deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge branch 'main' into ADO-9517656-Update-for-Business

Browse Source
This commit is contained in:
Gary Moore 2025-03-31 09:10:35 -07:00 committed by GitHub
commit a7454b5081
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
21 changed files with 1494 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/client-management/images/9687427-text-actions-click-to-do.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 1.6 MiB

106
windows/client-management/manage-click-to-do.md Normal file
View File

@ -0,0 +1,106 @@
---
title: Manage Click to Do for Windows clients
description: Learn how to manage Click to Do for commercial environments and about Click to Do features.
ms.topic: how-to
ms.subservice: windows-copilot
ms.date: 03/28/2025
ms.author: mstewart
author: mestew
ms.collection:
- windows-copilot
- magic-ai-copilot
appliesto:
- ✅ <a href="https://www.microsoft.com/windows/business/devices/copilot-plus-pcs#copilot-plus-pcs" target="_blank">Copilot+ PCs</a>
---
# Manage Click to Do
<!--9687427-->
>**Looking for consumer information?** See [Click to Do: do more with what's on your screen](https://support.microsoft.com/topic/6848b7d5-7fb0-4c43-b08a-443d6d3f5955).
Click to Do (preview) helps users to get things done faster by identifying text and images that are currently on their screen so they can perform actions on them. This article provides information about Click to Do and how to manage it in a commercial environment.
> [!NOTE]
> - The policy to manage Click to Do is now available in preview to Copilot+ PCs through the Windows Insider Program. For more information, see the [Windows Insider blog](https://blogs.windows.com/windows-insider/2025/03/28/announcing-windows-11-insider-preview-build-26120-3653-beta-channel/).
> - In-market commercial devices are defined as devices with an Enterprise (ENT) or Education (EDU) SKU or any premium SKU device that is managed by an IT administrator (whether via Microsoft Endpoint Manager or other endpoint management solution), has a volume license key, or is joined to a domain. Commercial devices during Out of Box Experience (OOBE) are defined as those with ENT or EDU SKU or any premium SKU device that has a volume license key or is Microsoft Entra joined.
> - Click to Do is optimized for select languages English, Chinese (simplified), French, German, Japanese, and Spanish. Content-based and storage limitations apply. For more information, see [https://aka.ms/copilotpluspcs](https://aka.ms/copilotpluspcs).
## What is Click to Do?
Click to Do (preview) analyzes what's on the screen and then allows users to choose the text or image they want to take action on. Users can open Click to Do by using **Windows key** + **Q** or with **Windows key** + **mouse click**. Other entry points for Click to Do include Snipping Tool, search results, and the Start menu.
The analysis of screenshots is always performed locally on the device. Analysis only begins after users actively engage with Click to Do and ends when they exit Click to Do. Click to Do only identifies text and images, not the content of those text or images. It doesn't analyze any content in, for example, minimized applications that aren't on the screen.
Content is only shared if users choose to complete an action like **Search the web**. When Click to Do is active, the cursor is blue and white. The cursor also changes shape depending on the type of info beneath it. What users can do with the info changes based on what kind of content Click to Do detects. For instance, users can perform actions on text such as copy, summarize or rewrite it, or share it. For images, users can perform actions such as copy, save, or blurring the background using Microsoft Photos.
:::image type="content" source="images/9687427-text-actions-click-to-do.png" alt-text="Screenshot of the text actions in Click to Do" lightbox="images/9687427-text-actions-click-to-do.png":::
## System requirements
Click to Do has the following minimum requirements:
- A [Copilot+ PC](https://aka.ms/copilotpluspcs)
- 40 TOPs NPU ([neural processing unit](https://support.microsoft.com/windows/all-about-neural-processing-units-npus-e77a5637-7705-4915-96c8-0c6a975f9db4))
- 16 GB RAM
- 8 logical processors
- 256 GB storage capacity
The more intelligent text actions are available only on Snapdragon-powered Copilot+ PCs today when your language is set to English with support for AMD and Intel-powered Copilot+ PCs coming soon.
## Configure policy for Click to Do
When activated, Click to Do takes a screenshot of the user's screen and analyzes it to present actions. Click to Do ends when users exit it, and it can't take screenshots while closed. Screenshot analysis is always performed locally on the device. By default, Click to Do is enabled for users.
The policy setting below allows you to determine whether Click to Do is available for users on their device:
| &nbsp; | Setting |
|---|---|
| **CSP** | ./Device/Vendor/MSFT/Policy/Config/WindowsAI/[DisableClickToDo](mdm/policy-csp-windowsai.md#disableclicktodo) </br></br> ./User/Vendor/MSFT/Policy/Config/WindowsAI/[DisableClickToDo](mdm/policy-csp-windowsai.md#disableclicktodo)|
| **Group policy** | Computer Configuration > Administrative Templates > Windows Components > Windows AI > **Disable Click to Do** </br></br>User Configuration > Administrative Templates > Windows Components > Windows AI > **Disable Click to Do**|
- When the policy is enabled, the Click to Do component and entry points won't be available to users.
- When the policy is disabled or not configured, users will have Click to Do available on their device.
> [!Important]
> This policy doesn't affect Click to Do in Recall. For more information, see [Manage Recall](manage-recall.md).
## Click to Do privacy considerations
When you choose to send info from Click to Do to an app, like Paint, Click to Do will temporarily save this info in order to complete the transfer. Click to Do creates a temporary file in the following location:
- `C:\Users\{username}\AppData\Local\Temp`
Temporary files may also be saved when you choose send feedback. These temporary files aren't saved long term. Click to Do doesn't keep any content from your screen after completing the requested action, but some [diagnostic data](/windows/privacy/configure-windows-diagnostic-data-in-your-organization) is gathered to keep Click to Do secure, up to date, and working.
Click to Do's more intelligent text actions, including **Summarize**, **Rewrite (Casual)**, **Rewrite (Formal)**,**Rewrite (Refine)**, and **Create a bulleted list** are powered by a state-of-the-art small language model called Phi Silica. Phi Silica leverages the NPU and the language model runs locally on Copilot+ PCs. Phi Silica ships inbox with Windows on Copilot+ PCs.
When a user clicks on the Click to Do text actions, the selected text and the chosen action are sent to Phi Silica as part of a prompt. Phi Silica intelligently rewrites the selected text as per the user's request and streams back the response from the model. Phi Silica provides responses quickly and efficiently, using little power. For more information, see [Phi Silica, small but mighty on-device SLM](https://blogs.windows.com/windowsexperience/?p=179250).
