to 20 self-signed LOB apps per device with Windows 10 Mobile. To install more than 20 apps on a device, you can purchase a signing certificate from a trusted public Certificate Authority, or upgrade your devices to Windows 10 Mobile Enterprise edition.
|
Microsoft Store apps or LOB apps that have been uploaded to the Microsoft Store for Business are automatically trusted on all Windows devices, as they are cryptographically signed with Microsoft Store certificates. LOB apps that are uploaded to the Microsoft Store for Business are private to your organization and are never visible to other companies or consumers. If you do not want to upload your LOB apps, you have to establish trust for the app on your devices. To establish this trust, you’ll need to generate a signing certificate with your Public Key Infrastructure and add your chain of trust to the trusted certificates on the device (see the certificates section). You can install up to 20 self-signed LOB apps per device with Windows 10 Mobile. To install more than 20 apps on a device, you can purchase a signing certificate from a trusted public Certificate Authority, or upgrade your devices to Windows 10 Mobile Enterprise edition.
|
||||||
|
|
||||||
Learn more about the [Windows Store for Business](/microsoft-store/index).
|
Learn more about the [Microsoft Store for Business](/microsoft-store/index).
|
||||||
|
|
||||||
### <a href="" id="managing-apps"></a>Managing apps
|
### <a href="" id="managing-apps"></a>Managing apps
|
||||||
|
|
||||||
@ -528,19 +528,19 @@ Learn more about the [Windows Store for Business](/microsoft-store/index).
|
|||||||
|
|
||||||
IT administrators can control which apps are allowed to be installed on Windows 10 Mobile devices and how they should be kept up-to-date.
|
IT administrators can control which apps are allowed to be installed on Windows 10 Mobile devices and how they should be kept up-to-date.
|
||||||
|
|
||||||
Windows 10 Mobile includes AppLocker, which enables administrators to create allow or disallow (sometimes also called whitelist/blacklist) lists of apps from the Windows Store. This capability extends to built-in apps, as well, such as Xbox, Groove, text messaging, email, and calendar, etc. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes. However, it is not always an easy approach to find a balance between what employees need or request and security concerns. Creating allow or disallow lists also requires keeping up with the changing app landscape in the Windows Store.
|
Windows 10 Mobile includes AppLocker, which enables administrators to create allow or disallow (sometimes also called whitelist/blacklist) lists of apps from the Microsoft Store. This capability extends to built-in apps, as well, such as Xbox, Groove, text messaging, email, and calendar, etc. The ability to allow or deny apps helps to ensure that people use their mobile devices for their intended purposes. However, it is not always an easy approach to find a balance between what employees need or request and security concerns. Creating allow or disallow lists also requires keeping up with the changing app landscape in the Microsoft Store.
|
||||||
|
|
||||||
For more details, see [AppLocker CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920019(v=vs.85).aspx).
|
For more details, see [AppLocker CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920019(v=vs.85).aspx).
|
||||||
|
|
||||||
In addition to controlling which apps are allowed, IT professionals can also implement additional app management settings on Windows 10 Mobile, using an MDM.
|
In addition to controlling which apps are allowed, IT professionals can also implement additional app management settings on Windows 10 Mobile, using an MDM.
|
||||||
|
|
||||||
- **Allow All Trusted Apps** Whether users can sideload apps on the device.
|
- **Allow All Trusted Apps** Whether users can sideload apps on the device.
|
||||||
- **Allow App Store Auto Update** Whether automatic updates of apps from Windows Store are allowed.
|
- **Allow App Store Auto Update** Whether automatic updates of apps from Microsoft Store are allowed.
|
||||||
- **Allow Developer Unlock** Whether developer unlock is allowed.
|
- **Allow Developer Unlock** Whether developer unlock is allowed.
|
||||||
- **Allow Shared User App Data** Whether multiple users of the same app can share data.
|
- **Allow Shared User App Data** Whether multiple users of the same app can share data.
|
||||||
- **Allow Store** Whether Windows Store app is allowed to run. This will completely block the user from installing apps from the Store, but will still allow app distribution through an MDM system.
|
- **Allow Store** Whether Microsoft Store app is allowed to run. This will completely block the user from installing apps from the Store, but will still allow app distribution through an MDM system.
|
||||||
- **Application Restrictions** An XML blob that defines the app restrictions for a device. The XML blob can contain an app allow or deny list. You can allow or deny apps based on their app ID or publisher. See AppLocker above.
|
- **Application Restrictions** An XML blob that defines the app restrictions for a device. The XML blob can contain an app allow or deny list. You can allow or deny apps based on their app ID or publisher. See AppLocker above.
|
||||||
- **Disable Store Originated Apps** Disables the launch of all apps from Windows Store that came pre-installed or were downloaded before the policy was applied.
|
- **Disable Store Originated Apps** Disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded before the policy was applied.
|
||||||
- **Require Private Store Only** Whether the private store is exclusively available to users in the Store app on the device. If enabled, only the private store is available. If disabled, the retail catalog and private store are both available.
|
- **Require Private Store Only** Whether the private store is exclusively available to users in the Store app on the device. If enabled, only the private store is available. If disabled, the retail catalog and private store are both available.
|
||||||
- **Restrict App Data to System Volume** Whether app data is allowed only on the system drive or can be stored on an SD card.
|
- **Restrict App Data to System Volume** Whether app data is allowed only on the system drive or can be stored on an SD card.
|
||||||
- **Restrict App to System Volume** Whether app installation is allowed only to the system drive or can be installed on an SD card.
|
- **Restrict App to System Volume** Whether app installation is allowed only to the system drive or can be installed on an SD card.
|
||||||
@ -1035,7 +1035,7 @@ The remote assistance features in Windows 10 Mobile help resolve issues that use
|
|||||||
|
|
||||||
These remote management features help organizations reduce the IT effort required to manage devices. They also help users quickly regain use of their device should they misplace it or forget the device password.
|
These remote management features help organizations reduce the IT effort required to manage devices. They also help users quickly regain use of their device should they misplace it or forget the device password.
|
||||||
|
|
||||||
>**Remote control software** Microsoft does not provide build-in remote control software, but works with partners to deliver these capabilities and services. With version 1607, remote assistant and control applications are available in the Windows Store.
|
>**Remote control software** Microsoft does not provide build-in remote control software, but works with partners to deliver these capabilities and services. With version 1607, remote assistant and control applications are available in the Microsoft Store.
|
||||||
|
|
||||||
## Retire
|
## Retire
|
||||||
|
|
||||||
@ -1065,7 +1065,7 @@ A better option than wiping the entire device is to use Windows Information Prot
|
|||||||
- [Mobile device management](https://go.microsoft.com/fwlink/p/?LinkId=734050)
|
- [Mobile device management](https://go.microsoft.com/fwlink/p/?LinkId=734050)
|
||||||
- [Enterprise Mobility + Security](https://go.microsoft.com/fwlink/p/?LinkId=723984)
|
- [Enterprise Mobility + Security](https://go.microsoft.com/fwlink/p/?LinkId=723984)
|
||||||
- [Overview of Mobile Device Management for Office 365](https://go.microsoft.com/fwlink/p/?LinkId=734052)
|
- [Overview of Mobile Device Management for Office 365](https://go.microsoft.com/fwlink/p/?LinkId=734052)
|
||||||
- [Windows Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=722910)
|
- [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=722910)
|
||||||
|
|
||||||
|
|
||||||
## Revision History
|
## Revision History
|
||||||
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user