From d7825b5f07433bf5635dfd347304eceb8eec4149 Mon Sep 17 00:00:00 2001 From: isaiahng Date: Wed, 14 Sep 2016 11:13:43 -0700 Subject: [PATCH 1/4] Update device-reset-surface-hub.md As of RS1, device reset should be much quicker - between 40 min to 2 hours. --- devices/surface-hub/device-reset-surface-hub.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index fe97b78978..34472875b7 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -44,7 +44,7 @@ Initiating a reset will return the device to the last cumulative Windows update, ![Image showing Reset device option in Settings app for Surface Hub.](images/sh-settings-reset-device.png) **Important Note**
-Performing a device reset may take up to 6 hours. Do not interrupt the reset process. Interrupting the process will render the device inoperable, requiring warranty service to return to normal functionality. +Performing a device reset may take up to 2 hours. Do not interrupt the reset process. Interrupting the process will render the device inoperable, requiring warranty service to return to normal functionality. After the reset, Surface Hub restarts the [first run program](first-run-program-surface-hub.md) again. @@ -53,4 +53,4 @@ After the reset, Surface Hub restarts the [first run program](first-run-program- [Manage Microsoft Surface Hub](manage-surface-hub.md) -[Microsoft Surface Hub administrator's guide](surface-hub-administrators-guide.md) \ No newline at end of file +[Microsoft Surface Hub administrator's guide](surface-hub-administrators-guide.md) From 32ebf3910951cc9fc90e526ef10969678004306f Mon Sep 17 00:00:00 2001 From: JanKeller1 Date: Wed, 14 Sep 2016 13:01:32 -0700 Subject: [PATCH 2/4] Fixed one more disappearing backslash --- .../appv-application-publishing-and-client-interaction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/manage/appv-application-publishing-and-client-interaction.md b/windows/manage/appv-application-publishing-and-client-interaction.md index 140600ffd6..b99eb36f43 100644 --- a/windows/manage/appv-application-publishing-and-client-interaction.md +++ b/windows/manage/appv-application-publishing-and-client-interaction.md @@ -500,7 +500,7 @@ App-V registry roaming falls into two scenarios, as shown in the following table

When a standard user launches an App-V application, both HKLM and HKCU for App-V applications are stored in the HKCU hive on the machine. This presents as two distinct paths:

The locations are enabled for roaming based on the operating system settings.

From 462e57634bb488a3c80d74db9130bbad4b4f4787 Mon Sep 17 00:00:00 2001 From: isaiahng Date: Wed, 14 Sep 2016 15:57:32 -0700 Subject: [PATCH 3/4] Update device-reset-surface-hub.md Added information about how to reset the device from Windows RE. --- devices/surface-hub/device-reset-surface-hub.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index 34472875b7..e222434c5e 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -30,7 +30,7 @@ Initiating a reset will return the device to the last cumulative Windows update, - Local admins on the device - Configurations from MDM or the Settings app -**To reset a Surface Hub** +**To reset a Surface Hub from Settings**
1. On your Surface Hub, open **Settings**. ![Image showing Settings app for Surface Hub.](images/sh-settings.png) @@ -43,6 +43,16 @@ Initiating a reset will return the device to the last cumulative Windows update, ![Image showing Reset device option in Settings app for Surface Hub.](images/sh-settings-reset-device.png) +**To reset a Surface Hub from Windows Recovery Environment**
+On rare occasions, a Surface Hub may encounter an error while cleaning up user and app data at the end of a session. When this happens, the device will automatically reboot and try again. But if this operation fails repeatedly, the device will be automatically locked to protect user data. To unlock it, you must reset the device from [Windows Recovery Environment](https://technet.microsoft.com/en-us/library/cc765966(v=ws.10).aspx) (Windows RE). + +To reset a Surface Hub from Windows RE: + +1. From the welcome screen, toggle the Surface Hub's power switch 3 times. Wait a few seconds between each toggle. See the [Surface Hub Site Readiness Guide](https://www.microsoft.com/surface/support/surface-hub/surface-hub-site-readiness-guide) for help with locating the power switch. +2. The device should automatically boot into Windows RE. Select **Advanced Repair**. +3. Select **Reset**. +4. If prompted, enter your device's BitLocker key. + **Important Note**
Performing a device reset may take up to 2 hours. Do not interrupt the reset process. Interrupting the process will render the device inoperable, requiring warranty service to return to normal functionality. From dd43b079ce504acd4e2f7a376554d583254af4c1 Mon Sep 17 00:00:00 2001 From: JanKeller1 Date: Wed, 14 Sep 2016 18:13:24 -0700 Subject: [PATCH 4/4] Changing bold to hdg for linking purposes --- ...-getting-started-on-the-device-guard-deployment-process.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/keep-secure/planning-and-getting-started-on-the-device-guard-deployment-process.md b/windows/keep-secure/planning-and-getting-started-on-the-device-guard-deployment-process.md index 0e1ec374bc..0790236e3f 100644 --- a/windows/keep-secure/planning-and-getting-started-on-the-device-guard-deployment-process.md +++ b/windows/keep-secure/planning-and-getting-started-on-the-device-guard-deployment-process.md @@ -16,7 +16,7 @@ author: brianlic-msft This topic provides a roadmap for planning and getting started on the Device Guard deployment process, with links to topics that provide additional detail. Planning for Device Guard deployment involves looking at both the end-user and the IT pro impact of your choices. Use the following steps to guide you. -**Planning** +## Planning 1. **Review requirements, especially hardware requirements for VBS**. Review the virtualization-based security (VBS) features described in [How Device Guard features help protect against threats](introduction-to-device-guard-virtualization-based-security-and-code-integrity-policies.md#how-device-guard-features-help-protect-against-threats). Then you can assess your end-user systems to see how many support the VBS features you are interested in, as described in [Hardware, firmware, and software requirements for Device Guard](requirements-and-deployment-planning-guidelines-for-device-guard.md#hardware-firmware-and-software-requirements-for-device-guard). @@ -33,7 +33,7 @@ This topic provides a roadmap for planning and getting started on the Device Gua 4. **Identify LOB applications that are currently unsigned**. Although requiring signed code (through code integrity policies) protects against many threats, your organization might use unsigned LOB applications, for which the process of signing might be difficult. You might also have applications that are signed, but you want to add a secondary signature to them. If so, identify these applications, because you will need to create a catalog file for them. For a basic description of catalog files, see the table in [Introduction to Device Guard: virtualization-based security and code integrity policies](introduction-to-device-guard-virtualization-based-security-and-code-integrity-policies.md). For more background information about catalog files, see [Reviewing your applications: application signing and catalog files](requirements-and-deployment-planning-guidelines-for-device-guard.md#reviewing-your-applications-application-signing-and-catalog-files). -**Getting started on the deployment process** +## Getting started on the deployment process 1. **Optionally, create a signing certificate for code integrity policies**. As you deploy code integrity policies, you might need to sign catalog files or code integrity policies internally. To do this, you will either need a publicly issued code signing certificate (that you purchase) or an internal CA. If you choose to use an internal CA, you will need to create a code signing certificate. For more information, see [Optional: Create a code signing certificate for code integrity policies](optional-create-a-code-signing-certificate-for-code-integrity-policies.md).