In keeping with Microsoft's commitment to data privacy and security, all saved images and processed data are kept on the device and processed locally. However, Click to Do allows you to choose if you want to get more information about your selected content online. When you choose one of the following Click to Do actions, the selected content is sent to the online provider from your local device to complete your request:
- **Search the web**: Sends the selected content to Bing using Microsoft Edge
- **Open website**: Opens the selected website in your default browser
- **Visual search with Bing**: Sends the selected content to [Bing visual search](https://support.microsoft.com/topic/62771a0c-4daa-47e4-a9f7-e1bfa85f0d7c) using your default browser
## Microsoft's commitment to responsible AI and Privacy
Microsoft has been working to advance AI responsibly since 2017, when we first defined our AI principles and later operationalized our approach through our Responsible AI Standard. Privacy and security are core principles as we develop and deploy AI systems. We work to help our customers use our AI products responsibly, sharing our learnings, and building trust-based partnerships. For more about our responsible AI efforts, the principles that guide us, and the tools and capabilities we've created to assure that we develop AI technology responsibly, see [Responsible AI](https://www.microsoft.com/ai/responsible-ai).
To provide clarity on how each AI feature works, it's important for you to understand its capabilities and limitations. You should understand the choices available to you in an AI feature and the responsibility associated with those choices.
Click to Do suggests actions that you can take, and you can choose the apps that will be the provider (if applicable) for those actions. Once you choose the action and provider for the action, the results from that action are the responsibility of the provider. For example, from Click to Do you can choose the action Remove background with Paint, which means you've chosen Paint as the provider for the action. Once you have selected the action from the Click to Do context menu, it launches the Paint app and the selected image is processed by Paint.
Click to Do uses optical character recognition (OCR) on your PC to detect text entities on screenshots. For more information about OCR, see [Transparency note and use cases for OCR](/legal/cognitive-services/computer-vision/ocr-transparency-note).
Click to Do's intelligent text actions use a small language model called Phi Silica. For more information on Phi Silica, see [Get started with Phi Silica in the Windows App SDK](/windows/ai/apis/phi-silica#responsible-ai). For information about the Responsible AI principles guiding Phi Silica deployment and the safety measures in place when using generative language models, see [Responsible Generative AI Development on Windows](/windows/ai/rai).
Click to Do's models have undergone fairness assessments, alongside comprehensive responsible AI, security and privacy assessments, to make sure the technology is effective and equitable while adhering to Microsoft's Responsible AI best practices.
## Related links
- [Policy CSP - WindowsAI](/windows/client-management/mdm/policy-csp-windowsai)
- [Responsible AI](https://www.microsoft.com/ai/responsible-ai)

13
windows/client-management/mdm/policies-in-preview.md
View File

@ -1,7 +1,7 @@
---
title: Configuration service provider preview policies
description: Learn more about configuration service provider (CSP) policies that are available for Windows Insider Preview.
ms.date: 02/13/2025
ms.date: 03/26/2025
ms.topic: generated-reference
---
@ -141,6 +141,17 @@ This article lists the policies that are applicable for Windows Insider Preview
- [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-remotedesktopservices.md#ts_server_remoteapp_use_shellappruntime)
## RemoteRemediation CSP
- [EnableCloudRemediation](remoteremediation-csp.md#cloudremediationsettingsenablecloudremediation)
- [EnableAutoRemediation](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingsenableautoremediation)
- [SetTimeToReboot](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingssettimetoreboot)
- [SetRetryInterval](remoteremediation-csp.md#cloudremediationsettingsautoremediationsettingssetretryinterval)
- [NetworkSSID](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkssid)
- [NetworkPassword](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpassword)
- [NetworkPasswordEncryptionType](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptiontype)
- [NetworkPasswordEncryptionStore](remoteremediation-csp.md#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptionstore)
## SettingsSync
- [EnableWindowsbackup](policy-csp-settingssync.md#enablewindowsbackup)

4
windows/client-management/mdm/policy-csp-admx-desktop.md
View File

@ -1,7 +1,7 @@
---
title: ADMX_Desktop Policy CSP
description: Learn more about the ADMX_Desktop Area in Policy CSP.
ms.date: 03/12/2025
ms.date: 03/20/2025
ms.topic: generated-reference
---
@ -224,7 +224,7 @@ This setting prevents users from trying to enable or disable Active Desktop whil
If you disable this setting or don't configure it, Active Desktop is disabled by default, but users can enable it.
> [!NOTE]
> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.
> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting ( in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.
<!-- ForceActiveDesktopOn-Description-End -->
<!-- ForceActiveDesktopOn-Editable-Begin -->

83
windows/client-management/mdm/policy-csp-windowsai.md
View File

@ -1,7 +1,7 @@
---
title: WindowsAI Policy CSP
description: Learn more about the WindowsAI Area in Policy CSP.
ms.date: 03/26/2025
ms.date: 03/27/2025
ms.topic: generated-reference
---
@ -22,7 +22,7 @@ ms.topic: generated-reference
<!-- AllowRecallEnablement-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- AllowRecallEnablement-Applicability-End -->
<!-- AllowRecallEnablement-OmaUri-Begin -->
@ -91,7 +91,7 @@ This policy setting allows you to determine whether the Recall optional componen
<!-- DisableAIDataAnalysis-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- DisableAIDataAnalysis-Applicability-End -->
<!-- DisableAIDataAnalysis-OmaUri-Begin -->
@ -158,13 +158,75 @@ If you set this policy to disabled, end users will have a choice to save snapsho
<!-- DisableAIDataAnalysis-End -->
<!-- DisableClickToDo-Begin -->
## DisableClickToDo
<!-- DisableClickToDo-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- DisableClickToDo-Applicability-End -->
<!-- DisableClickToDo-OmaUri-Begin -->
```User
./User/Vendor/MSFT/Policy/Config/WindowsAI/DisableClickToDo
```
```Device
./Device/Vendor/MSFT/Policy/Config/WindowsAI/DisableClickToDo
```
<!-- DisableClickToDo-OmaUri-End -->
<!-- DisableClickToDo-Description-Begin -->
<!-- Description-Source-DDF -->
Click to Do lets people take action on content on their screens. When activated, it takes a screenshot of their screen and analyzes it to present actions. Click to Do ends when they exit it, and it can't take screenshots while closed. Screenshot analysis is always performed locally on their device. By default, Click to Do is enabled for users. This policy setting allows you to determine whether Click to Do is available for users on their device. When the policy is enabled, the Click to Do component and entry points won't be available to users. When the policy is disabled, users will have Click to Do available on their device.
<!-- DisableClickToDo-Description-End -->
<!-- DisableClickToDo-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- DisableClickToDo-Editable-End -->
<!-- DisableClickToDo-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `int` |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 1 |
<!-- DisableClickToDo-DFProperties-End -->
<!-- DisableClickToDo-AllowedValues-Begin -->
**Allowed values**:
| Value | Description |
|:--|:--|
| 0 | Click to Do is enabled. |
| 1 (Default) | Click to Do is disabled. |
<!-- DisableClickToDo-AllowedValues-End -->
<!-- DisableClickToDo-GpMapping-Begin -->
**Group policy mapping**:
| Name | Value |
|:--|:--|
| Name | DisableClickToDo |
| Path | WindowsAI > AT > WindowsComponents > WindowsAI |
<!-- DisableClickToDo-GpMapping-End -->
<!-- DisableClickToDo-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- DisableClickToDo-Examples-End -->
<!-- DisableClickToDo-End -->
<!-- DisableCocreator-Begin -->
## DisableCocreator
<!-- DisableCocreator-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ❌ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- DisableCocreator-Applicability-End -->
<!-- DisableCocreator-OmaUri-Begin -->
@ -226,7 +288,7 @@ This policy setting allows you to control whether Cocreator functionality is dis
<!-- DisableGenerativeFill-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ❌ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- DisableGenerativeFill-Applicability-End -->
<!-- DisableGenerativeFill-OmaUri-Begin -->
@ -288,7 +350,7 @@ This policy setting allows you to control whether generative fill functionality
<!-- DisableImageCreator-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ❌ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- DisableImageCreator-Applicability-End -->
<!-- DisableImageCreator-OmaUri-Begin -->
@ -371,7 +433,6 @@ This policy setting determines which app opens when the user presses the Copilot
<!-- SetCopilotHardwareKey-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
The property value is the Application User Model ID (AUMID) for the target application. For example: the Microsoft 365 Copilot app is `Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub`. For more information, see [Find the application user model ID of an installed app](/windows/configuration/store/find-aumid?tabs=ps%2Cexplorer&pivots=windows-11).
<!-- SetCopilotHardwareKey-Editable-End -->
<!-- SetCopilotHardwareKey-DFProperties-Begin -->
@ -408,7 +469,7 @@ The property value is the Application User Model ID (AUMID) for the target appli
<!-- SetDenyAppListForRecall-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- SetDenyAppListForRecall-Applicability-End -->
<!-- SetDenyAppListForRecall-OmaUri-Begin -->
@ -477,7 +538,7 @@ For example: `code.exe;Microsoft.WindowsNotepad_8wekyb3d8bbwe!App;ms-teams.exe`
<!-- SetDenyUriListForRecall-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- SetDenyUriListForRecall-Applicability-End -->
<!-- SetDenyUriListForRecall-OmaUri-Begin -->
@ -542,7 +603,7 @@ Adding `https://www.WoodgroveBank.com` to the list would also filter `https://Ac
<!-- SetMaximumStorageDurationForRecallSnapshots-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- SetMaximumStorageDurationForRecallSnapshots-Applicability-End -->
<!-- SetMaximumStorageDurationForRecallSnapshots-OmaUri-Begin -->
@ -618,7 +679,7 @@ Snapshots aren't deleted until the maximum storage allocation for Recall is reac
<!-- SetMaximumStorageSpaceForRecallSnapshots-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
| ✅ Device <br> ✅ User | ❌ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 with [KB5052093](https://support.microsoft.com/help/5052093) [10.0.26100.3323] and later <br> ✅ Windows Insider Preview |
<!-- SetMaximumStorageSpaceForRecallSnapshots-Applicability-End -->
<!-- SetMaximumStorageSpaceForRecallSnapshots-OmaUri-Begin -->

551
windows/client-management/mdm/remoteremediation-csp.md Normal file
View File

@ -0,0 +1,551 @@
---
title: RemoteRemediation CSP
description: Learn more about the RemoteRemediation CSP.
ms.date: 03/26/2025
ms.topic: generated-reference
---
<!-- Auto-Generated CSP Document -->
<!-- RemoteRemediation-Begin -->
# RemoteRemediation CSP
[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
<!-- RemoteRemediation-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- RemoteRemediation-Editable-End -->
<!-- RemoteRemediation-Tree-Begin -->
The following list shows the RemoteRemediation configuration service provider nodes:
- ./Vendor/MSFT/RemoteRemediation
- [CloudRemediationSettings](#cloudremediationsettings)
- [AutoRemediationSettings](#cloudremediationsettingsautoremediationsettings)
- [EnableAutoRemediation](#cloudremediationsettingsautoremediationsettingsenableautoremediation)
- [SetRetryInterval](#cloudremediationsettingsautoremediationsettingssetretryinterval)
- [SetTimeToReboot](#cloudremediationsettingsautoremediationsettingssettimetoreboot)
- [EnableCloudRemediation](#cloudremediationsettingsenablecloudremediation)
- [NetworkSettings](#cloudremediationsettingsnetworksettings)
- [NetworkCredentials](#cloudremediationsettingsnetworksettingsnetworkcredentials)
- [NetworkPassword](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpassword)
- [NetworkPasswordEncryptionStore](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptionstore)
- [NetworkPasswordEncryptionType](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkpasswordencryptiontype)
- [NetworkSSID](#cloudremediationsettingsnetworksettingsnetworkcredentialsnetworkssid)
<!-- RemoteRemediation-Tree-End -->
<!-- Device-CloudRemediationSettings-Begin -->
## CloudRemediationSettings
<!-- Device-CloudRemediationSettings-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-Applicability-End -->
<!-- Device-CloudRemediationSettings-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings
```
<!-- Device-CloudRemediationSettings-OmaUri-End -->
<!-- Device-CloudRemediationSettings-Description-Begin -->
<!-- Description-Source-DDF -->
Interior node containing settings related to cloud remediation. Delete on this node will reset all cloud remediation settings to their default values.
<!-- Device-CloudRemediationSettings-Description-End -->
<!-- Device-CloudRemediationSettings-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-Editable-End -->
<!-- Device-CloudRemediationSettings-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `node` |
| Access Type | Add, Delete, Get, Replace |
| Atomic Required | True |
<!-- Device-CloudRemediationSettings-DFProperties-End -->
<!-- Device-CloudRemediationSettings-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-Examples-End -->
<!-- Device-CloudRemediationSettings-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Begin -->
### CloudRemediationSettings/AutoRemediationSettings
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Applicability-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings
```
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-OmaUri-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Description-Begin -->
<!-- Description-Source-DDF -->
Interior node containing settings related to auto remediation. Delete on this node will reset all auto remediation settings to their default values.
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Description-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Editable-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `node` |
| Access Type | Add, Delete, Get, Replace |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-DFProperties-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-Examples-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Begin -->
#### CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Applicability-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation
```
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-OmaUri-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Description-Begin -->
<!-- Description-Source-DDF -->
Enable or disable auto remediation.
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Description-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Editable-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `bool` |
| Access Type | Add, Delete, Get, Replace |
| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-DFProperties-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-AllowedValues-Begin -->
**Allowed values**:
| Value | Description |
|:--|:--|
| true | Auto remediation enabled. |
| false | Auto remediation disabled. |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-AllowedValues-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-Examples-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-EnableAutoRemediation-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Begin -->
#### CloudRemediationSettings/AutoRemediationSettings/SetRetryInterval
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Applicability-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetRetryInterval
```
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-OmaUri-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Description-Begin -->
<!-- Description-Source-DDF -->
Get/set the retry interval (in minutes) during auto cloud remediation. The retry interval shouldn't be higher than the time to reboot. "SetRetryInterval" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise, an invalid argument error will be returned and no changes will be made.
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Description-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Editable-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `int` |
| Access Type | Add, Delete, Get, Replace |
| Allowed Values | Range: `[1,4320]` |
| Dependency [EnableAutoRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-DFProperties-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-Examples-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetRetryInterval-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Begin -->
#### CloudRemediationSettings/AutoRemediationSettings/SetTimeToReboot
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Applicability-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetTimeToReboot
```
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-OmaUri-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Description-Begin -->
<!-- Description-Source-DDF -->
Get/set the time to reboot (in minutes) during auto cloud remediation. The maximum time to reboot possible is 72 hours. "SetTimeToReboot" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise an invalid argument error will be returned and no changes will be made.
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Description-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Editable-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `int` |
| Access Type | Add, Delete, Get, Replace |
| Allowed Values | Range: `[1-4320]` |
| Dependency [EnableAutoRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-DFProperties-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-Examples-End -->
<!-- Device-CloudRemediationSettings-AutoRemediationSettings-SetTimeToReboot-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Begin -->
### CloudRemediationSettings/EnableCloudRemediation
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Applicability-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation
```
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-OmaUri-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Description-Begin -->
<!-- Description-Source-DDF -->
Enable or disable cloud remediation.
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Description-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Editable-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `bool` |
| Access Type | Add, Delete, Get, Replace |
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-DFProperties-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-AllowedValues-Begin -->
**Allowed values**:
| Value | Description |
|:--|:--|
| true | Cloud remediation enabled. |
| false | Cloud remediation disabled. |
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-AllowedValues-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-Examples-End -->
<!-- Device-CloudRemediationSettings-EnableCloudRemediation-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Begin -->
### CloudRemediationSettings/NetworkSettings
<!-- Device-CloudRemediationSettings-NetworkSettings-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings
```
<!-- Device-CloudRemediationSettings-NetworkSettings-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Description-Begin -->
<!-- Description-Source-DDF -->
Interior node containing settings related to network.
<!-- Device-CloudRemediationSettings-NetworkSettings-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `node` |
| Access Type | Add, Delete, Get, Replace |
<!-- Device-CloudRemediationSettings-NetworkSettings-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Begin -->
#### CloudRemediationSettings/NetworkSettings/NetworkCredentials
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials
```
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Description-Begin -->
<!-- Description-Source-DDF -->
Interior node containing settings related to network credentials.
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `node` |
| Access Type | Add, Delete, Get, Replace |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Begin -->
##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPassword
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPassword
```
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Description-Begin -->
<!-- Description-Source-DDF -->
Get/Set the password for the wifi network that cloud remediation will attempt to connect during cloud remediation.
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPassword-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Begin -->
##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionStore
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionStore
```
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Description-Begin -->
<!-- Description-Source-DDF -->
The encryption store that's specified if we are using a custom certificate for password encryption.
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionStore-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Begin -->
##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionType
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionType
```
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Description-Begin -->
<!-- Description-Source-DDF -->
The type of encryption that might be used for the network password.
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `int` |
| Access Type | Add, Delete, Get, Replace |
| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-AllowedValues-Begin -->
**Allowed values**:
| Value | Description |
|:--|:--|
| 1 | No encryption. |
| 2 | Encrypt using Mdm certificate. |
| 3 | Encrypt with custom certificate. |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-AllowedValues-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkPasswordEncryptionType-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Begin -->
##### CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkSSID
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Applicability-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-OmaUri-Begin -->
```Device
./Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkSSID
```
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-OmaUri-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Description-Begin -->
<!-- Description-Source-DDF -->
Get/Set the network SSID that cloud remediation will attempt to connect to during remediation.
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Description-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Editable-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-DFProperties-Begin -->
**Description framework properties**:
| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
| Dependency [EnableCloudRemediation] | Dependency Type: `DependsOn` <br> Dependency URI: `Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation` <br> Dependency Allowed Value: `true` <br> Dependency Allowed Value Type: `ENUM` <br> |
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-DFProperties-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-Examples-End -->
<!-- Device-CloudRemediationSettings-NetworkSettings-NetworkCredentials-NetworkSSID-End -->
<!-- RemoteRemediation-CspMoreInfo-Begin -->
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
<!-- RemoteRemediation-CspMoreInfo-End -->
<!-- RemoteRemediation-End -->
## Related articles
[Configuration service provider reference](configuration-service-provider-reference.md)

479
windows/client-management/mdm/remoteremediation-ddf-file.md Normal file
View File

@ -0,0 +1,479 @@
---
title: RemoteRemediation DDF file
description: View the XML file containing the device description framework (DDF) for the RemoteRemediation configuration service provider.
ms.date: 03/26/2025
ms.topic: generated-reference
---
<!-- Auto-Generated CSP Document -->
# RemoteRemediation DDF file
The following XML file contains the device description framework (DDF) for the RemoteRemediation configuration service provider.
```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE MgmtTree PUBLIC " -//OMA//DTD-DM-DDF 1.2//EN" "http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd"[<?oma-dm-ddf-ver supported-versions="1.2"?>]>
<MgmtTree xmlns:MSFT="http://schemas.microsoft.com/MobileDevice/DM">
<VerDTD>1.2</VerDTD>
<MSFT:Diagnostics>
</MSFT:Diagnostics>
<Node>
<NodeName>RemoteRemediation</NodeName>
<Path>./Vendor/MSFT</Path>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>The root node for remote remediation function.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Permanent />
</Scope>
<DFType>
<DDFName />
</DFType>
<MSFT:Applicability>
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
<MSFT:CspVersion>1.0</MSFT:CspVersion>
<MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB;</MSFT:EditionAllowList>
</MSFT:Applicability>
</DFProperties>
<Node>
<NodeName>CloudRemediationSettings</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Interior node containing settings related to cloud remediation. Delete on this node will reset all cloud remediation settings to their default values.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<DDFName />
</DFType>
<MSFT:AtomicRequired />
</DFProperties>
<Node>
<NodeName>EnableCloudRemediation</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Enable or disable cloud remediation.</Description>
<DFFormat>
<bool />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
<MSFT:Enum>
<MSFT:Value>false</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation disabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:AllowedValues>
</DFProperties>
</Node>
<Node>
<NodeName>AutoRemediationSettings</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Interior node containing settings related to auto remediation. Delete on this node will reset all auto remediation settings to their default values.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<DDFName />
</DFType>
</DFProperties>
<Node>
<NodeName>EnableAutoRemediation</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Enable or disable auto remediation.</Description>
<DFFormat>
<bool />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Auto remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
<MSFT:Enum>
<MSFT:Value>false</MSFT:Value>
<MSFT:ValueDescription>Auto remediation disabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableCloudRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
<Node>
<NodeName>SetTimeToReboot</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Get/set the time to reboot (in minutes) during auto cloud remediation. The maximum time to reboot possible is 72 hours. "SetTimeToReboot" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise an invalid argument error will be returned and no changes will be made.</Description>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="Range">
<MSFT:Value>[1-4320]</MSFT:Value>
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableAutoRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Auto remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
<Node>
<NodeName>SetRetryInterval</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Get/set the retry interval (in minutes) during auto cloud remediation. The retry interval should not be higher than the time to reboot. "SetRetryInterval" is dependent on "EnableAutoRemediation" and only takes effect if "EnableAutoRemediation" is set to true. Otherwise, an invalid argument error will be returned and no changes will be made.</Description>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="Range">
<MSFT:Value>[1,4320]</MSFT:Value>
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableAutoRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Auto remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
</Node>
<Node>
<NodeName>NetworkSettings</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Interior node containing settings related to network.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<DDFName />
</DFType>
</DFProperties>
<Node>
<NodeName>NetworkCredentials</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Interior node containing settings related to network credentials.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<DDFName />
</DFType>
</DFProperties>
<Node>
<NodeName>NetworkSSID</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Get/Set the network SSID that cloud remediation will attempt to connect to during remediation.</Description>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="None">
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableCloudRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
<Node>
<NodeName>NetworkPassword</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>Get/Set the password for the wifi network that cloud remediation will attempt to connect during cloud remediation.</Description>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="None">
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableCloudRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
<Node>
<NodeName>NetworkPasswordEncryptionType</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>The type of encryption that might be used for the network password.</Description>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>1</MSFT:Value>
<MSFT:ValueDescription>No encryption</MSFT:ValueDescription>
</MSFT:Enum>
<MSFT:Enum>
<MSFT:Value>2</MSFT:Value>
<MSFT:ValueDescription>Encrypt using Mdm certificate</MSFT:ValueDescription>
</MSFT:Enum>
<MSFT:Enum>
<MSFT:Value>3</MSFT:Value>
<MSFT:ValueDescription>Encrypt with custom certificate</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableCloudRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
<Node>
<NodeName>NetworkPasswordEncryptionStore</NodeName>
<DFProperties>
<AccessType>
<Add />
<Delete />
<Get />
<Replace />
</AccessType>
<Description>The encryption store that is specified if we are using a custom certificate for password encryption.</Description>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFType>
<MIME />
</DFType>
<MSFT:AllowedValues ValueType="None">
</MSFT:AllowedValues>
<MSFT:DependencyBehavior>
<MSFT:DependencyGroup FriendlyId="EnableCloudRemediation">
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/RemoteRemediation/CloudRemediationSettings//AutoRemediationSettings/EnableAutoRemediation</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>true</MSFT:Value>
<MSFT:ValueDescription>Cloud remediation enabled</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties>
</Node>
</Node>
</Node>
</Node>
</Node>
</MgmtTree>
```
## Related articles
[RemoteRemediation configuration service provider reference](remoteremediation-csp.md)

5
windows/client-management/mdm/toc.yml
View File

@ -866,6 +866,11 @@ items:
items:
- name: RemoteFind DDF file
href: remotefind-ddf-file.md
- name: RemoteRemediation
href: remoteremediation-csp.md
items:
- name: RemoteRemediation DDF file
href: remoteremediation-ddf-file.md
- name: RemoteWipe
href: remotewipe-csp.md
items:

2
windows/client-management/toc.yml
View File

@ -50,6 +50,8 @@ items:
href: device-update-management.md
- name: Updated Windows and Microsoft 365 Copilot Chat experience
href: manage-windows-copilot.md
- name: Manage Click to Do
href: manage-click-to-do.md
- name: Manage Recall
href: manage-recall.md
- name: Reference for sensitive information filtering in Recall

3
windows/configuration/images/icons/feedback.svg Normal file
View File

@ -0,0 +1,3 @@
<svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg">
<path d="M15.75 10.3496C15.4857 10.2585 15.2441 10.1309 15.0254 9.9668C14.8158 9.80273 14.6335 9.61133 14.4785 9.39258C14.3236 9.17383 14.2051 8.93685 14.123 8.68164C14.041 8.42643 14 8.15755 14 7.875V2.625C14 2.26953 14.0684 1.93229 14.2051 1.61328C14.3418 1.29427 14.5286 1.01628 14.7656 0.779297C15.0117 0.533203 15.2943 0.341797 15.6133 0.205078C15.9323 0.0683594 16.2695 0 16.625 0H25.375C25.7305 0 26.0677 0.0683594 26.3867 0.205078C26.7057 0.341797 26.9837 0.533203 27.2207 0.779297C27.4668 1.01628 27.6582 1.29427 27.7949 1.61328C27.9316 1.93229 28 2.26953 28 2.625V7.875C28 8.23047 27.9316 8.56771 27.7949 8.88672C27.6582 9.20573 27.4668 9.48828 27.2207 9.73438C26.9837 9.97135 26.7057 10.1582 26.3867 10.2949C26.0677 10.4316 25.7305 10.5 25.375 10.5H20.4805L17.9922 13.002C17.737 13.2572 17.4271 13.3848 17.0625 13.3848C16.8984 13.3848 16.7298 13.3483 16.5566 13.2754C16.3014 13.1751 16.1009 13.0156 15.9551 12.7969C15.8184 12.5781 15.75 12.3366 15.75 12.0723V10.3496ZM17.5 11.0059L19.7559 8.75H25.375C25.612 8.75 25.8171 8.66341 25.9902 8.49023C26.1634 8.31706 26.25 8.11198 26.25 7.875V2.625C26.25 2.38802 26.1634 2.18294 25.9902 2.00977C25.8171 1.83659 25.612 1.75 25.375 1.75H16.625C16.388 1.75 16.1829 1.83659 16.0098 2.00977C15.8366 2.18294 15.75 2.38802 15.75 2.625V7.875C15.75 8.07552 15.7865 8.23503 15.8594 8.35352C15.9414 8.47201 16.0417 8.56315 16.1602 8.62695C16.2878 8.68164 16.4245 8.7181 16.5703 8.73633C16.7253 8.75456 16.8802 8.76367 17.0352 8.76367C17.1172 8.76367 17.1947 8.76367 17.2676 8.76367C17.3496 8.75456 17.4271 8.75 17.5 8.75V11.0059ZM3.5 10.5V10.3906C3.5 9.67969 3.64128 9.01432 3.92383 8.39453C4.20638 7.76562 4.58919 7.21875 5.07227 6.75391C5.55534 6.28906 6.11133 5.92448 6.74023 5.66016C7.37826 5.38672 8.04818 5.25 8.75 5.25C9.47917 5.25 10.1628 5.38672 10.8008 5.66016C11.4388 5.93359 11.9948 6.30729 12.4688 6.78125C12.9427 7.25521 13.3164 7.8112 13.5898 8.44922C13.8633 9.08724 14 9.77083 14 10.5C14 11.2292 13.8633 11.9128 13.5898 12.5508C13.3164 13.1888 12.9427 13.7448 12.4688 14.2188C11.9948 14.6927 11.4388 15.0664 10.8008 15.3398C10.1628 15.6133 9.47917 15.75 8.75 15.75C8.02083 15.75 7.33724 15.6133 6.69922 15.3398C6.0612 15.0664 5.50521 14.6927 5.03125 14.2188C4.55729 13.7448 4.18359 13.1888 3.91016 12.5508C3.63672 11.9128 3.5 11.2292 3.5 10.5ZM12.25 10.5V10.4316C12.25 9.95768 12.1543 9.51562 11.9629 9.10547C11.7715 8.6862 11.5163 8.32161 11.1973 8.01172C10.8783 7.70182 10.5046 7.45573 10.0762 7.27344C9.6569 7.09115 9.21484 7 8.75 7C8.26693 7 7.8112 7.0957 7.38281 7.28711C6.96354 7.4694 6.5944 7.72005 6.27539 8.03906C5.96549 8.34896 5.71484 8.7181 5.52344 9.14648C5.34115 9.57487 5.25 10.026 5.25 10.5C5.25 10.9831 5.34115 11.4388 5.52344 11.8672C5.71484 12.2865 5.96549 12.6556 6.27539 12.9746C6.5944 13.2845 6.96354 13.5352 7.38281 13.7266C7.8112 13.9089 8.26693 14 8.75 14C9.22396 14 9.67513 13.9089 10.1035 13.7266C10.5319 13.5352 10.901 13.2845 11.2109 12.9746C11.5299 12.6556 11.7806 12.2865 11.9629 11.8672C12.1543 11.4388 12.25 10.9831 12.25 10.5ZM0 20.5625C0 20.1888 0.0638021 19.8197 0.191406 19.4551C0.31901 19.0814 0.501302 18.7533 0.738281 18.4707C0.97526 18.179 1.25781 17.9466 1.58594 17.7734C1.92318 17.5911 2.29232 17.5 2.69336 17.5H14.8066C15.2077 17.5 15.5723 17.5911 15.9004 17.7734C16.2376 17.9466 16.5247 18.179 16.7617 18.4707C16.9987 18.7533 17.181 19.0814 17.3086 19.4551C17.4362 19.8197 17.5 20.1888 17.5 20.5625C17.5 21.9753 17.1855 23.224 16.5566 24.3086C15.9277 25.3841 14.9935 26.2591 13.7539 26.9336C12.9883 27.3529 12.1771 27.6354 11.3203 27.7812C10.4635 27.9271 9.60677 28 8.75 28C7.98438 28 7.21419 27.9362 6.43945 27.8086C5.67383 27.681 4.9401 27.4714 4.23828 27.1797C3.54557 26.8789 2.90755 26.487 2.32422 26.0039C1.75 25.5117 1.27148 24.9056 0.888672 24.1855C0.597005 23.6204 0.373698 23.0326 0.21875 22.4219C0.0729167 21.8112 0 21.1914 0 20.5625ZM15.75 20.5625C15.75 20.4349 15.7272 20.2936 15.6816 20.1387C15.6452 19.9837 15.5859 19.8424 15.5039 19.7148C15.431 19.5781 15.3353 19.4688 15.2168 19.3867C15.0983 19.2956 14.9616 19.25 14.8066 19.25H2.69336C2.53841 19.25 2.40169 19.2956 2.2832 19.3867C2.16471 19.4688 2.06445 19.5781 1.98242 19.7148C1.90951 19.8424 1.85026 19.9837 1.80469 20.1387C1.76823 20.2936 1.75 20.4349 1.75 20.5625C1.75 21.6016 1.94141 22.4857 2.32422 23.2148C2.70703 23.9349 3.21745 24.5228 3.85547 24.9785C4.5026 25.4251 5.24544 25.7487 6.08398 25.9492C6.93164 26.1497 7.82031 26.25 8.75 26.25C9.67969 26.25 10.5638 26.1497 11.4023 25.9492C12.25 25.7487 12.9928 25.4251 13.6309 24.9785C14.278 24.5228 14.793 23.9349 15.1758 23.2148C15.5586 22.4857 15.75 21.6016 15.75 20.5625Z" fill="#0883D9"/>
</svg>
Side by Side

After

Width:  |  Height:  |  Size: 4.6 KiB

BIN
windows/configuration/images/insider.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 17 KiB

16
windows/configuration/includes/insider-note.md Normal file
View File

@ -0,0 +1,16 @@
---
author: paolomatarazzo
ms.author: paoloma
ms.topic: include
ms.date: 01/11/2024
---
:::row:::
:::column span="1":::
:::image type="content" source="../images/insider.png" alt-text="Logo of Windows Insider." border="false":::
:::column-end:::
:::column span="3":::
> [!IMPORTANT]
>This article describes features or settings that are under development and only applicable to [Windows Insider Preview builds](/windows-insider/). The content is subject to change and may have dependencies on other features or services in preview.
:::column-end:::
:::row-end:::

BIN
windows/configuration/quick-machine-recovery/images/auto-remediation.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 61 KiB

BIN
windows/configuration/quick-machine-recovery/images/boot-recovery.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 10 KiB

BIN
windows/configuration/quick-machine-recovery/images/diagram.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 216 KiB

BIN
windows/configuration/quick-machine-recovery/images/quick-machine-recovery-network.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 25 KiB

BIN
windows/configuration/quick-machine-recovery/images/quick-machine-recovery-settings.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 66 KiB

BIN
windows/configuration/quick-machine-recovery/images/quick-machine-recovery-test-mode.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 26 KiB

BIN
windows/configuration/quick-machine-recovery/images/quick-machine-recovery-winre.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 21 KiB

242
windows/configuration/quick-machine-recovery/index.md Normal file
View File

@ -0,0 +1,242 @@
---
title: Quick Machine Recovery
description: Learn about quick machine recovery and how to configure it with the RemoteRemediation configuration service provider (CSP).
ms.topic: how-to
ms.date: 03/28/2025
ms.author: paoloma
author: paolomatarazzo
appliesto:
- "✅ <a href=\"https://learn.microsoft.com/windows-insider/flight-hub\" target=\"_blank\">Windows Insider</a>"
---
# Quick machine recovery
[!INCLUDE [insider-note](../includes/insider-note.md)]
Quick machine recovery is a feature that enables the recovery of Windows devices when they encounter critical errors that prevent them from booting. This feature can automatically search for remediations in the cloud and recover from widespread boot failures, significantly reducing the burden on IT administrators when multiple devices are affected.
Building on the foundation of [Startup Repair][SMC-1], quick machine recovery uses a secure and connected [Windows Recovery Environment][SMC-2] to scan Windows Update for remediation options. This allows devices to be recovered without requiring manual intervention.
## How it works
There are two main settings of quick machine recovery: cloud remediation and auto remediation.
### Cloud remediation
:::row:::
:::column span="3":::
Cloud remediation is the process of using Windows Update to find remediations and fix issues on devices:
- When enabled, devices connect to the network and utilize Windows Update during recovery scenarios
- When disabled, Windows uses Startup Repair as a local recovery option
:::column-end:::
:::column span="1":::
:::image type="content" source="images/quick-machine-recovery-network.png" alt-text="Screenshot of quick machine recovery boot while attempting to connect to the network." border="false" lightbox="images/quick-machine-recovery-network.png":::
:::column-end:::
:::row-end:::
> [!NOTE]
> Quick machine recovery is a best-effort feature. It might not always be able to find a solution for every issue.
### Auto remediation
:::row:::
:::column span="3":::
Auto remediation allows you to automate the recovery process:
- When enabled, the device connects automatically to Windows Update and tries to find a remediation. If a solution isn't found on the first attempt, the device retries without requiring manual intervention
:::column-end:::
:::column span="1":::
:::image type="content" source="images/auto-remediation.png" alt-text="Screnshot of the Windows Recovery Environment in the auto remediation screen, showing that the device retries to find a solution." border="false" lightbox="images/auto-remediation.png":::
:::row-end:::
:::row:::
:::column span="3":::
- When disabled or not configured, the device requires manual intervention to continue the recovery process
:::column-end:::
:::column span="1":::
:::image type="content" source="images/quick-machine-recovery-winre.png" alt-text="Screnshot of Windows Recovery Environment showing the quick machine recovery option." border="false" lightbox="images/quick-machine-recovery-winre.png":::
:::row-end:::
### Quick machine recovery process
Here are the phases of the quick machine recovery process:
1. **Device crash**: When the device fails to boot repeatedly, the system automatically detects the issue and initiates the recovery process
1. **Boot to recovery**: The device boots into the recovery environment to initiate the quick machine recovery process
1. **Network connection**: After a network connection is established, the device scans Windows Update for remediations
1. **Remediation**
- If no solution is found, the system retries the process based on the configured retry scanning intervals and time-outs
- If a solution is found, the system downloads and applies it
1. **Reboot**: After a remediation is applied, the device reboots:
- If the solution is successful, the device boots into Windows
- If the solution fails, the device reboots into the recovery environment again and the process repeats from step 2
:::image type="content" source="images/diagram.png" alt-text="Diagram of quick machine recovery showing the five phases of recovery." border="false" lightbox="images/diagram.png":::
## Configuration
Cloud remediation is enabled by default on Windows Home edition devices, while auto remediation is turned off by default. For Windows Pro and Enterprise editions, both cloud remediation and auto remediation are disabled by default. Organizations can decide the best configuration for their devices based on their specific needs.
The configuration options consist of:
- Enable or disable cloud remediation
- Enable or disable auto remediation
- Configure auto remediation scanning intervals and time-outs to optimize remediation triggers
- Configure network connections to ensure smooth recovery workflows
> [!IMPORTANT]
> Currently, only wired and WPA/WPA2 password-based Wi-Fi networks are supported. Ensure your network uses this configuration for compatibility.
[!INCLUDE [tab-intro](../../../includes/configure/tab-intro.md)]
# [:::image type="icon" source="../images/icons/cmd.svg"::: **Command prompt**](#tab/cmd)
To configure quick machine recovery using the command line, you must create an XML file with the desired settings and then use the `reagentc.exe` command to apply those settings.
Use the following command to apply the settings:
```cmd
reagentc.exe /setrecoverysettings /path settings.xml
```
Where `settings.xml` is the path to the XML file containing the quick machine recovery configuration.
### XML file example
The following XML file example configures quick machine recovery with the following settings:
- The Wi-Fi network has an SSID `ContosoWiFi` and a password `ContosoWiFiPassword`
- Cloud remediation is enabled (`state="1"`)
- Auto remediation is enabled (`state="1"`)
- The `totalwaittime` is set to 2,400 minutes (40 hours) and the `waitinterval` is set to 120 minutes (2 hours). Once configured, the system waits for 40 hours before rebooting, and it checks for remediation every 2 hours
```xml
<?xml version='1.0' encoding='utf-8'?>
<WindowsRE>
<WifiCredential>
<Wifi ssid="ContosoWiFi" password="ContosoWiFiPassword" />
</WifiCredential>
<CloudRemediation state="1" />
<AutoRemediation state="1" totalwaittime="2400" waitinterval="120"/>
</WindowsRE>
```
### Remove recovery settings
To remove the configured recovery settings, run the following command from an elevated command prompt:
```cmd
reagentc.exe /clearrecoverysettings
```
# [:::image type="icon" source="../images/icons/intune.svg" border="false"::: **Intune/CSP**](#tab/intune)
You can configure devices using a [custom policy][INT-1] with the [RemoteRemediation CSP][CSP-1].
### Cloud remediation configuration
Enable or disable cloud remediation using the following settings:
| Setting |
|--|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/EnableCloudRemediation`<br>- **Data type:** Boolean<br>- **Value:** `True`<br>- **Description**: When set to `True`, cloud remediation is enabled. |
### Auto remediation configuration
Configure the following settings to customize the auto remediation experience:
| Setting |
|--|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/EnableAutoRemediation`<br>- **Data type:** Boolean<br>- **Value:** `True`<br>- **Description**: When set to `True`, auto remediation is enabled. |
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetTimeToReboot`<br>- **Data type:** Integer<br>- **Value:** 1-4320 (default = 180)<br>- **Description**: Configure the time to reboot (in minutes) during auto remediation. The maximum time to reboot possible is 72 hours.|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/AutoRemediationSettings/SetRetryInterval`<br>- **Data type:** Integer<br>- **Value:** 1-4320 (default = 30)<br>- **Description**: Configure the retry interval (in minutes) during auto remediation. The retry interval shouldn't be higher than the time to reboot.|
### Wi-Fi network connection configuration
To configure the Wi-Fi network connection used during recovery, use the following settings:
|Setting|
|--|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkSSID`<br>- **Data type:** string<br>- **Value:** Wi-Fi network Service Set Identifier (SSID)|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPassword`<br>- **Data type:** string<br>- **Value:** Wi-Fi network password|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionType`<br>- **Data type:** Integer<br>- **Value:** `0` = The password isn't encrypted; `1` = The password is encrypted with the MDM certificate, `2` = The password is encrypted with custom certificate. When this value is used, you must also specify the custom store name in the `NetworkPasswordEncryptionStore` node.|
|- **OMA-URI:** `./Device/Vendor/MSFT/RemoteRemediation/CloudRemediationSettings/NetworkSettings/NetworkCredentials/NetworkPasswordEncryptionStore`<br>- **Data type:** string<br>- **Value:** When a value of `2` is contained in `NetworkPasswordEncryptionType`, specify the store name where the certificate for decrypting the Network Password is stored.|
---
### Verify Recovery Settings
To check the configured recovery settings, run the following command from an elevated command prompt:
```cmd
reagentc.exe /getrecoverysettings
```
Output example:
```console
C:\>reagentc.exe /getrecoverysettings
<?xml version='1.0' encoding='utf-8'?>
<WindowsRE>
<WifiCredential>
<Wifi ssid="ContosoWiFi" password="ContosoWiFiPassword" />
</WifiCredential>
<CloudRemediation state="1" />
<AutoRemediation state="1" totalwaittime="2400" waitinterval="120"/>
</WindowsRE>
REAGENTC.EXE: Operation Successful.
```
## Test mode
:::row:::
:::column span="3":::
Quick machine recovery offers a *test mode*, providing a controlled, simulated environment for you to validate your configurations and the auto remediation process without triggering an actual system failure. Test mode allows you to verify that the recovery experience functions as expected before deployment to production systems.
:::column-end:::
:::column span="1":::
:::image type="content" source="images/quick-machine-recovery-test-mode.png" alt-text="Screenshot of the Windows boot screen where quick machine recovery is attempting to connect to the network." border="false" lightbox="images/quick-machine-recovery-test-mode.png":::
:::column-end:::
:::row-end:::
To simulate the quick machine recovery experience, use the following commands from an elevated command prompt:
1. Enable test mode:
```cmd
reagentc.exe /SetRecoveryTestmode
```
1. Configure Windows to boot to Windows Recovery Environment on the next boot:
```cmd
reagentc.exe /BootToRe
```
1. Reboot your device. The system goes through autoremediation of a simulated crash and reboots back to Windows
> [!NOTE]
> If after reboot the device goes into Windows RE instead of starting test mode, follow these steps:
>
> 1. In Windows RE, select **Continue** to boot Windows normally
> 1. In Windows, execute the two commands:
>
> - `reagentc.exe /Disable`
> - `reagentc.exe /Enable`
>
> 1. Retry the quick machine recovery simulation starting from step 1
<!--
1. To verify the quick machine recovery remediation, go to **Settings** > **Windows Update** > **[Update history](ms-settings:windowsupdate-history)**. The remediation should be listed under **Quality updates**-->
### :::image type="icon" source="../images/icons/feedback.svg" border="false"::: Provide feedback
To provide feedback for quick machine recovery, open [**Feedback Hub**][FHUB] and use the category **Recovery and Uninstall** > **Quick Machine Recovery**.
<!--links-->
[SMC-1]: https://support.microsoft.com/topic/85deb0b9-fa3d-44a3-a3d0-d0f1515c2c9b
[SMC-2]: https://support.microsoft.com/topic/0eb14733-6301-41cb-8d26-06a12b42770b
[FHUB]: feedback-hub://?tabid=2&newFeedback=true&feedbackType=1
[CSP-1]: /windows/client-management/mdm/remoteremediation-csp
[INT-1]: /mem/intune/configuration/settings-catalog

3
windows/configuration/toc.yml
View File

@ -15,6 +15,8 @@ items:
href: settings/page-visibility.md
- name: Microsoft Store
href: store/toc.yml
- name: Quick machine recovery
href: quick-machine-recovery/index.md
- name: Cellular settings
href: cellular/provisioning-apn.md
- name: Windows kiosk options
@ -37,4 +39,3 @@ items:
href: custom-logon/index.md
- name: Troubleshoot
href: custom-logon/troubleshoot.md